實驗拓補圖
實驗分析
一、實驗目的
- 掌握VLAN的創建和配置方法
- 理解VLAN在局域網中的作用
- 學習如何通過VLAN實現網絡隔離和通信
二、實驗環境
- 交換機（SW1、SW2、SW3）
- 個人電腦（PC1、PC2、PC3、PC4、PC5、PC6）
- 路由器（R1）
- 網絡連接線
四、實驗需求
- PC1和PC3所在接口為access接口，屬于VLAN 2
- PC2/4/5/6處于同一網段，其中PC2可以訪問PC4/5/6，PC4可以訪問PC5不能訪問PC6，PC5不能訪問PC6
- PC1/3和PC2/4/5/6不在一個網段，且可以正常通訊
- 所有PC通過DHCP獲取IP地址，且PC1/3可以正常訪問PC2/4/5/6
五、實驗步驟和配置
-
創建VLAN
- 在SW1、SW2、SW3上創建VLAN 2、3、4、5、6
-
配置接口
- SW1、SW2、SW3的接口配置如下：
- PC1和PC3的接口配置為access接口，屬于VLAN 2
- PC2、PC4、PC5、PC6的接口配置為hybrid接口，分別屬于VLAN 3、4、5、6
- SW1、SW2、SW3的接口配置如下：
-
配置DHCP服務
- 在R1上配置DHCP服務，創建兩個地址池，分別為PC1/3和PC2/4/5/6分配IP地址
-
測試連通性
- 測試PC1、PC3可以正常訪問PC2、PC4、PC5、PC6
- 測試PC2可以訪問PC4、PC5、PC6
- 測試PC4可以訪問PC5，不能訪問PC6
- 測試PC5不能訪問PC6
六、實驗結果
- 所有PC均通過DHCP獲取到IP地址
- PC1、PC3可以正常訪問PC2、PC4、PC5、PC6
- PC2可以訪問PC4、PC5、PC6
- PC4可以訪問PC5，不能訪問PC6
- PC5不能訪問PC6
具體操作
1.建立拓補圖
2.修改PC1-6獲取IP方式
3.LS1配置
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LS1
[LS1]vlan batch 2 to 6
Info: This operation may take a few seconds. Please wait for a moment...done.
[LS1]interface GigabitEthernet 0/0/1
[LS1-GigabitEthernet0/0/1]port link-type access
[LS1-GigabitEthernet0/0/1]port default vlan 2
[LS1]interface GigabitEthernet 0/0/2
[LS1-GigabitEthernet0/0/2]port hybrid pvid vlan 3
[LS1-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 6
[LS1]interface GigabitEthernet 0/0/3
[LS1-GigabitEthernet0/0/3]port link-type trunk
[LS1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
[LS1]interface GigabitEthernet 0/0/4
[LS1-GigabitEthernet0/0/4]port hybrid pvid vlan 1
[LS1-GigabitEthernet0/0/4]port hybrid untagged vlan 3 to 6
[LS1-GigabitEthernet0/0/4]port hybrid tagged vlan 2檢查配置
<LS1>display port vlan active
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port Link Type PVID VLAN List
-------------------------------------------------------------------------------
GE0/0/1 access 2 U: 2
GE0/0/2 hybrid 3 U: 1 3 to 6
GE0/0/3 trunk 1 U: 1T: 2 to 6
GE0/0/4 hybrid 1 U: 1 3 to 6T: 2
4.LSW2配置
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LSW2
[LSW2]vlan batch 2 to 6
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW2]interface GigabitEthernet 0/0/1
[LSW2-GigabitEthernet0/0/1]port link-type access
[LSW2-GigabitEthernet0/0/1]port default vlan 2
[LSW2]interface GigabitEthernet 0/0/2
[LSW2-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[LSW2-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 6
[LSW2]interface GigabitEthernet 0/0/3
[LSW2-GigabitEthernet0/0/3]port link-type trunk
[LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
[LSW2]interface GigabitEthernet 0/0/4
[LSW2-GigabitEthernet0/0/4]port link-type trunk
[LSW2-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 to 6檢查配置
<LSW2>display port vlan active
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port Link Type PVID VLAN List
-------------------------------------------------------------------------------
GE0/0/1 access 2 U: 2
GE0/0/2 hybrid 4 U: 1 3 to 6
GE0/0/3 trunk 1 U: 1T: 2 to 6
GE0/0/4 trunk 1 U: 1T: 2 to 6
5.LSW3配置
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LSW3
[LSW3]vlan batch 2 to 6
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW3]interface GigabitEthernet 0/0/1
[LSW3-GigabitEthernet0/0/1]port hybrid pvid vlan 5
[LSW3-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 5
[LSW3]interface GigabitEthernet 0/0/2
[LSW3-GigabitEthernet0/0/2]port hybrid pvid vlan 6
[LSW3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 6
[LSW3]interface GigabitEthernet 0/0/3
[LSW3-GigabitEthernet0/0/3]port link-type trunk
[LSW3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6檢查配置
<LSW3>display port vlan active
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port Link Type PVID VLAN List
-------------------------------------------------------------------------------
GE0/0/1 hybrid 5 U: 1 3 to 5
GE0/0/2 hybrid 6 U: 1 3 to 4 6
GE0/0/3 trunk 1 U: 1T: 2 to 6
GE0/0/4 hybrid 1 U: 1
6.R1配置
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname R1
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.1.1 24
[R1]interface GigabitEthernet 0/0/0.1
[R1-GigabitEthernet0/0/0.1]ip address 192.168.2.1 24
[R1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[R1-GigabitEthernet0/0/0.1]arp broadcast enable
[R1]display ip interface brief
*down: administratively down
!down: FIB overload down
^down: standby
(l): loopback
(s): spoofing
(d): Dampening Suppressed
The number of interface that is UP in Physical is 3
The number of interface that is DOWN in Physical is 9
The number of interface that is UP in Protocol is 3
The number of interface that is DOWN in Protocol is 9Interface IP Address/Mask Physical Protocol
Ethernet0/0/0 unassigned down down
Ethernet0/0/1 unassigned down down
GigabitEthernet0/0/0 192.168.1.1/24 up up
GigabitEthernet0/0/0.1 192.168.2.1/24 up up
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned down down
GigabitEthernet0/0/3 unassigned down down
NULL0 unassigned up up(s)
[R1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[R1]ip pool a
Info:It's successful to create an IP address pool.
[R1-ip-pool-a]network 192.168.1.0 mask 24
[R1-ip-pool-a]gateway-list 192.168.1.1
[R1-ip-pool-a]dns-list 8.8.8.8
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]dhcp select global
[R1]ip pool b
Info:It's successful to create an IP address pool.
[R1-ip-pool-b]network 192.168.2.0 mask 24
[R1-ip-pool-b]gateway-list 192.168.2.1
[R1-ip-pool-b]dns-list 8.8.8.8
[R1]interface GigabitEthernet 0/0/0.1
[R1-GigabitEthernet0/0/0.1]dhcp select global查詢PC端IP
PC1
PC2
PC3
PC4
PC5
PC6
測試
PC2訪問PC4，5，6
ping PC4
ping PC5
ping PC6
PC4 ping PC6
PC5 ping PC6
PC1 訪問PC2，4，5，6
ping PC2
ping PC4
ping PC5
ping PC6
PC3訪問PC2，4，5，6
ping PC2
ping PC4
ping PC5
ping PC6
