VLAN hybrid 应用实验

要求：
1、pc1和pc3所在接口为access; pvlan vlan2;处于同一网段
2、pc2/4/5/6处于同一网段;其中PC2可以访问PC4/5/6;PC4可以访问PC5，但不能访问PC6；pc5不能访问pc6

思路：
利用华为交换机的hybrid达到题目要求

一、 配置交换机
LSW 1
[lsw1]vlan batch 2 to 5
[lsw1]int g0/0/2
[lsw1-GigabitEthernet0/0/2]port link-type access
[lsw1-GigabitEthernet0/0/2]port default vlan 2
[lsw1-GigabitEthernet0/0/2]q
[lsw1]int g0/0/3
[lsw1-GigabitEthernet0/0/3]port hybrid pvid vlan 3
[lsw1-GigabitEthernet0/0/3]port hybrid untagged vlan 3 to 5
[lsw1-GigabitEthernet0/0/3]int g0/0/4
[lsw1-GigabitEthernet0/0/4]port link-type trunk
[lsw1-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 to 5

LSW 2
[lsw2]vlan batch 2 to 5
[lsw2]int g0/0/1
[lsw2-GigabitEthernet0/0/1]port link-type trunk
[lsw2-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 5
[lsw2-GigabitEthernet0/0/1]int g0/0/3
[lsw2-GigabitEthernet0/0/3]port link-type access
[lsw2-GigabitEthernet0/0/3]port default vlan 2
[lsw2-GigabitEthernet0/0/3]int g0/0/4
[lsw2-GigabitEthernet0/0/4]port hybrid pvid vlan 4
[lsw2-GigabitEthernet0/0/4]port hybrid untagged vlan 3 4
[lsw2-GigabitEthernet0/0/4]int g0/0/2
[lsw2-GigabitEthernet0/0/2]port link-type trunk
[lsw2-GigabitEthernet0/0/2]port trunk allow-pass vlan 2 to 5

LSW 3
[lsw3]vlan batch 2 to 5
[lsw3]int g0/0/1
[lsw3-GigabitEthernet0/0/1]port link-type trunk
[lsw3-GigabitEthernet0/0/1]port trunk allow-pass vlan 2 to 5
[lsw3-GigabitEthernet0/0/1]int g0/0/2
[lsw3-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[lsw3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4
[lsw3-GigabitEthernet0/0/2]int g0/0/3
[lsw3-GigabitEthernet0/0/3]port hybrid pvid vlan 5
[lsw3-GigabitEthernet0/0/3]port hybrid untagged vlan 3 5

二、 配置路由器
先在lsw1上将VLAN 3/4/5 的标签撕掉，统一变为默认VLAN1 的流量，在路由器上的物理口进行DHCP配置；VLAN 2 继续携带标签通过子接口进行DHCP配置

[lsw1]int g0/0/1
[lsw1-GigabitEthernet0/0/1]port hybrid tagged vlan 2
[lsw1-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 5
[lsw1-GigabitEthernet0/0/1]q

[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.2.1 24
[Huawei-GigabitEthernet0/0/0]int g0/0/0.1
[Huawei-GigabitEthernet0/0/0.1]ip add 192.168.1.1 24
[Huawei-GigabitEthernet0/0/0.1]dot1q termination vid 2
[Huawei-GigabitEthernet0/0/0.1]arp broadcast enable
[Huawei-GigabitEthernet0/0/0.1]q
[Huawei]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[Huawei]ip pool v2
Info: It’s successful to create an IP address pool.
[Huawei-ip-pool-v2]networ
[Huawei-ip-pool-v2]network 192.168.1.0 mask 255.255.255.0
[Huawei-ip-pool-v2]gateway-list 192.168.1.1
[Huawei-ip-pool-v2]dns-list 114.114.114.114 8.8.8.8
[Huawei-ip-pool-v2]q
[Huawei]ip pool v1
Info: It’s successful to create an IP address pool.
[Huawei-ip-pool-v1]network 192.168.2.0 mask 255.255.255.0
[Huawei-ip-pool-v1]gateway-list 192.168.2.1
[Huawei-ip-pool-v1]dns 114.114.114.114 8.8.8.8
[Huawei-ip-pool-v1]q
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]dhcp select global
[Huawei-GigabitEthernet0/0/0]int g0/0/0.1
[Huawei-GigabitEthernet0/0/0.1]dhcp select global
[Huawei-GigabitEthernet0/0/0.1]q
三、 验证
PC1 PING PC2

PC1 PING PC5

PC1 PING PC6

PC2 PING PC5

PC2 PING PC6

PC4 PING PC6