思路

·1 将pc1/3划入access接口，pvid vlan 2，划入r1的0/0/0.1子接口，这样一个网段一个vlan
·2 将pc2/4/5/6划入一个网段，华为中，进入路由器的流量不带标签默认划入vlan1，r1的物理接口默认vlan1
·3 pc2可以访问pc4/5/6，pc4可以访pc5，不能访问pc6 -----pc2为vlan3，pvid3；pc4/5为vlan4，pvid4；pc5为vlan5，pvid5；
·4 pc2所连接口允许vlan3/4/5进入，pc4/5允许vlan3/4进入，pc5允许vlan3/5进入

sw1

接口所连pc
pc1：
[sw1]int e0/0/1
[sw1-Ethernet0/0/1]port link-type access
[sw1-Ethernet0/0/1]port default vlan 2

pc2：
[sw1-Ethernet0/0/1]int e0/0/2
[sw1-Ethernet0/0/2]port hybrid untagged vlan 3 to 5 定义允许进入的流量
[sw1-Ethernet0/0/2]port hybrid pvid vlan 3

sw1与sw2之间： 默认链路上pvid为vlan1
[sw1-Ethernet0/0/2]int e0/0/3
[sw1-Ethernet0/0/3]port hybrid tagged vlan 2 3 4 5 出时标记的vlan

[sw2]int e0/0/1
[w2-Ethernet0/0/1]port link-type trunk
[Ethernet0/0/1]port trunk allow-pass vlan 2 3 4 5

[sw2]display port vlan active 查看允许列表

sw2

pc3：
[sw2]int e0/0/2
[w2-Ethernet0/0/2]port link-type access
[sw2-Ethernet0/0/2]port default vlan 2

pc4：
[sw2-Ethernet0/0/2]int e0/0/3
[sw2-Ethernet0/0/3]port hybrid pvid vlan 4
[Ethernet0/0/3]port hybrid untagged vlan 3 4

sw2与sw3之间
[sw2-Ethernet0/0/3]int e0/0/4
[sw2-Ethernet0/0/4]port link-type trunk
[ernet0/0/4]port trunk allow-pass vlan 2 to 5

sw3

创建vlan：
[sw3]vlan batch 2 to 5

sw2与sw3之间：
[sw3]int e0/0/1
[sw3-Ethernet0/0/1]port hybrid tagged vlan 2 to 5

pc5：
[sw3-Ethernet0/0/1]int e0/0/2
sw3-Ethernet0/0/2]port hybrid pvid vlan 4
[sw3-Ethernet0/0/2]port hybrid untagged vlan 3 4

pc6：
[sw3-Ethernet0/0/2]int e0/0/3
[sw3-Ethernet0/0/3]port hybrid pvid vlan 5
3-Ethernet0/0/3]port hybrid untagged vlan 3 5

sw1与r1接口

[sw1]int g0/0/1
sw1-GigabitEthernet0/0/1]port hybrid tagged vlan 2
-GigabitEthernet0/0/1]port hybrid untagged vlan 2 to 5

r1

子接口：
[r1]int g0/0/0.1
[r1-GigabitEthernet0/0/0.1]dot1q termination vid 2 标定接收和标定的标签时vlan2
[r1-GigabitEthernet0/0/0.1]ip a 192.168.1.1 24
[r1-GigabitEthernet0/0/0.1]arp broadcast enable 开启arp功能

物理接口
[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]ip a 192.168.2.1 24

r1]dhcp enable 开启DHCP
配置DHCP池塘
[r1]ip pool a
ip-pool-a]network 192.168.1.0 mask 24
[r1-ip-pool-a]gateway-list 192.168.1.1
[r1-ip-pool-a]dns-list 114.114.114.114 8.8.8.8
[r1]ip pool v3
-ip-pool-v3]network 192.168.2.0 mask 24
[r1-ip-pool-v3]gateway-list 192.168.2.1
[r1-ip-pool-v3]dns-list 114.114.114.114 8.8.8.8

[r1]int g0/0/0
[r1-GigabitEthernet0/0/0]dhcp
[r1-GigabitEthernet0/0/0]dhcp select global
[r1-GigabitEthernet0/0/0]int g0/0/0.1
1-GigabitEthernet0/0/0.1]dhcp select global