HCIP(VLAN综合实验)

实验拓补图

实验分析

一、实验目的

1. 掌握VLAN的创建和配置方法
2. 理解VLAN在局域网中的作用
3. 学习如何通过VLAN实现网络隔离和通信

二、实验环境

1. 交换机（SW1、SW2、SW3）
2. 个人电脑（PC1、PC2、PC3、PC4、PC5、PC6）
3. 路由器（R1）
4. 网络连接线

四、实验需求

1. PC1和PC3所在接口为access接口，属于VLAN 2
2. PC2/4/5/6处于同一网段，其中PC2可以访问PC4/5/6，PC4可以访问PC5不能访问PC6，PC5不能访问PC6
3. PC1/3和PC2/4/5/6不在一个网段，且可以正常通讯
4. 所有PC通过DHCP获取IP地址，且PC1/3可以正常访问PC2/4/5/6

五、实验步骤和配置

1. 创建VLAN

   • 在SW1、SW2、SW3上创建VLAN 2、3、4、5、6

2. 配置接口

   • SW1、SW2、SW3的接口配置如下：
     • PC1和PC3的接口配置为access接口，属于VLAN 2
     • PC2、PC4、PC5、PC6的接口配置为hybrid接口，分别属于VLAN 3、4、5、6

3. 配置DHCP服务

   • 在R1上配置DHCP服务，创建两个地址池，分别为PC1/3和PC2/4/5/6分配IP地址

4. 测试连通性

   • 测试PC1、PC3可以正常访问PC2、PC4、PC5、PC6
   • 测试PC2可以访问PC4、PC5、PC6
   • 测试PC4可以访问PC5，不能访问PC6
   • 测试PC5不能访问PC6

六、实验结果

1. 所有PC均通过DHCP获取到IP地址
2. PC1、PC3可以正常访问PC2、PC4、PC5、PC6
3. PC2可以访问PC4、PC5、PC6
4. PC4可以访问PC5，不能访问PC6
5. PC5不能访问PC6

具体操作

1.建立拓补图

2.修改PC1-6获取IP方式

3.LS1配置

<Huawei>system-view 
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LS1
[LS1]vlan batch 2 to 6
Info: This operation may take a few seconds. Please wait for a moment...done.
[LS1]interface GigabitEthernet 0/0/1
[LS1-GigabitEthernet0/0/1]port link-type access
[LS1-GigabitEthernet0/0/1]port default vlan 2
[LS1]interface GigabitEthernet 0/0/2
[LS1-GigabitEthernet0/0/2]port hybrid pvid vlan 3
[LS1-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 6
[LS1]interface GigabitEthernet 0/0/3
[LS1-GigabitEthernet0/0/3]port link-type trunk 
[LS1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
[LS1]interface GigabitEthernet 0/0/4
[LS1-GigabitEthernet0/0/4]port hybrid pvid vlan 1
[LS1-GigabitEthernet0/0/4]port hybrid untagged vlan 3 to 6
[LS1-GigabitEthernet0/0/4]port hybrid tagged vlan 2

检查配置

<LS1>display port vlan active 
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port                Link Type    PVID    VLAN List
-------------------------------------------------------------------------------
GE0/0/1             access       2       U: 2
GE0/0/2             hybrid       3       U: 1 3 to 6
GE0/0/3             trunk        1       U: 1T: 2 to 6
GE0/0/4             hybrid       1       U: 1 3 to 6T: 2

4.LSW2配置

<Huawei>system-view 
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LSW2
[LSW2]vlan batch 2 to 6
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW2]interface GigabitEthernet 0/0/1
[LSW2-GigabitEthernet0/0/1]port link-type access
[LSW2-GigabitEthernet0/0/1]port default vlan 2
[LSW2]interface GigabitEthernet 0/0/2
[LSW2-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[LSW2-GigabitEthernet0/0/2]port hybrid untagged vlan 3 to 6
[LSW2]interface GigabitEthernet 0/0/3
[LSW2-GigabitEthernet0/0/3]port link-type trunk
[LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6
[LSW2]interface GigabitEthernet 0/0/4
[LSW2-GigabitEthernet0/0/4]port link-type trunk 
[LSW2-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 to 6

检查配置

<LSW2>display port vlan active 
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port                Link Type    PVID    VLAN List
-------------------------------------------------------------------------------
GE0/0/1             access       2       U: 2
GE0/0/2             hybrid       4       U: 1 3 to 6
GE0/0/3             trunk        1       U: 1T: 2 to 6
GE0/0/4             trunk        1       U: 1T: 2 to 6

5.LSW3配置

<Huawei>system-view 
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LSW3
[LSW3]vlan batch 2 to 6
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW3]interface GigabitEthernet 0/0/1
[LSW3-GigabitEthernet0/0/1]port hybrid pvid vlan 5
[LSW3-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 5
[LSW3]interface GigabitEthernet 0/0/2
[LSW3-GigabitEthernet0/0/2]port hybrid pvid vlan 6
[LSW3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 6
[LSW3]interface GigabitEthernet 0/0/3
[LSW3-GigabitEthernet0/0/3]port link-type trunk
[LSW3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6

检查配置

<LSW3>display port vlan active 
T=TAG U=UNTAG
-------------------------------------------------------------------------------
Port                Link Type    PVID    VLAN List
-------------------------------------------------------------------------------
GE0/0/1             hybrid       5       U: 1 3 to 5
GE0/0/2             hybrid       6       U: 1 3 to 4 6
GE0/0/3             trunk        1       U: 1T: 2 to 6
GE0/0/4             hybrid       1       U: 1

6.R1配置

<Huawei>system-view 
Enter system view, return user view with Ctrl+Z.	
[Huawei]sysname R1
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]ip address 192.168.1.1 24
[R1]interface GigabitEthernet 0/0/0.1
[R1-GigabitEthernet0/0/0.1]ip address 192.168.2.1 24
[R1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[R1-GigabitEthernet0/0/0.1]arp broadcast enable 
[R1]display ip interface brief 
*down: administratively down
!down: FIB overload down
^down: standby
(l): loopback
(s): spoofing
(d): Dampening Suppressed
The number of interface that is UP in Physical is 3
The number of interface that is DOWN in Physical is 9
The number of interface that is UP in Protocol is 3
The number of interface that is DOWN in Protocol is 9Interface                         IP Address/Mask      Physical   Protocol  
Ethernet0/0/0                     unassigned           down       down      
Ethernet0/0/1                     unassigned           down       down      
GigabitEthernet0/0/0              192.168.1.1/24       up         up        
GigabitEthernet0/0/0.1            192.168.2.1/24       up         up        
GigabitEthernet0/0/1              unassigned           down       down      
GigabitEthernet0/0/2              unassigned           down       down      
GigabitEthernet0/0/3              unassigned           down       down      
NULL0                             unassigned           up         up(s)
[R1]dhcp enable 
Info: The operation may take a few seconds. Please wait for a moment.done.
[R1]ip pool a
Info:It's successful to create an IP address pool.
[R1-ip-pool-a]network 192.168.1.0 mask 24
[R1-ip-pool-a]gateway-list 192.168.1.1
[R1-ip-pool-a]dns-list 8.8.8.8
[R1]interface GigabitEthernet 0/0/0
[R1-GigabitEthernet0/0/0]dhcp select global
[R1]ip pool b
Info:It's successful to create an IP address pool.
[R1-ip-pool-b]network 192.168.2.0 mask 24
[R1-ip-pool-b]gateway-list 192.168.2.1
[R1-ip-pool-b]dns-list 8.8.8.8
[R1]interface GigabitEthernet 0/0/0.1
[R1-GigabitEthernet0/0/0.1]dhcp select global

查询PC端IP

PC1

PC2

PC3

PC4

PC5

PC6

测试

PC2访问PC4，5，6

ping PC4

ping PC5

ping PC6

PC4 ping PC6

PC5 ping PC6

PC1 访问PC2，4，5，6

ping PC2

ping PC4

ping PC5

ping PC6

PC3访问PC2，4，5，6

ping PC2

ping PC4

ping PC5

ping PC6