一、实验拓扑

二、实验需求

1.PC1和PC3所在接口为access，属于vlan2；

  PC2/4/5/6处于同一网段，其中PC2可以访问PC4/5/6;

PC4可以访问PC6；PC5不能访问PC6；

2.PC1/3与PC2/4/5/6不在同一网段；

3.所有PC通过DHCP获取IP地址，且PC1/3可以正常访问PC2/4/5/6

实验步骤：

1.配置vlan

[SW1]vlan batch 2 to 6

[SW1-GigabitEthernet0/0/1]port link-type access

[SW1-GigabitEthernet0/0/1]port default vlan 2

[SW1-GigabitEthernet0/0/2]port link-type hybrid

[SW1-GigabitEthernet0/0/2]port hybrid pvid vlan 3

[SW1-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 5 6

[SW1-GigabitEthernet0/0/3]port link-type trunk

[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6

[SW1-GigabitEthernet0/0/4]port link-type hybrid

[SW1-GigabitEthernet0/0/4]port hybrid untagged vlan 3 4 5 6

[SW1-GigabitEthernet0/0/4]port hybrid tagged vlan 2

[SW2]vlan batch 2 to 6

[SW2-GigabitEthernet0/0/1]port link-type access

[SW2-GigabitEthernet0/0/1]port default vlan 2

[SW2-GigabitEthernet0/0/2]port link-type hybrid

[SW2-GigabitEthernet0/0/2]port hybrid pvid vlan 4

[SW2-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 5 6

[SW2-GigabitEthernet0/0/3]port link-type trunk

[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6

[SW2-GigabitEthernet0/0/4]port link-type trunk

[SW2-GigabitEthernet0/0/4]port trunk allow-pass vlan 2 to 6

[SW3]vlan batch 2 to 6

[SW3-GigabitEthernet0/0/1]port link-type hybrid

[SW3-GigabitEthernet0/0/1]port hybrid pvid vlan 5

[SW3-GigabitEthernet0/0/1]port hybrid untagged vlan 3 4 5

[SW3-GigabitEthernet0/0/2]port link-type hybrid

[SW3-GigabitEthernet0/0/2]port hybrid pvid vlan 6

[SW3-GigabitEthernet0/0/2]port hybrid untagged vlan 3 4 6

[SW3-GigabitEthernet0/0/3]port link-type trunk

[SW3-GigabitEthernet0/0/3]port trunk allow-pass vlan 2 to 6

[R1-GigabitEthernet0/0/0]ip add 192.168.1.254 24

[R1-GigabitEthernet0/0/0.1]ip add 192.168.2.254 24

[R1-GigabitEthernet0/0/0.1]dot1q termination vid 2

[R1-GigabitEthernet0/0/0.1]arp broadcast enable

2.配置DHCP：

[R1]ip pool aa

[R1-ip-pool-aa]network 192.168.2.0 mask 24

[R1-ip-pool-aa]gateway-list 192.168.2.254

[R1-ip-pool-aa]dns-list 8.8.8.8

[R1]ip pool bb

[R1-ip-pool-bb]network 192.168.1.0 mask 24

[R1-ip-pool-bb]gateway-list 192.168.1.254

[R1-ip-pool-bb]dns-list 8.8.8.8 114.114.114.114

[R1-GigabitEthernet0/0/0]dhcp select global

[R1-GigabitEthernet0/0/0.1]dhcp select global

测试