R1的配置

sysname R1

dhcp enable

 

 子接口VLAN2

interface GigabitEthernet 0/0/0

 undo shutdown

interface GigabitEthernet 0/0/0.2

 dot1q termination vid 2

 ip address 192.168.2.254 255.255.255.0

 dhcp select global

 

子接口承载VLAN3/4/5/6

interface GigabitEthernet 0/0/0.1

 dot1q termination vid 1

 ip address 192.168.1.254 255.255.255.0

 dhcp select global

 DHCP地址池

ip pool pool_v2

 network 192.168.2.0 mask 255.255.255.0

 gateway-list 192.168.2.254

 dns-list 114.114.114.114

 lease day 1

 

ip pool pool_v1

 network 192.168.1.0 mask 255.255.255.0

 gateway-list 192.168.1.254

 dns-list 114.114.114.114

 lease day 1

 ACL控制：PC5不能访问PC6，其余放行

acl number 3000

 rule 5 deny ip source 192.168.1.5 0 destination 192.168.1.6 0

 rule 10 permit ip

 

接口调用ACL

interface GigabitEthernet 0/0/0.1

 traffic-filter inbound acl 3000

 

 

SW1的配置

sysname LSW1
vlan batch 2 3 4 5 6

上联R1：Trunk，untagged VLAN3/4/5/6，tagged VLAN2
interface GigabitEthernet 0/0/4
 port link-type trunk
 port trunk untagged vlan 3 to 6
 port trunk allow-pass vlan 2 to 6

PC1：access VLAN2
interface GigabitEthernet 0/0/1
 port link-type access
 port default vlan 2

PC2：access VLAN3
interface GigabitEthernet 0/0/2
 port link-type access
 port default vlan 3

 下联LSW2：Trunk放行所有VLAN
interface GigabitEthernet 0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 6

 

LSW2的配置

sysname LSW2
vlan batch 2 3 4 5 6

上联LSW1
interface GigabitEthernet 0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 6

PC3：access VLAN2
interface GigabitEthernet 0/0/1
 port link-type access
 port default vlan 2

 PC4：access VLAN4（untagged 3/4/5/6）
interface GigabitEthernet 0/0/2
 port link-type access
 port default vlan 4

下联LSW3
interface GigabitEthernet 0/0/4
 port link-type trunk
 port trunk allow-pass vlan 2 to 6

 

LSW3的配置

sysname LSW3
vlan batch 2 3 4 5 6

上联LSW2
interface GigabitEthernet 0/0/3
 port link-type trunk
 port trunk allow-pass vlan 2 to 6

PC5：access VLAN5
interface GigabitEthernet 0/0/1
 port link-type access
 port default vlan 5

PC6：access VLAN6
interface GigabitEthernet 0/0/2
 port link-type access
 port default vlan 6