实验拓扑图，实验要求

实验步骤

vlan划分

[Huawel] vlan batch10

[Huawei] int g0/0/2

[Huawei-GigabitEthernet0/0/2]port link-type access

[Huawei-GigabitEthernet0/0/2]port default vlan 10

[Huawei-GigabitEthernet0/0/3]port link-type access

[Huawei-GigabitEthernet0/0/3]port default vlan 10

[Huawei-GigabitEthernet0/0/1lport link-type trunk

[Huawei-GigabitEthernet0/0/1lport trunk allow-pass vlan10 20

建立DHCP地址池

[FW]dhcp enable

[FW-GigabitEthernet1/0/1.1]dhcp select interface

[FW-GigabitEthernet1/0/1.2]dhcp select interface

[FW-GigabitEthernet1/0/1.1]alias dhcp-a

[FW-GigabitEthernet1/0/1.2]alias dhcp-b

检验Client1是否实现要求

[FW-GlgabltEthernet0/0/0]service-manage telnet permit

[FW]telnet server enable

[FW]user-interface vty 0 4

[FW-ui-vty0-4]protocol inbound telnet

用户认证配置：

安全策略配置