实现不同vlan间PC不可互访,而不同vlan的PC均可访问服务器的特殊效果,具体要求如下。
在交换机中创建相关vlan
修改端口模式与pvid
修改端口允许通过的数据帧
结果验证,vlan5与vlan10的pc不可以互通,但它们均可与服务器互通
使用eNSP搭建实验环境,如图-3所示。
实现此案例需要按照如下步骤进行。
1)配置第1台交换机
[SW1]vlan batch 5 10 50
[SW1]interface Ethernet0/0/1
[SW1-Ethernet0/0/1]port hybrid untagged vlan 5 50
[SW1-Ethernet0/0/1]port hybrid pvid vlan 5
[SW1]interface Ethernet0/0/2
[SW1-Ethernet0/0/2]port hybrid untagged vlan 10 50
[SW1-Ethernet0/0/2]port hybrid pvid vlan 10
[SW1]interface Ethernet0/0/3
[SW1-Ethernet0/0/3]port hybrid tagged vlan 5 10 50
[SW1]dis vlan
The total number of vlans is : 4
------------------------------------------------------------------
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;
#: ProtocolTransparent-vlan; *: Management-vlan;
--------------------------------------------------------------------
VID Type Ports
--------------------------------------------------------------------------------
1 common UT:Eth0/0/1(U) Eth0/0/2(U) Eth0/0/3(U) Eth0/0/4(D)
Eth0/0/5(D) Eth0/0/6(D) Eth0/0/7(D) Eth0/0/8(D)
Eth0/0/9(D) Eth0/0/10(D) Eth0/0/11(D) Eth0/0/12(D)
Eth0/0/13(D) Eth0/0/14(D) Eth0/0/15(D) Eth0/0/16(D)
Eth0/0/17(D) Eth0/0/18(D) Eth0/0/19(D) Eth0/0/20(D)
Eth0/0/21(D) Eth0/0/22(D) GE0/0/1(D) GE0/0/2(D)
5 common UT:Eth0/0/1(U)
TG:Eth0/0/3(U)
10 common UT:Eth0/0/2(U)
TG:Eth0/0/3(U)
50 common UT:Eth0/0/1(U) Eth0/0/2(U)
TG:Eth0/0/3(U)
VID Status Property MAC-LRN Statistics Description
--------------------------------------------------------------------
1 enable default enable disable VLAN 0001
5 enable default enable disable VLAN 0005
10 enable default enable disable VLAN 0010
50 enable default enable disable VLAN 0050
[SW1]dis port vlan
Port Link Type PVID Trunk VLAN List
--------------------------------------------------------------------
Ethernet0/0/1 hybrid 5 -
Ethernet0/0/2 hybrid 10 -
Ethernet0/0/3 hybrid 1 5 10 50
Ethernet0/0/4 hybrid 1 -
Ethernet0/0/5 hybrid 1 -
Ethernet0/0/6 hybrid 1 -
Ethernet0/0/7 hybrid 1 -
Ethernet0/0/8 hybrid 1 -
Ethernet0/0/9 hybrid 1 -
Ethernet0/0/10 hybrid 1 -
Ethernet0/0/11 hybrid 1 -
Ethernet0/0/12 hybrid 1 -
Ethernet0/0/13 hybrid 1 -
Ethernet0/0/14 hybrid 1 -
Ethernet0/0/15 hybrid 1 -
Ethernet0/0/16 hybrid 1 -
Ethernet0/0/17 hybrid 1 -
Ethernet0/0/18 hybrid 1 -
Ethernet0/0/19 hybrid 1 -
Ethernet0/0/20 hybrid 1 -
Ethernet0/0/21 hybrid 1 -
Ethernet0/0/22 hybrid 1 -
GigabitEthernet0/0/1 hybrid 1 -
GigabitEthernet0/0/2 hybrid 1 -
2)配置第2台交换机
[SW2]vlan batch 5 10 50
[SW2]interface Ethernet0/0/1
[SW2-Ethernet0/0/1]port hybrid tagged vlan 5 10 50
[SW2]interface Ethernet0/0/2
[SW2-Ethernet0/0/2]port hybrid untagged vlan 5 10 50
[SW2-Ethernet0/0/2]port hybrid pvid vlan 50
[SW2]dis vlan
The total number of vlans is : 4
--------------------------------------------------------------------
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;
#: ProtocolTransparent-vlan; *: Management-vlan;
--------------------------------------------------------------------
VID Type Ports
--------------------------------------------------------------------------------
1 common UT:Eth0/0/1(U) Eth0/0/2(U) Eth0/0/3(D) Eth0/0/4(D)
Eth0/0/5(D) Eth0/0/6(D) Eth0/0/7(D) Eth0/0/8(D)
Eth0/0/9(D) Eth0/0/10(D) Eth0/0/11(D) Eth0/0/12(D)
Eth0/0/13(D) Eth0/0/14(D) Eth0/0/15(D) Eth0/0/16(D)
Eth0/0/17(D) Eth0/0/18(D) Eth0/0/19(D) Eth0/0/20(D)
Eth0/0/21(D) Eth0/0/22(D) GE0/0/1(D) GE0/0/2(D)
5 common UT:Eth0/0/2(U)
TG:Eth0/0/1(U)
10 common UT:Eth0/0/2(U)
TG:Eth0/0/1(U)
50 common UT:Eth0/0/2(U)
TG:Eth0/0/1(U)
VID Status Property MAC-LRN Statistics Description
--------------------------------------------------------------------
1 enable default enable disable VLAN 0001
5 enable default enable disable VLAN 0005
10 enable default enable disable VLAN 0010
50 enable default enable disable VLAN 0050
[SW2]dis port vlan
Port Link Type PVID Trunk VLAN List
-------------------------------------------------------------------
Ethernet0/0/1 hybrid 1 5 10 50
Ethernet0/0/2 hybrid 50 -
Ethernet0/0/3 hybrid 1 -
Ethernet0/0/4 hybrid 1 -
Ethernet0/0/5 hybrid 1 -
Ethernet0/0/6 hybrid 1 -
Ethernet0/0/7 hybrid 1 -
Ethernet0/0/8 hybrid 1 -
Ethernet0/0/9 hybrid 1 -
Ethernet0/0/10 hybrid 1 -
Ethernet0/0/11 hybrid 1 -
Ethernet0/0/12 hybrid 1 -
Ethernet0/0/13 hybrid 1 -
Ethernet0/0/14 hybrid 1 -
Ethernet0/0/15 hybrid 1 -
Ethernet0/0/16 hybrid 1 -
Ethernet0/0/17 hybrid 1 -
Ethernet0/0/18 hybrid 1 -
Ethernet0/0/19 hybrid 1 -
Ethernet0/0/20 hybrid 1 -
Ethernet0/0/21 hybrid 1 -
Ethernet0/0/22 hybrid 1 -
GigabitEthernet0/0/1 hybrid 1 -
GigabitEthernet0/0/2 hybrid 1 -
3)测试
vlan5与vlan10的pc不可以互通,但它们均可与服务器互通。