A,B,C,三部门分别对应VLAN10 VLAN 20 VLAN 30(C为总经办)，要求A部门不能互相访问B部门，但是A.B都可以和C通信
# S1交换机配置
undo info-center enable
#
vlan batch 10 20 30
#
interface GigabitEthernet0/0/1
port hybrid tagged vlan 10 20 30
#
#
interface Ethernet0/0/1
port hybrid pvid vlan 10
port hybrid untagged vlan 10 30
#
#
interface Vlanif10
ip address 192.168.10.254 255.255.255.0
dhcp select interface
#
interface Vlanif20
ip address 192.168.20.254 255.255.255.0
dhcp select interface
#
interface Vlanif30
ip address 192.168.30.254 255.255.255.0
dhcp select interface
#
#S2交换机配置
undo info-center enable
#
vlan batch 10 20 30
#
interface GigabitEthernet0/0/1
port hybrid tagged vlan 10 20 30
#
#
interface Ethernet0/0/1
port hybrid pvid vlan 20
port hybrid untagged vlan 20 30
#
interface Ethernet0/0/2
port hybrid pvid vlan 30
port hybrid untagged vlan 10 20 30
#