目的:实现不同VLAN间的PC不可互访, 但不同VLAN的PC均可以访问服务器.
例: VLAN5与VLAN10的PC不可以互通,但它们均可与服务器VLAN50互通.
拓扑图:
步骤;
1.配置PC主机的IP,掩码,网关信息
2.配置LSW1,LSW2的VLAN5,VLAN10,VLAN50
[Huawei]sysname sw1
[sw1]vlan batch 5 10 50
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei]sysname sw2 //配置LSW2
[sw2]vlan batch 5 10 50
Info: This operation may take a few seconds. Please wait for a moment...done.
3.配置LSW1,LSW2与PC或服务器相连的接口PVID,以及去除标签的VLAN
[sw1]interface g0/0/1 //配置LSW1
[sw1-GigabitEthernet0/0/1]port link-type hybrid
[sw1-GigabitEthernet0/0/1]port hybrid pvid vlan 5
[sw1-GigabitEthernet0/0/1]port hybrid untagged vlan 5 50
[sw1-GigabitEthernet0/0/1]quit
[sw1]interface g0/0/2 //配置LSW1
[sw1-GigabitEthernet0/0/2]port link-type hybrid
[sw1-GigabitEthernet0/0/2]port hybrid pvid vlan 10
[sw1-GigabitEthernet0/0/2]port hybrid untagged vlan 10 50
[sw1-GigabitEthernet0/0/2]quit
[sw2]interface g0/0/1 //配置LSW2
[sw2-GigabitEthernet0/0/1]port link-type hybrid
[sw2-GigabitEthernet0/0/1]port hybrid pvid vlan 50
[sw2-GigabitEthernet0/0/1]port hybrid untagged vlan 5 10 50
[sw2-GigabitEthernet0/0/1]quit
4.配置LSW1,LSW2交换机之间通过的VLAN需要带标签
[sw1]interface g0/0/3 //配置LSW1
[sw1-GigabitEthernet0/0/3]port link-type hybrid
[sw1-GigabitEthernet0/0/3]port hybrid untagged vlan 5 10 50
[sw1-GigabitEthernet0/0/3]quit
[sw2]interface g0/0/2 //配置LSW2
[sw2-GigabitEthernet0/0/2]port link-type hybrid
[sw2-GigabitEthernet0/0/2]port hybrid untagged vlan 5 10 50
[sw2-GigabitEthernet0/0/2]quit
5.验证
- VLAN5与LAN10的主机不能通讯
- VLAN5,VLAN10的主机都能与VLAN50的服务器通讯
结束.