网络安全之vlan实验
在对vlan进行一定的学习之后我们来练习一个小实验来加深理解记忆
首先是对实验进行一个搭建
第一部分：给交换机配置vlan
首先是sw1
[Huawei]vlan batch 2 to 5
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]port hybrid tagged vlan 2
[Huawei-GigabitEthernet0/0/1]port hybrid untagged vlan 3 to 5
[Huawei-GigabitEthernet0/0/1]int g0/0/2
[Huawei-GigabitEthernet0/0/2]port link-type access
[Huawei-GigabitEthernet0/0/2]port default vlan 2
[Huawei-GigabitEthernet0/0/2]int g0/0/3
[Huawei-GigabitEthernet0/0/3]port hybrid pvid vlan 3
[Huawei-GigabitEthernet0/0/3]port hybrid untagged vlan 4
[Huawei-GigabitEthernet0/0/3]int g0/0/4
[Huawei-GigabitEthernet0/0/4]port hybrid tagged vlan 2
[Huawei]dis port vlan ac
-------------------------------------------------------------------------------
Port Link Type PVID VLAN List
-------------------------------------------------------------------------------
GE0/0/1 hybrid 1 U: 1 3 to 5
T: 2
GE0/0/2 access 2 U: 2
GE0/0/3 hybrid 3 U: 1 to 5
GE0/0/4 hybrid 1 U: 1
T: 2 to 5
然后就是我们的sw2
[Huawei]vlan batch 2 to 5
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]port hybrid tagged vlan 2 to 5
[Huawei-GigabitEthernet0/0/1]int g0/0/2
[Huawei-GigabitEthernet0/0/2]port link-type access
[Huawei-GigabitEthernet0/0/2]port default vlan 2
[Huawei-GigabitEthernet0/0/2]int g0/0/3
[Huawei-GigabitEthernet0/0/3]port hybrid pvid vlan 4
[Huawei-GigabitEthernet0/0/3]port hybrid untagged vlan 1 to 4
[Huawei-GigabitEthernet0/0/3]int g0/0/4
[Huawei-GigabitEthernet0/0/4]port hybrid tagged vlan 2 to 5
[Huawei-GigabitEthernet0/0/3]display port vlan ac
-------------------------------------------------------------------------------
Port Link Type PVID VLAN List
-------------------------------------------------------------------------------
GE0/0/1 hybrid 1 U: 1
T: 2 to 5
GE0/0/2 access 2 U: 2
GE0/0/3 hybrid 4 U: 1 to 4
GE0/0/4 hybrid 1 U: 1
T: 2 to 5最后是我们的sw3
[Huawei]vlan batch 2 to 5
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]port hybrid tagged vlan 2 to 5
[Huawei-GigabitEthernet0/0/1]int g0/0/2
[Huawei-GigabitEthernet0/0/2]port hybrid pvid vlan 4
[Huawei-GigabitEthernet0/0/2]port hybrid untagged vlan 2 to 4
[Huawei-GigabitEthernet0/0/2]int g0/0/3
[Huawei-GigabitEthernet0/0/3]port hybrid pvid vlan 5
[Huawei-GigabitEthernet0/0/3]port hybrid untagged vlan 2 to 3 5
[Huawei]display port vlan ac
-------------------------------------------------------------------------------
Port Link Type PVID VLAN List
-------------------------------------------------------------------------------
GE0/0/1 hybrid 1 U: 1
T: 2 to 5
GE0/0/2 hybrid 4 U: 1 to 4
GE0/0/3 hybrid 5 U: 1 to 3 5
第二部分 对路由器进行DHCP配置
[Huawei]int g0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.1.1 24
[Huawei-GigabitEthernet0/0/0]q
[Huawei]dhcp enable
[Huawei]ip pool a
Info: The operation may take a few seconds. Please wait for a moment.done.
[Huawei]ip pool a
Info: It's successful to create an IP address pool.
[Huawei-ip-pool-a]net 192.168.1.0 mask 255.255.255.0
[Huawei-ip-pool-a]gat 192.168.1.1
[Huawei-ip-pool-a]dns 114.114.114.114
[Huawei-ip-pool-a]int g0/0/0
[Huawei-GigabitEthernet0/0/0]dhcp select global
[Huawei-GigabitEthernet0/0/0]ip pool b
Info: It's successful to create an IP address pool.
[Huawei-ip-pool-b]net 192.168.2.0 mask 255.255.255.0
[Huawei-ip-pool-b]gat 192.168.2.1
[Huawei-ip-pool-b]dns 114.114.114.114
[Huawei-ip-pool-b]int g0/0/0.1
[Huawei-GigabitEthernet0/0/0.1]dot1q termination vid 2
[Huawei-GigabitEthernet0/0/0.1]ip add 192.168.2.1 24
[Huawei-GigabitEthernet0/0/0.1]arp br
[Huawei-GigabitEthernet0/0/0.1]arp broadcast en
[Huawei-GigabitEthernet0/0/0.1]dhcp select global第三部分：测试配置结果，并改正
pc1-pc6的IP地址可以通过DHCP自动获取
pc2可以访问pc4/5/6
pc5不可以访问pc6
pc4可以ping通pc5 但是不能ping通pc6
以上就是一些实验后的总结结果，在配置过程中，也遇到过很多的问题，比如DHCP地址池的IP地址不能被自动获取，在仔细扫查之后发现是没有将网关配置好就进行了后面的配置，再加上在配置过程中比较着急，没有及时注意到，导致后面还是花费了大量时间去差错，，一定要细心。