当前位置：首页 > news >正文

HCIA第三次综合实验：VLAN

news 2025/7/16 8:11:05

HCIA第三次综合实验：VLAN

一、实验拓扑

二、实验需求

1.全网可达；
2.使用DHCP获取IP地址；

三、实验思路

1.先确定整个网络中的广播域数量：路由器的每个接口都划分一个大的广播域，每个大的广播域又根据vlan划分成两个小播域，因此网络中一共有4个广播域。由于题目要求中并没有限制网段，因此我们可以自己规划四个网段。分别是：192.168.1.0/24 192.168.2.0/24 192.168.3.0/24 192.168.4.0/24；

2.为路由器创建子接口，并根据划分的网段给接口配置IP地址；

3.要在交换机上进行vlan的配置，先创建vlan，然后将相应的接口加入vlan；在trunk链路上放行网络中的vlan；

4.配置子接口详细信息，开启接口能识别802.1Q数据帧的功能，同时将子接口划分给相应的vlan；开启ARP广播，向真实的物理接口借MAC地址；

5.配置DHCP,为网络中的主机发放IP地址。

四、实验步骤

1.创建子接口，根据划分的网段给接口配置IP地址；

[R1]int g0/0/0.1
[R1-GigabitEthernet0/0/0.1]ip add 192.168.1.254 24
[R1-GigabitEthernet0/0/0.1]q
[R1]int g0/0/0.2
[R1-GigabitEthernet0/0/0.2]ip add 192.168.2.254 24
[R1-GigabitEthernet0/0/0.2]int g0/0/1.1
[R1-GigabitEthernet0/0/1.1]ip add 192.168.3.254 24
[R1-GigabitEthernet0/0/1.1]int g0/0/1.2
[R1-GigabitEthernet0/0/1.2]ip add 192.168.4.254 24

2.配置vlan

（1）先在每个交换机上创建vlan

[sw1]vlan batch 2 to 3
[sw2]vlan batch 2 to 3
[sw3]vlan batch 2 to 3

（2）将接口加入对应vlan，并选择链路类型

SW1:

[sw1]int E0/0/2
[sw1-Ethernet0/0/2]port link-type access
[sw1-Ethernet0/0/2]port default vlan 2
[sw1]int E0/0/3
[sw1-Ethernet0/0/3]port link-type access
[sw1-Ethernet0/0/3]port default vlan 3
[sw1]int E0/0/1
[sw1-Ethernet0/0/1]port link-type trunk

SW2 :

[sw2]int E0/0/3
[sw2-Ethernet0/0/3]port link-type access
[sw2-port-group-defaul]port default vlan 2
[sw2]int E0/0/4
[sw2-Ethernet0/0/4]port link-type access
[sw2-Ethernet0/0/4]port default vlan 3
[sw2]int E0/0/2
[sw2-Ethernet0/0/2]port link-type trunk
[sw2]int E0/0/1
[sw2-Ethernet0/0/1]port link-type trunk

查看接口和vlan以及链路类型对应表，排错：

SW3:

[sw3]int E0/0/2
[sw3-Ethernet0/0/2]port link-type access
[sw3-Ethernet0/0/2]port default vlan 2
[sw3]int E0/0/3
[sw3-Ethernet0/0/3]port link-type access
[sw3-Ethernet0/0/3]port default vlan 3
[sw3]int E0/0/1
[sw3-Ethernet0/0/1]port link-type trunk

3.配置限制trunk链路允许通过的vlan

[sw1]int E0/0/1
[sw1-Ethernet0/0/1]port trunk allow-pass vlan 2 3

[sw2]int E0/0/2
[sw2-Ethernet0/0/2]port trunk allow-pass vlan 2 3
[sw2]int E0/0/1
[sw2-Ethernet0/0/1]port trunk allow-pass vlan 2 3

[sw3]int E0/0/1
[sw3-Ethernet0/0/1]port trunk allow-pass vlan 2 3

4.对路由器上的子接口进行更详细的配置

（1）开启接口能识别802.1Q数据帧的功能，同时将子接口划分给相应的vlan

（2）开启ARP广播，向真实的物理接口借MAC地址

[R1]int g0/0/0.1
[R1-GigabitEthernet0/0/0.1]dot1q termination vid 2
[R1-GigabitEthernet0/0/0.1]arp broadcast enable
[R1-GigabitEthernet0/0/0.1]int g0/0/0.2
[R1-GigabitEthernet0/0/0.2]dot1q termination vid 3
[R1-GigabitEthernet0/0/0.2]arp broadcast enable
[R1-GigabitEthernet0/0/0.2]int g0/0/1.1
[R1-GigabitEthernet0/0/1.1]dot1q termination vid 2
[R1-GigabitEthernet0/0/1.1]arp broadcast enable
[R1-GigabitEthernet0/0/1.1]int g0/0/1.2
[R1-GigabitEthernet0/0/1.2]dot1q termination vid 3
[R1-GigabitEthernet0/0/1.2]arp broadcast enable

5.配置DHCP下发地址

（1）先将PC机上的IPV4都改成动态获取，并点击应用；

（2）路由器上配置DHCP

[R1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[R1]ip pool aa
Info: It's successful to create an IP address pool.
[R1-ip-pool-aa]network 192.168.1.0 mask 24
[R1-ip-pool-aa]gateway-list 192.168.1.254
[R1-ip-pool-aa]q
[R1]ip pool bb
Info: It's successful to create an IP address pool.
[R1-ip-pool-bb]network 192.168.2.0 mask 24
[R1-ip-pool-bb]gateway-list 192.168.2.254
[R1-ip-pool-bb]q
[R1]ip pool cc
Info: It's successful to create an IP address pool.
[R1-ip-pool-cc]network 192.168.3.0 mask 24
[R1-ip-pool-cc]gateway-list 192.168.3.254
[R1-ip-pool-cc]q
[R1]ip pool dd
Info: It's successful to create an IP address pool.
[R1-ip-pool-dd]network 192.168.4.0 mask 24
[R1-ip-pool-dd]gateway-list 192.168.4.254

(3)进入接口进行DHCP发放响应

[R1]int g0/0/0.1
[R1-GigabitEthernet0/0/0.1]dhcp select global
[R1-GigabitEthernet0/0/0.1]int g0/0/0.2
[R1-GigabitEthernet0/0/0.2]dhcp select global
[R1-GigabitEthernet0/0/0.2]int g0/0/1.1
[R1-GigabitEthernet0/0/1.1]dhcp select global
[R1-GigabitEthernet0/0/1.1]int g0/0/1.2
[R1-GigabitEthernet0/0/1.2]dhcp select global