HCIA第三次综合实验：VLAN
一、实验拓扑
二、实验需求
1.全网可达；
2.使用DHCP获取IP地址；
三、实验思路
1.先确定整个网络中的广播域数量：路由器的每个接口都划分一个大的广播域，每个大的广播域又根据vlan划分成两个小播域，因此网络中一共有4个广播域。由于题目要求中并没有限制网段，因此我们可以自己规划四个网段。分别是：192.168.1.0/24 192.168.2.0/24 192.168.3.0/24 192.168.4.0/24；
2.为路由器创建子接口，并根据划分的网段给接口配置IP地址；
3.要在交换机上进行vlan的配置，先创建vlan，然后将相应的接口加入vlan；在trunk链路上放行网络中的vlan；
4.配置子接口详细信息，开启接口能识别802.1Q数据帧的功能，同时将子接口划分给相应的vlan；开启ARP广播，向真实的物理接口借MAC地址；
5.配置DHCP,为网络中的主机发放IP地址。
四、实验步骤
1.创建子接口，根据划分的网段给接口配置IP地址；
[R1]int g0/0/0.1
[R1-GigabitEthernet0/0/0.1]ip add 192.168.1.254 24
[R1-GigabitEthernet0/0/0.1]q
[R1]int g0/0/0.2
[R1-GigabitEthernet0/0/0.2]ip add 192.168.2.254 24
[R1-GigabitEthernet0/0/0.2]int g0/0/1.1
[R1-GigabitEthernet0/0/1.1]ip add 192.168.3.254 24
[R1-GigabitEthernet0/0/1.1]int g0/0/1.2
[R1-GigabitEthernet0/0/1.2]ip add 192.168.4.254 24
2.配置vlan
（1）先在每个交换机上创建vlan
[sw1]vlan batch 2 to 3
[sw2]vlan batch 2 to 3
[sw3]vlan batch 2 to 3
（2）将接口加入对应vlan，并选择链路类型
SW1:
[sw1]int E0/0/2
[sw1-Ethernet0/0/2]port link-type access
[sw1-Ethernet0/0/2]port default vlan 2[sw1]int E0/0/3
[sw1-Ethernet0/0/3]port link-type access
[sw1-Ethernet0/0/3]port default vlan 3
[sw1]int E0/0/1
[sw1-Ethernet0/0/1]port link-type trunk
SW2 :
[sw2]int E0/0/3
[sw2-Ethernet0/0/3]port link-type access
[sw2-port-group-defaul]port default vlan 2[sw2]int E0/0/4
[sw2-Ethernet0/0/4]port link-type access
[sw2-Ethernet0/0/4]port default vlan 3
[sw2]int E0/0/2
[sw2-Ethernet0/0/2]port link-type trunk
[sw2]int E0/0/1
[sw2-Ethernet0/0/1]port link-type trunk
查看接口和vlan以及链路类型对应表，排错：
SW3:
[sw3]int E0/0/2
[sw3-Ethernet0/0/2]port link-type access
[sw3-Ethernet0/0/2]port default vlan 2[sw3]int E0/0/3
[sw3-Ethernet0/0/3]port link-type access
[sw3-Ethernet0/0/3]port default vlan 3[sw3]int E0/0/1
[sw3-Ethernet0/0/1]port link-type trunk
3.配置限制trunk链路允许通过的vlan
[sw1]int E0/0/1
[sw1-Ethernet0/0/1]port trunk allow-pass vlan 2 3
[sw2]int E0/0/2
[sw2-Ethernet0/0/2]port trunk allow-pass vlan 2 3[sw2]int E0/0/1
[sw2-Ethernet0/0/1]port trunk allow-pass vlan 2 3
[sw3]int E0/0/1
[sw3-Ethernet0/0/1]port trunk allow-pass vlan 2 3
4.对路由器上的子接口进行更详细的配置
（1）开启接口能识别802.1Q数据帧的功能，同时将子接口划分给相应的vlan
（2）开启ARP广播，向真实的物理接口借MAC地址
[R1]int g0/0/0.1
[R1-GigabitEthernet0/0/0.1]dot1q termination vid 2[R1-GigabitEthernet0/0/0.1]arp broadcast enable
[R1-GigabitEthernet0/0/0.1]int g0/0/0.2
[R1-GigabitEthernet0/0/0.2]dot1q termination vid 3[R1-GigabitEthernet0/0/0.2]arp broadcast enable
[R1-GigabitEthernet0/0/0.2]int g0/0/1.1
[R1-GigabitEthernet0/0/1.1]dot1q termination vid 2[R1-GigabitEthernet0/0/1.1]arp broadcast enable
[R1-GigabitEthernet0/0/1.1]int g0/0/1.2
[R1-GigabitEthernet0/0/1.2]dot1q termination vid 3[R1-GigabitEthernet0/0/1.2]arp broadcast enable
5.配置DHCP下发地址
（1）先将PC机上的IPV4都改成动态获取，并点击应用；
（2）路由器上配置DHCP
[R1]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[R1]ip pool aa
Info: It's successful to create an IP address pool.
[R1-ip-pool-aa]network 192.168.1.0 mask 24
[R1-ip-pool-aa]gateway-list 192.168.1.254
[R1-ip-pool-aa]q
[R1]ip pool bb
Info: It's successful to create an IP address pool.
[R1-ip-pool-bb]network 192.168.2.0 mask 24
[R1-ip-pool-bb]gateway-list 192.168.2.254
[R1-ip-pool-bb]q
[R1]ip pool cc
Info: It's successful to create an IP address pool.
[R1-ip-pool-cc]network 192.168.3.0 mask 24
[R1-ip-pool-cc]gateway-list 192.168.3.254
[R1-ip-pool-cc]q
[R1]ip pool dd
Info: It's successful to create an IP address pool.
[R1-ip-pool-dd]network 192.168.4.0 mask 24
[R1-ip-pool-dd]gateway-list 192.168.4.254
(3)进入接口进行DHCP发放响应
[R1]int g0/0/0.1
[R1-GigabitEthernet0/0/0.1]dhcp select global
[R1-GigabitEthernet0/0/0.1]int g0/0/0.2
[R1-GigabitEthernet0/0/0.2]dhcp select global
[R1-GigabitEthernet0/0/0.2]int g0/0/1.1
[R1-GigabitEthernet0/0/1.1]dhcp select global
[R1-GigabitEthernet0/0/1.1]int g0/0/1.2
[R1-GigabitEthernet0/0/1.2]dhcp select global
五、实验结果
1.ping通测试：PC1 ping PC6
全网可达
2.主机可以获取到IP地址，DHCP发放成功
综上所述，实验成功