网络安全工程(实验1)trunk链路配置

 

实验目的：配置trunk链路，实现全网互通

交换机sw1配置：

int g0/0/1 ----- g0/0/3 属于group 1

port-group 1
group-member GigabitEthernet0/0/1
group-member GigabitEthernet0/0/2
group-member GigabitEthernet0/0/3
#

int g0/0/4 ----- g0/0/6 属于group 2
port-group 2
group-member GigabitEthernet0/0/4
group-member GigabitEthernet0/0/5
group-member GigabitEthernet0/0/6
#

int g0/0/7 ----- g0/0/9 属于group 3
port-group 3
group-member GigabitEthernet0/0/7
group-member GigabitEthernet0/0/8
group-member GigabitEthernet0/0/9

int g0/0/1   ------ g0/0/3配置为access口并且属于vlan 10

interface GigabitEthernet0/0/1
port link-type access
port default vlan 10

interface GigabitEthernet0/0/2
port link-type access
port default vlan 10

interface GigabitEthernet0/0/3
port link-type access
port default vlan 10

int g0/0/4   ------ g0/0/6配置为access口并且属于vlan 20

interface GigabitEthernet0/0/4
port link-type access
port default vlan 20

interface GigabitEthernet0/0/5
port link-type access
port default vlan 20

interface GigabitEthernet0/0/6
port link-type access
port default vlan 20

 

int g0/0/7  ------ g0/0/9配置为access口并且属于vlan 30

interface GigabitEthernet0/0/7
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/8
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/9
port link-type access
port default vlan 30

int g0/0/24 配置为trunk口，并且允许vlan 10 20 30通过：

interface GigabitEthernet0/0/24
port link-type trunk
port trunk allow-pass vlan 10 20 30

 

 

交换机sw2配置：

int g0/0/1 ----- g0/0/3 属于group 1

port-group 1
group-member GigabitEthernet0/0/1
group-member GigabitEthernet0/0/2
group-member GigabitEthernet0/0/3
#

int g0/0/4 ----- g0/0/6 属于group 2
port-group 2
group-member GigabitEthernet0/0/4
group-member GigabitEthernet0/0/5
group-member GigabitEthernet0/0/6
#

int g0/0/7 ----- g0/0/9 属于group 3

port-group 3
group-member GigabitEthernet0/0/7
group-member GigabitEthernet0/0/8
group-member GigabitEthernet0/0/9

 

int g0/0/1   ------ g0/0/3配置为access口并且属于vlan 10

interface GigabitEthernet0/0/1
port link-type access
port default vlan 10

interface GigabitEthernet0/0/2
port link-type access
port default vlan 10

interface GigabitEthernet0/0/3
port link-type access
port default vlan 10

int g0/0/4   ------ g0/0/6配置为access口并且属于vlan 20

interface GigabitEthernet0/0/4
port link-type access
port default vlan 20

interface GigabitEthernet0/0/5
port link-type access
port default vlan 20

interface GigabitEthernet0/0/6
port link-type access
port default vlan 20

 

int g0/0/7  ------ g0/0/9配置为access口并且属于vlan 30

interface GigabitEthernet0/0/7
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/8
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/9
port link-type access
port default vlan 30

int g0/0/24 配置为trunk口，并且允许vlan 10 20 30 通过：

interface GigabitEthernet0/0/24
port link-type trunk
port trunk allow-pass vlan 10 20 30

测试：

pc1 与 其他主机互相ping 

如：用pc1 ping pc6  : ping 192.168.1.8