《二层交换机的两个vlan互相访问汇总》由会员分享，可在线阅读，更多相关《二层交换机的两个vlan互相访问汇总（8页珍藏版）》请在金锄头文库上搜索。
1、二层交换机的两个vlan互相访问 假如A交换机vlan100,vlan200,B交换机vlan300,vlan400,怎样配置可以让vlan 300不能访问vlan100?vlan200可以访问vlan400? 有多种方法可以实现：比如PVLAN，ACL等。按照你的拓扑，我用PT模拟了一种做法：单臂路由+ACL，可以参考一下，有图，有配置： 交换机A: interface FastEthernet0/2 switchport access vlan 100 switchport mode access ! interface FastEthernet0/3 switchport access
2、vlan 100 switchport mode access ! interface FastEthernet0/11 switchport access vlan 200 switchport mode access ! interface FastEthernet0/12 switchport access vlan 200 switchport mode access ! interface FastEthernet0/1 switchport trunk allowed vlan 100,200 switchport mode trunk 交换机B: interface FastEt
3、hernet0/2 switchport access vlan 300 switchport mode access ! interface FastEthernet0/3 switchport access vlan 300 switchport mode access ! interface FastEthernet0/11 switchport access vlan 400 switchport mode access ! interface FastEthernet0/12 switchport access vlan 400 switchport mode access ! in
4、terface FastEthernet0/1 switchport trunk allowed vlan 300,400 switchport mode trunk Router: interface FastEthernet0/0.1 encapsulation dot1Q 100 ip address 192.168.1.1 255.255.255.0 ! interface FastEthernet0/0.2 encapsulation dot1Q 200 ip address 192.168.2.1 255.255.255.0 ! interface FastEthernet0/1.
5、1 encapsulation dot1Q 400 ip address 192.168.4.1 255.255.255.0 ! interface FastEthernet0/1.2 encapsulation dot1Q 300 ip address 192.168.3.1 255.255.255.0 ip access-group 1 out ! access-list 1 deny 192.168.1.0 0.0.0.255 access-list 1 permit any 60 Boot Loader (C2960-HBOOT-M) Version 12.2(25r)FX, RELE
6、ASE SOFTWARE (fc4) Cisco WS-C2960-24TT (RC32300) processor (revision C0) with 21039K bytes of memory. 2960-24TT starting. Base ethernet MAC Address: 0001.42AD.CAAC Xmodem file system is available. Initializing Flash. flashfs0: 1 files, 0 directories flashfs0: 0 orphaned files, 0 orphaned directories
7、 flashfs0: Total bytes: 64016384 flashfs0: Bytes used: 4414921 flashfs0: Bytes available: 59601463 flashfs0: flashfs fsck took 1 seconds. .done Initializing Flash. Boot Sector Filesystem (bs:) installed, fsid: 3 Parameter Block Filesystem (pb:) installed, fsid: 4 Loading flash:/c2960-lanbase-mz.122-
8、25.FX.bin. # OK Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data an
9、d Computer Software clause at DFARS sec. 252.227-7013. cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(25)FX, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2022 by Cisco Systems, Inc. Compiled Wed 12-Oct-05 22:0
10、5 by pt_team Image text-base: 0x80008098, data-base: 0x814129C4 Cisco WS-C2960-24TT (RC32300) processor (revision C0) with 21039K bytes of memory. 24 FastEthernet/IEEE 802.3 interface(s) 2 Gigabit Ethernet/IEEE 802. 3 interface(s) 63488K bytes of flash-simulated non-volatile configuration memory. Ba
11、se ethernet MAC Address : 0001.42AD.CAAC Motherboard assembly number : 73-9832-06 Power supply part number : 341-0097-02 Motherboard serial number : FOC103248MJ Power supply serial number : DCA102133JA Model revision number : B0 Motherboard revision number : C0 Model number : WS-C2960-24TT System se
12、rial number : FOC1033Z1EY Top Assembly Part Number : 800-26671-02 Top Assembly Revision Number : B0 Version ID : V02 CLEI Code Number : COM3K00BRA Hardware Board Revision Number : 0x01 Switch Ports Model SW Version SW Image - - - - - * 1 26 WS-C2960-24TT 12.2 C2960-LANBASE-M Cisco IOS Software, C296
13、0 Software (C2960-LANBASE-M), Version 12.2(25)FX, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2022 by Cisco Systems, Inc. Compiled Wed 12-Oct-05 22:05 by pt_team Press RETURN to get started! %LINK-5-CHANGED: Interface Vlan1, changed state to up %LINK-5-CHANGED: Interface Vlan1, changed state to admini
14、stratively down %SYS-5-CONFIG_I: Configured from console by console %LINK-5-CHANGED: Interface FastEthernet0/1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up %LINK-5-CHANGED: Interface FastEthernet0/2, changed state to up %LINEPROTO-5-UPDOWN:
