基於IP地址劃分VLAN

實驗環境：
1、當檢測IP在192.168.10.0./24時，PC接入交換機時，將其劃分爲VLAN 10,且可以和VLAN 10的服務器通信
2、當檢測IP在192.168.20.0/24時，PC接入交換機時，將其劃分爲VLAN 20，且可以和VLAN 20的服務器通信

SW1

<Huawei>system-view     //進入全局配置模式
[Huawei]undo info-center enable     //關閉信息告警提示
[Huawei]sysname SW1     //改名
[SW1]VLAN batch 10 20     //創建VLAN10和VLAN20
[SW1]interface g0/0/1     //進入接口
[SW1-GigabitEthernet0/0/1]port link-type trunk     //配置爲trunk鏈路
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20     //允許VLAN10和VLAN20通過
[SW1-GigabitEthernet0/0/1]quit     //退出
[SW1]

SW2

<Huawei>system-view     //進入全局配置模式 
[Huawei]undo info-center enable     //關閉信息告警提示 	
[Huawei]sysname SW2     //改名
[SW2]vlan batch 10 20     //創建VLAN10和VLAN20
[SW2]interface g0/0/2     //進入接口
[SW2-GigabitEthernet0/0/2]port link-type access     //配置爲access鏈路 
[SW2-GigabitEthernet0/0/2]port default vlan 10     //允許VLAN10通過
[SW2-GigabitEthernet0/0/2]quit     //退出 
[SW2]interface g0/0/3     //進入接口
[SW2-GigabitEthernet0/0/3]port link-type access     //配置爲access鏈路 
[SW2-GigabitEthernet0/0/3]port default vlan 20     //允許VLAN20通過
[SW2-GigabitEthernet0/0/3]quit     //退出
[SW2]interface g0/0/1     //進入接口	
[SW2-GigabitEthernet0/0/1]port link-type trunk     //配置爲trunk鏈路 
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20     //允許VLAN10和VLAN20通過
[SW2-GigabitEthernet0/0/1]quit     //退出
[SW2]

SW1

[SW1]interface g0/0/2     //進入接口	
[SW1-GigabitEthernet0/0/2]port hybrid untagged vlan 10 20          //配置混合接口
[SW1-GigabitEthernet0/0/2]ip-subnet-vlan enable     //啓動基於IP地址學習VLAN
[SW1-GigabitEthernet0/0/2]quit     //退出
[SW1]vlan 10     /進入VLAN 10
[SW1-vlan10]ip-subnet-vlan ip 192.168.10.0 24     //綁定IP地址
[SW1-vlan10]quit     //退出
[SW1]vlan 20     //進入VLAN 20
[SW1-vlan20]ip-subnet-vlan ip 192.168.20.0 24     //綁定IP地址
[SW1-vlan20]quit     //退出
[SW1]

SW1

[SW1]dis ip-subnet-vlan vlan all     //查看IP地址對應的VLAN
 ----------------------------------------------------------------
 Vlan    Index   IpAddress           SubnetMask          Priority    
 ----------------------------------------------------------------
 10      1       192.168.10.0        255.255.255.0       0 
 20      1       192.168.20.0        255.255.255.0       0 
 ----------------------------------------------------------------
 ip-subnet-vlan count: 2  		 total count: 2 

[SW1]

PC1

PC>ping 192.168.10.10     //pingVLAN 10的計算機

Ping 192.168.10.10: 32 data bytes, Press Ctrl_C to break
From 192.168.10.10: bytes=32 seq=1 ttl=128 time=94 ms
From 192.168.10.10: bytes=32 seq=2 ttl=128 time=62 ms
From 192.168.10.10: bytes=32 seq=3 ttl=128 time=125 ms
From 192.168.10.10: bytes=32 seq=4 ttl=128 time=78 ms
From 192.168.10.10: bytes=32 seq=5 ttl=128 time=63 ms     //可以ping通

--- 192.168.10.10 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 62/84/125 ms

PC2

PC>ping 192.168.20.20     //pingVLAN 20的計算機

Ping 192.168.20.20: 32 data bytes, Press Ctrl_C to break
From 192.168.20.20: bytes=32 seq=1 ttl=128 time=78 ms
From 192.168.20.20: bytes=32 seq=2 ttl=128 time=63 ms
From 192.168.20.20: bytes=32 seq=3 ttl=128 time=78 ms
From 192.168.20.20: bytes=32 seq=4 ttl=128 time=78 ms
From 192.168.20.20: bytes=32 seq=5 ttl=128 time=62 ms     //可以ping通

--- 192.168.20.20 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 62/71/78 ms