二層交換機(jī)的兩個(gè)vlan互相訪問(wèn)

1、LaprtW-PTLsptap-P'lLI pCCf FTLipt0)2LaplODPTLJpt0t>3假如A交換機(jī)vian100,vlan200,B 交換機(jī)vian300,vlan400,怎樣配置可以讓vlan300 不能訪問(wèn) vian100?vlan200 可以訪問(wèn) vian400?有多種方法可以實(shí)現(xiàn)：比如PVLAN , ACL等。按照你的拓?fù)?，我用PT模擬了一種做法:單臂路由+ACL，可以參考一下，有圖，有配置： JT,r281t<舟 'Si鼻衆(zhòng)：直訕 羽130fD/Ll-lt V1ZD0 i« i«e i iriziOA2-3 kluJO

2、O1 囂 IM 3. 11-12fo/n-12 vitftioo160 E. 11-12交換機(jī)A:in terface FastEthernetO/2 switchport access vlan 100 switchport mode access !in terface FastEthernet0/3switchport access vlan 100 switchport mode access !in terface FastEthernetO/11 switchport access vlan 200 switchport mode access !in terface FastEt

3、hernet0/12 switchport access vlan 200 switchport mode accessin terface FastEthernetO/1switchport trunk allowed vlan 100,200 switchport mode trunk交換機(jī)B:in terface FastEthernet0/2switchport access vlan 300switchport mode access!in terface FastEthernet0/3switchport access vlan 300switchport mode access!

4、in terface FastEthernet0/11switchport access vlan 400switchport mode access!in terface FastEthernet0/12switchport access vlan 400switchport mode access!in terface FastEthernet0/1switchport trunk allowed vlan 300,400switchport mode trunkRouter:in terface FastEthernet0/0.1en capsulation dot1Q 100ip ad

5、dress !in terface FastEthernet0/0.2en capsulation dot1Q 200ip address 192.16821 !in terface FastEthernet0/1.1en capsulation dot1Q 400ip address 192.16841 in terface FastEthernetO/1.2encapsulation dot1Q 300ip access-group 1 out!access-list 1 permi

6、t any60 Boot Loader (C2960-HBOOT-M) Version 12.2(25r)FX, RELEASE SOFTWARE (fc4) Cisco WS-C2960-24TT (RC32300) processor (revisio n C0) with 21039K bytes of memory. 2960-24TT starti ng.Xmodem is available.Initializing Flash.flashfs0: 1 files, 0 directoriesflashfs0: 0 orphaned files, 0 orphaned direct

7、oriesflashfs0: Total bytes: 64016384flashfs0: Bytes used: 4414921flashfs0: Bytes available: 59601463flashfs0: flashfs fsck took 1 sec on ds.do ne In itializ ing Flash.Boot Sector (bs:) in stalled, fsid: 3Parameter Block (pb:) in stalled, fsid: 4Loadi ng "flash:/c2960-la nbase-m z. 122-25.FX.bi

8、n".# OKRestricted Rights Lege ndUse, duplicati on, or disclosure by the Government issubject to restrict ions as set forth in subparagraph(c) of the Commercial Computer Software - RestrictedRights clause at FAR sec. 52.227-19 and subparagraph(c) (1) (ii) of the Rights in Tech ni cal Data and Co

9、mputerSoftware clause at DFARS sec. 252.227-7013.cisco Systems, Inc.170 West Tasman DriveSan Jose, California 95134-1706Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(25)FX, RELEASE SOFTWARE (fc1)Copyright (c) 1986-2005 by Cisco Systems, Inc.Compiled Wed 12-Oct-05 22:05 by pt_tea

10、mImage text-base: 0x80008098, data-base: 0x814129C4Cisco WS-C2960-24TT (RC32300) processor (revision C0) with 21039K bytes of memory.24 FastEthernet/IEEE 802.3 interface(s)2 Gigabit Ethernet/IEEE 802.3 interface(s)63488K bytes of flash-simulated non-volatile configuration memoryBase ethernet MAC Add

11、ress Motherboard assembly number Power supply part number Motherboard serial number Power supply serial number Model revision number Motherboard revision number Model number System serial number Top Assembly Part Number Top Assembly Revision Number Version ID CLEI Code Number: : 73-9832-06: 341-0097

12、-02: FOC103248MJ: DCA102133JA: B0: C0: WS-C2960-24TT: FOC1033Z1EY: 800-26671-02: B0: V02: COM3K00BRA: 0x01Switch Ports ModelSW VersionSW Image1 26 WS-C2960-24TT 12.2C2960-LANBASE-MHardware Board Revision NumberCisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(25)FX, RELEASE SOFTWARE

13、 (fc1)Copyright (c) 1986-2005 by Cisco Systems, Inc.Compiled Wed 12-Oct-05 22:05 by pt_teamPress RETURN to get started!%LINK-5-CHANGED: Interface Vlan1, changed state to up%LINK-5-CHANGED: Interface Vlan1, changed state to administratively down%SYS-5-CONFIG_I: Configured from console by console%LINK

14、-5-CHANGED: Interface FastEthernet0/1, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up%LINK-5-CHANGED: Interface FastEthernet0/2, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to up%LINK-5-CHA

15、NGED: Interface FastEthernet0/12, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/12, changed state to up%LINK-5-CHANGED: Interface FastEthernet0/13, changed state to up%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/13, changed state to upSwitch>enableSwitch#configure terminalEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#interface FastE