實驗拓撲
實驗需求：
vlan10可以和vlan20、vlan30、vlan40分別通信，
但其他vlan之間不可通信；
實驗規劃：
CLIENT1屬於vlan10、CLIENT2屬於vlan20、
CLIENT3屬於vlan30、CLIENT4屬於vlan40；
注：hybrid vlan即可作訪問口也可作中繼口；
實驗步驟：
1、配製IP
爲客戶機配
爲AR1配
<Huawei>system-view
[Huawei]sysname AR1
[AR1]interface g0/0/2
[AR1-GigabitEthernet0/0/2]ip address 192.168.1.1 24
[AR1-GigabitEthernet0/0/2]undo shutdown
2、劃分VLAN
<Huawei> system view
[Huawei]sysname SW1
[SW1]vlan 10
[SW1-vlan10]vlan 20
[SW1-vlan20]vlan 30
[SW1-vlan30]vlan 40
[SW1-vlan40]quit
<Huawei>system-view
[Huawei]sysname SW2
[SW2]vlan 10
[SW2-vlan10]vlan 20
[SW2-vlan20]vlan 30
[SW2-vlan30]vlan 40
[SW2-vlan40]quit
3、配置SW1
<Huawei> system view
[SW1]vlan 10
[SW1]interface e0/0/1
[SW1-Ethernet0/0/1]port hybrid pvid vlan 10 //設置接口e0/0/1的缺省VLAN ID
[SW1-Ethernet0/0/1]port hybrid untagged vlan 10 //VLAN10的幀以Untagged（脫掉標籤）方式從接口發送出去
[Huawei-Ethernet0/0/1]quit
[SW1]vlan 20
[SW1]interface e0/0/2
[SW1-Ethernet0/0/2]port hybrid pvid vlan 20
[Huawei-Ethernet0/0/2]port hybrid untagged vlan 20
[Huawei-Ethernet0/0/2]quit
4、配置SW2
[Huawei]interface e0/0/3
[Huawei-Ethernet0/0/3]port hybrid pvid vlan 30
[Huawei-Ethernet0/0/3]port hybrid untagged vlan 30
[Huawei-Ethernet0/0/3]quit
[Huawei]interface e0/0/4
[Huawei-Ethernet0/0/4]port hybrid pvid vlan 40
[Huawei-Ethernet0/0/4]port hybrid untagged vlan 40
[Huawei-Ethernet0/0/4]quit
確定不同VLAN 之間不能通信
以下實現VLAN10和VLAN20之間的互訪
5、配置SW1
[SW1]interface e0/0/1
[SW1-Ethernet0/0/1]port hybrid untagged vlan 20
[SW1-Ethernet0/0/1]quit
[SW1]interface e0/0/2
[SW1-Ethernet0/0/2]port hybrid untagged vlan 10
[SW1-Ethernet0/0/2]quit
驗證PC1與PC2之間通信：
以下實現VLAN10與VLAN30和VLAN40之間互訪
6、配置SW1開中繼口
[SW1]interface g0/0/1
[SW1-GigabitEthernet0/0/1]port hybrid tagged vlan 10 //允許VLAN10帶標籤通過接口g0/0/1
[SW1-GigabitEthernet0/0/1]port hybrid tagged vlan 30
[SW1-GigabitEthernet0/0/1]port hybrid tagged vlan 40
[SW1-GigabitEthernet0/0/1]quit
[SW1]interface g0/0/2
[SW1-GigabitEthernet0/0/2]port link-type trunk
[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan all//允許所有VLAN通過接口g0/0/2
[SW1-GigabitEthernet0/0/2]quit
7、配置SW2開中繼口
[SW2]interface g0/0/1
[SW2-GigabitEthernet0/0/1]port hybrid tagged vlan 10
[SW2-GigabitEthernet0/0/1]port hybrid tagged vlan 30
[SW2-GigabitEthernet0/0/1]port hybrid tagged vlan 40
[SW2-GigabitEthernet0/0/1]quit
8、配置SW1
[SW1]interface e0/0/1
[SW1-Ethernet0/0/1]port hybrid untagged vlan 30
[SW1-Ethernet0/0/1]port hybrid untagged vlan 40
[SW1-Ethernet0/0/1]quit
9、配置SW2
[SW2]interface e0/0/3
[SW2-Ethernet0/0/3]port hybrid untagged vlan 10 //VLAN10通過該接口時脫掉標籤
[SW2-Ethernet0/0/3]quit
[SW2]interface e0/0/4
[SW2-Ethernet0/0/4]port hybrid untagged vlan 10
[SW2-Ethernet0/0/4]quit
驗證VLAN10與VLAN30通信
驗證VLAN10與VLAN40通信
驗證VLAN20與VLAN30不能通信
驗證VLAN30與VLAN40不能通信
注：
1）二層網絡中不同VLAN之間通信，並且不利用單臂路由來VLAN轉換，必須脫掉VLAN標籤(tag）不然不識別；
2）Hybrid VLAN 即可以做訪問口也可做終繼口；
3）Display cu 查看配置的全部命令
end