sw1 配置

switch>enable
switch#configure terminal
switch(config)#hostname sw1
sw1(config)#line vty 0 4
sw1(config-line)#login
sw1(config-line)#password cisco
sw1(config)#vtp domain cisco
sw1(config)#vtp mode client
sw1(config)#vtp password cisco
sw1(config)#interface fastethernet 0/1
sw1(config-if)#switchport mode access
sw1(config-if)#switchport access vlan 2
sw1(config-if)#interface fastethernet 0/2
sw1(config-if)#switchport mode access
sw1(config-if)#switchport access vlan 2
sw1(config-if)#interface fasthernet 0/12
sw1(config-if)#switchport mode trunk
sw1(config-if)#interface vlan 1
sw1(config-if)#ip address 192.168.1.1 255.255.255.0
sw1(config-if)#no shutdown
sw1(config-if)#end
sw1#

sw2 配置

switch>enable
switch#configure terminal
switch(config)#hostname sw2
sw2(config)#line vty 0 4
sw2(config-line)#login
sw2(config-line)#password cisco
sw2(config)#vtp domain cisco
sw2(config)#vtp mode client
sw2(config)#vtp password cisco
sw2(config)#interface fastethernet 0/1
sw2(config-if)#switchport mode access
sw2(config-if)#switchport access vlan 3
sw2(config-if)#interface fastethernet 0/2
sw2(config-if)#switchport mode access
sw2(config-if)#switchport access vlan 3
sw2(config-if)#interface fasthernet 0/12
sw2(config-if)#switchport mode trunk
sw2(config-if)#interface vlan 1
sw2(config-if)#ip address 192.168.1.2 255.255.255.0
sw2(config-if)#no shutdown
sw2(config-if)#end
sw2#

sw3 配置

switch>enable
switch#configure terminal
switch(config)#hostname sw3
sw3(config)#line vty 0 4
sw3(config-line)#login
sw3(config-line)#password cisco
sw3(config)#vtp domain cisco
sw3(config)#vtp mode client
sw3(config)#vtp password cisco
sw3(config)#interface fastethernet 0/1
sw3(config-if)#switchport mode access
sw3(config-if)#switchport access vlan 4
sw3(config-if)#interface fastethernet 0/2
sw3(config-if)#switchport mode access
sw3(config-if)#switchport access vlan 4
sw3(config-if)#interface fasthernet 0/12
sw3(config-if)#switchport mode trunk
sw3(config-if)#interface vlan 1
sw3(config-if)#ip address 192.168.1.3 255.255.255.0
sw3(config-if)#no shutdown
sw3(config-if)#end
sw3#

3550 配置

switch>enable
switch#configure terminal
swtich(config)#hostname 3550
3550(config)#line vty 0 4
3550(config-line)#login
3550(config-line)#password cisco
3550(config-if)#interface vlan 1
3550(config-if)#ip address 192.168.1.4 255.255.255.0
3550(config-if)#no shutdown
3550(config-if)#exit
3550(config)#vtp domain cisco
3550(config)#vtp mode server
3550(config)#vtp password cisco
3550(config)#exit
3550#vlan database
3550(vlan)#vlan 1 name managment
3550(vlan)#vlan 2 name account
3550(vlan)#vlan 3 name sales
3550(vlan)#vlan 4 name boss
3550(vlan)#exit
3550#configure terminal
3550(config)#interface fastethernet0/1
3550(config)#switchport mode turnk
3550(config-if)#switchport trunk encapsulation dot1q
3550(config-if)#interface  fastethernet 0/2
3550(config)#switchport mode turnk
3550(config-if)#switchport trunk encapsulation dot1q
3550(config-if)#interface fastethernet 0/3
3550(config-if)#switchport trunk encapsulation dot1q
3550(config)#switchport mode turnk
3550(config-if)#interface vlan 2
3550(config-if)#ip address 192.168.2.254 255.255.255.0
3550(config-if)#no shutdown
3550(config-if)#interface vlan 3
3550(config-if)#ip address 192.168.3.254 255.255.255.0
3550(config-if)#no shutdown
3550(config-if)#interface vlan 4
3550(config-if)#ip address 192.168.4.254 255.255.255.0
3550(config-if)#no shutdown
3550(config-if)#exit
3550(config)#ip routing
3550(config)#access-list 101 permit ip 192.168.2.0 0.0.0.255 192.168.4.0 0.0.0.255
3550(config)#access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
3550(config)#access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.4.0 0.0.0.255
3550(config)#vlan access-map cisco 10
3550(config-access-map)#match ip address 101
3550(config-access-map)#action drop
3550(config-access-map)#exit
3550(config)#vlan access-map cisco 20
3550(config-access-map)#action forward
3550(config-access-map)#exit
3550(config)#vlan filter cisco vlan-list 2 - 4

vlan 2 内主机配置
ip address 192.168.2.1 - 192.168.2.253
gateway 192.168.2.254

vlan 3 内主机配置
ip address 192.168.3.1 - 192.168.3.253
gateway 192.168.3.254

vlan 4 内主机配置
ip address 192.168.4.1 - 192.168.4.253
gateway 192.168.4.254

目的 boss 可以 访问所有计算机. account 只能访问 sales . sales 谁都不能访问.

本文出自 “人类一思考，上帝都发笑” 博客，转载请与作者联系！