三层交换机配置
配置目的，财务vlan4出来可单方面访问vlan2,vlan3,而vlan2,3,不能访问vlan4.vlan2和vlan3可互访。
3560配置
Switch>enable
Switch#config
Switch(config)#hostname jiayi
Jiayi(config)#enable password jia@yi2017
Jiayi(config)#enable secret jy@888888
Jiayi(config)#exit
Jiayi#vlan database
Jiayi(vlan)#vtp domain jiayi
Jiayi(vlan)#vtp server
Jiayi(vlan)#exit
Jiayi#config
Jiayi(config)#interface vlan 1
Jiayi(config-if)#shutdown
Jiayi(config-if)#exit
Jiayi(config)#vlan 2
Jiayi(config-if)#name bangong
Jiayi(config-if)#exit
Jiayi(config)#vlan 3
Jiayi(config-if)#name shichang
Jiayi(config-if)#exit
Jiayi(config)#vlan 4
Jiayi(config-if)#name caiwu
Jiayi(config-if)#exit
Jiayi(config)interface vlan 2
Jiayi(config-if)#ip address 192.168.2.1 255.255.255.0
Jiayi(config-if)#no shutdown
Jiayi(config-if)#exit
Jiayi(config)interface vlan 3
Jiayi(config-if)#ip address 192.168.3.1 255.255.255.0
Jiayi(config-if)#no shutdown
Jiayi(config-if)#exit
Jiayi(config)interface vlan 4
Jiayi(config-if)#ip address 192.168.4.1 255.255.255.0
Jiayi(config-if)#no shutdown
Jiayi(config-if)#exit
Jiayi(config)#access-list 102 deny ip 192.168.2.0 0.0.0.255
Jiayi(config)#access-list 102 permit ip any any
Jiayi(config)#access-list 103 deny ip 192.168.3.0 0.0.0.255
Jiayi(config)#access-list 103 permit ip any any
Jiayi(config)#interface vlan 2
Jiayi(config-if)#ip access-group 102 in
Jiayi(config-if)#exit
0.0.0.255 0.0.0.255 192.168.4.0 192.168.4.0
Jiayi(config)#interface vlan 3
Jiayi(config-if)#ip access-group 103 in
Jiayi(config-if)#exit
Jiayi(config)#interface g0/1
Jiayi(config-if)#switchport trunk encapsulation dot1q
Jiayi(config-if)#switchport mode trunk
Jiayi(config-if)#switchport trunk allowed vlan all
Jiayi(config-if)#no shutdown
Jiayi(config-if)#exit
Jiayi(config)#interface range f0/1-6
Jiayi(config-if)#switchport mode access
Jiayi(config-if)#switchport access vlan 2
Jiayi(config-if)#no shutdown
Jiayi(config-if)#exit
Jiayi(config)#interface range f0/7-12
Jiayi(config-if)#switchport mode access
Jiayi(config-if)#switchport access vlan 3
Jiayi(config-if)#no shutdown
Jiayi(config-if)#exit
Jiayi(config)#interface range f0/13-18
Jiayi(config-if)#switchport mode access
Jiayi(config-if)#switchport access vlan 4
Jiayi(config-if)#no shutdown
Jiayi(config-if)#exit
Jiayi(config)#ip routing
Jiayi(config)#exit
Jiayi#copy run start
2960配置
Switch>enable
Switch#config
Switch(config)#hostname jiayi1
Jiayi1(config)#enable password jia@yi2017
Jiayi1(config)#enable secret jy@888888
Jiayi1(config)#exit
Jiayi1#vlan database
Jiayi1(vlan)#vtp domain jiayi1
Jiayi1(vlan)#vtp client
Jiayi1(vlan)#exit
Jiayi1#config
Jiayi1(config)#interface f0/1
Jiayi(config-if)#switchport mode trunk
Jiayi(config-if)#switchport trunk allowed vlan all
Jiayi1(config-if)#no shutdown
Jiayi1(config-if)#exit
Jiayi1(config)#interface range f0/2-7
Jiayi1(config-if)#switchport mode access
Jiayi1(config-if)#switchport access vlan 2
Jiayi1(config-if)#no shutdown
Jiayi1(config-if)#exit
Jiayi1(config)#interface range f0/8-13
Jiayi1(config-if)#switchport mode access
Jiayi1(config-if)#switchport access vlan 3
Jiayi1(config-if)#no shutdown
Jiayi1(config-if)#exit
Jiayi1(config)#interface range f0/14-19
Jiayi1(config-if)#switchport mode access
Jiayi1(config-if)#switchport access vlan 4
Jiayi1(config-if)#no shutdown
Jiayi1(config-if)#end
Jiayi#copy run start
