实施步骤：
1：创建Vlan100 Vlan200
2：把端口加入到对应Vlan
3：设置Vlan IP与掩码
4：将交换机互联端口改为中继
5：为终端设置IP
S1命令：
Sy
Vlan 100
Vlan 200
Quit
In g 1/0/1
Port acc vlan 100
Quit
In g 1/0/2
Port acc vlan 200
Quit
In vlan 100
Ip add 192.168.100.1 255.255.255.0
Quit
In vlan 200
Ip add 192.168.200.1 255.255.255.0
quit
in g 1/0/3
port link-t t
port t per vlan 100 200
S2命令：
Sy
Vlan 100
Vlan 200
Quit
In g 1/0/1
Port acc vlan 100
Quit
In g 1/0/2
Port acc vlan 200
Quit
In vlan 100
Ip add 192.168.100.2 255.255.255.0
Quit
In vlan 200
Ip add 192.168.200.2 255.255.255.0
quit
in g 1/0/3
port link-t t
port t per vlan 100 200
![]
S1截图
S2截图
终端IP设置：
PC_3
IP:192.168.100.3
掩码:255.255.255.0
网关：192.168.100.1
PC_4
IP:192.168.200.3
掩码:255.255.255.0
网关：192.168.200.1
PC_5
IP:192.168.100.4
掩码:255.255.255.0
网关：192.168.100.2
PC_6
IP:192.168.200.4
掩码:255.255.255.0
网关：192.168.200.2
实验结果:
Pc_3可以访问pc_5 不能访问pc_6
Pc_4可以访问pc_6 不能访问pc_5
原文：https://blog.51cto.com/14224375/2368098