HR部门市场部门可以访问 IT部门但HR部门不能访问市场部门各部门的PC 可以互访S1: vlan 10 vlan 20 vlan 30 int e0/0/1 port link-type hybrid port hybrid tagged vlan 10 20 30 int e0/0/2 port link-type hybrid port hybrid pvid vlan 20 port hybrid untagged vlan 20 30 int e0/0/3 port link-type hybrid port hybrid pvid vlan 10 port hybrid untagged vlan 10 30 int e0/0/4 port link-type hybrid port hybrid pvid vlan 30 port hybrid untagged vlan 10 20 30S2: vlan 10 vlan 20 vlan 30 int e0/0/1 port link-type hybrid port hybrid tagged vlan 10 20 30 int e0/0/2 port link-type hybrid port hybrid pvid vlan 20 port hybrid untagged vlan 20 30 int e0/0/3 port link-type hybrid port hybrid pvid vlan 10 port hybrid untagged vlan 10 30配置完成后PC 之间测试能否 ping 通S1 查看vlan 信息display vlan会发现有的接口是 UT 不打标签有的接口是TG 打标签