多層交換機(jī)VLAN的劃分和VLAN間路由

1、實(shí)訓(xùn)二實(shí)訓(xùn)目的多層交換機(jī)VLAN的劃分和VLA N間路由1 了解VLAN原理；、學(xué)會使用各種多層交換設(shè)備進(jìn)行VLAN的劃分;2理解VLAN Z間路由的原理和實(shí)現(xiàn)方法；3應(yīng)用環(huán)境、軟件實(shí)訓(xùn)室的IP地址段是192.168. 10. 0/24,多媒體實(shí)訓(xùn)室的為了 IP地址段是192.168.20.0/24, 保證它們之間的數(shù)據(jù)互不干擾，也不影響各自的通信效率， 我們劃分了 VLAN,使兩個實(shí)訓(xùn)室屬于不同的VLAN。兩個實(shí)訓(xùn)室有時候也需要相互通信，此時就要利用三層交換機(jī)劃分VLANo實(shí)訓(xùn)設(shè)備1. DCRS-5650-52CT 交換機(jī) 1 臺2. PC機(jī)2臺3. Con sole 線 1 根4- 直通網(wǎng)

2、線若干四 實(shí)訓(xùn)拓?fù)涫褂靡慌_交換機(jī)和兩臺PC機(jī)，還將其中PC2作為控制臺終端，使用Con sole 口配置方式；使用兩根網(wǎng)線分別將PC1和PC2連接到交換機(jī)的RJ-45接口上。五、實(shí)訓(xùn)要求VLAN100 和使得VLAN100的成員能夠互相訪問,在交換機(jī)上劃分兩個基于端口的VLAN ： VLAN100, VLAN200 。VLAN端口成員1000/0/10/0/122000/0/130/0/24VLAN200的成員能夠互相訪問;VLAN200成員之間不能互相訪問。PC1和PC2的網(wǎng)絡(luò)設(shè)置為：配置I設(shè)備端口IP網(wǎng)關(guān)1Mask交換機(jī)A192. 168. 1. 1無255. 255. 255. 0Via

3、 nlOO無無255. 255. 255. 0Via n200無無255. 255. 255. 0PCIri2192. 168. 1. 101無255. 255. 255. 0PC21324192. 168. 1. 102無255. 255. 255. 0配置II設(shè)備端1丨IP網(wǎng)關(guān)1Mask交換機(jī)A192. 168. 1. 1無255. 255. 255. 0Via nlOO192. 168. 10. 1無255. 255. 255. 0Via n200192. 168. 20. 1無255. 255. 255. 0PCIri2192. 168. 10. 11192. 168. 10. 125

4、5. 255. 255. 0PC21324192. 168.20. 11192. 168. 20. 1255. 255. 255. 0各設(shè)備的IP地址首先使用配置I地址，使用pel ping pc2 ,應(yīng)該不通；再按照配置II地址，并在交換機(jī)上配置an接口 IP地址，使用pel ping pc2,則通，該通信屬于vlan間通信，要經(jīng)過三層設(shè)備的路由。若實(shí)訓(xùn)結(jié)果和理論相符，則本實(shí)訓(xùn)完成。六、實(shí)訓(xùn)步驟第一步：交換機(jī)恢復(fù)出廠設(shè)置switchtiset defaultswitchftwriteswitchftreload第二步：給交換機(jī)設(shè)置IP地址即管理IPoswitchftc onfigswitch

5、(C on fig)# in terface via n 1swit ch (C on f ig-If-Vla nl)#ip address 192. 168. 1. 1 255.255.255.0 switch (Co nf ig-lf-Vla nl) # no shutdow nswitch(C on fig-If-Vla nl)#exitswitch(C on fig)#exit第二步：創(chuàng)建 vlanlOO 和 vlan200switch (Co nf ig) ttswitch(C on fig)#vla n 100switch(Co nfig-Vla nlOO)#exitswitch(

6、C on fig)#vla n 200switch(Co nfig-Vla n200)#exitswitch(C on fig)#驗(yàn)證配置：switch#show vlanVLAN Name Type Media Ports 1 default Static ENET Ethernet0/0/l Ethernet0/0/2EthernetO/0/3EthernetO/0/4EthernetO/0/5EthernetO/0/6Ethernet0/0/7Ethernet0/0/8EthernetO/0/9EthernetO/0/10Ethernet0/0/llEthernetO/0/12Ether

7、netO/O/13EthernetO/0/14EthernetO/0/15EthernetO/0/16Ethernet0/0/45 EthernetO/0/46EthernetO/0/47Ethernet0/0/48Ethernet0/0/49Ethernet0/0/50Ethernet0/0/51Ethernet0/0/52100 VLAN0100Static ENETStatic ENET200 VLAN0200 第四步：給vlanlOO和vlan200添加端口。switch (Config) ttvlan 100 ! 進(jìn)入 vlan 100 swi tch (Conf i g-Vlanl

8、OO) #sw it chport int erface etherne t 0/0/1-12 Set the port Ethernet0/0/l access vlan 100 successfully Set the port EthernetO, 0/2 access vlan 100 successfully Set the port EthernetO, 0/3 access vlan 100 successfully Set the port Ethernet0/0/4 accessvlan 100 successfully Settheport EthernetO, 0/5 a

9、ccessvlan 100successfully Set the portEthernetO. 0/6 accessvlan100successfully Set theportEthernetO/0/7 access vlan100 successfully Setthe portEthernet0/0/8 accessvlan100successfully Set the portEthernet0/0/9 accessvlan100successfully Set theportEthernetO/0/10 access vlan 100 successfully Set the po

10、rt Ethernet0/0/11 access vlan 100 successfully Set the port EthernetO. 0/12 access vlan 100 successfully switch(Config-VI an 100) ttexitswitch (Config) ttvlan 200 ! 進(jìn)入 vlan 200 swi tch (Conf ig-Vlan200) #sw it chport interface ethernet 0/0/13-24 Set the port Ethernet0/0/13 access vlan 200 successful

11、ly Set the port EthernetO/O/14 access vlan 200 successfully Set the port EthernetO/O/15 access vlan 200 successfully Set the port EthernetO/O/16 access vlan 200 successfully Set the port EthernetO/0/17 access vlan 200 successfully Set the port Ethernet0/0/18 access vlan 200 successfully Set the port

12、 Ethernet0/0/19 access vlan 200 successfully Set the port EthernetO/0/20 access vlan 200 successfully Set the port EthernetO/O/21 access vlan 200 successfully Set the port Ethernet0/0/22 access vlan 200 successfully Set the portEthernetO/O/23 access vlan 200 successfullySet the port EthernetO/0/24 a

13、ccess vlan 200 successfully switch(Co nfig-Vla n200)#exit驗(yàn)證配置：switch#show vlan switch#VLAN NameType Media Ports1 default Static ENET Ethernet0/0/25EthernetO/O/26EthernetO/0/27EthernetO/0/28100 VLAN0100 Static ENET Ethernet0/0/lEthernet0/0/2Ethernet0/0/3Ethernet0/0/4Ethernet0/0/5Ethernet0/0/6Ethernet

14、0/0/7Ethernet0/0/8Ethernet0/0/9Ethernet0/0/10Ethernet0/0/llEthernet0/0/12200 VLAN0200 Static ENET Ethernet0/0/13EthernetO/0/14EthernetO/O/15Ethernet0/0/16Ethernet0/0/17Ethernet0/0/18Ethernet0/0/19EthernetO/0/20Ethernet0/0/21EthernetO/0/22EthernetO/0/23EthernetO/0/24第五步：驗(yàn)證實(shí)訓(xùn)。配置I的地址PC1位置PC2 付 W動作結(jié)果0/0

15、/1-0/0/12 端口0/0/13-0/0/24 端口PCI ping PC2不通第六步：添加vlan地址。switch(Co nfig)#i nterface vlan 100switch(Co nfig-lf-via nl00)#%Ja n 01 00:00:59 2006 %LINK-5-CHANGED: In terfaceVia nlOO, changed state to UPswitch (Co nfig-lf-via nl00)#ip address 192. 168. 10. 1 255.255.255.0switch(Co nfig-lf-Vla nlOO)# no sh

16、utswitch(Co nfig-lf-Vla nl00)#exitswitch(Co nfig)#i nterface vlan 200switch(Co nfig-lf-via n200)#%Ja n 01 00:00:59 2006 %LINK-5-CHANGED: In terfaceVia nlOO, changed state to UPswitch(C on fig-lf-via n200)#ip address 192. 168. 20. 1 255. 255. 255. 0switch(Co nfig-lf-Vla n200)# no shutswitch(Co nfig-l

17、f-Vla n200)#exit switch(Co nfig)ft按要求連接PCI與PC2,驗(yàn)證配置：switchttshow ip routeCodes: K - kernel, C - conn ected, S - static, R - RIP, B - BGP0 - OSPF, 1A - OSPF in ter areaN1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2El - OSPF external type 1, E2 - OSPF external type 2i - IS-IS, LI - IS-

18、IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area* - can didate default127 0. 0. 0/8 is directly conn ected, Loo pback 192 168 10.0/24 is directly conn ected, Via nlOO 192. 168. 20. 0/24 is directly conn ected, Via n200switch#第七步：驗(yàn)證實(shí)訓(xùn)。配置II的地址七、注意事項(xiàng)和排錯和二層交換機(jī)不同，三層交換機(jī)可以在多個VLAN接口上配置IP地址。PCI位置PC2 付 W

19、動作結(jié)果0/0/1-0/0/12 端口0/0/13-0/0/24 端口PCI ping PC2通八、配置序列switchftshow runhost name DCRS-5650-52CTvlan 1vlan 100vlan 200In terface EthernetO/0/1switch port access vlan 100In terface EthernetO/0/2switch port access vlan 100In terface EthernetO/0/3switch port access vlan 100In terface Ethernet0/0/4switch

20、port access vlan 100Interface Ethernet0/0/5switchport access vlan 100Interface Ethernet0/0/6switchport access vlan 100Interface EthernetO/O/7switchport access vlan 100Interface Ethernet0/0/8switchport access vlan 100Interface Ethernet0/0/9switchport access vlan 100Interface EthernetO/0/10switchport

21、access vlan 100Interface Ethernet0/0/llswitchport access vlan 100Interface Ethernet0/0/12switchport access vlan 100Interface Ethernet0/0/13switchport access vlan 200Interface Ethernet0/0/14switchport access vlan 200Interface Ethernet.0/0/15switchport access vlan 200Interface Ethernet0/0/16switchport

22、 access vlan 200Interface Ethernet0/0/17switchport access vlan 200Interface EthernetO/0/18switchport access vlan 200Interface EthernetO/0/19switchport access vlan 200Interface EthernetO/0/20switchport access vlan 200Interface Ethernet0/0/21switchport access vlan 200Interface Ethernet0/0/22 switchpor

23、t access vlan 200Interface Ethernet0/0/23switchport access vlan 200Interface Ethernet0/0/24switchport access vlan 200InterfaceEthernet0/0/25InterfaceEthernetO/0/26InterfaceEthernetO/0/27Interface EthernetO/0/28interface Vlanlip address 192 168 1.1 255 255 255 0interface VlanlOOip address 192 168 10.1 255 255 255 0interface Vlan200ip address 192 168.20.1 255 255 255 0no loginendswitch#九、共同思考如果第二次配置IP地址的時候，沒有給PC機(jī)配置網(wǎng)關(guān)，請問還會通信么？為什么？。十、課后練習(xí)請給交換機(jī)劃分多個Vlan ,驗(yàn)證vlan實(shí)訓(xùn)。相關(guān)配置命令詳解1.創(chuàng)建或刪除VLAN命令解釋