實驗10三層交換機實現(xiàn)不同vlan間通信

1、案例10 利用三層交換機實現(xiàn)不同vlan間通信【背景描述】某企業(yè)有兩個主要部門：銷售部和技術(shù)部，其中銷售部的個人計算機系統(tǒng)分散連接在兩臺交換機上，他們之間需要相互進行通信，銷售部和技術(shù)部也需要進行相互通信，現(xiàn)要在交換機上做適當配置來實現(xiàn)這一目標。【實現(xiàn)功能】 使在同一VLAN里的計算機系統(tǒng)能跨交換機進行通信，而在不同VLAN里的計算機系統(tǒng)也能進行相互通信?！臼褂迷O(shè)備】設(shè)備類型設(shè)備名稱設(shè)備數(shù)量交換機Switch01路由器三層交換機Switch11雙絞線4計算機pc3【實驗拓撲】表1 設(shè)備基本信息設(shè)備名端口及所屬VLANIP信息IP地址網(wǎng)關(guān)Switch1 3560Fa 0/24 默認VLANSwi

2、tch0 2960Fa 0/24 默認VLANPC0Fa 0/5 VLAN 10PC1Fa 0/15 VLAN 20PC2Fa 0/5 VLAN 10【實現(xiàn)步驟】步驟1.在交換機Switch1上創(chuàng)建vlan 10 ，并將0/5端口劃分到vlan 10 中.Switch1>enableSwitch1#configure terminalSwitch1(config)#vlan 10Switch1(config-vlan)#name salesSwitch1(config-vlan)#exitSwitch1(config)#interface fastEthernet 0/5Switch1(

3、config-if)#switchport access vlan 10Switch1(config-if)#exitSwitch1(config)#vlan 20Switch1(config-vlan)#name technicalSwitch1(config-vlan)#exitSwitch1(config)#interface vlan 20Switch1(config-if)#exitSwitch1(config)#interface fastEthernet 0/15Switch1(config-if)#switchport access vlan 20Switch1(config-

4、if)#exit步驟2.把交換機Swich0和Swich1相連的端口定義為tag vlan模式SwitchA(config)#interface fastEthernet 0/24SwitchA(config-if)#switchport mode trunk!將F0/24端口定義為tag vlan模式驗證測試:驗證F0/24端口已被設(shè)為tag vlan模式SwitchA#show interfaces fastEthernet 0/24 switchportInterface Switchport Mode Access Native Protected VLAN lists- - - -

5、- - -Fa0/24 Enabled Trunk 1 1 Disabled All步驟3.在交換機Swich1上創(chuàng)建vlan 10,并將0/5端口劃分到vlan 10中.SwichB(config)#vlan 10SwichB(config-vlan)#name salseSwichB(config-vlan)#exitSwichB(config)#interface fastEthernet 0/5SwichB(config-if)#switchport access vlan 10步驟4.把交換機Swich0和Swich1相連的端口定義為tag vlan模式SwichB(config)#

6、interface fastEthernet 0/24SwichB(config-if)#switchport mode trunk驗證測試:驗證F0/24端口已被設(shè)置為tag vlan模式SwichB#show interfaces fastEthernet 0/24 switchportInterface Switchport Mode Access Native Protected VLAN lists- - - - - - -Fa0/24 Enabled Trunk 1 1 Disabled All步驟5.驗證PC0與PC2能相互通信，但PC0和PC1不能相互通信。 !在PC1的命令行

7、方式下能ping通PC3Pinging 192.168.10.30 with 32 bytes of data:Reply from 192.168.10.30: bytes=32 time<1ms TTL=128Reply from 192.168.10.30: bytes=32 time<1ms TTL=128Reply from 192.168.10.30: bytes=32 time<1ms TTL=128Reply from 192.168.10.30: bytes=32 time<1ms TTL=128Ping statistics for 192.168.

8、10.30: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms !在PC1的命令行方式下驗證不能ping通PC2Pinging 192.168.10.30 with 32 bytes of data:Request timed out.Request timed out.Request timed out.Request timed out.Ping stati

9、stics for 192.168.10.30: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),步驟6.設(shè)置三層交換機VLAN間通信Switch1(config)#interface vlan 10 !創(chuàng)建虛擬接口vlan 10Switch1Switch1(config-if)#no shutdown !開啟端口2009-05-23 16:42:39 5-CONFIG:Configured from outbandSwitch1(config-if)#exit2009-05-23 16:42:42 5-CONFIG:Configur

10、ed from outbandSwitch1(config)#interface vlan 20 !創(chuàng)建虛擬接口vlan 202009-05-23 16:42:46 5-CONFIG:Configured from outbandSwitch12009-05-23 16:43:06 5-CONFIG:Configured from outbandSwitch1(config-if)#no shutdown !開啟端口2009-05-23 16:43:09 5-CONFIG:Configured from outbandSwitch1(config-if)#exit2009-05-23 16:4

11、3:15 5-CONFIG:Configured from outband驗證測試:查看S3550路由器的狀態(tài)Switch1#show ip interface !查看IP接口的狀態(tài)Interface : VL10Description : Vlan 10OperStatus : upManagementStatus : EnabledInterface : VL20Description : Vlan 20OperStatus : upManagementStatus : Enabled測試結(jié)果:不同vlan間的主機可以相互ping通參考配置Swich1#show running-confi

12、g !顯示交換機Swich1的全部配置System software version : 2.41(4) Build Nov 23 2005 ReleaseBuilding configuration.Current configuration : 413 bytes!version 1.0!hostname Swich1vlan 1!vlan 10 name sales!vlan 20 name technical!interface FastEthernet 0/5 switchport access vlan 10!interface FastEthernet 0/15 switchpo

13、rt access vlan 20!interface FastEthernet 0/24 switchport mode trunk!interface Vlan 10!interface Vlan 20!endSwich0#show running-config !顯示交換機Swich0的全部配置System software version : 1.61(2) Build Aug 31 2005 ReleaseBuilding configuration.Current configuration : 194 bytesversion 1.0!hostname Swich0vlan 1!vlan 10 name salse!interface fastEthernet 0/5 switchport access vlan 10!interface fastEthernet 0/24 switchport mode trunk!End驗證：PC0 ping PC1【注意事項】1.兩臺交換機之間相連的端口應(yīng)該設(shè)置為tag vlan模式2.需要設(shè)置PC的網(wǎng)關(guān)若拓撲結(jié)構(gòu)改成如下：表2 設(shè)備基