實驗3交換機劃分vlan配置

1、一、實驗目標 理解虛擬 LAN(VLAN)基本原理； 掌握一般交換機按端口劃分 VLAN的配置方法； 掌握Tag VLAN配置方法。二、實驗背景某一公司內財務部、銷售部的PC通過2臺交換機實現(xiàn)通信；要求財務部和銷售部內的PC可以互通，但為了數(shù)據(jù)安全起見，銷售部和財務部需要進行隔離，現(xiàn)要在交換機上做適當配置來實現(xiàn)這一目的。三、技術原理 VLAN是指在一個物理網(wǎng)段內，進行邏輯的劃分，劃分成若干個虛擬局域網(wǎng)。VLAN最大的特性是不受物理位置的限制，可以進行靈活的劃分。VLAN具備了一個物理網(wǎng)段所具備的特性。相同VLAN內的主機可以相互直接通信，不同VLAN間的主機之間互相訪問必須經(jīng)由路由設備進行轉發(fā)

2、。廣播數(shù)據(jù)包只可以在本VLAN內進行廣播，不能傳輸?shù)狡渌鸙LAN中。 Port VLAN是實現(xiàn)VLAN的方式之一，它利用交換機的端口進行VLAN的劃分，一個端口只能屬于一個VLAN。 Tag VLAN是基于交換機端口的另外一種類型，主要用于使交換機的相同VLAN內的主機之間可以直接訪問，同時對于不同VLAN的主機進行隔離。Tag VLAN遵循IEEE802.1Q協(xié)議的標準。在使用配置了Tag VLAN的端口進行數(shù)據(jù)傳輸時，需要在數(shù)據(jù)幀內添加4個字節(jié)的802.1Q標簽信息，用于標示該數(shù)據(jù)幀屬于哪個VLAN，便于對端交換機收到數(shù)據(jù)幀后進行準確的過濾。四、實驗步驟實驗拓撲1、設置四臺PC機IP地址如

3、圖所示。2、對交換機S1進行設置。SwitchenSwitch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#hostname S1 /設置主機名S1(config)#vlan 2 /劃分VLAN 2S1(config-vlan)#exitS1(config)#vlan 3 /劃分VLAN 3S1(config-vlan)#exitS1(config)#interface fa0/1S1(config-if)#switchport access vlan 2 /將fa0/1劃分到

4、VLAN 2S1(config-if)#exitS1(config)#interface fa0/2S1(config-if)#switchport access vlan 3 /將fa0/2劃分到VLAN 3S1(config-if)#exitS1(config)#interface fa0/24 /設置fa0/24端口模式為trunkS1(config-if)#switchport mode trunkS1(config-if)#endS1#%SYS-5-CONFIG_I: Configured from console by consoleS1#show vlan /查看VLAN劃分情況

5、VLAN Name Status Ports- - - -1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6 Fa0/7, Fa0/8, Fa0/9, Fa0/10 Fa0/11, Fa0/12, Fa0/13, Fa0/14 Fa0/15, Fa0/16, Fa0/17, Fa0/18 Fa0/19, Fa0/20, Fa0/21, Fa0/22 Fa0/23, Gig1/1, Gig1/22 VLAN0002 active Fa0/13 VLAN0003 active Fa0/21002 fddi-default act/unsup1003 token-

6、ring-default act/unsup1004 fddinet-default act/unsup1005 trnet-default act/unsupVLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 TranS1- - - - - - - - - - -1 enet 100001 1500 - - - - - 0 02 enet 100002 1500 - - - - - 0 03 enet 100003 1500 - - - - - 0 01002 fddi 101002 1500 - - - - - 0 0

7、 1003 tr 101003 1500 - - - - - 0 0 1004 fdnet 101004 1500 - - - ieee - 0 0 1005 trnet 101005 1500 - - - ibm - 0 0 Remote SPAN VLANs-Primary Secondary Type Ports- - - -S1#show running-configBuilding configuration.Current configuration : 1080 bytes!version 12.2no service timestamps log datetime msecno

8、 service timestamps debug datetime msecno service password-encryption!hostname S1!interface FastEthernet0/1 switchport access vlan 2!interface FastEthernet0/2 switchport access vlan 3!interface FastEthernet0/3!.!interface FastEthernet0/24 switchport mode trunk!interface GigabitEthernet1/1!interface

9、GigabitEthernet1/2!interface Vlan1 no ip address shutdown!line con 0!line vty 0 4 loginline vty 5 15 login!endS1#3、對交換機S2進行設置。SwitchenSwitch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#hostname S2S2(config)#vlan 2S2(config-vlan)#exitS2(config)#vlan 3S2(config-vla

10、n)#exitS2(config)#interface fa0/1S2(config-if)#switchport access vlan 2S2(config-if)#exitS2(config)#interface fa0/2S2(config-if)#switchport access vlan 3S2(config-if)#exitS2(config)#interface fa0/24S2(config-if)#switchport mode trunk S2(config-if)#endS2#%SYS-5-CONFIG_I: Configured from console by co

11、nsoleS2#show vlanVLAN Name Status Ports- - - -1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6 Fa0/7, Fa0/8, Fa0/9, Fa0/10 Fa0/11, Fa0/12, Fa0/13, Fa0/14 Fa0/15, Fa0/16, Fa0/17, Fa0/18 Fa0/19, Fa0/20, Fa0/21, Fa0/22 Fa0/23, Gig1/1, Gig1/22 VLAN0002 active Fa0/13 VLAN0003 active Fa0/21002 fddi-default act

12、/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2- - - - - - - - - - -1 enet 100001 1500 - - - - - 0 02 enet 100002 1500 - - - - - 0 03 enet 100003 1500 - - - - - 0 01002 fddi 1010

13、02 1500 - - - - - 0 0 1003 tr 101003 1500 - - - - - 0 0 1004 fdnet 101004 1500 - - - ieee - 0 0 1005 trnet 101005 1500 - - - ibm - 0 0 Remote SPAN VLANs-Primary Secondary Type Ports- - - -S2#show running-config Building configuration.Current configuration : 1080 bytes!version 12.2no service timestam

14、ps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname S2!interface FastEthernet0/1 switchport access vlan 2!interface FastEthernet0/2 switchport access vlan 3!interface FastEthernet0/3!.!interface FastEthernet0/24 switchport mode trunk!interface Gigabit

15、Ethernet1/1!interface GigabitEthernet1/2!interface Vlan1 no ip address shutdown!line con 0!line vty 0 4 loginline vty 5 15 login!endS2#五、驗證打開PC1的Command PromptPacket Tracer PC Command Line 1.0PCipconfigIP Address.: 192.168.1.2Subnet Mask.: 255.255.255.0Default Gateway.: 192.168.1.1PCping 192.168.1.3

16、Pinging 192.168.1.3 with 32 bytes of data:Request timed out. /不同VLAN間無法PING通Request timed out.Request timed out.Request timed out.Ping statistics for 192.168.1.3: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss), PCping 192.168.1.4Pinging 192.168.1.4 with 32 bytes of data:Reply from 192.168.1.4: bytes=32 time=172ms TTL=128 /相同VLAN可以PING通Reply from 192.168.1.4: bytes=32 time=78ms TTL=128Reply from 192.168.1.