分析VLAN技術(shù)概念和劃分方法

1、分析 VLAN 技術(shù)概念及劃分方法一、 VLAN 技能概述A, VLAN skills summaryVLAN(Virtual Local Area Network) 也就是虛擬局域 網(wǎng)，是一種建立在交流技能根底之上的， 經(jīng)過將局域網(wǎng)內(nèi) 的機(jī)器設(shè)備邏輯地而不是物理地區(qū)分紅一個(gè)個(gè)不一樣的 網(wǎng)段，以軟件辦法完成邏輯作業(yè)組的區(qū)分和辦理的技能。 VLAN 的作用是使得同一 VLAN 中的成員間能夠彼此通 訊，而不一樣 VLAN 之間則是彼此阻隔的， 不一樣的 VLAN 間的若是要通訊就要經(jīng)過必要的路由設(shè)備。VLAN ( Virtual Local Area Network ) is a virtual

2、 local area network, is a kind of built on the foundation of communication skills, after the equipment will be LAN logical rather than physical area into a different network segment, complete the distinction between logical operations group in software way and management skills. The role of VLAN is

3、to make the members in the same VLAN can communicate with each other, and not the same between VLAN is another barrier, not the same between VLAN if communication is about to pass routing equipment necessary.VLAN 的長處Two, the strengths of VLAN能夠操控網(wǎng)絡(luò)播送( a ) to be able to control the network broadcast在

4、沒有運(yùn)用 VLAN 技能的局域網(wǎng)內(nèi)的整個(gè)網(wǎng)絡(luò)都是 播送域， 這樣就使得網(wǎng)內(nèi)的一臺(tái)設(shè)備宣布網(wǎng)絡(luò)播送時(shí)， 在 局域網(wǎng)內(nèi)的任何一臺(tái)設(shè)備的接口都能接收到播送， 因而當(dāng) 網(wǎng)絡(luò)內(nèi)的設(shè)備越來越多時(shí)，網(wǎng)絡(luò)上的播送也就越來越多， 占用的時(shí)刻和資源也就越來越多， 當(dāng)播送多到必定的數(shù)量 時(shí)，就會(huì)影響到正常的信息的傳送。 這樣就能致使信息推 遲，嚴(yán)峻的能夠形成網(wǎng)絡(luò)的癱瘓、 阻塞， 嚴(yán)峻的影響了正 常的網(wǎng)絡(luò)運(yùn)用，這就是所謂的網(wǎng)絡(luò)風(fēng)暴。In the absence of the use of VLAN skills LAN the entire network are broadcast domain, which ma

5、kes a device within the network announced that the network broadcast, any equipment in the LAN interface can receive the broadcast, so when the equipment more and more within the network, the network is more and more. Take time and resources, also more and more, when the broadcast to certain quantit

6、y, delivery willaffect the normal information. This can cause information delay, serious can block paralysis, forming network, serious influence the network using the normal, it is called the network storm.在運(yùn)用了 VLAN 技能的局域網(wǎng)中， 縮小了播送的播送 域，在一個(gè) VLAN 中的播送風(fēng)暴也不會(huì)影響到其他的 VLAN ，然后有效地削減了播送風(fēng)暴對(duì)局域網(wǎng)網(wǎng)絡(luò)的影響。In the use

7、of the VLAN technology in LAN, reduce the broadcast broadcast domain, in a VLAN broadcast storm will not affect the other VLAN, and effectively reduce the influence of LAN network broadcast storm.增強(qiáng)了網(wǎng)絡(luò)的安全性( two ) and improve the security of the network在局域網(wǎng)中運(yùn)用 VLAN 技能能夠把彼此通訊比擬頻 頻的用戶區(qū)分到同一個(gè) VLAN 中，這樣在同

8、一個(gè)作業(yè)組中 的信息傳輸只在同一個(gè)組內(nèi)播送， 然后也減輕了因播送包 被截獲而致使的信息走漏，增強(qiáng)了網(wǎng)絡(luò)的安全性。The use of VLAN skills to communicate with each other more frequently users distinguish to the same VLAN in the LAN, so that in the same working group in thetransmission of information is sent only in the same group, and also reduce the leakage

9、 causes for broadcast packets intercepted information, enhance network security.簡化網(wǎng)絡(luò)辦理員的辦理作業(yè)( three ) operation for simplified network administrator.在運(yùn)用 VLAN 技能后網(wǎng)絡(luò)辦理員就能夠輕松的辦理 網(wǎng)絡(luò)，靈敏構(gòu)建虛擬作業(yè)組。 用 VLAN 能夠區(qū)分不一樣的 用戶到不一樣的作業(yè)組， 同一作業(yè)組的用戶也不用局限于 某一固定的物理規(guī)劃，網(wǎng)絡(luò)構(gòu)建和保護(hù)更便利靈敏。Network management can easily in the use of V

10、LAN technology network administrator, sensitive to construct virtual working group. To distinguish between different users to the working group is not the same with VLAN, the same work group of users is not limited to a fixed physical planning, network construction and protection is more convenient

11、and sensitive.三、 VLAN 的區(qū)分辦法Three, the VLAN division way一）依據(jù)端口來區(qū)分 VLAN( a ) to distinguish between VLAN based on port許多 VLAN 廠商都運(yùn)用交流機(jī)的端口來區(qū)分 VLAN 成員。被設(shè)定的端口都在同一個(gè)播送域中。 例如， 一個(gè)交 流機(jī)的 1，2，3，4，5端口被界說為虛擬網(wǎng) AAA ，同一交 流機(jī)的 6，7，8端口組成虛擬網(wǎng) BBB 。這樣做答應(yīng)各端口 之間的通訊，并答應(yīng)同享型網(wǎng)絡(luò)的晉級(jí)。 可是，這種區(qū)分 形式將虛擬網(wǎng)約束在了一臺(tái)交流機(jī)上。Many VLAN vendors are

12、 using AC machine port to distinguish VLAN members. Is a set of ports that are in the same broadcast domain. For example, an AC machine 1, 2, 3, 4, 5 port is defined as a virtual network of AAA, the same exchange 6, 7, 8 port virtual network BBB. It promised to communication between the various port

13、s, and promised to share the network promotion. However, the form of virtual network constraints in an AC machine.第二代端口 VLAN 技能答應(yīng)跨過多個(gè)交流機(jī)的多個(gè) 不一樣端口區(qū)分 VLAN ，不一樣交流機(jī)上的若干個(gè)端口能 夠組成同一個(gè)虛擬網(wǎng)。The second generation port VLAN skills promised across multiple AC machine multiple different ports to distinguish the VL

14、AN, not the same number of ports communication machine can form a virtual network.以交流機(jī)端口來區(qū)分網(wǎng)絡(luò)成員，其裝備進(jìn)程簡單明 了。因而， 從當(dāng)前來看， 這種依據(jù)端口來區(qū)分 VLAN 的辦 法仍然是最常用的一種辦法。 不足之處是不行靈敏， 當(dāng)一 臺(tái)機(jī)器設(shè)備需求從一個(gè)端口移動(dòng)到另一個(gè)新的端口， 可是 新端口和舊端口不在同一個(gè) VLAN 之中時(shí)，要修正端口的 VLAN 設(shè)置，或在用戶核算機(jī)上重新裝備網(wǎng)絡(luò)地址，這樣 才能使這臺(tái)設(shè)備加入到新的 VLAN 。In AC machine port to distinguish

15、 between members of the network equipment, the process is simple and clear. Therefore, from the current point of view, according to the port to distinguish VLAN still is a kind of the most widely used method. The deficiency is not sensitive, when a machine equipment needs to move from one port to an

16、other new port, but the new port and the old port is not in the same VLAN, amendments to the portVLAN settings, or in the user accounting machine to equipment network address, so that we can make itequipment is added to the new VLAN.(二)依據(jù) MAC 地址區(qū)分 VLAN( two ) based on the MAC address to distinguish

17、VLAN 這種區(qū)分 VLAN 辦法的最大長處就是當(dāng)用戶物理方 位移動(dòng)時(shí)， 即從一個(gè)交流機(jī)換到其他的交流機(jī)時(shí)， 就無需 對(duì)它進(jìn)行重新裝備， 主動(dòng)把它添加到相應(yīng)的 VLAN 中。所 以，能夠以為這種依據(jù) MAC 地址的區(qū)分辦法是依據(jù)用戶 的 VLAN 。這種辦法的缺陷是不行快捷，初始化時(shí)，一切 的用戶都必須進(jìn)行裝備， 若是有幾百個(gè)乃至上千個(gè)用戶的 話，裝備作業(yè)就顯得適當(dāng)?shù)姆爆崳?并且由于需求盯梢設(shè)備 內(nèi)的 MAC 地址進(jìn)行盯梢， 致使了交流機(jī)履行功率的下降。 別的， 關(guān)于運(yùn)用筆記本電腦的用戶來說， 他們的網(wǎng)卡能夠 常常替換，這樣， VLAN 就必須不停地裝備。The largest strengt

18、hs this distinction of VLAN method is when the mobile user physical orientation, namely from an AC machine for AC machine other, there is no need to be equipped on it, take the initiative to add it to the corresponding VLAN. So, can according to the MAC address of the way that is based on the users

19、VLAN.This approach is not efficient defect, initialization, allusers must be equipped, if there are hundreds or thousands of users, equipment operation is appropriate is tedious, and because demand is shadowed in MAC address stalking, resulting in the decline of AC machines perform power. The other,

20、 on the use of notebook computer users, they can often replace the card, so, VLAN must not stop equipment.（三）依據(jù)網(wǎng)絡(luò)層區(qū)分 VLAN（three ） according to the network layer to distinguish VLAN這種區(qū)分 VLAN 的辦法是依據(jù)每個(gè)主機(jī)的網(wǎng)絡(luò)層地 址或協(xié)議類型 （若是撐持多協(xié)議 ）區(qū)分的，盡管這種區(qū)分辦 法是依據(jù)網(wǎng)絡(luò)地址，比方 IP 地址，但它不是路由，和網(wǎng) 絡(luò)層的路由毫無關(guān)系。 這種辦法的長處是用戶的物理方位 改動(dòng)了，不需求重新裝

21、備所屬的 VLAN ，并且能夠依據(jù)協(xié) 議類型來區(qū)分 VLAN ，這對(duì)網(wǎng)絡(luò)辦理者來說很重要， 還有， 這種辦法不需求附加的幀標(biāo)簽來辨認(rèn) VLAN ，這樣能夠削 減網(wǎng)絡(luò)的通訊量。 這種辦法的缺陷是功率低， 由于查看每 一個(gè)數(shù)據(jù)包的網(wǎng)絡(luò)層地址是需求耗費(fèi)處置時(shí)刻的。The VLAN method is based on the type of each host inthe network layer address or agreement ( if support multi-protocol ) distinction, although this distinction is based on

22、 the network address, for example the IP address, but it is not a routing, routing has no relationship with the network layer. This method advantage is the physical range user changes, do not need to re-equip belongs to VLAN, and can distinguish VLAN according to the protocol type, the network manag

23、ement is very important, who also, this method does not need the frame label attached to identify VLAN traffic, this can reduce network. Defects in this way is low power, because the network layer address for each data packet is need to waste disposal time.依據(jù) IP 組播區(qū)分 VLAN(four ) based on IP multicas

24、t to distinguish VLANIP 組播實(shí)際上也是一種 VLAN 的界說，即以為一個(gè) 組播組就是一個(gè) VLAN ，這種區(qū)分的辦法將 VLAN 擴(kuò)大到 了廣域網(wǎng)， 因而這種辦法具有更大的靈敏性， 并且也很簡 單經(jīng)過路由器進(jìn)行擴(kuò)大， 當(dāng)然這種辦法不適合局域網(wǎng)， 主 要是功率不高。The definition of IP multicast is actually a kind of VLAN, namely that a multicast group is a VLAN, this distinction would be VLAN extended to the wide area

25、 network, so this approach has a greater sensitivity, and also very simple through the router to expand, of course, this approach is not suitable for the LAN, is the main power is not high.（五）依據(jù)規(guī)矩的 VLAN（five ） according to the rules of VLAN也稱為依據(jù)戰(zhàn)略的 VLAN 。這是最靈敏的 VLAN 區(qū)分 辦法，具有主動(dòng)裝備的才能， 能夠把關(guān)聯(lián)的用戶連成一體， 在邏

26、輯區(qū)分上稱為“關(guān)系網(wǎng)絡(luò)”。網(wǎng)絡(luò)辦理員只需在網(wǎng)管軟 件中斷定區(qū)分 VLAN 的規(guī)矩（或特點(diǎn)） ，那么當(dāng)一個(gè)設(shè)備 加入網(wǎng)絡(luò)中時(shí)，將會(huì)被“感知”，并被個(gè)人地包括進(jìn)正確的 VLAN 中。一起，對(duì)設(shè)備的移動(dòng)和改動(dòng)也可主動(dòng)辨認(rèn)和盯 梢。Also known as the basis of the VLAN strategy. This is the most sensitive VLAN way, with active equipment ability, can make the user associated together, in the logical distinction is called relationship network . Thenetwork administratorneed only in networkmanagement software that distinguish VLAN rules ( or feat