配置虛擬局域網(wǎng)（VLAN）

第三章配置虛擬局域網(wǎng)（VLAN)虛擬局域網(wǎng)VLAN網(wǎng)絡(luò)分段靈活性安全性3rdfloor2ndfloor1stfloorSALESHRENG每個(gè)VLAN都等于一個(gè)廣播域VLAN的操作與特性SwitchAGreenVLANBlackVLANBlueVLANSwitchBGreenVLANBlackVLANBlueVLAN

Trunk

FastEthernet每個(gè)VLAN都類似一個(gè)物理網(wǎng)段一個(gè)VLAN可跨越多個(gè)交換機(jī)干道（Trunk）攜載多個(gè)VLAN的信息VLAN的成員模式靜態(tài)：由管理員靜態(tài)（人工）配置動(dòng)態(tài)：基于MAC地址、IP地址等識(shí)別其成員資格

VLAN5靜態(tài)

VLAN動(dòng)態(tài)

VLANMAC=1111.1111.1111VLAN10Porte0/9Porte0/4基于端口的VLAN劃分VLAN2VLAN1VLAN3VLAN的標(biāo)準(zhǔn)CiscoISLInitialMACAddressInitialType/DataNewCRC2-ByteTPID

2-ByteTCIISLHeader26bytesEncapsulatedEthernetframeCRC4bytesIEEE802.1Q配置靜態(tài)VLANEngineeringVLANMarketingVLANSalesVLANFloor#1Floor#2Floor#3PhysicalLayerLANSwitchHumanLayerNetworkLayerRoutingFunctionInterconnectsVLANsData-LinkLayerBroadcastDomainsAllusersattachedtosameswitchportmustbeinthesameVLAN.xVLAN的配置步驟定義Trunk創(chuàng)建VLAN劃分VLAN成員檢查配置結(jié)果DefiningaTrunk

trunk[on|off|desirable|auto|nonegotiate]wg_sw_a(config-if)#On=SettrunkonandnegotiatewithothersideOff=SettrunkoffandnegotiatewithothersideDesirable=Negotiatewithotherside.

Trunkonifothersideison,desirable,orautoAuto=WillbeatrunkonlyiftheothersideisonordesirableNon-negotiate=SettrunkonandwillnotnegotiateDefiningaTrunk

wg_sw_a#confterminalEnterconfigurationcommands,oneperline.EndwithCNTL/Zwg_sw_a(config)#interfacef0/26wg_sw_a(config-if)#trunkonFirsttrunkport(PortA)On=SettrunkonandnegotiatewithothersideOff=SettrunkoffandnegotiatewithothersideDesirable=Negotiatewithotherside.

Trunkonifothersideison,desirable,orautoAuto=WillbeatrunkonlyiftheothersideisonordesirableNon-negotiate=Settrunkonandwillnotnegotiatetrunk[on|off|desirable|auto|nonegotiate]wg_sw_a(config-if)#VerifyingaTrunk

wg_sw_a#showtrunk[A|B]中國(guó)最龐大的數(shù)據(jù)庫(kù)下載VerifyingaTrunk

wg_sw_a#showtrunkaDISLstate:On,Trunking:On,Encapsulationtype:ISLwg_sw_a#showtrunk[A|B]AddingaVLAN

vlanvlan#[namevlan-name]wg_sw_a(config)#AddingaVLAN

wg_sw_a#confterminalEnterconfigurationcommands,oneperline.EndwithCNTL/Zwg_sw_a(config)#vlan9nameswitchlab2vlanvlan#[namevlan-name]wg_sw_a(config)#VerifyingaVLANwg_sw_a#showvlan[vlan#]VerifyingaVLANwg_sw_a#shvlan9VLANNameStatusPorts-------------------------------------------------9switchlab2Enabled-------------------------------------------------VLANTypeSAIDMTUParentRingNoBridgeNoStpTrans1Trans2-------------------------------------------------------------------------------------------------------9Ethernet1000091500011Unkn00--------------------------------------------------------------------------------------------------------wg_sw_a#showvlan[vlan#]ModifyingaVLANNamevlanvlan#namevlan-namewg_sw_a#confterminalEnterconfigurationcommands,oneperline.EndwithCNTL/Zwg_sw_a(config)#vlan9nameswitchlab90wg_sw_a#showvlan9VLANNameStatusPorts------------------------------------------------9switchlab90Enabled------------------------------------------------wg_sw_a(config)#AssigningSwitchPortstoaVLANvlan-membership{static{vlan#}|dynamic}wg_sw_a(config-if)#AssigningSwitchPortstoaVLANwg_sw_a#confterminalEnterconfigurationcommands,oneperline.EndwithCNTL/Zwg_sw_a(config)#interfaceethernet0/8wg_sw_a(config-if)#vlan-membershipstatic9vlan-membership{static{vlan#}|dynamic}wg_sw_a(config-if)#VerifyingVLANMembershipwg_sw_a#showvlan-membershipVerifyingVLANMembershipwg_sw_a#showvlan-membershipPortVLANMembershipType PortVLANMembershipType-------------------------------------------- -----------------------------------------15Static 131Static21Static 141Static31Static 151Static41Static 161Static51Static 171Static61Static 181Static