網(wǎng)絡(luò)系統(tǒng)建設(shè)與運維初級 5.2 VLAN配置

2.VLAN基本基本配置為網(wǎng)絡(luò)管理員，您需要將網(wǎng)絡(luò)劃分成多個VLAN來控制廣播流量的泛洪。本實驗中，您需要在交換機S1和S2上進(jìn)行VLAN配置。通過本項目可以掌握如下知識點和技能點。本項目的主要任務(wù)是掌握基于端口劃分VLAN的基本配置。步驟2搭建配置環(huán)境。步驟2VLAN創(chuàng)建步驟3IP地址配置。步驟4PortVLAN配置。[S1]interfaceGigab[S1-GigabitEthernet0/[S1-GigabitEthernet0/0/9]interfaceGig[S1-GigabitEthernet0/0/[S2-Eth-Trunk1]trunkportGiga[S2-Eth-Trunk1]trunkportGiga步驟2配置Eth-Trunk鏈路為Trunk，并允許所有VLAN通過。VLAN的報文通過該端口。[S1-Eth-Trunk1]portli[S1-Eth-Trunk1]porttrunkal[S2-Eth-Trunk1]portli[S2-Eth-Trunk1]porttrunkal步驟3創(chuàng)建VLAN，并配置相應(yīng)的ACCESS本實驗中將S3、R1、R3和S4設(shè)備作為客戶端主機。在S1和S2上分別創(chuàng)建VLAN，并使用兩種不同方式將端口加入到已創(chuàng)建VLAN中。將所有連接客戶端的端口類型配置為Access。在S1上，將端口G0/0/13和G0/0/1分別加入到VLAN3和VLAN4。在S2上，將端口G0/0/3和G0/0/6分別加入VLAN4和VLAN2。[S1-GigabitEthernet0/0/13]po[S1]interfaceGigab[S1-GigabitEthernet0/0/1]por[S1-vlan3]portGiga[S1-vlan4]portGigabi[S2-GigabitEthernet0/0/3]por[S2-GigabitEthernet0/0/3]portd[S2-GigabitEthernet0/0/6]por[S2-GigabitEthernet0/0/6]portde確認(rèn)S1和S2上已成功創(chuàng)建VLAN，且已將相應(yīng)端口劃分到對應(yīng)的VLAN中。ThetotalnumberofvlansisU:Up;D:Down;MP:Vlan-mapping;ST:Vlan-stacking;#:ProtocolTransparent-vlan;*:Managemen---------------------------------------------------------------------VIDTypePor1234VIDStatusPropertyMAC-LRNStatisti---------------------------------------------------------------------1234ThetotalnumberofvlansisU:Up;D:Down;MP:Vlan-mapping;ST:Vlan-stacking;#:ProtocolTransparent-vlan;*:Managemen---------------------------------------------------------------------VIDTypePorGE0/0/7(D)GE0/0/8(D)GE0/GE0/0/13(U)GE0/0/14(D)GE0/0/17(D)GE0/0/18(D)GE0/0/21(D)GE0/0/22(D)GE0/0/25(D)GE0/0/26(D)XGE0/0/1(D)XGE0/0/2(D)XGE0/0/3(2commonUT:GE0/0/6(4commonUT:GE0/0/3(VIDStatusPropertyMAC-LRNStatisti----------------------------------------------------------------------1234回顯信息中黃色陰影標(biāo)注的部分表明接口已經(jīng)加入到各個對應(yīng)VLAN中，并且Eth-Trunk1端口允許所有VLAN的報文通過。步驟4為客戶端配置IP地址分別為主機R1、S3、R3和S4配置IP地址。由于無法直接為交換機的物理接口分配IP地址，因此將S3和S4的本地管理接口VLANIF1作為用戶接口，配置IP地址。[S3]interfacevlanif1[R3]interfaceGigab[S4]interfacevlanif1步驟5檢測設(shè)備連通性，驗證VLAN配置結(jié)果執(zhí)行ping命令。同屬VLAN4中的R1和R3能夠相互通信。其他不同VLAN間的設(shè)備無法通信。PINGPING10.0.4.3:56databytes,Replyfrom10.0.4.3:bytes=56Replyfrom10.0.4.3:bytes=56Replyfrom10.0.4.3:bytes=56Replyfrom10.0.4.3:bytes=56SReplyfrom10.0.4.3:bytes=56round-tripmin/avg/max=2/2PING10.0.4.4:56databyte同樣，還可以檢測R1和S3以及R3和S4之間的連通性。此處不再贅述。步驟6配置Hybrid端口配置端口的類型為Hybrid，可以實現(xiàn)端口為來自不同VLAN報文打上中，需要通過配置Hybrid端口來允許VLAN2和VLAN4之間可以互相通信。送數(shù)據(jù)幀時能夠去掉VLAN2和VLAN4的標(biāo)簽。[S1]interfaceGigabi[S1]interfaceGigabi[S1-GigabitEthernet0/0/1]undo[S1-GigabitEthernet0/0/1]por[S1-GigabitEthernet0/0/1]porthybrid[S1-GigabitEthernet0/0/1]porthyb[S2-GigabitEthernet0/0/3]undo[S2-GigabitEthernet0/0/3]por[S2-GigabitEthernet0/0/3]porthybrid[S2-GigabitEthernet0/0/3]porthyb[S2]interfaceGigabi[S2-GigabitEthernet0/0/6]undopo[S2-GigabitEthernet0/0/6]por[S2-GigabitEthernet0/0/6]porthybridu[S2-GigabitEthernet0/0/6]porthybrid執(zhí)行ping命令。測試VLAN3中的R1與R3是否還能通信。PING10.0.4.3:56databytReplyfrom10.0.4.3:bytes=56SeqReplyfrom10.0.4.3:bytes=5Replyfrom10.0.4.3:bytes=5Replyfrom10.0.4.3:bytes=5Replyfrom10.0.4.3:bytes=56執(zhí)行ping命令，測試VLAN2中的S4能否與VLAN4中的R1通信。PING10.0.4.4:56databytes,Replyfrom10.0.4.4:bytes=5Replyfrom10.0.4.4:bytes=5Replyfrom10.0.4.4:bytes=5Replyfrom10.0.4.4:bytes=56SReplyfrom10.0.4.4:bytes=56round-tripmin/avg/max=2/10/41通過配置Hybrid端口，使VLAN2內(nèi)的主機能夠接收來自VLAN4的報文，反之亦然。而沒有配置Hybrid端口的VLAN3中地址為10.0.4.2的主機仍無法與其他VLAN主機通信。2.6配置文件##interfaceGigabitEthernet##interfaceVlanif1#[S1]displaycurrent###portlink-typetrunkporttrunkallow-passvlan2to40#interfaceGigabitEtherporthybridpvidvlan4porthybriduntaggedvlan#interfaceGigabitEtherundonegotiationauto#interfaceGigabitEthernet0undonegotiationauto#interfaceGigabitEthernet####portlink-typetrunkporttrunkallow-passvlan2to40#interfaceGigabitEtherporthybridpvidvlan4porthybriduntaggedvlan#interfaceGigabitEtherundonegotiationauto#interf