VLAN的劃分,劃分原則,基礎配置,交換接口模式的工作原理
VLAN 虛擬局域網
常見vlan劃分的幾種常用方式
- 安裝部門劃分
- 安裝地點劃分
- 安裝人員劃分
常見的vlan劃分的幾種方法
1.基于交換機接口劃分?? | 較為常用,也是其他方法的基礎 |
2.基于IP地址劃分 | 適用于固定IP的終端設備(財務,老板使用的PC等) |
3.基于mac地址劃分? | 適用于安全性較高的部門(研發(fā)等) |
4.策略vlan | 相對比較不常見,可以同時基于IP和mac地址劃分 |
? ? ? ? ? ? ? ? ? ? ? ? ?
vlan透傳
vlan 透傳是指一端發(fā)送數據到另一端時,另一端接受到數據包時是剝離了802.1q封裝的
什么意思呢?
圖1-1
如圖1-1,當PC1發(fā)送數據給PC2,數據包傳遞到LSW1的Ethernet0/0/1接口,會封裝上接口的vlan-id,即802.1q協(xié)議,當LSW1將數據從Ethernet0/0/2口轉發(fā)給PC2時,則需要將數據包的802.1q協(xié)議封裝給剝離開,PC才可以讀取到數據中的內容,這個過程就是vlan的透傳;當交換機在轉發(fā)數據包給終端時,數據包的802.1q封裝若無法被剝離,則會造成無法通信;
常見的三種交換接口的模式
- access接入模式,一般用于接入終端的交換機接口
- trunk中繼模式,一般用于交換機之間互相連接的接口
- hybrid混合模式,可以剝離多個vlan-id和允許多個vlan通過
交換機接口模式 |
pvid |
TG(tagged) |
UT(untagged) |
access |
一個 |
一個 |
一個 |
trunk |
一個 |
多個 |
一個 |
hybrid |
一個 |
多個 |
多個 |
pvid:在交換機接口接收到沒有802.1q封裝的數據包時,給數據包打上vlan-id(封裝802.1q);
TG(tagged):接口在轉發(fā)和接收數據包時攜帶vlan標簽(802.1q封裝)通過;
UT(untagged):在接口轉發(fā)數據包時,將對應的vlan標簽(802.1q封裝)剝離;
access和trunk模式的交換機接口只可以pvid和UT同一個的vlan-id(802.1q封裝);
相關命令:
本篇只講基于接口的vlan劃分!
access:
port link-type access
//配置接口為access模式
port default vlan [vlan-id]
//配置接口vlan-id,默認vlan 1,接口接收數據時,PVID和TG該vlan,轉發(fā)時UT該vlan;
trunk:
port link-type trunk
//配置接口為trunk模式
port trunk allow-pass vlan [vlan-id列表]
//配置接口TG列表
port trunk pvid vlan [vlan-id]
//配置接口vlan-id,使接口可以pvid該vlan,若TG列表含該vlan,則接口在轉發(fā)數據時UT該vlan;
hybrid:
port link-type hyhrid
//配置接口為hybrid模式
port hybrid pvid vlan [vlan-id]
//使接口可以pvid該vlan
port hybrid tagged vlan [vlan-id 列表]
//配置接口TG列表
port hybrid untagged vlan [vlan-id列表]
//配置接口UT列表
hybrid接口模式中,同一個vlan只能在一個列表中;
實驗
拓撲圖
本篇只做關于vlan的配置(鏈路聚合部分除外)!
其他相關配置:https://blog.csdn.net/weixin_46678521/article/details/126472140
S1的部分配置
[S1]vlan batch 10 100
Info: This operation may take a few seconds. Please wait for a moment...done.
[S1]interface Ethernet0/0/1
[S1-Ethernet0/0/1]port link-type trunk
[S1-Ethernet0/0/1]port trunk pvid vlan 100
[S1-Ethernet0/0/1]port trunk allow-pass vlan 10 100
[S1-Ethernet0/0/1]quit
[S1]interface Ethernet0/0/2
[S1-Ethernet0/0/2]port link-type access
[S1-Ethernet0/0/2]port default vlan 10
[S1-Ethernet0/0/2]quit
[S1]interface Ethernet0/0/3
[S1-Ethernet0/0/3]port link-type access
[S1-Ethernet0/0/3]port default vlan 10
[S1-Ethernet0/0/3]quit
S2的部分配置
[S2]vlan batch 20 100
Info: This operation may take a few seconds. Please wait for a moment...done.
[S2]interface Ethernet0/0/1
[S2-Ethernet0/0/1]port link-type hybrid
[S2-Ethernet0/0/1]port hybrid pvid vlan 100
[S2-Ethernet0/0/1]port hybrid untagged vlan 100
[S2-Ethernet0/0/1]port hybrid tagged vlan 20
[S2-Ethernet0/0/1]quit
[S2]interface Ethernet0/0/2
[S2-Ethernet0/0/2]port link-type access
[S2-Ethernet0/0/2]port default vlan 20
[S2-Ethernet0/0/2]quit
S3的部分配置
[S3]vlan batch 30 100
Info: This operation may take a few seconds. Please wait for a moment...done.
[S3]interface Ethernet0/0/1
[S3-Ethernet0/0/1]port link-type trunk
[S3-Ethernet0/0/1]port trunk pvid vlan 100
[S3-Ethernet0/0/1]port trunk allow-pass vlan 30 100
[S3-Ethernet0/0/1]quit
[S3]interface Ethernet0/0/2
[S3-Ethernet0/0/2]port link-type access
[S3-Ethernet0/0/2]port default vlan 30
[S3-Ethernet0/0/2]quit
S4的部分配置
[S4]vlan batch 40 100
Info: This operation may take a few seconds. Please wait for a moment...done.
[S4]interface Ethernet0/0/1
[S4-Ethernet0/0/1]port link-type trunk
[S4-Ethernet0/0/1]port trunk pvid vlan 100
[S4-Ethernet0/0/1]port trunk allow-pass vlan 40 100
[S4-Ethernet0/0/1]quit
[S4]interface Ethernet0/0/2
[S4-Ethernet0/0/2]port link-type access
[S4-Ethernet0/0/2]port default vlan 40
[S4-Ethernet0/0/2]quit
S5的部分配置
[S5]vlan 4
[S5-vlan4]quit
[S5]interface Ethernet 0/0/1
[S5-Ethernet0/0/2]port link-type access
[S5-Ethernet0/0/2]port default vlan 4
[S5-Ethernet0/0/2]quit
[S5]interface Ethernet 0/0/2
[S5-Ethernet0/0/2]port link-type access
[S5-Ethernet0/0/2]port default vlan 4
[S5-Ethernet0/0/2]quit
[S5]interface g0/0/1
[S5-GigabitEthernet0/0/1]port link-type trunk
[S5-GigabitEthernet0/0/1]port trunk allow-pass vlan 4
[S5-GigabitEthernet0/0/1]quit
[S5]interface g0/0/2
[S5-GigabitEthernet0/0/2]port link-type trunk
[S5-GigabitEthernet0/0/2]port trunk allow-pass vlan 4
[S5-GigabitEthernet0/0/2]quit
S6的部分配置
[S6]vlan 5
[S6-vlan5]quit
[S6]interface Ethernet0/0/1
[S6-Ethernet0/0/1]port link-type access
[S6-Ethernet0/0/1]port default vlan 5
[S6-Ethernet0/0/1]quit
[S6]interface Ethernet0/0/2
[S6-Ethernet0/0/2]port link-type access
[S6-Ethernet0/0/2]port default vlan 5
[S6-Ethernet0/0/2]quit
[S6]interface g0/0/1
[S6-GigabitEthernet0/0/1]port link-type trunk
[S6-GigabitEthernet0/0/1]port trunk allow-pass vlan 5
[S6-GigabitEthernet0/0/1]quit
[S6]interface g0/0/2
[S6-GigabitEthernet0/0/2]port link-type trunk
[S6-GigabitEthernet0/0/2]port trunk allow-pass vlan 5
[S6-GigabitEthernet0/0/2]quit
LSW1的部分配置
[LSW1]vlan batch 2 to 9
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1]interface g0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type access
[LSW1-GigabitEthernet0/0/1]port default vlan 2
[LSW1-GigabitEthernet0/0/1]quit
[LSW1]interface g0/0/2
[LSW1-GigabitEthernet0/0/2]port link-type access
[LSW1-GigabitEthernet0/0/2]port default vlan 3
[LSW1-GigabitEthernet0/0/2]quit
[LSW1]interface g0/0/3
[LSW1-GigabitEthernet0/0/3]port link-type trunk
[LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 4
[LSW1-GigabitEthernet0/0/3]quit
[LSW1]interface g0/0/4
[LSW1-GigabitEthernet0/0/4]port link-type trunk
[LSW1-GigabitEthernet0/0/4]port trunk allow-pass vlan 5
[LSW1-GigabitEthernet0/0/4]quit
[LSW1]interface g0/0/5
[LSW1-GigabitEthernet0/0/5]port link-type access
[LSW1-GigabitEthernet0/0/5]port default vlan 8
[LSW1-GigabitEthernet0/0/5]quit
LSW2的部分配置
[LSW2]vlan batch 2 to 9
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW2]interface g0/0/1
[LSW2-GigabitEthernet0/0/1]port link-type access
[LSW2-GigabitEthernet0/0/1]port default vlan 2
[LSW2-GigabitEthernet0/0/1]quit
[LSW2]interface g0/0/2
[LSW2-GigabitEthernet0/0/2]port link-type access
[LSW2-GigabitEthernet0/0/2]port default vlan 3
[LSW2-GigabitEthernet0/0/2]quit
[LSW2]interface g0/0/3
[LSW2-GigabitEthernet0/0/3]port link-type trunk
[LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 4
[LSW2-GigabitEthernet0/0/3]quit
[LSW2]interface g0/0/4
[LSW2-GigabitEthernet0/0/4]port link-type trunk
[LSW2-GigabitEthernet0/0/4]port trunk allow-pass vlan 5
[LSW2-GigabitEthernet0/0/4]quit
[LSW2]]interface g0/0/5
[LSW2-GigabitEthernet0/0/5]port link-type access
[LSW2-GigabitEthernet0/0/5]port default vlan 9
[LSW2-GigabitEthernet0/0/5]quit
SW1的部分配置
[SW1]vlan batch 2 6 10 20 100
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW1]interface g0/0/1
[SW1-GigabitEthernet0/0/1]port link-type access
[SW1-GigabitEthernet0/0/1]port default vlan 2
[SW1-GigabitEthernet0/0/1]quit
[SW1]interface g0/0/2
[SW1-GigabitEthernet0/0/2]port link-type access
[SW1-GigabitEthernet0/0/2]port default vlan 2
[SW1-GigabitEthernet0/0/2]quit
SW2的部分配置
[SW2]vlan batch 3 6 30 40 100
Info: This operation may take a few seconds. Please wait for a moment...done.
[SW2]interface g0/0/1
[SW2-GigabitEthernet0/0/1]port link-type access
[SW2-GigabitEthernet0/0/1]port default vlan 3
[SW2-GigabitEthernet0/0/1]quit
[SW2]interface g0/0/2
[SW2-GigabitEthernet0/0/2]port link-type access
[SW2-GigabitEthernet0/0/2]port default vlan 3文章來源:http://www.zghlxwxcb.cn/news/detail-413476.html
[SW2-GigabitEthernet0/0/2]quit文章來源地址http://www.zghlxwxcb.cn/news/detail-413476.html
到了這里,關于eNSP第一篇:VLAN的劃分,劃分原則,基礎配置,交換接口模式的工作原理的文章就介紹完了。如果您還想了解更多內容,請在右上角搜索TOY模板網以前的文章或繼續(xù)瀏覽下面的相關文章,希望大家以后多多支持TOY模板網!