交换机 VLAN 的划分

我就是我 2021-10-29 20:54 583阅读 0赞

![GNS3图标][GNS3]

交换机怎么划分`VLAN`？本次的实验很简单，就是通过`VLAN`的划分，使不同`VLAN`之间无法通信，但是相同`VLAN`不受影响。

--------------------

# 实验拓扑 #

![拓扑][1746090-20190809183330697-2141809491.png]

在一台交换机下连接三台`VPC`，划分`VLAN`，地址规划如下：

--------------------

# 配置方法 #

## 创建 vlan ##

1.vlan database 配置模式。（不推荐）

SW#vlan database
    SW(vlan)#vlan 10 name caiwu
    SW(vlan)#exit

2.全局配置模式。

SW(config)#vlan 20
    SW(config-vlan)#name renshi
    SW(config-vlan)#end

## 端口添加到 vlan ##

SW(config)#interface fastEthernet 1/0
    SW(config-if)#switchport mode access
    SW(config-if)#switchport access vlan 10
    SW(config-if)#exit

--------------------

# 配置过程 #

## 配置前测试互通 ##

*  PC1

PC1> ip 192.168.10.10
    Checking for duplicate address...
    PC1 : 192.168.10.10 255.255.255.0
    
    PC1> ping 192.168.10.20
    84 bytes from 192.168.10.20 icmp_seq=1 ttl=64 time=0.989 ms
    84 bytes from 192.168.10.20 icmp_seq=2 ttl=64 time=0.998 ms
    84 bytes from 192.168.10.20 icmp_seq=3 ttl=64 time=0.960 ms
    84 bytes from 192.168.10.20 icmp_seq=4 ttl=64 time=0.971 ms
    84 bytes from 192.168.10.20 icmp_seq=5 ttl=64 time=0.999 ms
    
    
    PC1> ping 192.168.10.30
    84 bytes from 192.168.10.30 icmp_seq=1 ttl=64 time=1.036 ms
    84 bytes from 192.168.10.30 icmp_seq=2 ttl=64 time=0.997 ms
    84 bytes from 192.168.10.30 icmp_seq=3 ttl=64 time=0.963 ms
    84 bytes from 192.168.10.30 icmp_seq=4 ttl=64 time=0.849 ms
    84 bytes from 192.168.10.30 icmp_seq=5 ttl=64 time=0.868 ms

*  PC2

PC2> ip 192.168.10.20
    Checking for duplicate address...
    PC1 : 192.168.10.20 255.255.255.0
    
    PC2> ping 192.168.10.10
    84 bytes from 192.168.10.10 icmp_seq=1 ttl=64 time=0.845 ms
    84 bytes from 192.168.10.10 icmp_seq=2 ttl=64 time=0.995 ms
    84 bytes from 192.168.10.10 icmp_seq=3 ttl=64 time=0.861 ms
    84 bytes from 192.168.10.10 icmp_seq=4 ttl=64 time=0.877 ms
    84 bytes from 192.168.10.10 icmp_seq=5 ttl=64 time=0.859 ms
    
    PC2> ping 192.168.10.30
    84 bytes from 192.168.10.30 icmp_seq=1 ttl=64 time=0.995 ms
    84 bytes from 192.168.10.30 icmp_seq=2 ttl=64 time=0.892 ms
    84 bytes from 192.168.10.30 icmp_seq=3 ttl=64 time=0.958 ms
    84 bytes from 192.168.10.30 icmp_seq=4 ttl=64 time=0.863 ms
    84 bytes from 192.168.10.30 icmp_seq=5 ttl=64 time=0.865 ms

*  PC3

PC3> ip 192.168.10.30
    Checking for duplicate address...
    PC1 : 192.168.10.30 255.255.255.0
    
    PC3> ping 192.168.10.10
    84 bytes from 192.168.10.10 icmp_seq=1 ttl=64 time=0.877 ms
    84 bytes from 192.168.10.10 icmp_seq=2 ttl=64 time=0.965 ms
    84 bytes from 192.168.10.10 icmp_seq=3 ttl=64 time=0.844 ms
    84 bytes from 192.168.10.10 icmp_seq=4 ttl=64 time=0.876 ms
    84 bytes from 192.168.10.10 icmp_seq=5 ttl=64 time=0.852 ms
    
    PC3> ping 192.168.10.20
    84 bytes from 192.168.10.20 icmp_seq=1 ttl=64 time=0.863 ms
    84 bytes from 192.168.10.20 icmp_seq=2 ttl=64 time=0.963 ms
    84 bytes from 192.168.10.20 icmp_seq=3 ttl=64 time=0.855 ms
    84 bytes from 192.168.10.20 icmp_seq=4 ttl=64 time=1.004 ms
    84 bytes from 192.168.10.20 icmp_seq=5 ttl=64 time=0.000 ms

## 正式配置 ##

*  `SW`关闭路由功能

SW#configure terminal
    SW(config)#no ip routing
    SW(config)#end

*  `vlan database`创建`vlan 10`

SW#vlan database
    % Warning: It is recommended to configure VLAN from config mode,
      as VLAN database mode is being deprecated. Please consult user
      documentation for configuring VTP/VLAN in config mode.
    
    SW(vlan)#vlan 10 name caiwu
    VLAN 10 added:
        Name: caiwu
    SW(vlan)#exit
    APPLY completed.
    Exiting....

*  全局配置创建`vlan 20`

SW#configure terminal
    SW(config)#vlan 20
    SW(config-vlan)#name renshi
    SW(config-vlan)#end

*  查看`VLAN`

SW#show vlan-switch brief
    
    VLAN Name                             Status    Ports
    ---- -------------------------------- --------- -------------------------------
    1    default                          active    Fa1/0, Fa1/1, Fa1/2, Fa1/3
                                                    Fa1/4, Fa1/5, Fa1/6, Fa1/7
                                                    Fa1/8, Fa1/9, Fa1/10, Fa1/11
                                                    Fa1/12, Fa1/13, Fa1/14, Fa1/15
    10   caiwu                            active
    20   renshi                           active
    1002 fddi-default                     act/unsup
    1003 token-ring-default               act/unsup
    1004 fddinet-default                  act/unsup
    1005 trnet-default                    act/unsup

*  接口`f1/0`添加到`vlan 10`，并查看

SW#configure terminal
    SW(config)#interface fastEthernet 1/0
    SW(config-if)#switchport mode access
    SW(config-if)#switchport access vlan 10
    SW(config-if)#exit
    SW(config)#do show vlan-sw b
    
    VLAN Name                             Status    Ports
    ---- -------------------------------- --------- -------------------------------
    1    default                          active    Fa1/1, Fa1/2, Fa1/3, Fa1/4
                                                    Fa1/5, Fa1/6, Fa1/7, Fa1/8
                                                    Fa1/9, Fa1/10, Fa1/11, Fa1/12
                                                    Fa1/13, Fa1/14, Fa1/15
    10   caiwu                            active    Fa1/0
    20   renshi                           active
    1002 fddi-default                     act/unsup
    1003 token-ring-default               act/unsup
    1004 fddinet-default                  act/unsup
    1005 trnet-default                    act/unsup

*  接口`f1/1`和`f1/2`添加到`vlan 20`，并查看

SW(config)#interface range fastEthernet 1/1 - 2
    SW(config-if-range)#switchport mode access
    SW(config-if-range)#switchport access vlan 20
    SW(config-if-range)#exit
    SW(config)#do show vlan-sw b
    
    VLAN Name                             Status    Ports
    ---- -------------------------------- --------- -------------------------------
    1    default                          active    Fa1/3, Fa1/4, Fa1/5, Fa1/6
                                                    Fa1/7, Fa1/8, Fa1/9, Fa1/10
                                                    Fa1/11, Fa1/12, Fa1/13, Fa1/14
                                                    Fa1/15
    10   caiwu                            active    Fa1/0
    20   renshi                           active    Fa1/1, Fa1/2
    1002 fddi-default                     act/unsup
    1003 token-ring-default               act/unsup
    1004 fddinet-default                  act/unsup
    1005 trnet-default                    act/unsup

# PING 测试 #

PC1> ping 192.168.10.20
    host (192.168.10.20) not reachable
    
    PC1> ping 192.168.10.30
    host (192.168.10.30) not reachable

PC2> ping 192.168.10.10
    host (192.168.10.10) not reachable
    
    PC2> ping 192.168.10.30
    84 bytes from 192.168.10.30 icmp_seq=1 ttl=64 time=0.971 ms
    84 bytes from 192.168.10.30 icmp_seq=2 ttl=64 time=0.877 ms
    84 bytes from 192.168.10.30 icmp_seq=3 ttl=64 time=0.844 ms
    84 bytes from 192.168.10.30 icmp_seq=4 ttl=64 time=0.954 ms
    84 bytes from 192.168.10.30 icmp_seq=5 ttl=64 time=0.869 ms

PC3> ping 192.168.10.10
    host (192.168.10.10) not reachable
    
    PC3> ping 192.168.10.20
    84 bytes from 192.168.10.20 icmp_seq=1 ttl=64 time=0.866 ms
    84 bytes from 192.168.10.20 icmp_seq=2 ttl=64 time=0.962 ms
    84 bytes from 192.168.10.20 icmp_seq=3 ttl=64 time=0.855 ms
    84 bytes from 192.168.10.20 icmp_seq=4 ttl=64 time=0.868 ms
    84 bytes from 192.168.10.20 icmp_seq=5 ttl=64 time=0.965 ms

> `PC1`与`PC2`之间不能互通，`PC1`与`PC3`之间不能互通，但`PC2`与`PC3`之间可以互通，实验成功。

--------------------

# 最后 #

本篇是关于一台交换机里划分`VLAN`的实验，下篇写关于跨交换机的`VLAN`通信方式。

转载于:https://www.cnblogs.com/llife/p/11329114.html

[GNS3]: /images/20211029/e6dfc9b22858481b8e13133288244df3.png
[1746090-20190809183330697-2141809491.png]: /images/20211029/fb91779604eb48bd9fce4af897775ca4.png