衡阳科技经贸职业学院:VLAN配置:VLAN配置实例
来源:百度文库 编辑:九乡新闻网 时间:2024/04/28 03:14:03
VLAN配置:VLAN配置实例
DATA:2010-05-31 10:13 .Nhn335 { display:none; }VLAN配置:VLAN配置实例
【网讯网络通信学院】(1)网络基本情况
网络拓扑结构为:中心交换机采用cisco catalyst 4006-s3,supervisor engine iii g引擎位于第1插槽,用于实现三层交换;1块24口1000base-t模块位于第2插槽,用于连接网络服务器;1块6端口1000base-x模块位于第3插槽,用于连接6台骨干交换机。一台交换机采用cisco catalyst 3550-24-emi,并安装1块1000base-x gbic千兆模块。一台交换机采用cisco catalyst 3550-24-smi,也安装1块1000base-x gbic千兆模块。另外四台交换机采用cisco catalyst 2950g-24-smi,安装1块1000base-t gbic千兆模块。
所有服务器划分为一个vlan,即vlan 50。四台catalyst 2950g-24-smi交换机也只划分为一个vlan,分别为vlan 60、vlan 70、vlan 80和vlan 90。catalyst 3550-24-emi划分为4个vlan,分别为vlan 10、vlan 20、vlan 30和vlan 40。catalyst 3550-24-smi划分2个vlan,分别为vlan 60和vlan 80,与另外两台catalyst 2950g-24-smi交换机分别位于同一vlan。
(2)实例分析
由于所有catalyst 2950g交换机都是一个独立的vlan,因此,必须先在这些交换机上创建vlan(vlan 60~vlan 90),并将所有端口都指定至该vlan。然后,再在catalyst 4006交换机相应端口上分别创建vlan。catalyst 4006的1000base-x端口分别与各catalyst 2950g的1000base-x端口连接。其中,gigabitethernet3/2端口连接至1号catalyst 2950交换机(vlan 60),gigabitethernet3/3端口连接至2号catalyst 2950交换机(vlan 70),gigabitethernet3/4端口连接至3号catalyst 2950交换机(vlan 80),gigabitethernet3/5端口连接至4号catalyst 2950交换机(vlan 90),gigabitethernet3/6端口连接至6号楼交换机(vlan 80)。 内容来自www.netdigedu.com
由于在catalyst 3550-24-emi上划分有4个vlan(vlan 10~vlan 40),而4个vlan都需借助于一条1000base-x链路实现与catalyst 4006的gigabitethernet3/1端口连接,因此,必须在catalyst 4006与catalyst 3550-24- emi之间创建一个trunk。
同样,在catalyst 3550-24-smi上划分有2个vlan(vlan 60和vlan 80),而4个vlan都需借助于一条1000base-x链路实现与catalyst 4006的gigabitethernet3/6端口连接,因此,必须在catalyst 4006与catalyst 3550-24- emi之间创建一个trunk。
另外,所有服务器均连接至catalyst 4006的1000base-t模块,并单独成为一个vlan(vlan 90),因此,也必须为这些交换机创建一个vlan,并将所有端口指定至该vlan。需要注意的是,考虑到网络管理的需要,也可以剩余几个rj-45端口(如21至24端口)不指定至任何vlan,从而便于连接网络管理设备。默认状态下,所有端口都属于vlan1,而且也只有在vlan1中才能实现对网络中所有设备的管理。
(3)配置清单
●cisco catalyst 4006交换机配置清单
current configuration : 5594 bytes
!
version 12.1
no service pad
service timestamps debug uptime内容来自www.netdigedu.com
service timestamps log uptime
no service password-encryption
service compress-config
!
hostname hsnc
!
boot system bootflash:cat4000-is-mz.121-8a.ew1.bin
no logging console
enable secret level 1 5 $1$rkqw$1hkykdn5f.ri5zxeof8yv/
!
ip subnet-zero
!
!
!
interface gigabitethernet1/1
no snmp trap link-status
!--不为supervisor engine iii g引擎中的1000base-x插槽指定vlan
interface gigabitethernet1/2
no snmp trap link-status
!
!
interface gigabitethernet2/1
switchport access vlan 50
no snmp trap link-status
!--将端口gigabitethernet2/1指定至vlan 50
!
interface gigabitethernet2/2
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/3
switchport access vlan 50 www.netdigedu.com
no snmp trap link-status
!
interface gigabitethernet2/4
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/5
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/6
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/7
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/8
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/9
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/10
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/11
switchport access vlan 50 本文来自网讯网络通信学院
no snmp trap link-status
!
interface gigabitethernet2/12
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/13
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/14
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/15
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/16
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/17
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/18
switchport access vlan 50
no snmp trap link-status
!
interface gigabitethernet2/19
switchport access vlan 50 本文来自网讯网络通信学院
no snmp trap link-status
!
interface gigabitethernet2/20
switchport access vlan 50
no snmp trap link-status
!--不将gigabitethernet2/20~24指定至任何vlan
!
interface gigabitethernet3/1
switchport trunk encapsulation dot1q
!--启用802.1q trunk封装协议,即在该端口创建trunk
switchport trunk allowed vlan 1-80
!--允许vlan 1-90在该中继线通讯
!--可以拒绝或允许某个vlan访问该trunk
!--确保未被授权的vlan通过该trunk,实现vlan的访问安全
switchport mode trunk
!--将该端口设置为trunk
description netcenter
no snmp trap link-status
!
interface gigabitethernet3/2
switchport access vlan 60
no snmp trap link-status
!--将端口gigabitethernet3/2指定至vlan 60
!
interface gigabitethernet3/3
switchport access vlan 70
no snmp trap link-status内容来自www.netdigedu.com
!--将端口gigabitethernet3/3指定至vlan 70
!
interface gigabitethernet3/4
switchport access vlan 80
no snmp trap link-status
!--将端口gigabitethernet3/4指定至vlan 80
!
interface gigabitethernet3/5
switchport access vlan 90
no snmp trap link-status
!--将端口gigabitethernet3/5指定至vlan 90
!
interface gigabitethernet3/6
switchport trunk encapsulation dot1q
!--启用802.1q trunk封装协议,即在该端口创建trunk
switchport trunk allowed vlan 1-80
!--允许vlan 1-90在该中继线通讯
!--可以拒绝或允许某个vlan访问该trunk
!--从而确保未被授权的vlan通过该trunk,实现vlan访问安全
switchport mode trunk
!--将该端口设置为trunk
description netcenter
no snmp trap link-status
!
interface vlan1
description netmanger
no ip address
!
网讯网络通信学院
!--对vlan1进行描述
interface vlan10
description network center
no ip address
!--对vlan2进行描述
!
interface vlan20
description computer center
no ip address
!
interface vlan30
description network lab
no ip address
!
interface vlan40
description huaxuelou
no ip address
!
interface vlan50
description wulilou
no ip address
!
interface vlan60
description shengwulou
no ip address
!
interface vlan70
description zhongwenxi
no ip address
!
interface vlan80
description tushuguan
no ip address
!
!
line con 0
stopbits 1
line vty 0 4
password aaa
login
!
end网讯网络通信学院
●cisco catalyst 3550-emi配置清单
building configuration...
current configuration : 4055 bytes网讯网络通信学院