Darasi na yau za mu karkata ne ga VLAN settings, wato za mu yi kokarin yin duk abin da muka yi magana akai a darussan baya. Yanzu za mu dubi tambayoyi 3: ƙirƙirar VLAN, sanya tashar jiragen ruwa na VLAN, da duba bayanan VLAN.
Bari mu buɗe taga shirin binciken Sisiko Packer tare da ma'anar topology na hanyar sadarwar mu da ni zana.
An haɗa SW0 na farko zuwa kwamfutoci 2 PC0 da PC1, haɗin kai a cikin hanyar sadarwar VLAN10 tare da kewayon adireshin IP na 192.168.10.0/24. Don haka, adireshin IP na waɗannan kwamfutoci za su kasance 192.168.10.1 da 192.168.10.2. Yawancin lokaci mutane suna gano lambar VLAN ta hanyar octet na uku na adireshin IP, a cikin yanayinmu 10 ne, amma wannan ba sharadi ba ne na zayyana hanyoyin sadarwa, zaku iya sanya kowane mai gano VLAN, duk da haka ana karɓar wannan odar a manyan kamfanoni saboda yana yana sauƙaƙa saita hanyar sadarwar.
Na gaba shine canza SW1, wanda aka haɗa zuwa cibiyar sadarwar VLAN20 tare da adireshin IP 192.168.20.0/24 tare da kwamfutar tafi-da-gidanka guda biyu Laptop1 da Laptop2.
VLAN10 yana kan bene na 1 na ofishin kamfanin kuma yana wakiltar cibiyar sadarwar sarrafa tallace-tallace. Laptop0 na mai kasuwa, wanda na VLAN0, an haɗa shi zuwa SW20 guda ɗaya. Wannan hanyar sadarwa ta wuce zuwa bene na 2, inda sauran ma'aikata suke, kuma an haɗa ta da sashin tallace-tallace, wanda zai iya kasancewa a cikin wani gini ko a bene na 3 na wannan ofishin. Akwai ƙarin kwamfutoci guda 3 da aka shigar a nan - PC2,3 da 4, waɗanda ke cikin cibiyar sadarwar VLAN10.
VLAN10, kamar VLAN20, dole ne ya samar da sadarwa mara yankewa ga duk ma'aikata, ba tare da la'akari da ko suna kan benaye daban-daban ko a cikin gine-gine daban-daban ba. Wannan ita ce manufar hanyar sadarwa da za mu duba a yau.
Bari mu fara saita shi kuma farawa da PC0. Ta danna gunkin, za mu shigar da saitunan cibiyar sadarwar kwamfutar kuma shigar da adireshin IP 192.168.10.1 da subnet mask 255.255.255.0. Ba na shigar da adireshin ƙofa na tsoho ba saboda ana buƙatar fita daga wannan cibiyar sadarwar gida zuwa waccan, kuma a cikin yanayinmu ba za mu yi hulɗa da saitunan OSI Layer 3 ba, kawai muna sha'awar Layer 2, kuma ba za mu yi la'akari ba. tura zirga-zirga zuwa wani gidan yanar gizo.
Za mu saita intranet kuma kawai waɗancan runduna waɗanda ke cikin sa. Sannan za mu je PC2 mu yi irin abin da muka yi na PC na farko. Yanzu bari mu ga ko zan iya ping PC1 daga PC0. Kamar yadda kake gani, ping yana wucewa, kuma kwamfutar da ke da adireshin IP 192.168.10.2 ta dawo da fakiti. Don haka, mun sami nasarar kafa sadarwa tsakanin PC0 da PC1 ta hanyar sauyawa.
Don fahimtar dalilin da yasa muka yi nasara, bari mu shiga cikin saitunan canzawa kuma mu dubi tebur na VLAN.
A fasaha, wannan maɓalli yana da VLANs guda 5: VLAN1 ta tsohuwa, da kuma 1002,1003,1004 da 1005. Idan ka kalli cibiyoyin sadarwa guda 4 na ƙarshe, za ka ga cewa ba su da tallafi kuma an yi musu alama. Waɗannan cibiyoyin sadarwa ne na tsohuwar fasaha - fddi, fddinet, trnet. Ba a amfani da su a halin yanzu, amma bisa ga buƙatun fasaha har yanzu ana haɗa su cikin sababbin na'urori. Don haka, a zahiri, hanyar sadarwar mu ta tsohuwa tana da hanyar sadarwa guda ɗaya kawai - VLAN1, don haka duk tashar jiragen ruwa na kowane canjin Sisiko daga cikin akwatin an saita su don wannan hanyar sadarwa. Waɗannan tashoshin jiragen ruwa na Ethernet mai sauri 24 da tashoshin Gigabit Ethernet guda 2. Wannan yana sa daidaituwar sabbin maɓalli mafi sauƙi, saboda ta tsohuwa dukkansu ɓangare ne na VLAN1 iri ɗaya.
Dole ne mu sake sanya tashoshin jiragen ruwa waɗanda aka saita ta tsohuwa don aiki tare da VLAN1 don aiki tare da VLAN10. Fakitin Tracer ya nuna cewa a cikin yanayinmu waɗannan tashoshin jiragen ruwa ne Fa0 da Fa0/2.
Bari mu koma don canza SW0 kuma mu daidaita waɗannan tashoshin jiragen ruwa guda biyu. Don yin wannan, Ina amfani da umarnin tashar tashar daidaitawa don shigar da yanayin daidaitawa na duniya, kuma shigar da umarnin don saita wannan ƙirar - int fastEthernet 0/1. Ina buƙatar saita wannan tashar jiragen ruwa don samun damar yanayin aiki saboda tashar tashar jiragen ruwa ce kuma ina amfani da umarnin shiga yanayin switchport.
An saita wannan tashar jiragen ruwa azaman tashar shiga ta a tsaye, amma idan na haɗa wani canji zuwa gare ta, ta amfani da ka'idar DTP zai canza zuwa yanayin gangar jikin. Ta hanyar tsoho, wannan tashar jiragen ruwa na VLAN1 ne, don haka ina buƙatar yin amfani da umarnin damar shiga vlan 10. A wannan yanayin, tsarin zai ba mu saƙo cewa VLAN10 ba ya wanzu kuma yana buƙatar ƙirƙirar. Idan kun tuna, a cikin VLAN database muna da hanyar sadarwa guda ɗaya kawai - VLAN1, kuma babu hanyar sadarwa ta VLAN10 a can. Amma mun nemi maɓalli don samar da damar zuwa VLAN10, don haka mun sami saƙon kuskure.
Don haka, muna buƙatar ƙirƙirar VLAN10 kuma mu sanya wannan tashar shiga zuwa gare ta. Bayan haka, idan ka je rumbun adana bayanai na VLAN, za ka iya ganin sabuwar VLAN0010 da aka kirkira, wacce ke cikin wani yanayi mai aiki kuma wacce ke da tashar jiragen ruwa Fa0/1.
Ba mu yi wani canje-canje ga kwamfutar ba, amma kawai mun tsara tashar tashar wutar lantarki da aka haɗa ta. Yanzu bari mu yi kokarin ping da IP address 192.168.10.2, wanda muka samu nasarar yi 'yan mintoci da suka wuce. Mun gaza saboda an haɗa tashar jiragen ruwa ta PC0 a yanzu tana kan VLAN10, kuma tashar tashar PC1 tana kan VLAN1, kuma babu haɗin kai tsakanin hanyoyin sadarwa biyu. Domin kafa sadarwa tsakanin waɗannan kwamfutoci, kuna buƙatar saita tashoshin jiragen ruwa guda biyu don aiki da VLAN10. Na sake shigar da yanayin sanyi na duniya kuma na yi daidai don switchport f0/2.
Bari mu sake duba teburin VLAN. Yanzu mun ga cewa an saita VLAN10 akan tashar jiragen ruwa Fa0/1 da Fa0/2. Kamar yadda muke iya gani, yanzu ping ya yi nasara, saboda duka tashoshin jiragen ruwa na SW0 wanda aka haɗa na'urorin suna cikin hanyar sadarwa iri ɗaya. Mu gwada canza sunan hanyar sadarwar don nuna manufarta. Idan muna son yin kowane canje-canje ga VLAN, dole ne mu shiga cikin tsarin wannan hanyar sadarwa.
Don yin wannan, na rubuta vlan 10 kuma za ku ga cewa saurin umarni ya canza daga Switch (config) # zuwa Switch (config-vlan) #. Idan muka shigar da alamar tambaya, tsarin zai nuna mana umarni 3 kawai masu yiwuwa: fita, suna da a'a. Zan iya sanya suna ga cibiyar sadarwa ta amfani da umarnin suna, mayar da umarni zuwa tsohuwar yanayinsu ta hanyar buga no, ko ajiye canje-canje na ta amfani da umarnin fita. Don haka na shigar da umarnin sunan SALES kuma na fita.
Idan ka duba bayanan VLAN, za ka iya tabbatar da cewa an aiwatar da umarninmu kuma tsohon VLAN10 yanzu ana kiransa SALE - sashen tallace-tallace. Don haka, mun haɗa kwamfutoci 2 a cikin ofishinmu zuwa cibiyar sadarwar da aka kirkira ta sashen tallace-tallace. Yanzu muna buƙatar ƙirƙirar hanyar sadarwa don sashen tallace-tallace. Domin haɗa kwamfutar tafi-da-gidanka na Laptop0 zuwa wannan hanyar sadarwa, kuna buƙatar shigar da saitunan cibiyar sadarwar sa kuma shigar da adireshin IP 192.168.20.1 da subnet mask 255.255.255.0; ba ma buƙatar ƙofa ta tsohuwa. Sannan kuna buƙatar komawa zuwa saitunan canzawa, shigar da saitunan tashar jiragen ruwa tare da umarnin int fa0/3 kuma shigar da umarnin samun damar yanayin switchport. Umurni na gaba zai zama hanyar shiga switchport vlan 20.
Mun sake samun sakon cewa irin wannan VLAN ba ya wanzu kuma yana buƙatar ƙirƙirar. Kuna iya zuwa wata hanya - Zan fita daga tsarin tashar tashar tashar tashar jiragen ruwa (config-if), je zuwa Switch (config) kuma shigar da vlan 20 umurnin, ta haka ne za a samar da hanyar sadarwa ta VLAN20. Wato za ku fara ƙirƙirar hanyar sadarwa ta VLAN20, ku ba ta suna MARKETING, ku adana canje-canje tare da umarnin fita, sannan ku saita tashar jiragen ruwa don ita.
Idan ka shiga rumbun adana bayanai na VLAN tare da umurnin sh vlan, za ka iya ganin cibiyar sadarwar MARKETING da muka kirkira da tashar tashar Fa0/3. Ba zan iya yin ping kwamfutoci daga wannan kwamfutar tafi-da-gidanka ba saboda dalilai guda biyu: muna da VLANs daban-daban kuma na'urorinmu suna cikin rukunin yanar gizo daban-daban. Tunda suna cikin VLANs daban-daban, mai kunnawa zai sauke fakitin kwamfutar tafi-da-gidanka zuwa wata hanyar sadarwa saboda ba ta da tashar jiragen ruwa na VLAN20.
Kamar yadda na ce, kamfanin yana fadadawa, karamin ofishin da ke kasa bai isa ba, don haka ya sanya sashen tallace-tallace a hawa na 2 na ginin, yana sanya kwamfutoci a wurin don ma'aikata 2 kuma yana son samar da sadarwa tare da sashen tallace-tallace a kan. falon farko. Don yin wannan, dole ne ka fara ƙirƙirar akwati tsakanin masu sauyawa guda biyu - tashar Fa0/4 na maɓalli na farko da tashar Fa0/1 na maɓalli na biyu. Don yin wannan, na shiga cikin saitunan SW0 kuma shigar da umarni int f0/4 da akwati yanayin switchport.
Akwai umarnin encapsulation na akwati na switchport, amma ba a yi amfani da shi a cikin sabbin masu sauyawa saboda ta tsohuwa suna amfani da fasahar encapsulation 802.1q. Duk da haka, tsofaffin samfuran Cisco switches sun yi amfani da ka'idar ISL ta mallaka, wadda ba a yi amfani da ita ba, tun da duk masu sauyawa yanzu sun fahimci ka'idar .1Q. Ta wannan hanyar ba kwa buƙatar amfani da umarnin enc na switchport trunk.
Idan ka je yanzu VLAN database, za ka iya ganin cewa tashar jiragen ruwa Fa0/4 ya bace daga gare ta. Wannan shi ne saboda wannan tebur ɗin kawai yana lissafin tashoshin shiga da ke cikin takamaiman VLAN. Don ganin tashar tashar tashar wutar lantarki, dole ne ku yi amfani da umarnin sh int trunk.
A cikin taga layin umarni, mun ga cewa tashar Fa0 / 4 tana kunna, tana ɗaukar ka'idar 802.1q, kuma tana cikin vlan 1. Kamar yadda muka sani, idan wannan tashar tashar jirgin ruwa ta karɓi zirga-zirgar da ba ta dace ba, ta atomatik tura shi zuwa vlan na asali. 1 network. A darasi na gaba za mu yi magana ne game da kafa vlan na asali, don yanzu kawai ku tuna yadda saitunan akwati ke kama da na'urar da aka bayar.
Yanzu na je SW1 mai sauyawa na biyu, shigar da yanayin saitunan int f0/1 sannan in maimaita jerin saitin tashar jiragen ruwa kamar na baya. Tashar jiragen ruwa guda biyu Fa0/2 da Fa0/3, waɗanda kwamfutocin ma'aikatan sashen tallace-tallace ke haɗa su, dole ne a saita su cikin yanayin shiga kuma a sanya su zuwa hanyar sadarwar VLAN20.
A cikin yanayin da ya gabata, mun saita kowane tashar jiragen ruwa na sauyawa daban-daban, kuma yanzu ina so in nuna muku yadda ake hanzarta wannan tsari ta amfani da samfurin layin umarni. Kuna iya shigar da umarnin don saita kewayon int range f0/2-3, wanda zai haifar da saurin layin umarni ya zama Switch (config-if-range)#, kuma kuna iya shigar da sigina iri ɗaya ko aiwatar da umarni iri ɗaya. zuwa takamaiman kewayon tashoshin jiragen ruwa, misali, a lokaci guda don tashoshin jiragen ruwa 20.
A cikin misalin da ya gabata, mun yi amfani da damar shiga yanayin switchport iri ɗaya da samun damar shiga vlan 10 umarni sau da yawa don tashar jiragen ruwa da yawa. Ana iya shigar da waɗannan umarni sau ɗaya idan kuna amfani da kewayon tashar jiragen ruwa. Yanzu zan shigar da damar shiga yanayin switchport da damar yin amfani da switchport vlan 20 umarni don kewayon tashar tashar da aka zaɓa.
Tun da VLAN20 bai wanzu ba tukuna, tsarin zai ƙirƙira shi ta atomatik. Na buga fita don ajiye canje-canje na kuma in nemi ganin tebur na VLAN. Kamar yadda kuke gani, tashar jiragen ruwa Fa0/2 da Fa0/3 yanzu sun zama wani ɓangare na sabon ƙirƙira VLAN20.
Yanzu zan saita adireshin IP na kwamfyutocin da ke hawa na biyu na ofishinmu: Laptop1 zai karɓi adireshin 192.168.20.2 da abin rufe fuska na 255.255.255.0, kuma Laptop2 zai karɓi adireshin IP na 192.168.20.3. Mu duba ayyukan cibiyar sadarwa ta hanyar yin pinging na farko kwamfutar tafi-da-gidanka daga na biyu. Kamar yadda kuke gani, ping ɗin ya yi nasara saboda duka na'urorin biyu ɓangare ne na VLAN ɗaya kuma an haɗa su da maɓalli ɗaya.
Koyaya, kwamfyutocin sashen tallace-tallace a benaye na farko da na biyu suna haɗe da maɓalli daban-daban, kodayake suna kan VLAN ɗaya. Bari mu duba yadda ake tabbatar da sadarwa a tsakanin su, don yin haka, zan buga kwamfutar tafi-da-gidanka a bene na farko tare da adireshin IP 2 daga Laptop192.168.20.1. Kamar yadda kake gani, komai yana aiki ba tare da matsala ba duk da cewa kwamfutar tafi-da-gidanka an haɗa su da maɓalli daban-daban. Ana gudanar da sadarwa ne saboda gaskiyar cewa duka maɓallan biyu suna haɗe da akwati.
Zan iya kafa haɗi tsakanin Laptop2 da PC0? A'a, ba zan iya ba, saboda suna cikin VLANs daban-daban. Yanzu za mu daidaita hanyar sadarwar kwamfutoci PC2,3,4, wanda za mu fara ƙirƙirar akwati tsakanin canji na biyu na Fa0/4 da na uku na Fa0/1.
Na shiga cikin saitunan SW1 sannan in buga umarnin config t, bayan haka sai in kira int f0/4, sannan shigar da akwati na yanayin switchport sannan in fita umarni. Na saita na uku canza SW2 a cikin hanya guda. Mun kirkiro wani akwati, kuma za ku ga cewa bayan saitunan sun fara aiki, launin tashar jiragen ruwa ya canza daga orange zuwa kore. Yanzu kuna buƙatar saita tashar jiragen ruwa Fa0/2,0/3,0/4, waɗanda kwamfutocin sashen tallace-tallace na cibiyar sadarwar VLAN10 ke haɗa su. Don yin wannan, na shiga cikin saitunan SW2, zaɓi kewayon tashar jiragen ruwa f0/2-4 sannan in yi amfani da damar yin amfani da yanayin switchport da damar shiga vlan 10 zuwa gare su. Tun da babu hanyar sadarwa ta VLAN10 akan waɗannan tashoshin jiragen ruwa, shi ana ƙirƙira ta atomatik ta tsarin. Idan ka duba bayanan VLAN na wannan canji, za ka ga cewa yanzu tashoshin Fa0/2,0/3,0/4 na VLAN10 ne.
Bayan haka, kuna buƙatar saita hanyar sadarwa don kowane ɗayan waɗannan kwamfutoci guda 3 ta hanyar shigar da adiresoshin IP da masks na subnet. PC2 yana karɓar adireshin 192.168.10.3, PC3 yana karɓar adireshin 192.168.10.4, kuma PC4 yana karɓar adireshin IP 192.168.10.5.
Don amsa tambayar ko cibiyar sadarwar mu tana aiki, bari mu ping PC0 a bene na farko daga PC4, wanda yake a bene na 3 ko a wani gini. Pinging ya kasa, don haka bari mu yi ƙoƙari mu gano dalilin da ya sa ba za mu iya yin hakan ba.
Lokacin da muka yi ƙoƙarin ping Laptop0 daga Laptop2, komai ya yi kyau, duk da cewa an haɗa kwamfyutocin zuwa maɓalli daban-daban. Me yasa yanzu, lokacin da kwamfutocin sashen tallace-tallacenmu suna da alaƙa daidai da na'urori daban-daban waɗanda aka haɗa ta akwati, ping ɗin baya aiki? Domin fahimtar dalilin matsalar, kuna buƙatar tuna yadda maɓalli ke aiki.
Lokacin da muka aika fakiti daga PC4 don canza SW2, yana ganin fakitin yana isa tashar tashar Fa0/4. Maɓallin ya duba bayanansa kuma ya gano cewa tashar Fa0/4 ta VLAN10 ce. Bayan wannan, maɓalli ya sanya alamar firam tare da lambar hanyar sadarwa, wato, haɗa taken VLAN10 zuwa fakitin zirga-zirga, kuma ya aika da shi tare da gangar jikin zuwa canjin na biyu SW1. Wannan maɓalli ya “karanta” rubutun kuma ya ga cewa fakitin an tsara shi don VLAN10, ya duba cikin bayanan VLAN ɗinsa kuma, ya gano cewa babu VLAN10 a wurin, ya watsar da fakitin. Don haka, na'urorin PC2,3 da 4 suna iya sadarwa tare da juna ba tare da matsala ba, amma ƙoƙarin kafa sadarwa tare da kwamfutoci PC0 da PC1 ya ci tura saboda switch SW1 bai san komai game da hanyar sadarwar VLAN10 ba.
Zamu iya gyara wannan matsala cikin sauƙi ta hanyar zuwa saitunan SW1, ƙirƙirar VLAN10 ta amfani da umarnin vlan 10 kuma shigar da sunanta MARKETING. Bari mu yi ƙoƙari mu maimaita ping - kun ga cewa an yi watsi da fakiti uku na farko, kuma na huɗu ya yi nasara. An bayyana wannan ta gaskiyar cewa mai sauyawa ya fara bincika adiresoshin IP kuma ya ƙayyade adireshin MAC, wannan ya ɗauki ɗan lokaci, don haka fakiti uku na farko an jefar da su ta hanyar ƙarewa. Yanzu an kafa haɗin kai saboda mai sauyawa ya sabunta teburin adireshin MAC kuma yana aika fakiti kai tsaye zuwa adireshin da ake buƙata.
Duk abin da na yi don gyara matsalar shine shiga cikin saitunan maɓalli na tsakiya sannan in ƙirƙiri hanyar sadarwa ta VLAN10 a wurin. Don haka, ko da cibiyar sadarwa ba ta da alaƙa kai tsaye tare da sauyawa, har yanzu tana buƙatar sanin duk hanyoyin sadarwar da ke cikin haɗin yanar gizon. Duk da haka, idan cibiyar sadarwar ku tana da masu sauyawa ɗari, ba za ku iya shiga cikin saitunan kowane ba kuma ku tsara ID na VLAN da hannu. Shi ya sa muke amfani da ka'idar VTP, tsarin da za mu duba a koyaswar bidiyo na gaba.
Don haka, a yau mun rufe duk abin da muka tsara: yadda ake ƙirƙirar VLANs, yadda ake sanya tashoshin jiragen ruwa na VLAN, da yadda ake duba bayanan VLAN. Don ƙirƙirar cibiyoyin sadarwa, muna shigar da yanayin daidaitawa na duniya kuma muna amfani da umarnin vlan <lamba>, za mu iya sanya suna zuwa cibiyar sadarwar da aka ƙirƙira ta amfani da sunan <name> umarni.
Hakanan zamu iya ƙirƙirar VLAN wata hanya ta hanyar shigar da yanayin dubawa da amfani da ikon shiga vlan <lamba> umarni. Idan babu hanyar sadarwa tare da wannan lambar, za a ƙirƙira ta ta atomatik ta tsarin. Ka tuna amfani da umarnin fita bayan yin canje-canje ga saitunan farko, in ba haka ba ba za a adana su a cikin bayanan VLAN ba. Sannan zaku iya sanya tashoshin jiragen ruwa zuwa takamaiman VLANs ta amfani da umarnin da suka dace.
Umurnin samun damar yanayin switchport yana jujjuya hanyar sadarwa zuwa yanayin samun tashar tashar jiragen ruwa, bayan haka an sanya adadin VLAN mai dacewa zuwa tashar jiragen ruwa tare da ikon shiga vlan <lambar> umarni. Don duba bayanan VLAN, yi amfani da umarnin show vlan, wanda dole ne a shigar da shi cikin yanayin EXEC mai amfani. Don duba jerin tashoshin jiragen ruwa, yi amfani da umarnin int Trunk show.
Na gode da kasancewa tare da mu. Kuna son labaran mu? Kuna son ganin ƙarin abun ciki mai ban sha'awa? Goyon bayan mu ta hanyar ba da oda ko ba da shawara ga abokai, Rangwamen 30% ga masu amfani da Habr akan keɓaɓɓen analogue na sabar matakin shigarwa, wanda mu muka ƙirƙira muku: (akwai tare da RAID1 da RAID10, har zuwa 24 cores kuma har zuwa 40GB DDR4).
Dell R730xd sau 2 mai rahusa? Nan kawai a cikin Netherlands! Dell R420 - 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB - daga $99! Karanta game da
source: www.habr.com