A yau za mu kalli ka'idar Trunking Protocol DTP da VTP - VLAN Trunking Protocol. Kamar yadda na fada a darasi na baya, za mu bi batutuwan jarrabawar ICND2 a cikin tsari da aka jera su a gidan yanar gizon Cisco.
Lokaci na ƙarshe mun kalli aya 1.1, kuma a yau za mu kalli 1.2 - saitin, dubawa da warware matsalar hanyoyin haɗin yanar gizo: ƙara da cire VLANs daga gangar jikin da DTP da ka'idojin VTP 1 da 2.
An saita duk tashar jiragen ruwa masu sauyawa daga cikin akwatin ta tsohuwa don amfani da Yanayin Mota mai Sauyi na ka'idar DTP. Wannan yana nufin cewa lokacin da aka haɗa tashoshi biyu na maɓalli daban-daban, ana kunna akwati kai tsaye a tsakanin su idan ɗayan tashar yana cikin akwati ko yanayin kyawawa. Idan tashar jiragen ruwa na maɓallai biyu suna cikin Yanayin Mota mai Sauƙi, ba a kafa gangar jikin ba.
Don haka, komai ya dogara da saita yanayin aiki na kowane maɓalli 2. Don sauƙin fahimta, na yi tebur na yuwuwar haɗuwa da hanyoyin DTP na masu sauyawa biyu. Kuna ganin cewa idan duka maɓallan biyu suna amfani da Dynamic Auto, ba za su samar da akwati ba, amma za su kasance cikin yanayin shiga. Don haka, idan kuna son ƙirƙirar akwati tsakanin maɓalli biyu, dole ne ku tsara aƙalla ɗaya daga cikin masu sauya zuwa yanayin Trunk, ko tsara tashar tashar jirgin ruwa don amfani da yanayin Dynamic Desirable. Kamar yadda za a iya gani daga tebur, kowane daga cikin tashoshin jiragen ruwa na iya zama a cikin daya daga cikin 4 halaye: Access, Dynamic Auto, Dynamic Desirable ko Trunk.
Idan an saita tashoshin jiragen ruwa biyu don Samun shiga, maɓallan da aka haɗa zasu yi amfani da yanayin shiga. Idan an saita tashar jiragen ruwa ɗaya don Dynamic Auto da ɗayan don Samun shiga, duka biyun zasu yi aiki a yanayin shiga. Idan daya tashar jiragen ruwa yana aiki a yanayin Access, ɗayan kuma a yanayin Trunk, ba zai yiwu a haɗa maɓallan ba, don haka ba za a iya amfani da wannan haɗin hanyoyin ba.
Don haka, don trunking ya yi aiki, dole ne a tsara ɗaya daga cikin tashar jiragen ruwa don Trunk, ɗayan kuma don Trunk, Dynamic Auto ko Dynamic Desirable. Hakanan an kafa akwati idan an saita tashoshin jiragen ruwa biyu zuwa Dynamic Desirable.
Bambanci tsakanin Dynamic Desirable da Dynamic Auto shine cewa a yanayin farko, tashar jiragen ruwa da kanta tana fara gangar jikin, tana aika firam ɗin DTP zuwa tashar jiragen ruwa na sauyawa na biyu. A yanayi na biyu, tashar tashoshi tana jira har sai wani ya fara sadarwa da ita, kuma idan tashar jiragen ruwa guda biyu aka daidaita su zuwa Dynamic Auto, ba a taɓa yin akwati a tsakanin su ba. A cikin yanayin Dynamic Desirable, yanayin ya kasance akasin haka - idan aka saita duka tashoshin jiragen ruwa don wannan yanayin, dole ne a sami akwati a tsakanin su.
Ina ba ku shawara ku tuna da wannan tebur, saboda zai taimaka muku daidaita maɓallan da aka haɗa da juna daidai. Bari mu kalli wannan bangare a cikin shirin Packet Tracer. Na haɗa sauye-sauye guda 3 tare a cikin jerin kuma yanzu zan nuna windows console na CLI don kowane ɗayan waɗannan na'urori akan allon.
Idan na shigar da umarnin int Trunk show, ba za mu ga kowane akwati ba, wanda yake gaba ɗaya na halitta idan babu saitunan da suka dace, tunda an saita duk masu sauyawa don yanayin Dynamic Auto. Idan na nemi nuna sigogin mu'amala na f0/1 na tsakiyar sauyawa, za ku ga cewa a cikin yanayin saitunan gudanarwa an jera siginar atomatik mai ƙarfi.
Maɓalli na uku da na farko suna da saitunan iri ɗaya - kuma suna da tashar jiragen ruwa f0/1 a cikin yanayin atomatik mai ƙarfi. Idan kun tuna tebur, don trunking duk tashar jiragen ruwa dole ne su kasance cikin yanayin gangar jikin ko kuma ɗayan tashar jiragen ruwa dole ne ya kasance cikin yanayin Dynamic Desirable.
Bari mu shiga cikin saitunan SW0 na farko kuma mu saita tashar jiragen ruwa f0/1. Bayan shigar da umarnin yanayin switchport, tsarin zai ba ku damar yiwuwar sigogin yanayin: samun dama, mai ƙarfi ko akwati. Ina amfani da yanayin switchport dynamic kyawawa umarni, kuma za ka iya lura da yadda akwati tashar jiragen ruwa f0/1 na biyu canji, bayan shigar da wannan umurnin, da farko ya shiga cikin ƙasa jihar, sa'an nan, bayan samun DTP frame na farko canji, tafi. cikin halin da ake ciki.
Idan yanzu mun shigar da umarnin int akwati a cikin CLI console na sauya SW1, za mu ga cewa tashar jiragen ruwa f0/1 tana cikin yanayin trunking. Ina shigar da umarni iri ɗaya a cikin na'ura mai ba da hanya tsakanin hanyoyin sadarwa na switch SW1 kuma in ga bayanin iri ɗaya, wato, yanzu an shigar da akwati tsakanin masu sauya SW0 da SW1. A wannan yanayin, tashar tashar ta farko tana cikin yanayin kyawawa, kuma tashar tashar ta biyu tana cikin yanayin atomatik.
Babu haɗin kai tsakanin na biyu da na uku switches, don haka sai na je zuwa saituna na uku canji kuma shigar da umurnin switchport yanayin dynamic kyawawa. Kuna ganin cewa a cikin sauyawa na biyu irin waɗannan canje-canjen sun faru, kawai yanzu sun taɓa tashar f0/2, wanda aka haɗa shi 3. Yanzu sauyawa na biyu yana da kututtuka guda biyu: ɗaya akan dubawa f0/1, na biyu akan f0/2. Ana iya ganin wannan idan kuna amfani da umarnin int Trunk show.
Dukansu tashoshin jiragen ruwa na na biyu suna cikin yanayin atomatik, wato, don trunking tare da maɓallan maƙwabta, tashoshin su dole ne su kasance cikin akwati ko yanayin kyawawa, saboda a cikin wannan yanayin akwai nau'ikan 2 kawai don kafa gangar jikin. Yin amfani da tebur, koyaushe kuna iya saita tashar jiragen ruwa ta yadda za ku tsara akwati a tsakanin su. Wannan shine ainihin amfani da ƙa'idar Trunking Protocol DTP.
Bari mu fara kallon VLAN Trunking Protocol, ko VTP. Wannan yarjejeniya tana tabbatar da aiki tare da bayanan VLAN na na'urorin sadarwa daban-daban, tare da aiwatar da canja wurin bayanan VLAN da aka sabunta daga wannan na'ura zuwa wata. Bari mu koma da'irar mu na maɓalli 3. VTP na iya aiki ta hanyoyi 3: uwar garken, abokin ciniki da kuma m. VTP v3 yana da wani yanayin da ake kira Off, amma jarrabawar Cisco ta ƙunshi nau'ikan VTP XNUMX da XNUMX kawai.
Ana amfani da yanayin uwar garken don ƙirƙirar sabbin VLANs, sharewa ko canza cibiyoyin sadarwa ta hanyar sauya layin umarni. A yanayin abokin ciniki, ba za a iya aiwatar da ayyuka akan VLANs ba; a cikin wannan yanayin, kawai ana sabunta bayanan VLAN daga uwar garken. Yanayin gaskiya yana aiki kamar an kashe ka'idar VTP, wato, maɓalli ba ya fitar da saƙon VTP na kansa, amma yana aika sabuntawa daga wasu na'urori - idan sabuntawa ya zo kan ɗaya daga cikin tashar jiragen ruwa, ya wuce ta kanta kuma ya aika. yana kara kan hanyar sadarwa ta wata tashar jiragen ruwa. A cikin yanayin gaskiya, maɓalli yana aiki ne kawai azaman mai isar da saƙon wasu ba tare da sabunta bayanan VLAN na kansa ba.
A kan wannan nunin za ku ga umarnin daidaitawar yarjejeniya ta VTP da aka shigar a cikin yanayin daidaitawar duniya. Umurnin farko na iya canza sigar yarjejeniya da aka yi amfani da ita. Umurni na biyu yana zaɓar yanayin aiki na VTP.
Idan kana son ƙirƙirar yankin VTP, yi amfani da yankin vtp <domain name> umurnin, kuma don saita kalmar sirri ta VTP kana buƙatar shigar da kalmar sirri ta vtp <PASSWORD>. Bari mu je CLI console na farkon sauyawa kuma mu kalli matsayin VTP ta shigar da umarnin matsayin vtp show.
Ka ga sigar ka'idar VTP ita ce ta biyu, matsakaicin adadin VLANs masu goyan baya shine 255, adadin VLAN da ke akwai shine 5, yanayin aiki na VLAN shine uwar garken. Waɗannan duk saitunan tsoho ne. Mun riga mun tattauna VTP a darasi na Day 30, don haka idan kun manta wani abu, zaku iya komawa ku sake kallon wannan bidiyon.
Don ganin bayanan VLAN, na ba da umarnin vlan taƙaitaccen umarni. Ana nuna VLAN1 da VLAN1002-1005 anan. Ta hanyar tsoho, duk musaya masu kyauta na sauyawa ana haɗa su zuwa cibiyar sadarwar farko - 23 Fast Ethernet tashar jiragen ruwa da 2 Gigabit Ethernet tashar jiragen ruwa, sauran 4 VLANs ba su da tallafi. Rukunin bayanan VLAN na sauran masu sauyawa guda biyu sunyi daidai, sai dai cewa SW1 ba shi da 23, amma 22 Fast Ethernet tashar jiragen ruwa kyauta don VLANs, tun da f0/1 da f0/2 suna shagaltar da kututtuka. Bari in sake tunatar da ku abin da aka tattauna a darasi "Ranar 30" - ka'idar VTP kawai tana goyon bayan sabunta bayanan VLAN.
Idan na saita tashoshin jiragen ruwa da yawa don amfani da VLANs tare da damar sauya tashar jiragen ruwa da samun damar shiga yanayin sauyawar VLAN10, VLAN20, ko VLAN30 umarni, tsarin waɗannan tashoshin jiragen ruwa ba za su kwaikwayi ta VTP ba saboda VTP kawai tana sabunta bayanan VLAN.
Don haka, idan aka saita ɗaya daga cikin tashoshin jiragen ruwa na SW1 don yin aiki tare da VLAN20, amma wannan hanyar sadarwar ba ta cikin bayanan VLAN, tashar za ta kashe. Bi da bi, sabunta bayanai yana faruwa ne kawai lokacin amfani da ka'idar VTP.
Yin amfani da umarnin matsayin vtp show, na ga cewa duk masu sauyawa 3 yanzu suna cikin yanayin uwar garken. Zan canza tsakiyar sauya SW1 zuwa yanayin gaskiya tare da yanayin gaskiya na vtp, da na uku canza SW2 zuwa yanayin abokin ciniki tare da umarnin abokin ciniki na yanayin vtp.
Yanzu bari mu koma SW0 na farko kuma mu ƙirƙiri yankin nwking.org ta amfani da yankin vtp <yankin yanki> umarni. Idan yanzu ka kalli yanayin VTP na canji na biyu, wanda ke cikin yanayin bayyananne, za ka ga cewa bai yi komai ba ga ƙirƙirar yankin - filin VTP Domain Name ya kasance fanko. Koyaya, canji na uku, wanda ke cikin yanayin abokin ciniki, ya sabunta bayanan sa kuma yanzu yana da sunan yankin VTP-nwking.org. Don haka, sabuntawar bayanan bayanai na sauya SW0 ya wuce ta SW1 kuma an nuna shi a cikin SW2.
Yanzu zan yi ƙoƙarin canza ƙayyadadden sunan yankin, wanda zan je zuwa saitunan SW0 kuma in buga umarnin yankin vtp na NetworkKing. Kamar yadda kake gani, wannan lokacin babu sabuntawa - sunan yankin VTP akan sauyi na uku ya kasance iri ɗaya. Gaskiyar ita ce, irin wannan sabunta sunan yankin yana faruwa sau ɗaya kawai, lokacin da yankin tsoho ya canza. Idan bayan wannan sunan yankin VTP ya sake canzawa, zai buƙaci a canza shi da hannu akan sauran maɓallan.
Yanzu zan ƙirƙiri sabuwar hanyar sadarwa ta VLAN100 a cikin CLI console na farkon sauyawa kuma in kira shi IMRAN. Ya bayyana a cikin VLAN database na farko canji, amma bai bayyana a cikin database na uku canji, domin wadannan su ne daban-daban domains. Ka tuna cewa sabunta bayanan VLAN yana faruwa ne kawai idan duka masu sauyawa suna da yanki iri ɗaya, ko, kamar yadda na nuna a baya, an saita sabon sunan yanki maimakon sunan tsoho.
Na shiga cikin saitunan maɓalli 3 kuma a bi da bi shigar da yanayin vtp da vtp domain NetworkKing. Da fatan za a lura cewa shigar da suna yana da mahimmanci, don haka rubutun sunan yankin dole ne ya kasance daidai daidai da maɓallan biyu. Yanzu na mayar da SW2 cikin yanayin abokin ciniki ta amfani da umarnin abokin ciniki na yanayin vtp. Bari mu ga abin da ya faru. Kamar yadda kake gani, yanzu, idan sunan yankin ya yi daidai, an sabunta bayanan SW2 kuma sabuwar hanyar sadarwa ta VLAN100 IMRAN ta bayyana a ciki, kuma waɗannan canje-canjen ba su da wani tasiri akan matsakaicin sauyawa, saboda yana cikin yanayin bayyane.
Idan kuna son kare kanku daga shiga mara izini, zaku iya ƙirƙirar kalmar sirri ta VTP. Duk da haka, dole ne ka tabbata cewa na'urar da ke gefe za ta sami kalmar sirri iri ɗaya, saboda kawai a wannan yanayin ne kawai za ta iya karɓar sabuntawar VTP.
Abu na gaba da za mu duba shi ne VTP pruning, ko "yanke" na VLANs marasa amfani. Idan kuna da na'urori 100 akan hanyar sadarwar ku waɗanda ke amfani da ka'idar VTP, to, sabunta bayanai na VLAN akan na'ura ɗaya za ta atomatik zuwa sauran na'urori 99. Koyaya, ba duk waɗannan na'urori ba ne ke da VLANs da aka ambata a cikin sabuntawa, don haka ƙila ba a buƙatar bayanai game da su.
Aika sabuntawar bayanan VLAN zuwa na'urori ta amfani da VTP yana nufin cewa duk tashar jiragen ruwa akan duk na'urori za su sami bayani game da ƙara, cirewa, da canza VLANs waɗanda ƙila ba su da wani abu da su. A lokaci guda, hanyar sadarwa ta zama toshe tare da wuce gona da iri. Don hana faruwar hakan, ana amfani da manufar trimming VTP. Domin kunna yanayin "tsatsa" na VLANs marasa dacewa akan sauyawa, yi amfani da umarnin pruning vtp. Sa'an nan kuma masu sauyawa za su gaya wa juna ta atomatik wane VLANs suke amfani da su, ta haka ne suka gargadi makwabta cewa ba sa bukatar aika sabuntawa zuwa cibiyoyin sadarwar da ba su da alaka da su.
Misali, idan SW2 ba shi da kowane tashar jiragen ruwa na VLAN10, to baya buƙatar SW1 don aika masa zirga-zirgar wannan hanyar sadarwa. A lokaci guda, canza SW1 yana buƙatar zirga-zirgar VLAN10 saboda ɗayan tashar jiragen ruwa yana da alaƙa da wannan hanyar sadarwa, kawai ba ya buƙatar aika wannan zirga-zirga don canza SW2.
Don haka idan SW2 yana amfani da yanayin pruning vtp, yana gaya wa SW1: "Don Allah kar a aiko mini da zirga-zirga don VLAN10 saboda wannan hanyar sadarwar ba ta da alaƙa da ni kuma babu ɗayan tashoshin jiragen ruwa na da aka saita don yin aiki tare da wannan hanyar sadarwa." Wannan shine abin da yin amfani da umarnin pruning vtp yayi.
Akwai wata hanya don tace zirga-zirga don ƙayyadaddun dubawa. Yana ba ku damar saita tashar jiragen ruwa akan akwati tare da takamaiman VLAN. Lalacewar wannan hanyar ita ce buƙatar saita kowane tashar jirgin ruwa da hannu, wanda zai buƙaci a fayyace waɗanne VLANs aka yarda da waɗanda aka haramta. Don yin wannan, ana amfani da jerin umarni 3. Na farko yana nuna ma'amalar da waɗannan hane-hane suka shafa, na biyu yana jujjuya wannan haɗin zuwa tashar tashar jirgin ruwa, kuma na uku - akwati na switchport da aka ba da izinin vlan <duk / babu / ƙara / cire / lambar VLAN> - yana nuna wanda aka yarda da VLAN akan wannan tashar jiragen ruwa: duk, ba kowa, VLAN da za a kara ko VLAN da za a goge.
Dangane da takamaiman halin da ake ciki, za ku zaɓi abin da za ku yi amfani da shi: VTP pruning ko Trunk da aka yarda. Wasu ƙungiyoyi sun fi son kada su yi amfani da VTP don dalilai na tsaro, don haka sun zaɓi su saita trunking da hannu. Tun da umarnin vtp pruning ba ya aiki a cikin Fakiti Tracer, zan nuna shi a cikin GNS3 emulator.
Idan ka shiga cikin saitunan SW2 kuma ka shigar da umarnin pruning vtp, tsarin nan da nan zai ba da rahoton cewa an kunna wannan yanayin: Ana kunna datsewa, wato VLAN “pruning” yana kunna tare da umarni ɗaya kawai.
Idan muka buga umarnin matsayi na show vtp, za mu ga cewa an kunna yanayin pruning vtp.
Idan kuna saita wannan yanayin akan uwar garken sauyawa, to ku je zuwa saitunan sa sannan ku shigar da umarnin pruning vtp. Wannan yana nufin cewa na'urorin da ke da alaƙa da uwar garken za su yi amfani da vtp pruning ta atomatik don rage zirga-zirgar zirga-zirga don VLANs marasa mahimmanci.
Idan baku son amfani da wannan yanayin, dole ne ku shiga cikin takamaiman ƙayyadaddun dubawa, misali e0/0, sannan ku fitar da gangar jikin switchport da izinin vlan. Tsarin zai ba ku alamu game da yuwuwar sigogi na wannan umarni:
- KALMOMI - lambar VLAN wacce za a ba da izini akan wannan ƙirar a cikin yanayin akwati;
- ƙara - VLAN don ƙarawa zuwa jerin bayanan VLAN;
- duk - ba da damar duk VLANs;
- ban da - ba da izinin duk VLANs ban da waɗanda aka ƙayyade;
- babu - haramta duk VLANs;
- cire-cire VLAN daga jerin bayanan VLAN.
Misali, idan muna da gangar jikin da aka ba da izini don VLAN10 kuma muna son ba da izini don hanyar sadarwar VLAN20, to muna buƙatar shigar da gangar jikin switchport yarda vlan ƙara umarnin 20.
Ina so in nuna muku wani abu dabam, don haka ina amfani da umarnin akwati na nunin dubawa. Lura cewa ta tsohuwa an ba da izinin duk VLANs 1-1005 don akwati, kuma yanzu an ƙara VLAN10 zuwa gare su.
Idan na yi amfani da gangar jikin switchport da aka yarda vlan ƙara umarni 20 kuma sake tambaya don nuna matsayin gangar jikin, zamu iya ganin cewa gangar jikin yanzu tana da hanyoyin sadarwa guda biyu da aka yarda - VLAN10 da VLAN20.
A wannan yanayin, babu wani zirga-zirga, sai na waɗanda aka yi niyya don ƙayyadaddun hanyoyin sadarwa, da za su iya wucewa ta wannan akwati. Ta hanyar barin zirga-zirga don VLAN 10 da VLAN 20 kawai, mun hana zirga-zirga don duk sauran VLANs. Anan ga yadda ake saita saitunan trunking da hannu don takamaiman VLAN akan ƙayyadaddun mu'amalar sauyawa.
Lura cewa har zuwa ƙarshen ranar 17 ga Nuwamba, 2017, muna da ragi na 90% akan farashin zazzage aikin dakin gwaje-gwaje akan wannan batu akan gidan yanar gizon mu.
Na gode da kulawar ku kuma mu gan ku a darasin bidiyo na gaba!
Na gode da kasancewa tare da mu. Kuna son labaran mu? Kuna son ganin ƙarin abun ciki mai ban sha'awa? Goyon bayan mu ta hanyar ba da oda ko ba da shawara ga abokai, Rangwamen 30% ga masu amfani da Habr akan keɓaɓɓen analogue na sabar matakin shigarwa, wanda mu muka ƙirƙira muku: (akwai tare da RAID1 da RAID10, har zuwa 24 cores kuma har zuwa 40GB DDR4).
Dell R730xd sau 2 mai rahusa? Nan kawai a cikin Netherlands! Dell R420 - 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB - daga $99! Karanta game da
source: www.habr.com