Chidzidzo chanhasi tichazvipira kune VLAN marongero, ndiko kuti, isu tichaedza kuita zvese zvatakataura nezvazvo muzvidzidzo zvakapfuura. Iye zvino tichatarisa mibvunzo mitatu: kugadzira VLAN, kugovera VLAN ports, uye kuona VLAN database.
Ngativhure iyo Cisco Packer tracer chirongwa hwindo ine inonzwisisika topology yetiweki yedu yakadhonzwa neni.
Yekutanga switch SW0 yakabatana nemakomputa maviri PC2 nePC0, yakabatana muVLAN1 network ine IP kero siyana ye10/192.168.10.0. Saizvozvo, IP kero yemakomputa aya ichava 24 uye 192.168.10.1. Kazhinji vanhu vanozivisa nhamba yeVLAN nechitatu octet yeIP kero, kwatiri iri gumi, zvisinei ichi hachisi chinhu chinosungirwa kugadzira network, unogona kugovera chero VLAN identifier, zvisinei kurongeka uku kunogamuchirwa mumakambani makuru nekuti inoita kuti zvive nyore kugadzirisa network.
Chinotevera chinja SW1, iyo yakabatana kune VLAN20 network ine IP kero 192.168.20.0/24 ine malaptop maviri Laptop1 uye Laptop2.
VLAN10 iri pane 1st floor yehofisi yekambani uye inomiririra yekutengesa manejimendi network. Laptop0 yemutengesi, inova yeVLAN0, yakabatana kune imwechete switch SW20. Iyi network inosvika kune 2nd floor, uko vamwe vashandi varipo, uye yakabatana nedhipatimendi rekutengesa, iro rinogona kunge riri mune chimwe chivako kana pa3rd floor yehofisi imwechete. Pane mamwe makomputa matatu akaiswa pano - PC3 uye 2,3, ari chikamu cheVLAN4 network.
VLAN10, seVLAN20, inofanirwa kupa kutaurirana kusinga vhiringike kune vese vashandi, zvisinei nekuti vari pauriri hwakasiyana kana muzvivakwa zvakasiyana. Iyi ndiyo network network yatichatarisa nhasi.
Ngatitangei kuimisa uye kutanga nePC0. Nekudzvanya pane icon, isu tichapinda mukombuta network network toisa IP kero 192.168.10.1 uye subnet mask 255.255.255.0. Ini handiisi iyo default gedhi kero nekuti inodiwa kubuda kubva kune imwe yemuno network kuenda kune imwe, uye kwatiri isu hatingaite neOSI layer 3 marongero, isu tinongofarira layer 2, uye isu hatisi kuzofunga nezve. kuendesa traffic kune imwe mambure.
Isu tichagadzirisa iyo intranet uye chete iwo mahosi ari chikamu chayo. Ipapo tichaenda kuPC2 toita zvimwe chete zvatakaita yekutanga PC. Zvino ngationei kana ndichigona kubaya PC1 kubva kuPC0. Sezvaunogona kuona, ping inopfuura, uye kombiyuta ine IP kero 192.168.10.2 inodzorera nechivimbo mapepa. Nekudaro, isu takabudirira kumisa kutaurirana pakati pePC0 nePC1 kuburikidza nekuchinja.
Kuti tinzwisise kuti sei takabudirira, ngatipindei muzvigadziriso zvekuchinja uye titarise patafura yeVLAN.
Neunyanzvi, Switch iyi ine 5 VLANs: VLAN1 by default, uyewo 1002,1003,1004 uye 1005. Kana ukatarisa okupedzisira 4 network, unogona kuona kuti havana kutsigirwa uye akaiswa chiratidzo unsupported. Aya ndiwo chaiwo network ekare tekinoroji - fddi, fddinet, trnet. Izvo hazvisati zvashandiswa parizvino, asi zvinoenderana nezvinodiwa zvehunyanzvi zvichiri kuverengerwa mumidziyo mitsva. Nekudaro, muchokwadi, switch yedu ine nekusarudzika chete imwechete chaiyo network - VLAN1, saka ese madoko echero Cisco switch kunze kwebhokisi akagadzirirwa iyi network. Aya ndiwo 24 Fast Ethernet ports uye 2 Gigabit Ethernet ports. Izvi zvinoita kuti kuenderana kwekuchinja kutsva kuve nyore, nekuti nekusarudzika ese ari chikamu cheiyo VLAN1.
Isu tinofanirwa kugoverazve madoko akagadziriswa nekusarudzika kushanda neVLAN1 kushanda neVLAN10. Packet Tracer inoratidza kuti kwatiri aya madoko Fa0 uye Fa0/2.
Ngatidzokei kunochinja SW0 uye tigadzirise aya madoko maviri. Kuti ndiite izvi, ini ndinoshandisa iyo configure terminal command kupinda pasi rose configuration mode, uye isa murairo kugadzirisa iyi interface - int fastEthernet 0/1. Ini ndinofanira kuseta iyi chiteshi kuti iwane yekushandisa mode nekuti inzvimbo yekupinda uye ndiri kushandisa switchport mode yekuwana command.
Chiteshi ichi chinogadziriswa senge static yekupinda chiteshi, asi kana ndikabatanidza imwe switch kwairi, ndichishandisa iyo DTP protocol inochinja kune dynamic trunk mode. Nokusingaperi, chikwata ichi ndecheVLAN1, saka ndinoda kushandisa switchport access vlan command 10. Muchiitiko ichi, hurongwa huchatipa mharidzo yokuti VLAN10 haipo uye inoda kugadzirwa. Kana iwe uchiyeuka, muVLAN dhatabhesi tine network imwe chete - VLAN1, uye hapana VLAN10 network ipapo. Asi isu takakumbira switch kuti ipe mukana kuVLAN10, saka takagamuchira meseji yekukanganisa.
Naizvozvo, isu tinofanirwa kugadzira VLAN10 uye kupa iyi chiteshi chekupinda kwairi. Mushure meizvi, kana iwe ukaenda kuVLAN dhatabhesi, unogona kuona iyo ichangobva kugadzirwa VLAN0010, iri munzvimbo inoshanda uye ine muridzi port Fa0/1.
Hatina kuita shanduko pakombuta, asi takangogadzira switch port kwayakabatanidzwa. Zvino ngatiedzei kubaya IP kero 192.168.10.2, yatakabudirira kuita maminetsi mashoma apfuura. Isu takundikana nekuti port PC0 yakabatana nayo ikozvino paVLAN10, uye port PC1 yakabatana nayo ichiri paVLAN1, uye hapana kubatana pakati pemambure maviri. Kuti utange kutaurirana pakati pemakomputa aya, unofanirwa kugadzirisa ese madoko kuti ashande neVLAN10. Ini ndinopinda yepasirese yekumisikidza modhi zvakare uye ndoita zvimwe chete zve switchport f0/2.
Ngatitarisei zvakare patafura yeVLAN. Iye zvino tava kuona kuti VLAN10 inogadziriswa pachiteshi Fa0/1 uye Fa0/2. Sezvatinoona, ikozvino ping yakabudirira, nekuti ese madoko eSW0 switch kune iyo michina yakabatana ndeyeiyo imwechete network. Ngatiedze kushandura zita retiweki kuratidza chinangwa chayo. Kana isu tichida kuita chero shanduko kuVLAN, isu tinofanirwa kupinda mukugadziriswa kwetiweki iyi.
Kuti ndiite izvi, ini ndinonyora vlan 10 uye iwe unogona kuona kuti iyo yekuraira yachinja kubva kuChinja (config) # kuenda kuChinja (config-vlan) #. Kana isu tikaisa chiratidzo chemubvunzo, iyo sisitimu inotiratidza chete 3 mirairo inogoneka: kubuda, zita uye kwete. Ini ndinogona kupa zita kune network ndichishandisa zita rekuraira, dzosera mirairo kune yavo yekusarudzika nekunyora kwete, kana kuchengetedza shanduko dzangu uchishandisa yekubuda. Saka ini ndinoisa iyo yemirairo zita SALES uye kubuda.
Kana iwe ukatarisa kune VLAN dhatabhesi, unogona kuve nechokwadi chekuti mirairo yedu yaitwa uye yaimbova VLAN10 yava kunzi SALES - sales department. Saka, takabatanidza 2 makomputa muhofisi yedu kune yakagadzirwa network yedhipatimendi rekutengesa. Iye zvino tinoda kugadzira network yedhipatimendi rekushambadzira. Kuti ubatanidze laptop yeLaptop0 kunetiweki iyi, unofanirwa kuisa marongero ayo etiweki woisa IP kero 192.168.20.1 uye subnet mask 255.255.255.0; hatidi gedhi rekutanga. Ipapo iwe unofanirwa kudzokera kune zvigadziriso zvekuchinja, pinda marongero echiteshi neiyo int fa0/3 kuraira uye isa iyo switchport mode yekuwana command. Murairo unotevera uchave switchport yekuwana vlan 20.
Isu tinogashira zvakare meseji yekuti VLAN yakadaro haipo uye inoda kugadzirwa. Iwe unogona kuenda neimwe nzira - ini ndichabuda iyo Shandura chiteshi chekugadzirisa (config-kana), enda kuChinja (config) uye isa vlan 20 command, nekudaro ndichigadzira iyo VLAN20 network. Kureva kuti, unogona kutanga wagadzira network yeVLAN20, woipa zita rekuti MARKETING, chengetedza shanduko nemirairo yekubuda, wozogadzirisa chiteshi chayo.
Kana iwe ukapinda muVLAN dhatabhesi ine sh vlan kuraira, unogona kuona iyo MARKETING network yatakagadzira uye inoenderana port Fa0/3. Ini handisi kuzokwanisa kubaya makomputa kubva palaptop iyi nekuda kwezvikonzero zviviri: isu tine maVLAN akasiyana uye zvishandiso zvedu ndezvema subnets akasiyana. Sezvo vari veVLAN dzakasiyana, switch inodonhedza mapaketi elaptop anonangidzirwa kune imwe network nekuti haina chiteshi cheVLAN20.
Sezvandakataura, kambani iri kuwedzera, hofisi diki pauriri hwepasi haina kukwana, saka inoisa dhipatimendi rekushambadzira pa2nd floor yechivako, inoisa makomputa ipapo kune vashandi ve2 uye inoda kupa kukurukurirana nedhipatimendi rekushambadzira pa. pauriri hwekutanga. Kuti uite izvi, unofanirwa kutanga wagadzira trunk pakati pema switch maviri - port Fa0/4 yekutanga switch uye chiteshi Fa0/1 chechipiri switch. Kuti ndiite izvi, ini ndinoenda kune SW0 marongero uye ndinoisa iyo mirairo int f0/4 uye switchport mode trunk.
Pane switchport trunk enc encapsulation command, asi haishandiswe muma switch matsva nekuti nekusarudzika vanoshandisa 802.1q encapsulation tekinoroji. Zvisinei, mienzaniso yekare yeCisco switches yakashandisa proprietary ISL protocol, iyo isisashandiswi, sezvo zvese zvinoshandura zvino kunzwisisa .1Q protocol. Nenzira iyi hauchadi kushandisa switchport trunk enc command.
Kana iwe zvino uchienda kune VLAN dhatabhesi, unogona kuona iyo port Fa0/4 yanyangarika kubva pairi. Izvi zvinodaro nekuti tafura iyi inongonyora zviteshi zvekusvika zviri zveVLAN chaiyo. Kuti uone trunk ports dzekuchinja, unofanirwa kushandisa sh int trunk command.
Muhwindo remutsara wekuraira, tinoona kuti port Fa0/4 inogoneswa, inoputira pamusoro pe802.1q protocol, uye ndeyechizvarwa vlan 1. Sezvatinoziva, kana iyi trunk port inogamuchira traffic isina kunyorwa, inongozviendesa kune yekuzvarwa vlan. 1 network. Muchidzidzo chinotevera tichataura nezve kumisikidza native vlan, ikozvino chingorangarira kuti marongero ehunde anotaridzika sei kune yakapihwa mudziyo.
Ikozvino ndinoenda kune yechipiri switch SW1, pinda iyo int f0/1 zvigadziriso modhi uye dzokorora iyo port setup sequence yakafanana neyekare kesi. Zviteshi zviviri zveFa0/2 uye Fa0/3, uko malaptops evashandi vedhipatimendi rekushambadzira akabatana, anofanirwa kugadzirwa mune yekuwana nzira uye kupihwa kune VLAN20 network.
Muchiitiko chakapfuura, takagadzirisa chiteshi chega chega chekuchinja, uye ikozvino ndinoda kukuratidza nzira yekukurumidzira iyi nzira uchishandisa mutsara wemirairo template. Iwe unogona kuisa murairo kuti ugadzirise huwandu hwemainterfaces int siyana f0/2-3, izvo zvichaita kuti mutsara wekuraira uve Shandura (config-if-range) #, uye iwe unogona kuisa iyo yakafanana parameter kana kushandisa iwo murairo mumwe chete. kune yakatarwa mhando dzezviteshi, semuenzaniso, panguva imwe chete kune makumi maviri.
Mumuenzaniso wapfuura, takashandisa iyo yakafanana switchport modhi yekuwana uye switchport yekuwana vlan 10 mirairo kakawanda kune akati wandei switch ports. Iyi mirairo inogona kuiswa kamwe chete kana iwe ukashandisa huwandu hwezviteshi. Ini zvino ndichaisa switchport mode yekuwana uye switchport yekuwana vlan 20 mirairo yeyakasarudzwa port renji.
Sezvo VLAN20 haisati yavepo, sisitimu inoigadzira otomatiki. Ini ndinonyora kubuda kuti ndichengetedze shanduko dzangu uye ndinokumbira kuona iyo VLAN tafura. Sezvauri kuona, zviteshi zveFa0/2 uye Fa0/3 zvava chikamu cheVLAN20 ichangogadzirwa.
Iye zvino ndichagadzirisa IP kero dze laptops pauriri hwechipiri hwehofisi yedu: Laptop1 ichagamuchira kero ye 192.168.20.2 uye subnet mask ye 255.255.255.0, uye Laptop2 ichagamuchira IP kero ye 192.168.20.3. Ngatitarisei mashandiro etiweki nepinging yekutanga laptop kubva yechipiri. Sezvauri kuona, iyo ping inobudirira nekuti ese maturusi chikamu cheVLAN imwechete uye akabatana kune imwechete switch.
Nekudaro, iyo dhipatimendi rekushambadzira malaptops ekutanga neyechipiri pasi akabatana kune akasiyana switch, kunyangwe ari paVLAN imwechete. Ngatitarisei kuti kutaurirana pakati pavo kunosimbiswa sei.Kuita izvi, ndichabaya laptop pauriri hwekutanga ne IP kero 2 kubva paLaptop192.168.20.1. Sezvauri kuona, zvese zvinoshanda pasina matambudziko kunyangwe hazvo malaptops akabatana kune akasiyana switch. Kukurukurirana kunoitwa nekuda kwekuti zvose zvinoshandura zvakabatanidzwa ne trunk.
Ndinogona here kumisikidza kubatana pakati peLaptop2 nePC0? Kwete, handikwanise, nekuti ndevemaVLAN akasiyana. Iye zvino tichagadzirisa network yemakomputa PC2,3,4, iyo yatichatanga kugadzira hunde pakati pechipiri switch Fa0/4 uye yechitatu switch Fa0/1.
Ini ndinoenda muzvigadziro zveSW1 ndonyora iyo config t command, mushure mezvo ini ndinodaidza int f0/4, ndozoisa switchport mode trunk uye kubuda mirairo. Ini ndinogadzirisa yechitatu switch SW2 nenzira imwecheteyo. Isu takagadzira trunk, uye iwe unogona kuona kuti mushure mekunge marongero atanga kushanda, ruvara rwezviteshi rwakachinja kubva orenji kuenda kugirinhi. Iye zvino unoda kugadzirisa ports Fa0/2,0/3,0/4, uko makombiyuta edhipatimendi rekutengesa ari eVLAN10 network akabatanidzwa. Kuti ndiite izvi, ndinoenda kune zvigadziriso zveSW2 switch, sarudza huwandu hwezviteshi f0 / 2-4 uye shandisa switchport mode yekuwana uye switchport yekuwana vlan mirairo kwavari. Sezvo pasina VLAN10 network pazviteshi izvi, iyo inogadzirwa otomatiki nehurongwa. Kana iwe ukatarisa VLAN dhatabhesi yeiyi switch, unogona kuona kuti ikozvino madoko Fa10/0/2,0/3,0 ndeeVLAN4.
Mushure meizvi, unofanirwa kugadzirisa network kune imwe neimwe yemakomputa matatu nekupinda IP kero uye subnet masks. PC3 inogamuchira kero 2, PC192.168.10.3 inogamuchira kero 3, uye PC192.168.10.4 inogamuchira IP kero 4.
Kuti tipindure mubvunzo wekuti network yedu iri kushanda here, ngatitorei PC0 pauriri hwekutanga kubva kuPC4, iri pauriri hwechitatu kana mune chimwe chivakwa. Pinging yakakundikana, saka ngatiedze kufunga kuti sei isu tisina kuzviita.
Patakaedza ping Laptop0 kubva kuLaptop2, zvese zvakashanda zvakanaka, zvisinei nekuti malaptop aive akabatana kune akasiyana switch. Sei zviri izvo kuti ikozvino, kana madhipatimendi edu edhipatimendi rekutengesa akanyatsobatanidzwa kune akasiyana switch akabatanidzwa ne trunk, iyo ping haishande? Kuti unzwisise chikonzero chedambudziko, unofanirwa kuyeuka kuti shanduko inoshanda sei.
Patinotumira pakiti kubva kuPC4 kushandura SW2, inoona kuti packet iri kusvika pachiteshi Fa0/4. Iyo switch inotarisa dhatabhesi yayo uye inoona kuti port Fa0/4 ndeyeVLAN10. Mushure meizvi, switch inomaka furemu nenhamba yetiweki, ndiko kuti, inonamira VLAN10 musoro kune traffic packet, uye inoitumira pamwe nehunde kune yechipiri switch SW1. Iyi chinja "inoverenga" musoro uye inoona kuti pakiti yakarongerwa VLAN10, inotarisa muVLAN dhatabhesi uye, ichiona kuti hapana VLAN10 ipapo, inorasa pakiti. Saka, midziyo PC2,3 uye 4 inogona kutaurirana pasina matambudziko, asi kuedza kutanga kutaurirana nemakombiyuta PC0 uye PC1 kunokundikana nokuti shandura SW1 hapana chainoziva nezveVLAN10 network.
Tinogona kugadzirisa dambudziko iri nyore nekuenda kune SW1 marongero, kugadzira VLAN10 tichishandisa vlan 10 kuraira uye nekuisa zita rayo MARKETING. Ngatiedze kudzokorora ping - unoona kuti mapaketi matatu ekutanga anoraswa, uye chechina inobudirira. Izvi zvinotsanangurwa nenyaya yekuti switch yakatanga kutarisa ma IP kero uye yakasarudza kero yeMAC, izvi zvakatora nguva, saka mapaketi matatu ekutanga akaraswa nenguva yekubuda. Ikozvino kubatana kwakatangwa nekuti switch yakagadziridza tafura yekero yeMAC uye iri kutumira mapaketi zvakananga kukero inodiwa.
Zvese zvandakaita kugadzirisa dambudziko kwaive kupinda muzvirongwa zvepakati switch uye kugadzira VLAN10 network ipapo. Nekudaro, kunyangwe iyo network isingabatanidzwe zvakananga neiyo switch, ichiri kuda kuziva nezvese network inobatanidzwa mune network yekubatanidza. Nekudaro, kana network yako iine zana switch, haugone kupinda muzvirongwa zveimwe neimwe uye nemaoko kugadzirisa maVLAN ID. Ndosaka tichishandisa VTP protocol, iyo gadziriso yatichatarisa mune inotevera vhidhiyo tutorial.
Saka, nhasi takafukidza zvese zvatakaronga: kugadzira maVLAN, nzira yekugovera maVLAN ports, uye maitiro ekuona dhatabhesi yeVLAN. Kuti tigadzire ma network, tinopinda pasi rose switch configuration mode uye tinoshandisa vlan <nhamba> murairo, tinogonawo kupa zita kune network yakagadzirwa tichishandisa zita <zita> murairo.
Isu tinogona zvakare kugadzira VLAN imwe nzira nekupinda interface mode uye kushandisa switchport yekuwana vlan <nhamba> command. Kana pasina network ine nhamba iyi, inogadzirwa otomatiki nehurongwa. Rangarira kushandisa murairo wekubuda mushure mekuita shanduko kune yekutanga marongero, zvikasadaro ivo havazochengetedzwe muVLAN dhatabhesi. Iwe unogona ipapo kupa madoko kune chaiwo maVLAN uchishandisa iyo yakakodzera mirairo.
Iyo switchport mode yekuwana command inoshandura iyo interface kune static yekupinda-port modhi, mushure meiyo iyo nhamba yeVLAN inoenderana inopihwa kuchiteshi neiyo switchport yekuwana vlan <nhamba> yekuraira. Kuti uone dhatabhesi yeVLAN, shandisa show vlan command, iyo inofanirwa kuiswa mushandisi EXEC modhi. Kuti uone runyorwa rwema trunk ports, shandisa iyo show int trunk command.
Ndinokutendai nekugara nesu. Unoda zvinyorwa zvedu here? Unoda kuona zvimwe zvinonakidza zvemukati? Titsigire nekuisa odha kana kukurudzira kushamwari, 30% kuderedzwa kwevashandisi veHabr pane yakasarudzika analogue yekupinda-level maseva, iyo yakagadzirwa nesu kuti iwe: (inowanikwa neRAID1 uye RAID10, kusvika ku24 cores uye kusvika ku40GB DDR4).
Dell R730xd kaviri zvakachipa? Chete pano muNetherlands! Dell R420 - 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB - kubva pamadhora makumi mapfumbamwe nemapfumbamwe! Verenga nezve
Source: www.habr.com