Nhasi tichaenderera mberi nehurukuro yedu yeVLAN uye tokurukura VTP protocol, pamwe chete nemafungiro eVTP Pruning uye Native VLAN. Takatotaura nezveVTP mune imwe yemavhidhiyo apfuura, uye chinhu chekutanga chinofanira kuuya mupfungwa dzako paunonzwa nezveVTP ndechekuti haisi trunking protocol, kunyangwe ichinzi "VLAN trunking protocol."
Sezvaunoziva, kune mbiri dzakakurumbira trunking protocols - proprietary Cisco ISL protocol, iyo isiri kushandiswa nhasi, uye 802.q protocol, iyo inoshandiswa mumambure emidziyo kubva kune vakasiyana-siyana vanogadzira kuti encapsulate trunking traffic. Iyi protocol inoshandiswawo muCisco switch. Takatotaura kuti VTP iVLAN synchronization protocol, kureva kuti, yakagadzirirwa kuwiriranisa VLAN dhatabhesi pane ese network switch.
Takataura dzakasiyana VTP modhi - server, mutengi, pachena. Kana mudziyo ukashandisa sevha mode, izvi zvinokutendera kuti uchinje, wedzera kana kubvisa maVLAN. Mutengi maitiro haakubvumidze iwe kuti uchinje kune switch marongero, unogona kugadzirisa VLAN dhatabhesi chete kuburikidza neVTP server, uye inodzokororwa kune vese VTP vatengi. Switch in transparent mode haiite shanduko kune yayo yega VLAN dhatabhesi, asi inongopfuura nepakati payo uye ichiendesa shanduko kune inotevera mudziyo mune mutengi modhi. Iyi modhi yakafanana nekudzima VTP pane chimwe chinhu, ichichishandura kuita mutakuri weVLAN shanduko yeruzivo.
Ngatidzokerei kuPacket Tracer chirongwa uye network topology yakakurukurwa muchidzidzo chapfuura. Isu takagadzira VLAN10 network yedhipatimendi rekutengesa uye VLAN20 network yedhipatimendi rekushambadzira, tichivasanganisa nema switch matatu.
Pakati pemaswichi SW0 neSW1 kutaurirana kunoitwa pamusoro peVLAN20 network, uye pakati peSW0 neSW2 pane kutaurirana pamusoro peVLAN10 network nekuda kwekuti isu takawedzera VLAN10 kune VLAN database ye switch SW1.
Kuti titarise kushanda kweiyo VTP protocol, ngatishandise imwe yekuchinja seVTP server, ngaive SW0. Kana iwe uchirangarira, nekusarudzika zvese switch zvinoshanda muVTP server modhi. Handei kune yekuraira mutsara terminal yekuchinja uye pinda iyo show vtp mamiriro ekuraira. Iwe unoona ikozvino VTP protocol version ndeye 2 uye nhamba yekudzokorora kwekugadzirisa ndeye 4. Kana iwe uchiyeuka, nguva dzose kuchinja kunoitwa kune VTP database, nhamba yekudzokorora inowedzera imwe.
Nhamba yepamusoro yeVLAN inotsigirwa ndeye 255. Iyi nhamba inoenderana nemhando yeCisco switch chaiyo, sezvo shanduko dzakasiyana dzinogona kutsigira nhamba dzakasiyana dzemunharaunda virtual network. Huwandu hwemaVLAN aripo i7, muminiti tichatarisa kuti manetwork aya ndeapi. VTP control mode is server, domain name haina kuiswa, VTP Pruning mode yakadzimwa, isu tichazodzoka kune izvi gare gare. VTP V2 uye VTP Traps Generation modes zvakare akaremara. Haufanire kuziva nezve mamodhi maviri ekupedzisira kuti upfuure bvunzo dze200-125 CCNA, saka usazvinetse nazvo.
Ngatitarisei kuVLAN dhatabhesi tichishandisa show vlan command. Sezvatakatoona muvhidhiyo yapfuura, tine mana asina kutsigirwa network: 4, 1002, 1003 uye 1004.
Inonyorawo ma network maviri atakagadzira, VLAN2 uye 10, uye iyo default network, VLAN20. Iye zvino ngatiendererei kune imwe chinja uye tiise iwo murairo mumwechete kuti uone mamiriro eVTP. Iwe unoona kuti nhamba yekudzokorora yeiyi switch ndeye 1, iri muVTP server mode uye mamwe ese mamwe mashoko akafanana nekutanga switch. Pandinopinda muratidziro yeVLAN yekuraira, ndinoona kuti takaita 3 shanduko kune zvigadziriso, imwe isingasviki chinja SW2, ndosaka nhamba yekudzokorora yeSW0 iri 1. Takaita 3 shanduko kune zvigadziriso zvekutanga. chinja, saka nhamba yekudzokorora yakawedzera kusvika ku3.
Zvino ngatitarisei chimiro cheSW2. Nhamba yekudzokorora pano ndeye 1, izvo zvinoshamisa. Isu tinofanirwa kuve nekudzokorora kechipiri nekuti 1 shanduko shanduko yakaitwa. Ngatitarisei kune VLAN dhatabhesi.
Isu takaita shanduko imwe, kugadzira VLAN10, uye ini handizive kuti sei ruzivo irworwo rwusina kuvandudzwa. Zvichida izvi zvakaitika nekuti isu hatina network chaiyo, asi software network simulator, inogona kunge iine zvikanganiso. Paunenge uine mukana wekushanda nemidziyo chaiyo uchidzidzira kuCisco, zvinokubatsira iwe kupfuura iyo Packet Tracer simulator. Chimwe chinhu chinobatsira mukushaikwa kwemidziyo chaiyo ingave GNC3, kana graphical Cisco network simulator. Iyi emulator inoshandisa iyo chaiyo inoshanda sisitimu yemudziyo, senge router. Pane musiyano pakati pe simulator uye emulator - yekare ipurogiramu inoratidzika seyo router chaiyo, asi haisi imwe. Iyo emulator software inogadzira chete mudziyo pachayo, asi inoshandisa software chaiyo kuishandisa. Asi kana iwe usingakwanise kumhanya chaiyo Cisco IOS software, Packet Tracer ndiyo yako yakanyanya sarudzo.
Saka, tinoda kugadzirisa SW0 sevhavha yeVTP, nokuda kweizvi ndinoenda kumamiriro ekugadzirisa maitiro epasi rose uye ndinopinda vtp version yekuraira 2. Sezvandakataura, tinogona kuisa protocol version yatinoda - 1 kana 2, mune izvi. nyaya tinoda shanduro yechipiri. Tevere, tichishandisa vtp modhi yekuraira, tinoisa iyo VTP modhi yekuchinja - server, mutengi kana pachena. Muchiitiko ichi, tinoda server modhi, uye mushure mekupinda mu vtp mode server command, iyo system inoratidza meseji kuti mudziyo watova muserver mode. Zvadaro, tinofanira kugadzirisa VTP domain, iyo yatinoshandisa vtp domain nwking.org command. Nei izvi zvichidiwa? Kana paine chimwe chishandiso panetiweki chine nhamba yepamusoro yekudzokorodza, mimwe michina yese ine nhamba yakaderera yekudzokorodza inotanga kudzokorora dhatabhesi reVLAN kubva pachigadzirwa ichocho. Nekudaro, izvi zvinongoitika chete kana zvishandiso zvine zita rimwechete rezita. Semuenzaniso, kana ukashanda pa nwking.org, unoratidza iyi domain, kana paCisco, ipapo iyo domain cisco.com, zvichingodaro. Zita rezita rezvishandiso zvekambani yako rinokutendera kuti uzvitsaure kubva kune imwe kambani kana kubva kune chero mimwe michina yekunze panetiweki. Paunopa zita rekambani kumudziyo, unoriita chikamu chetiweki yekambani iyoyo.
Chinhu chinotevera kuita kuseta password yeVTP. Inodiwa kuitira kuti mubiki, ane mudziyo une nhamba yakakwira yekudzokorodza, haakwanise kukopa yake VTP marongero kune yako switch. Ini ndinoisa password yecisco ndichishandisa vtp password cisco command. Mushure meizvi, kudzokororwa kweVTP data pakati pekuchinja kunogoneka chete kana mapassword achienderana. Kana iyo password isiriyo ikashandiswa, iyo VLAN dhatabhesi haizogadziridzwa.
Ngatiedzei kugadzira mamwe maVLAN. Kuti ndiite izvi, ndinoshandisa config t command, shandisa vlan 200 murairo kugadzira nhamba yetiweki 200, ipe zita TEST uye chengetedza shanduko nemirairo yekubuda. Ndobva ndagadzira imwe vlan 500 ndoidana TEST1. Kana iwe zvino uchipinda iyo show vlan command, ipapo mutafura yeadhivha network yekuchinja iwe unogona kuona aya maviri matsva network, iyo isina kana imwe chiteshi inopihwa.
Ngatienderei kuSW1 toona mamiriro ayo eVTP. Isu tinoona kuti hapana chakachinja pano kunze kwezita rezita, nhamba yeVLAN inoramba yakaenzana ne7. Hationi ma network atakagadzira achionekwa nekuti VTP password haienderane. Ngatiisei password yeVTP pane iyi switch nekutevera kupinda mirairo conf t, vtp pass uye vtp password Cisco. Iyo sisitimu yakashuma kuti mudziyo weVLAN dhatabhesi ikozvino inoshandisa iyo Cisco password. Ngatitarisei zvakare chimiro cheVTP kuti titarise kana ruzivo rwakadzokororwa. Sezvauri kuona, huwandu hweVLAN huripo hwakawedzera kusvika pa9.
Kana iwe ukatarisa VLAN dhatabhesi yeiyi switch, unogona kuona kuti VLAN200 neVLAN500 network yatakagadzira yakabuda otomatiki mairi.
Zvimwe chete zvinoda kuitwa neyekupedzisira switch SW2. Ngatiisei show vlan command - unogona kuona kuti hapana shanduko yakaitika mairi. Saizvozvo, hapana shanduko muVTP mamiriro. Kuti iyi switch ivandudze ruzivo, iwe unofanirwawo kuseta password, kureva, isa mirairo yakafanana neye SW1. Mushure meizvi, nhamba yeVLAN muSW2 chimiro ichawedzera kusvika pa9.
Ndizvo zvakaita VTP. Ichi chinhu chikuru chinogadzirisa otomatiki ruzivo mune ese maklayiti network zvishandiso mushure mekuchinja kwaitwa kune server mudziyo. Iwe haufanire kuita shanduko kune iyo VLAN dhatabhesi yeese switch - kudzokorora kunoitika otomatiki. Kana uine mazana maviri emidziyo yetiweki, shanduko dzauchaita dzichachengetwa pamazana maviri emidziyo panguva imwe chete. Zvingoitika, isu tinofanirwa kuve nechokwadi chekuti SW200 zvakare mutengi weVTP, saka ngatiendei muzvirongwa neiyo config t kuraira uye tiise vtp mode mutengi kuraira.
Nokudaro, mumambure edu chete shanduko yekutanga iri muVTP Server mode, mamwe maviri anoshanda muVTP Client mode. Kana ini zvino ndaenda mumasetin'i eSW2 ndoisa vlan 1000 kuraira, ini ndichagamuchira meseji: "kugadzirisa VTP VLAN hakubvumidzwe kana mudziyo uri mucustomer mode." Nekudaro, ini handikwanise kuita chero shanduko kuVLAN dhatabhesi kana switch iri muVTP mutengi modhi. Kana ini ndichida kuita chero shanduko, ndinofanira kuenda kune switch server.
Ini ndinoenda kune SW0 terminal marongero uye ndinoisa iyo mirairo vlan 999, zita IMRAN uye kubuda. Iyi network itsva yakaonekwa muVLAN dhatabhesi yeiyi switch, uye kana ini zvino ndikaenda kune dhatabhesi yemutengi switch SW2, ndichaona kuti iwowo ruzivo rwakaonekwa pano, ndiko kuti, kudzokorora kwakaitika.
Sezvandakataura, VTP chikamu chikuru chesoftware, asi kana ikashandiswa zvisizvo, inogona kukanganisa network yese. Naizvozvo, iwe unofanirwa kungwarira zvakanyanya paunenge uchibata network yekambani kana zita rezita uye VTP password isina kuiswa. Muchiitiko ichi, zvese zvinofanirwa kuitwa nemubiki ndeyekubaya tambo ye switch yake mune network socket pamadziro, batanidza kune chero hofisi switch uchishandisa iyo DTP protocol uyezve, uchishandisa trunk yakagadzirwa, gadzirisa ruzivo rwese uchishandisa VTP protocol. . Nenzira iyi, hacker anogona kudzima zvese zvakakosha VLANs, achitora mukana wekuti nhamba yekudzokorora yemudziyo wake yakakwirira kupfuura nhamba yekudzokorora yemamwe ma switch. Muchiitiko ichi, shanduko dzekambani dzinongotsiva zvese VLAN dhatabhesi ruzivo neruzivo rwakadzokororwa kubva kune yakaipa switch, uye network yako yese inodonha.
Izvi zvinokonzerwa nekuti makomputa akabatana achishandisa tambo yetiweki kune chaiyo switch port iyo VLAN 10 kana VLAN20 inopihwa. Kana ma network aya akadzimwa kubva pane switch yeLAN dhatabhesi, inozodzima chiteshi chenetiweki isiripo. Kazhinji, network yekambani inogona kudonha chaizvo nekuti ma switch anongodzima madoko ane hukama neVLANs akabviswa panguva yekuvandudza kunotevera.
Kuti udzivise dambudziko rakadaro kuti rirege kuitika, unofanirwa kuseta zita rezita reVTP ββnepassword kana kushandisa Cisco Port Security ficha, iyo inobvumidza iwe kubata maMAC kero dzekuchinja ports, kuunza zvirambidzo zvakasiyana pakushandisa kwavo. Semuenzaniso, kana mumwe munhu akaedza kushandura kero yeMAC, chiteshi chinodzika pakarepo. Tichange tichitarisisa ichi chimiro cheCisco switches munguva pfupi iri kutevera, asi parizvino zvese zvaunoda kuziva ndezvekuti Port Security inokutendera kuti uve nechokwadi chekuti VTP yadzivirirwa kubva kune anorwisa.
Ngatipei muchidimbu kuti VTP marongero chii. Iyi ndiyo sarudzo yeprotocol vhezheni - 1 kana 2, kugoverwa kweVTP modhi - sevha, mutengi kana pachena. Sezvandambotaura, iyo yekupedzisira modhi haigadzirise iyo VLAN dhatabhesi yemudziyo pachayo, asi inongoendesa shanduko dzese kumidziyo yakavakidzana. Iyi inotevera mirairo yekugovera zita rezita uye password: vtp domain <domain name> uye vtp password <password>.
Zvino ngatitaure nezve VTP Pruning marongero. Kana iwe ukatarisa kunetiweki topology, unogona kuona kuti ese matatu ma switch ane yakafanana VLAN dhatabhesi, zvinoreva kuti VLAN10 uye VLAN20 chikamu chese matatu switch. Nehunyanzvi, chinja SW3 haidi VLAN2 nekuti haina zviteshi zvenetiweki iyi. Nekudaro, zvisinei neizvi, traffic yese inotumirwa kubva kuLaptop20 komputa kuburikidza neVLAN0 network inosvika paSW20 switch uye kubva pairi inopfuura nemuhunde kuenda kumadoko eSW1. Basa rako guru senyanzvi yetiweki ndere kuona kuti data shoma shoma sezvinobvira inofambiswa pamusoro petiweki. Iwe unofanirwa kuve nechokwadi chekuti iyo data inodiwa inofambiswa, asi iwe ungadzikamisa sei kutapurirana kweruzivo rwusiri kudiwa nemudziyo?
Iwe unofanirwa kuona kuti traffic yakanangana nemidziyo paVLAN20 haiyerere kuenda kune SW2 zviteshi kuburikidza ne trunk pazvisiri kudikanwa. Ndokureva kuti, Laptop0 traffic inofanirwa kusvika kuSW1 uyezve kumakomputa paVLAN20, asi haifanirwe kuenda mhiri kwekurudyi chiteshi che SW1. Izvi zvinogona kuwanikwa uchishandisa VTP Pruning.
Kuti tiite izvi, tinofanira kuenda kune zvigadziro zveVTP server SW0, nokuti sezvandambotaura, zvirongwa zveVTP zvinogona kuitwa chete kuburikidza nevhavha, enda kune zvigadziro zvepasi rose uye nyora vtp pruning command. Sezvo Packet Tracer ichingova chirongwa chekufananidza, hapana murairo wakadaro mumutsara wayo wekuraira. Nekudaro, pandinonyora vtp kuchekerera nekudzvanya Enter, iyo system inondiudza kuti vtp pruning mode haisipo.
Tichishandisa iyo show vtp mamiriro ekuraira, tichaona kuti iyo VTP Pruning modhi iri mune yakaremara mamiriro, saka isu tinofanirwa kuita kuti iwanikwe nekuifambisa kune inogonesa chinzvimbo. Taita izvi, isu tinomisa iyo VTP Pruning modhi pane ese matatu switch yetiweki yedu mukati metiweki domain.
Rega ndikuyeuchidze kuti VTP Pruning chii. Kana isu tagonesa iyi modhi, chinja sevha SW0 inozivisa switch SW2 kuti VLAN10 chete inogadziriswa pamachiteshi ayo. Mushure meizvi, chinja SW2 inoudza switch SW1 kuti haidi chero traffic kunze kwetraffic yakagadzirirwa VLAN10. Zvino, nekuda kweVTP Pruning, chinja SW1 ine ruzivo rwekuti haidi kutumira VLAN20 traffic pamwe neSW1-SW2 trunk.
Izvi zvakakunakira iwe senetiweki maneja. Iwe haufanirwe kuisa nemaoko mirairo nekuti switch yakangwara zvakakwana kutumira chaizvo izvo chaiyo network network inoda. Kana mangwana ukaisa rimwe dhipatimendi rekushambadzira muchivako chinotevera uye wobatanidza network yayo yeVLAN20 kuti ichinje SW2, switch iyoyo ichakurumidza kuudza switch SW1 kuti ikozvino yave neVLAN10 neVLAN20 uye ichikumbira kuti itumire traffic kune ese ma network. Ruzivo urwu runogara ruchivandudzwa pamidziyo yese, zvichiita kuti kutaurirana kuve kwakanyanya.
Pane imwe nzira yekutsanangura kutapurirana kwetraffic - iyi ndeye kushandisa murairo unobvumira kutumira data chete kune yakatsanangurwa VLAN. Ndinoenda kune zvigadziriso zvekuchinja SW1, kwandinofarira chiteshi cheFa0/4, uye pinda mirairo int fa0/4 uye switchport trunk inobvumirwa vlan. Sezvo ini ndatoziva kuti SW2 ine VLAN10 chete, ndinogona kuudza SW1 kuti ibvumire traffic yetiweki iyo pahunde yechiteshi nekushandisa yakabvumidzwa vlan command. Saka ndakaronga trunk port Fa0/4 kutakura traffic chete yeVLAN10. Izvi zvinoreva kuti chiteshi ichi hachizotenderi imwe traffic kubva kuVLAN1, VLAN20, kana chero imwe network kunze kweyakataurwa.
Iwe unogona kunge uchinetseka kuti ndeipi iri nani kushandisa: VTP Pruning kana yakabvumidzwa vlan command. Mhinduro ndeyekuzvibata nekuti mune zvimwe zviitiko zvine musoro kushandisa nzira yekutanga, uye mune dzimwe zvine musoro kushandisa yechipiri. Sewe network administrator, zviri kwauri kuti usarudze yakanakisa mhinduro. Mune zvimwe zviitiko, sarudzo yekuronga chiteshi kubvumira traffic kubva kune chaiyo VLAN inogona kuva yakanaka, asi mune dzimwe inogona kuve yakaipa. Panyaya yetiweki yedu, kushandisa yakabvumidzwa vlan command inogona kururamiswa kana isu tisiri kuzoshandura network topology. Asi kana mumwe munhu akazoda kuwedzera boka remidziyo inoshandisa VLAN2 kuSW 20, zvingava zvakanaka kushandisa VTP Pruning mode.
Saka, kumisikidza VTP Pruning inosanganisira kushandisa inotevera mirairo. Iyo vtp pruning command inopa otomatiki kushandiswa kweiyi modhi. Kana iwe uchida kugadzirisa VTP Pruning ye trunk port kubvumira traffic yeiyo chaiyo VLAN kuti ipfuure nemaoko, wobva washandisa murairo kusarudza iyo trunk port nhamba interface <#>, gonesa iyo trunk mode switchport mode trunk uye bvumidza kutapurirana kwetraffic. kune chaiyo network uchishandisa switchport trunk inobvumirwa vlan command .
Mumurairo wekupedzisira unogona kushandisa 5 parameters. Zvese zvinoreva kuti traffic traffic kune ese maVLAN anotenderwa, hapana - traffic traffic kune ese maVLAN anorambidzwa. Kana iwe ukashandisa iyo yekuwedzera parameter, unogona kuwedzera traffic throughput kune imwe network. Semuenzaniso, isu tinobvumira VLAN10 traffic, uye nekuwedzera kuraira isu tinogona zvakare kubvumira VLAN20 traffic kuti ipfuure. Iyo yekubvisa murairo inobvumidza iwe kubvisa imwe yemanetiweki, semuenzaniso, kana ukashandisa bvisa makumi maviri parameter, chete VLAN20 traffic inosara.
Zvino ngatitarisei kune yekuzvarwa VLAN. Isu takatotaura kuti yekuzvarwa VLAN ndeyechokwadi network yekupfuura isina kunyorwa traffic kuburikidza neakananga trunk port.
Ini ndinoenda mune chaiyo chiteshi marongero sezvakaratidzwa neSW(config-kana)# yekuraira mutsara musoro uye shandisa yekuraira switchport trunk native vlan <network number>, semuenzaniso VLAN10. Ikozvino traffic yese paVLAN10 ichaenda nepakati isina kunyorwa trunk.
Ngatidzokerei kune inonzwisisika network topology muPacket Tracer hwindo. Kana ndikashandisa switchport trunk native vlan 20 command pane switch port Fa0/4, ipapo traffic yese paVLAN20 inoyerera neFa0/4 - SW2 trunk isina kunyorwa. Kana switch SW2 ikagashira traffic iyi, inozofunga: "iyi haina kunyorwa traffic, zvinoreva kuti ndinofanira kuiendesa kune yekuzvarwa VLAN." Kune iyi switch, yemuno VLAN ndiyo VLAN1 network. Networks 1 uye 20 haina kubatana neimwe nzira, asi sezvo yemuno yeVLAN modhi inoshandiswa, isu tine mukana wekufambisa VLAN20 traffic kune network yakasiyana zvachose. Nekudaro, iyi traffic ichave isina kuvharwa, uye network pachayo inofanirwa kuenderana.
Ngatitarisei izvi nemuenzaniso. Ini ndichapinda muzvirongwa zveSW1 uye ndinoshandisa switchport trunk native vlan 10. Iye zvino chero VLAN10 traffic ichabuda kunze kwe trunk port isina kunyorwa. Kana yasvika trunk port SW2, switch inonzwisisa kuti inofanirwa kuiendesa kuVLAN1. Nekuda kwechisarudzo ichi, traffic haizokwanisa kusvika kumakomputa PC2, 3 uye 4, sezvo yakabatana kune switch yekupinda ports inoitirwa VLAN10.
Nehunyanzvi, izvi zvichaita kuti sisitimu itaure kuti iyo yekuzvarwa VLAN yechiteshi Fa0/4, iri chikamu cheVLAN10, haienderane nechiteshi Fa0/1, chiri chikamu cheVLAN1. Izvi zvinoreva kuti zviteshi zvakatsanangurwa hazvizokwanisa kushanda mu trunk modhi nekuda kweiyo VLAN yekusawirirana.
Ndinokutendai nekugara nesu. Unoda zvinyorwa zvedu here? Unoda kuona zvimwe zvinonakidza zvemukati? Titsigire nekuisa odha kana kukurudzira kushamwari, 30% kuderedzwa kwevashandisi veHabr pane yakasarudzika analogue yekupinda-level maseva, iyo yakagadzirwa nesu kuti iwe: (inowanikwa neRAID1 uye RAID10, kusvika ku24 cores uye kusvika ku40GB DDR4).
Dell R730xd kaviri zvakachipa? Chete pano muNetherlands! Dell R420 - 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB - kubva pamadhora makumi mapfumbamwe nemapfumbamwe! Verenga nezve
Source: www.habr.com