Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN

Namhlanje siza kuqhubeka nengxoxo yethu yee-VLAN kwaye sixoxe nge-protocol ye-VTP, kunye neengcamango ze-VTP Pruning kunye ne-Native VLAN. Sele sithethile nge-VTP kwenye yeevidiyo zangaphambili, kwaye into yokuqala ekufuneka ifike engqondweni yakho xa usiva nge-VTP kukuba ayisiyiyo iprotocol ye-trunking, nangona ibizwa ngokuba yi "VLAN trunking protocol."

Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN

Njengoko usazi, kukho iiprothokholi ezimbini ezithandwayo ze-trunking - iprotocol yeCisco ISL yobunikazi, engasetyenziswanga namhlanje, kunye neprotocol 802.q, esetyenziswa kwizixhobo zothungelwano ezivela kubakhiqizi abahlukeneyo ukuba bafake i-trunking traffic. Le protocol ikwasetyenziswa kwiiswitshi zeCisco. Sele sitshilo ukuba i-VTP yinkqubo yongqamaniso yeVLAN, oko kukuthi, yenzelwe ukulungelelanisa isiseko sedatha yeVLAN kuzo zonke iiswitshi zenethiwekhi.

Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN

Sikhankanye iindlela ezahlukeneyo zeVTP - iseva, umxhasi, ekuhleni. Ukuba isixhobo sisebenzisa imo yeseva, oku kukuvumela ukuba wenze utshintsho, wongeze okanye ususe iiVLAN. Imowudi yomxhasi ayikuvumeli ukuba wenze utshintsho kwizicwangciso zokutshintsha, ungaqwalasela i-database ye-VLAN kuphela ngomncedisi we-VTP, kwaye iya kuphinda iphindwe kubo bonke abathengi be-VTP. Ukutshintshela kwimowudi ecacileyo alwenzi utshintsho kwisiseko sedatha yeVLAN, kodwa idlula nje ngokwayo kwaye idlulisele utshintsho kwisixhobo esilandelayo kwimowudi yomxhasi. Le ndlela ifana nokukhubaza i-VTP kwisixhobo esithile, ukuyijika ibe ngumthuthi we-VLAN yokutshintsha ulwazi.

Masibuyele kwinkqubo yePacket Tracer kunye ne-topology yenethiwekhi exoxwe kwisifundo esidlulileyo. Silungiselele inethiwekhi ye-VLAN10 yesebe lokuthengisa kunye nenethiwekhi ye-VLAN20 yesebe lokuthengisa, ukudibanisa kunye nokutshintsha ezintathu.

Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN

Phakathi kokutshintsha kwe-SW0 kunye ne-SW1 unxibelelwano lwenziwa kuthungelwano lwe-VLAN20, kwaye phakathi kwe-SW0 kunye ne-SW2 kukho unxibelelwano kuthungelwano lwe-VLAN10 ngenxa yokuba songeze i-VLAN10 kwi-database ye-VLAN yokutshintsha i-SW1.
Ukuze siqwalasele ukusebenza kweprotocol ye-VTP, masisebenzise enye yokutshintsha njengomncedisi we-VTP, makube yi-SW0. Ukuba uyakhumbula, ngokungagqibekanga zonke iiswitshi zisebenza kwimowudi yeseva yeVTP. Masiyeni kwitheminali yomyalelo wotshintshiselwano kwaye singenise umboniso we-vtp yomyalelo wesimo. Uyabona inguqulo ye-VTP yeprotocol yangoku yi-2 kunye nenombolo yokuhlaziywa koqwalaselo ngu-4. Ukuba uyakhumbula, lonke ixesha utshintsho lwenziwa kwi-database ye-VTP, inombolo yokuhlaziya inyuka enye.

Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN

Inani eliphezulu leeVLAN ezixhaswayo yi-255. Eli nani lixhomekeke kwi-brand ye-Cisco switch ethile, ekubeni iiswitshi ezahlukeneyo zinokuxhasa amanani ahlukeneyo othungelwano lwenyani yendawo. Inani leeVLAN ezikhoyo ngu-7, ngomzuzu siza kujonga ukuba zithini na ezi networks. Imowudi yolawulo yeVTP yiseva, igama lesizinda alimiselwanga, imowudi yeVTP yokuPruning ivaliwe, siya kubuyela kule kamva. Iindlela ze-VTP V2 kunye ne-VTP Traps Generation nazo zivaliwe. Awudingi ukwazi malunga neendlela ezimbini zokugqibela zokuphumelela uviwo lwe-200-125 CCNA, ngoko ungakhathazeki ngazo.

Makhe sijonge kwi-database ye-VLAN usebenzisa umyalelo we-vlan. Njengoko sele sibonile kwividiyo edlulileyo, sineenethiwekhi ezi-4 ezingaxhaswanga: 1002, 1003, 1004 kunye ne-1005.

Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN

Ikwadwelisa iinethiwekhi ezi-2 esizenzileyo, i-VLAN10 kunye ne-20, kunye nenethiwekhi engagqibekanga, i-VLAN1. Ngoku masiqhubele kwelinye iswitshi kwaye singenise umyalelo ofanayo ukujonga isimo seVTP. Uyabona ukuba inombolo yokuhlaziywa kolu tshintsho yi-3, ikwimo ye-VTP yomncedisi kwaye zonke ezinye iinkcukacha zifana nokutshintsha kokuqala. Xa ndifaka umyalelo we-VLAN wokubonisa, ndiyabona ukuba senze utshintsho olu-2 kwizicwangciso, enye ngaphantsi kokutshintsha i-SW0, yiyo loo nto inani lohlaziyo lwe-SW1 ngu-3. Senze utshintsho olu-3 kwimimiselo engagqibekanga yokuqala. tshintsha, ngoko ke inani lohlaziyo lwayo lonyuke laya kutsho kwisi-4.

Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN

Ngoku makhe sijonge ubume be-SW2. Inombolo yohlaziyo apha ngu-1, into engaqhelekanga. Kufuneka sibe nohlaziyo lwesibini kuba utshintsho lwesetingi lwe-1 lwenziwe. Makhe sijonge kwi-database yeVLAN.

Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN

Senze utshintsho olunye, sisenza iVLAN10, kwaye andazi ukuba kutheni olo lwazi lungazange luhlaziywe. Mhlawumbi oku kwenzeka ngenxa yokuba asinayo inethiwekhi yangempela, kodwa i-simulator yenethiwekhi yesofthiwe, enokuba neempazamo. Xa unethuba lokusebenza ngezixhobo zokwenyani ngelixa usebenza eCisco, kuya kukunceda ngakumbi kunePacket Tracer simulator. Enye into eluncedo ngokungabikho kwezixhobo zokwenyani iya kuba yi-GNC3, okanye i-graphical Cisco network simulator. Lo ngumlingisi osebenzisa inkqubo yokwenyani yokusebenza kwesixhobo, esifana nerutha. Kukho umahluko phakathi kwe-simulator kunye ne-emulator - yangaphambili yinkqubo ekhangeleka njenge-router yangempela, kodwa ayikho enye. Isoftware ye-emulator yenza kuphela isixhobo ngokwaso, kodwa isebenzisa isoftware yokwenyani ukuyisebenzisa. Kodwa ukuba awunaso isakhono sokusebenzisa isoftware yeCisco IOS yokwenyani, iPacket Tracer yeyona ndlela ilungileyo.

Ngoko ke, kufuneka siqwalasele i-SW0 njengomncedisi we-VTP, kuba oku ndiya kwimowudi yoqwalaselo lwehlabathi jikelele kwaye ndifake umyalelo we-vtp version 2. Njengoko nditshilo, sinokufaka inguqulo yeprotocol esiyidingayo - 1 okanye 2, kule kwimeko sifuna inguqulelo yesibini. Emva koko, usebenzisa i-vtp mode yomyalelo, sibeka imowudi ye-VTP yokutshintsha - umncedisi, umxhasi okanye obala. Kule meko, sifuna imodi yomncedisi, kwaye emva kokungena kwi-vtp mode server command, inkqubo ibonisa umyalezo wokuba ifowuni sele ikwimo yomncedisi. Okulandelayo, kufuneka siqwalasele i-domain ye-VTP, esisebenzisa ngayo i-vtp domain nwking.org umyalelo. Kutheni oku kuyimfuneko? Ukuba kukho esinye isixhobo kuthungelwano esinenombolo yohlaziyo ephezulu, zonke ezinye izixhobo ezinenombolo yohlaziyo ephantsi ziqala ukuphinda-phinda isiseko sedatha seVLAN kweso sixhobo. Nangona kunjalo, oku kwenzeka kuphela ukuba izixhobo zinegama elifanayo lesizinda. Umzekelo, ukuba usebenza kwi-nwking.org, ubonisa le domain, ukuba eCisco, ngoko isizinda cisco.com, njalo njalo. Igama lendawo yezixhobo zenkampani yakho likuvumela ukuba uhlule kwizixhobo ezisuka kwenye inkampani okanye kuzo naziphi na ezinye izixhobo zangaphandle kwinethiwekhi. Xa unikezela ngegama lesizinda senkampani kwisixhobo, usenza sibe yinxalenye yenethiwekhi yaloo nkampani.

Into elandelayo ekufuneka uyenzile kukuseta igama lokugqitha le-VTP. Kuyafuneka ukuze i-hacker, enesixhobo esinenombolo ephezulu yokuhlaziywa, ayikwazi ukukopisha izicwangciso zakhe ze-VTP kutshintshi lwakho. Ndifaka igama eligqithisiweyo lecisco usebenzisa i-vtp password cisco command. Emva koku, ukuphindaphindwa kwedatha ye-VTP phakathi kokutshintsha kuya kwenzeka kuphela ukuba amagama agqithisiweyo ahambelana. Ukuba igama eligqithisiweyo elingalunganga lisetyenzisiwe, i-database ye-VLAN ayisayi kuhlaziywa.

Makhe sizame ukwenza ezinye iiVLAN ezininzi. Ukwenza oku, ndisebenzisa umyalelo we-config t, sebenzisa umyalelo we-vlan 200 ukwenza inombolo yenethiwekhi ye-200, uyinike igama elithi TEST kwaye ugcine utshintsho kunye nomyalelo wokuphuma. Emva koko ndenza enye i-vlan 500 kwaye ndiyibize ngokuba TEST1. Ukuba ngoku ungenisa umboniso vlan umyalelo, ngoko kwitheyibhile yothungelwano olubonakalayo lotshintshiselwano ungabona ezi nethiwekhi zimbini zintsha, apho kungekho nezibuko elinye elabelweyo.

Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN

Masiqhubele phambili kwi-SW1 kwaye sibone ubume bayo beVTP. Siyabona ukuba akukho nto itshintshileyo apha ngaphandle kwegama lesizinda, inani le-VLAN lihlala lilingana no-7. Asiboni amanethiwekhi esiwadalile avela ngenxa yokuba i-password ye-VTP ayifani. Masisete igama lokugqitha le-VTP kolu tshintsho ngokungenisa ngokulandelelana imiyalelo conf t, vtp pass kunye ne-vtp password Cisco. Inkqubo ichaze ukuba isiseko sedatha yeVLAN yesixhobo ngoku sisebenzisa igama eligqithisiweyo leCisco. Makhe sijonge kwakhona ubume be-VTP ukujonga ukuba ulwazi luye lwaphindwa na. Njengoko ubona, inani leeVLAN ezikhoyo liye landa ngokuzenzekelayo ukuya kwi-9.

Ukuba ujonga kwi-database ye-VLAN yolu tshintsho, unokubona ukuba i-VLAN200 kunye ne-VLAN500 network networks esizenzileyo zivele ngokuzenzekelayo kuyo.

Okufanayo kufuneka kwenziwe ngotshintsho lokugqibela SW2. Masingenise umboniso vlan umyalelo - uyabona ukuba akukho lutshintsho lwenzekile kuyo. Ngokufanayo, akukho tshintsho kwimeko ye-VTP. Ukuze olu tshintsho luhlaziye ulwazi, kufuneka kwakhona ukuseta igama eligqithisiweyo, oko kukuthi, faka imiyalelo efanayo neye-SW1. Emva koku, inani le-VLAN kwisimo se-SW2 liya kwanda ukuya kwi-9.

Yenzelwe loo nto iVTP. Le yinto enkulu ehlaziya ngokuzenzekelayo ulwazi kuzo zonke izixhobo zenethiwekhi yomxhasi emva kokuba utshintsho lwenziwe kwisixhobo somncedisi. Awudingi ukwenza utshintsho ngesandla kwisiseko sedatha yeVLAN yazo zonke iiswitshi - uphindaphindo lwenzeka ngokuzenzekelayo. Ukuba unezixhobo zenethiwekhi ezingama-200, utshintsho olwenzayo luya kugcinwa kuzo zonke izixhobo ezingamakhulu amabini ngexesha elinye. Kanye xa kunjalo, kufuneka siqinisekise ukuba i-SW2 ikwangumxhasi we-VTP, ngoko masiye kuseto ngomyalelo we-config kwaye singenise i-vtp mode client command.

Ngaloo ndlela, kwinethiwekhi yethu kuphela ukutshintshwa kokuqala kwimodi ye-VTP Server, ezinye ezimbini zisebenza kwimodi yoMthengi weVTP. Ukuba ngoku ndingena kuseto lwe-SW2 kwaye ndingenise i-vlan 1000 yomyalelo, ndiza kufumana umyalezo: "ukuqwalasela iVTP VLAN akuvumelekanga xa isixhobo sikwimowudi yomxhasi." Ngoko ke, andinakwenza naluphi na utshintsho kwisiseko sedatha seVLAN ukuba iswitshi ikwimowudi yomxhasi weVTP. Ukuba ndifuna ukwenza naluphi na utshintsho, kufuneka ndiye kumncedisi wokutshintsha.

Ndiya ku SW0 useto lwesiphelo kwaye ndingenise imiyalelo vlan 999, igama IMRAN kwaye uphume. Le network entsha ivele kwi-database ye-VLAN yolu tshintsho, kwaye ukuba ngoku ndiye kwisiseko sedatha ye-SW2 yomxhasi, ndiya kubona ukuba ulwazi olufanayo luye lwavela apha, oko kukuthi, ukuphindaphinda kwenzeke.

Njengoko benditshilo, i-VTP sisiqwenga esikhulu sesoftware, kodwa ukuba isetyenziswe ngokungalunganga, inokuphazamisa inethiwekhi yonke. Ngoko ke, kufuneka ulumke kakhulu xa uphethe inethiwekhi yenkampani ukuba igama lesizinda kunye nephasiwedi ye-VTP ayibekwanga. Kule meko, yonke i-hacker ekufuneka yenziwe kukuplaga intambo yokutshintsha kwakhe kwisokethi yenethiwekhi eludongeni, uqhagamshele kuyo nayiphi na iswitshi yeofisi usebenzisa iprotocol ye-DTP kwaye, usebenzisa isiqu esidaliweyo, uhlaziye lonke ulwazi usebenzisa iprotocol yeVTP. . Ngale ndlela, i-hacker inokucima zonke ii-VLAN ezibalulekileyo, ithatha inzuzo yokuba inombolo yokuhlaziywa kwesixhobo sakhe iphezulu kunenombolo yokuhlaziywa kwezinye iiswitshi. Kule meko, iiswitshi zenkampani ziya kuthatha indawo ngokuzenzekelayo zonke iinkcukacha zedatha ye-VLAN ngolwazi oluphindwe kabini kwi-switch enobungozi, kwaye yonke inethiwekhi yakho iya kudilika.

Oku kungenxa yokuba iikhompyuter ziqhagamshelwe kusetyenziswa intambo yothungelwano kwizibuko elithile lokutshintsha apho i-VLAN 10 okanye i-VLAN20 yabelwe khona. Ukuba ezi intanethi zicinyiwe kuluhlu lwedatha ye-LAN yokutshintsha, iyakuvala ngokuzenzekelayo izibuko leyenethiwekhi engekhoyo. Ngokwesiqhelo, inethiwekhi yenkampani inokuwa ngokuchanekileyo kuba iiswitshi zicima nje iizibuko ezinxulumene neeVLAN eziye zasuswa ngexesha lohlaziyo olulandelayo.

Ukuze uthintele ingxaki enjalo ukuba ingenzeki, kufuneka ubeke igama lesizinda se-VTP kunye negama lokugqitha okanye usebenzise uphawu loKhuseleko lweCisco Port, ekuvumela ukuba ulawule iidilesi ze-MAC zezibuko zokutshintsha, ukwazisa izithintelo ezahlukeneyo ekusebenziseni kwazo. Umzekelo, ukuba omnye umntu uzama ukutshintsha idilesi ye-MAC, i-port iya kuhla ngokukhawuleza. Siza kujonga ngakumbi kweli nqaku lokutshintsha kweCisco kungekudala, kodwa okwangoku yonke into ekufuneka uyazi kukuba uKhuseleko lwePort ikuvumela ukuba uqinisekise ukuba i-VTP ikhuselwe kumhlaseli.

Makhe sishwankathele ukuba yintoni isicwangciso seVTP. Olu lukhetho loguqulelo lweprotocol - 1 okanye 2, isabelo sendlela yeVTP - umncedisi, umxhasi okanye obala. Njengoko besenditshilo, le ndlela yokugqibela ayihlaziyi i-database ye-VLAN yesixhobo ngokwayo, kodwa idlulisela zonke iinguqu kwizixhobo ezingabamelwane. Oku kulandelayo yimiyalelo yokunika igama lesizinda kunye negama lokugqitha: vtp domain <domain name> kunye ne-vtp password <password>.

Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN

Ngoku makhe sithethe malunga neesetingi zokuPruning VTP. Ukuba ujonga i-topology yenethiwekhi, unokubona ukuba zontathu iiswitshi zinesiseko sedatha yeVLAN, nto leyo ethetha ukuba iVLAN10 kunye neVLAN20 ziyinxalenye yazo zonke ezi-3 zokutshintsha. Ngokobuchwephesha, tshintsha i-SW2 ayifuni i-VLAN20 kuba ayinamazibuko ale nethiwekhi. Nangona kunjalo, kungakhathaliseki oku, zonke iitrafikhi ezithunyelwe zisuka kwiLaptop0 kwikhompyuter ngeVLAN20 network zifikelela kwiswitshi ye-SW1 kwaye ukusuka kuyo idlula esiqwini ukuya kumazibuko e-SW2. Umsebenzi wakho ophambili njengengcali yothungelwano kukuqinisekisa ukuba idatha encinci engeyomfuneko igqithiselwa kwinethiwekhi. Kufuneka uqinisekise ukuba idatha efunekayo ihanjiswa, kodwa unganciphisa njani ukuhanjiswa kolwazi olungafunekiyo kwisixhobo?

Kufuneka uqinisekise ukuba itrafikhi emiselwe izixhobo kwi-VLAN20 ayiqukuqeleli kumazibuko e-SW2 ngesiqu xa ingafunwa. Oko kukuthi, itrafikhi yeLaptop0 kufuneka ifikelele kwi-SW1 kwaye emva koko iye kwiikhompyuter kwi-VLAN20, kodwa akufuneki idlulele ngaphaya kwe-trunk port ye-SW1. Oku kunokufezekiswa ngokusebenzisa i-VTP Pruning.

Ukwenza oku, kufuneka siye kwiisethingi ze-VTP iseva ye-SW0, kuba njengoko besenditshilo, izicwangciso ze-VTP zingenziwa kuphela ngomncedisi, yiya kwimimiselo yoqwalaselo lwehlabathi kwaye uthayiphe umyalelo we-vtp pruning. Ekubeni iPacket Tracer yinkqubo yokulinganisa, akukho myalelo unjalo kwi-prompts yomgca womyalelo. Nangona kunjalo, xa ndichwetheza i-vtp pruning kwaye ndicinezela u-Enter, inkqubo indixelela ukuba i-vtp pruning mode ayifumaneki.

Ukusebenzisa umyalelo wesimo se-vtp, siya kubona ukuba i-VTP Pruning mode ikwimo ekhubazekileyo, ngoko kufuneka siyenze ifumaneke ngokuyihambisa kwindawo yokuvumela. Senze oku, sivula imowudi yeVTP yokuPruna kuzo zontathu iiswitshi zenethiwekhi yethu ngaphakathi kwendawo yenethiwekhi.
Makhe ndikukhumbuze ukuba yintoni iVTP Pruning. Xa senza le mowudi, tshintsha iseva SW0 yazisa iswitsha SW2 ukuba yiVLAN10 kuphela eqwalaselweyo kumazibuko ayo. Emva koku, tshintsha i-SW2 ixelela ukutshintsha i-SW1 ukuba ayifuni nakuphi na ukugcwala ngaphandle kwetrafikhi elungiselelwe i-VLAN10. Ngoku, enkosi kwi-VTP Pruning, tshintsha i-SW1 inolwazi ukuba ayifuni ukuthumela i-VLAN20 traffic ecaleni kwe-SW1-SW2 trunk.

Oku kukulungele kakhulu njengomlawuli wenethiwekhi. Akunyanzelekanga ukuba ungenise imiyalelo ngesandla kuba iswitshi ikrelekrele ngokwaneleyo ukuthumela kanye oko kufunwa sisixhobo esithile sothungelwano. Ukuba ngomso ubeka elinye isebe lezentengiso kwisakhiwo esilandelayo kwaye uqhagamshele inethiwekhi yayo ye-VLAN20 ukuze utshintshe i-SW2, olo tshintsho luya kuxelela ngokukhawuleza i-SW1 ukuba ngoku ine-VLAN10 kunye ne-VLAN20 kwaye uyicela ukuba idlulise i-traffic kuwo omabini amanethiwekhi. Olu lwazi luhlaziywa rhoqo kuzo zonke izixhobo, okwenza unxibelelwano lusebenze ngakumbi.

Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN

Kukho enye indlela yokucacisa ukuhanjiswa kwezithuthi - oku kukusebenzisa umyalelo ovumela ukuhanjiswa kwedatha kuphela kwi-VLAN echaziweyo. Ndiya kwizicwangciso zokutshintsha SW1, apho ndinomdla kwizibuko Fa0/4, kwaye ngenisa imiyalelo int fa0/4 kunye neswitchport trunk evunyelweyo vlan. Ekubeni sele ndisazi ukuba i-SW2 ine-VLAN10 kuphela, ndiyakwazi ukuxelela i-SW1 ukuba ivumele i-traffic kuphela yaloo nethiwekhi kwi-port yayo ye-trunk ngokusebenzisa i-vlan evumelekileyo yomyalelo. Ngoko ke ndacwangcisa i-trunk port Fa0/4 ukuthwala i-traffic kuphela ye-VLAN10. Oku kuthetha ukuba elizibuko aliyi kuvumela itrafikhi evela kwi-VLAN1, VLAN20, okanye nayiphi na enye inethiwekhi ngaphandle kwale ichaziweyo.

Usenokuba uyazibuza ukuba yeyiphi eyona ingcono ukuyisebenzisa: I-VTP Pruning okanye umyalelo we-vlan ovunyelweyo. Impendulo ixhomekeke kuba kwezinye iimeko kuyavakala ukusebenzisa indlela yokuqala, kwaye kwezinye kuyavakala ukusebenzisa eyesibini. Njengomlawuli wothungelwano, kuxhomekeke kuwe ukuba ukhethe esona sisombululo. Kwezinye iimeko, isigqibo sokucwangcisa i-port ukuvumela i-traffic kwi-VLAN ethile ingaba yinto enhle, kodwa kwabanye ingaba yimbi. Kwimeko yothungelwano lwethu, ukusebenzisa umyalelo we-vlan ovunyelweyo unokuthetheleleka ukuba asiyi kutshintsha i-topology yenethiwekhi. Kodwa ukuba umntu kamva ufuna ukongeza iqela lezixhobo usebenzisa i-VLAN2 ukuya kwi-SW 20, kuya kucetyiswa ngakumbi ukusebenzisa imo ye-VTP Pruning.

Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN

Ke, ukuseta i-VTP Pruning kubandakanya ukusebenzisa le miyalelo ilandelayo. Umyalelo wokuthenwa kwe-vtp ubonelela ngosetyenziso oluzenzekelayo lwale ndlela. Ukuba ufuna ukuqwalasela iVTP UkuPruning yezibuko lesiqu ukuvumela uthutho lweVLAN ethile ukuba idlule ngesandla, ngoku sebenzisa umyalelo ukukhetha ujongano lwenombolo yesiqobo sezibuko <#>, yenza ujongano lwendlela yoqobo yokutshintsha kwesiqu kwaye vumela ugqithiso lwetrafikhi. kuthungelwano oluthile usebenzisa i-switchport trunk evunyelwe umyalelo we-vlan .

Kumyalelo wokugqibela ungasebenzisa iiparamitha ezi-5. Zonke zithetha ukuba ukuhanjiswa kwetrafikhi kuzo zonke iiVLAN kuvunyelwe, akukho nanye - ukuhanjiswa kwetrafikhi kuzo zonke iiVLAN akuvumelekanga. Ukuba usebenzisa iparameter yokongeza, unokongeza i-traffic throughput kwenye inethiwekhi. Umzekelo, sivumela i-VLAN10 ye-traffic, kwaye kunye nomyalelo wokongeza sinokuvumela i-VLAN20 traffic ukuba idlule. Umyalelo wokususa ikuvumela ukuba ususe enye yenethiwekhi, umzekelo, ukuba usebenzisa i-parameter yokususa i-20, kuphela i-VLAN10 traffic iya kuhlala.

Ngoku makhe sijonge iVLAN yokuzalwa. Sele sitshilo ukuba iVLAN yemveli yinethiwekhi yenyani yokudlula itrafikhi engabhalwanga kwizibuko elithile lesiqu.

Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN

Ndingena kwizicwangciso ezithile zezibuko njengoko kubonisiwe yi SW(config-ukuba)# iheader yelayini yomyalelo kwaye ndisebenzise umyalelo wokutshintsha umboko wemveli vlan <inombolo yenethiwekhi>, umzekelo VLAN10. Ngoku zonke iitrafikhi kwi-VLAN10 ziya kudlula kwi-trunk engabhalwanga.

Masibuyele kwi-logical network topology kwi-Packet Tracer window. Ukuba ndisebenzisa i-switchport trunk native vlan 20 umyalelo kwi-switch port Fa0/4, ngoko zonke izithuthi kwi-VLAN20 ziya kuhamba nge-Fa0/4 - SW2 isiqu esingafakwanga. Xa iswitshi i-SW2 ifumana le traffic, iya kucinga: "oku kukugcwala okungachazwanga, okuthetha ukuba kufuneka ndiyihambise kwiVLAN yokuzalwa." Kolu tshintsho, iVLAN yokuzalwa yinethiwekhi yeVLAN1. Iinethiwekhi 1 kunye ne-20 aziqhagamshelwanga nangayiphi na indlela, kodwa ekubeni imowudi ye-VLAN yokuzalwa isetyenziswa, sinethuba lokuhamba nge-VLAN20 traffic kwinethiwekhi eyahlukileyo ngokupheleleyo. Nangona kunjalo, le traffic ayizukwenziwa, kwaye iinethiwekhi ngokwazo kufuneka zihambelane.

Makhe sijonge oku ngomzekelo. Ndiza kungena kwizicwangciso ze-SW1 kwaye ndisebenzise i-switchport trunk native vlan 10 umyalelo Ngoku nayiphi na i-VLAN10 traffic iya kuphuma kwi-trunk port ingabhalwanga. Xa ifika kwizibuko lesiqu SW2, iswitshi iya kuqonda ukuba kufuneka iyigqithisele kwiVLAN1. Ngenxa yesi sigqibo, i-traffic ayiyi kukwazi ukufikelela kwiikhomputha ze-PC2, i-3 kunye ne-4, ekubeni ziqhagamshelwe kwii-switch access port ezijoliswe kwi-VLAN10.

Ngokobuchwephesha, oku kuya kubangela ukuba inkqubo ichaze ukuba i-VLAN yokuzalwa ye-port Fa0/4, eyinxalenye ye-VLAN10, ayihambelani ne-port Fa0/1, eyinxalenye ye-VLAN1. Oku kuthetha ukuba izibuko ezikhankanyiweyo aziyi kukwazi ukusebenza kwimo yesiqu ngenxa yokungahambelani komthonyama weVLAN.

Uqeqesho lweCisco 200-125 CCNA v3.0. Usuku lwe-14. I-VTP, iPruning kunye ne-Native VLAN


Enkosi ngokuhlala nathi. Ngaba uyawathanda amanqaku ethu? Ngaba ufuna ukubona umxholo onomdla ngakumbi? Sixhase ngokufaka iodolo okanye ngokucebisa abahlobo, I-30% isaphulelo kubasebenzisi beHabr kwi-analogue ekhethekileyo yeeseva zomgangatho wokungena, eyenzelwe wena: Inyaniso yonke malunga neVPS (KVM) E5-2650 v4 (6 Cores) 10GB DDR4 240GB SSD 1Gbps ukusuka kwi-$ 20 okanye indlela yokwabelana ngomncedisi? (ifumaneka nge-RAID1 kunye ne-RAID10, ukuya kuthi ga kwi-24 cores kunye ne-40GB DDR4).

I-Dell R730xd 2 amaxesha aphantsi? Kuphela apha 2 x Intel TetraDeca-Core Xeon 2x E5-2697v3 2.6GHz 14C 64GB DDR4 4x960GB SSD 1Gbps 100 TV ukusuka $199 eNetherlands! Dell R420 - 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB - ukusuka $99! Funda malunga Ulwakha njani umbutho weziseko zophuhliso. iklasi ngokusetyenziswa kwe-Dell R730xd E5-2650 iiseva ze-v4 ezixabisa i-9000 yee-euro ngepeni?

umthombo: www.habr.com

Yongeza izimvo