Isifundo sanamuhla sizonikela kuzilungiselelo ze-VLAN, okungukuthi, sizozama ukwenza konke esikhulume ngakho ezifundweni ezedlule. Manje sizobheka imibuzo emi-3: ukudala i-VLAN, ukwaba amachweba we-VLAN, nokubuka i-database ye-VLAN.
Ake sivule iwindi lohlelo lwe-Cisco Packer tracer nge-topology enengqondo yenethiwekhi yethu edwetshwe yimi.
Iswishi yokuqala engu-SW0 ixhunywe kumakhompyutha angu-2 i-PC0 ne-PC1, ahlanganiswe kunethiwekhi ye-VLAN10 enobubanzi bekheli le-IP elingu-192.168.10.0/24. Ngokufanelekile, amakheli e-IP alawa makhompyutha azoba ngu-192.168.10.1 kanye no-192.168.10.2. Imvamisa abantu bakhomba inombolo ye-VLAN nge-octet yesithathu yekheli le-IP, kithina ingu-10, nokho lokhu akuwona umbandela oyimpoqo wokuqoka amanethiwekhi, unganikeza noma yisiphi isihlonzi se-VLAN, kepha lo myalelo wamukelwa ezinkampanini ezinkulu ngoba kwenza kube lula ukumisa inethiwekhi.
Okulandelayo ukushintsha i-SW1, exhunywe kunethiwekhi ye-VLAN20 ngekheli le-IP elithi 192.168.20.0/24 ngamakhompyutha aphathekayo amabili i-Laptop1 ne-Laptop2.
I-VLAN10 itholakala esitezi sokuqala sehhovisi lenkampani futhi imele inethiwekhi yokuphatha ukuthengisa. I-Laptop1 yomthengisi, okungeye-VLAN0, ixhunywe kuswishi efanayo SW0. Le nethiwekhi ifinyelela esitezi sesi-20, lapho kutholakala khona ezinye izisebenzi, futhi ixhunywe emnyangweni wokuthengisa, ongase ube kwesinye isakhiwo noma esitezi sesi-2 sehhovisi elifanayo. Kunamakhompyutha angu-3 ngaphezulu afakiwe lapha - i-PC3 kanye no-2,3, ayingxenye yenethiwekhi ye-VLAN4.
I-VLAN10, njenge-VLAN20, kufanele inikeze ukuxhumana okungaphazamiseki kubo bonke abasebenzi, kungakhathaliseki ukuthi batholakala ezitezi ezihlukene noma ezakhiweni ezahlukene. Lona umqondo wenethiwekhi esizowubheka namuhla.
Ake siqale ukuyibeka futhi siqale nge-PC0. Ngokuchofoza isithonjana, sizofaka izilungiselelo zenethiwekhi yekhompuyutha bese sifaka ikheli le-IP 192.168.10.1 kanye ne-subnet mask 255.255.255.0. Angilifaki ikheli lesango elizenzakalelayo ngoba liyadingeka ukuphuma kunethiwekhi yendawo kuya kwenye, futhi esimweni sethu ngeke sibhekane nezilungiselelo ze-OSI layer 3, sinentshisekelo kuphela kungqimba 2, futhi ngeke sicabangele. ukuhambisa ithrafikhi kwenye inethi.
Sizomisa i-intranethi nalabo abasingathi abayingxenye yayo kuphela. Bese sizoya ku-PC2 futhi senze into efanayo esiyenzele i-PC yokuqala. Manje ake sibone ukuthi ngingakwazi yini uku-ping PC1 kusuka ku-PC0. Njengoba ubona, i-ping iyadlula, futhi ikhompuyutha enekheli le-IP 192.168.10.2 ibuyisela ngokuzethemba amaphakethe. Ngakho, sisungule ngempumelelo ukuxhumana phakathi kwe-PC0 ne-PC1 ngokusebenzisa iswishi.
Ukuze uqonde ukuthi kungani siphumelele, ake siye kuzilungiselelo zokushintsha bese sibheka ithebula le-VLAN.
Ngobuchwepheshe, le swishi inama-VLAN angu-5: i-VLAN1 ngokuzenzakalelayo, kanye no-1002,1003,1004 no-1005. Uma ubheka amanethiwekhi okugcina angu-4, ungabona ukuthi awasekelwe futhi amakwe njengangasekelwe. Lawa amanethiwekhi abonakalayo obuchwepheshe obudala - i-fddi, i-fddinet, i-trnet. Okwamanje azisetshenziswa, kodwa ngokwezidingo zobuchwepheshe zisafakiwe kumadivayisi amasha. Ngakho-ke, empeleni, ukushintshwa kwethu kunenethiwekhi eyodwa kuphela ebonakalayo - i-VLAN1, ngakho-ke wonke amachweba anoma iyiphi i-Cisco switch out of the box alungiselelwe le nethiwekhi. Lawa amachweba we-Ethernet asheshayo angama-24 kanye nezimbobo ezi-2 ze-Gigabit Ethernet. Lokhu kwenza ukuhambisana kwamaswishi amasha kube lula kakhulu, ngoba ngokuzenzakalelayo wonke ayingxenye ye-VLAN1 efanayo.
Kufanele sabelane kabusha izimbobo ezilungiselelwe ngokuzenzakalela ukuze zisebenze ne-VLAN1 ukuze zisebenze ne-VLAN10. I-Packet Tracer ibonisa ukuthi kithi lawa angamachweba u-Fa0 no-Fa0/2.
Masibuyele ekushintsheni i-SW0 futhi silungiselele lezi zimbobo ezimbili. Ukwenza lokhu, ngisebenzisa umyalo wokugcina wokumisa ukufaka imodi yokucushwa komhlaba wonke, bese ufaka umyalo wokumisa lesi sikhombimsebenzisi - int fastEthernet 0/1. Ngidinga ukusetha le mbobo ukuze ifinyelele kumodi yokusebenza ngoba iyimbobo yokufinyelela futhi ngisebenzisa umyalo wokufinyelela wemodi yokushintsha.
Le port ilungiselelwe njengembobo yokufinyelela emile, kodwa uma ngixhuma enye iswishi kuyo, ngisebenzisa iphrothokholi ye-DTP izoshintshela kumodi yesiqu esishintshashintshayo. Ngokuzenzakalelayo, lesi simboli singese-VLAN1, ngakho-ke ngidinga ukusebenzisa umyalo we-switchport access vlan 10. Kulokhu, uhlelo luzosinika umlayezo wokuthi i-VLAN10 ayikho futhi idinga ukudalwa. Uma ukhumbula, ku-database ye-VLAN sinenethiwekhi eyodwa kuphela - i-VLAN1, futhi ayikho inethiwekhi ye-VLAN10 lapho. Kodwa sicele ukushintshwa ukuthi kunikeze ukufinyelela ku-VLAN10, ngakho-ke sithole umlayezo wephutha.
Ngakho-ke, sidinga ukudala i-VLAN10 futhi sabelane le mbobo yokufinyelela kuyo. Ngemva kwalokhu, uma uya ku-database ye-VLAN, ungabona i-VLAN0010 esanda kwakhiwa, esesimweni esisebenzayo futhi engumnikazi we-port Fa0/1.
Asenzanga izinguquko kukhompuyutha, kodwa simane silungise imbobo yokushintsha lapho ixhumeke khona. Manje ake sizame ukufaka ikheli le-IP 192.168.10.2, esikwenze ngempumelelo emizuzwini embalwa edlule. Sehlulekile ngoba imbobo ye-PC0 exhunywe kuyo manje isiku-VLAN10, futhi imbobo ye-PC1 exhunywe kuyo iseku-VLAN1, futhi akukho ukuxhumana phakathi kwamanethiwekhi amabili. Ukuze usungule ukuxhumana phakathi kwalawa makhompyutha, udinga ukulungisa zombili izimbobo ukuze zisebenze ne-VLAN10. Ngifaka imodi yokumisa yomhlaba futhi futhi ngenza okufanayo ku-switchport f0/2.
Ake sibheke futhi ithebula le-VLAN. Manje siyabona ukuthi i-VLAN10 ilungiselelwe kumachweba u-Fa0/1 no-Fa0/2. Njengoba sibona, manje i-ping iphumelele, ngoba womabili amachweba we-SW0 switch lapho amadivayisi axhumeke kuwo angenethiwekhi efanayo. Ake sizame ukushintsha igama lenethiwekhi ukuze sibonise injongo yayo. Uma sifuna ukwenza noma yiziphi izinguquko ku-VLAN, kufanele singene ekucushweni kwale nethiwekhi.
Ukwenza lokhu, ngithayipha i-vlan 10 futhi ungabona ukuthi umyalo womyalo ushintshile ukusuka ku-Shintsha (config) # kuya ku-Switch (config-vlan) #. Uma sifaka uphawu lombuzo, uhlelo luzosibonisa imiyalo emi-3 kuphela: ukuphuma, igama kanye no-cha. Ngingakwazi ukwabela inethiwekhi igama ngisebenzisa umyalo wegama, ngibuyisele imiyalo esimweni sayo esimisiwe ngokuthayipha cha, noma ngigcine izinguquko zami ngisebenzisa umyalo wokuphuma. Ngakho-ke ngifaka igama lemiyalo ethi IZINDABA bese ngiyaphuma.
Uma ubheka imininingo egciniwe ye-VLAN, ungaqiniseka ukuthi imiyalo yethu yenziwe futhi i-VLAN10 yangaphambili isibizwa ngokuthi I-SALES - umnyango wokuthengisa. Ngakho-ke, sixhume amakhompyutha angu-2 ehhovisi lethu kunethiwekhi edaliwe yomnyango wokuthengisa. Manje sidinga ukudala inethiwekhi yomnyango wokumaketha. Ukuze uxhume i-laptop ye-Laptop0 kule nethiwekhi, udinga ukufaka izilungiselelo zayo zenethiwekhi bese ufaka ikheli lasesizindeni se-inthanethi 192.168.20.1 kanye ne-subnet mask 255.255.255.0; asidingi isango elizenzakalelayo. Bese udinga ukubuyela kuzilungiselelo zokushintsha, faka izilungiselelo zembobo ngomyalo we-int fa0/3 bese ufaka umyalo wokufinyelela wemodi yokushintsha. Umyalo olandelayo uzoba ukufinyelela kwe-switchport vlan 20.
Siphinde sithole umlayezo wokuthi i-VLAN enjalo ayikho futhi idinga ukudalwa. Ungahamba ngenye indlela - ngizophuma ekucushweni kwe-Switch port (config-if), hamba ku-Shintsha (config) bese ufaka umyalo we-vlan 20, ngaleyo ndlela ngidale inethiwekhi ye-VLAN20. Okusho ukuthi, ungaqala udale inethiwekhi ye-VLAN20, uyinike igama elithi MARKETING, ulondoloze izinguquko ngomyalo wokuphuma, bese uyilungiselela ichweba.
Uma ungena kusizindalwazi se-VLAN ngomyalo we-sh vlan, ungabona inethiwekhi YOKUMAKETHA esiyidalile kanye nembobo ehambisanayo ethi Fa0/3. Ngeke ngikwazi uku-ping amakhompyutha kule laptop ngenxa yezizathu ezimbili: sinama-VLAN ahlukene futhi amadivaysi ethu angaphansi kwama-subnets ahlukene. Njengoba zingama-VLAN ahlukene, iswishi izowisa amaphakethe e-laptop aqondiswe kwenye inethiwekhi ngoba ayinaso imbobo okungeye-VLAN20.
Njengoba ngishilo, inkampani iyanda, ihhovisi elincane eliphansi alanele, ngakho-ke ibeka umnyango wokumaketha esitezi sesibili sesakhiwo, ifake amakhompyutha lapho kubasebenzi abangu-2 futhi ifuna ukunikeza ukuxhumana nomnyango wokumaketha isitezi sokuqala. Ukuze wenze lokhu, kufanele uqale udale i-trunk phakathi kwamaswishi amabili - imbobo engu-Fa2/0 yokushintsha kokuqala kanye ne-port Fa4/0 yokushintsha kwesibili. Ukwenza lokhu, ngiya kuzilungiselelo ze-SW1 bese ngifaka imiyalo int f0/0 kanye ne-switchport mode trunk.
Kukhona umyalo we-switchport trunk encapsulation, kodwa awusetshenziswa ekushintsheni okusha ngoba ngokuzenzakalelayo basebenzisa ubuchwepheshe be-encapsulation engu-802.1q. Nokho, amamodeli amadala amaswishi e-Cisco asebenzise iphrothokholi yobunikazi ye-ISL, engasasetshenziswa, njengoba wonke amaswishi manje eqonda umthetho olandelwayo we-.1Q. Ngale ndlela awusadingi ukusebenzisa umyalo we-switchport trunk enc.
Uma manje uya ku-database ye-VLAN, ungabona ukuthi i-port Fa0/4 inyamalele kuyo. Lokhu kungenxa yokuthi leli thebula libala kuphela izimbobo zokungena ezingeze-VLAN ethile. Ukuze ubone izimbobo ze-trunk zeswishi, kufanele usebenzise umyalo we-sh int trunk.
Efasiteleni lomugqa womyalo, sibona ukuthi imbobo ye-Fa0/4 inikwe amandla, ihlanganisa ngaphezu kwephrothokholi engu-802.1q, futhi ingeye-vlan 1 yomdabu. Njengoba sazi, uma le mbobo ye-trunk ithola ithrafikhi engamakiwe, iyidlulisela ngokuzenzakalelayo ku-vlan yomdabu. 1 inethiwekhi. Esifundweni esilandelayo sizokhuluma ngokusetha i-vlan yomdabu, okwamanje khumbula nje ukuthi izilungiselelo ze-trunk zibukeka kanjani kudivayisi enikeziwe.
Manje ngiya kuswishi yesibili ethi SW1, faka imodi yezilungiselelo ze-int f0/1 bese uphinda ukulandelana kokusetha kwembobo okufana nekesi yangaphambilini. Izimbobo ezimbili ze-Fa0/2 kanye ne-Fa0/3, lapho amakhompyutha aphathekayo ezisebenzi zomnyango wokumaketha axhunywe kuwo, kufanele amiswe kumodi yokufinyelela futhi anikezwe inethiwekhi ye-VLAN20.
Esimweni sangaphambilini, silungiselele ichweba ngalinye lokushintsha ngabanye, futhi manje ngifuna ukukubonisa indlela yokusheshisa le nqubo usebenzisa ithempulethi yomugqa womyalo. Ungafaka umyalo ukuze ulungiselele ububanzi bezixhumi ezibonakalayo ububanzi be-int f0/2-3, okuzokwenza ukuthi umugqa womyalo ube yi-Switch (config-if-range)#, futhi ungafaka ipharamitha efanayo noma usebenzise umyalo ofanayo. kububanzi obucacisiwe bezimbobo, isibonelo, ngesikhathi esisodwa izimbobo ezingama-20.
Esibonelweni sangaphambilini, sisebenzise ukufinyelela kwemodi yokushintsha okufanayo kanye nemiyalelo yokufinyelela ye-switchport ye-vlan 10 izikhathi ezimbalwa kumachweba amaningana okushintsha. Le miyalo ingafakwa kanye uma usebenzisa uhla lwamachweba. Manje ngizofaka ukufinyelela kwemodi ye-switchport kanye nemiyalo yokufinyelela ye-switchport ye-vlan 20 yobubanzi bembobo ekhethiwe.
Njengoba i-VLAN20 ingekho okwamanje, isistimu izoyidala ngokuzenzakalelayo. Ngithayipha ukuphuma ukuze ngilondoloze izinguquko zami futhi ngicele ukubona ithebula le-VLAN. Njengoba ubona, amachweba u-Fa0/2 kanye ne-Fa0/3 manje ayingxenye ye-VLAN20 esanda kwakhiwa.
Manje ngizomisa amakheli e-IP wamakhompyutha aphathekayo esitezi sesibili sehhovisi lethu: I-Laptop1 izothola ikheli elithi 192.168.20.2 kanye ne-subnet mask engu-255.255.255.0, futhi i-Laptop2 izothola ikheli le-IP elingu-192.168.20.3. Ake sihlole ukusebenza kwenethiwekhi ngokucindezela ikhompuyutha ephathekayo yokuqala ukusuka kweyesibili. Njengoba ubona, i-ping iphumelele ngoba womabili amadivaysi ayingxenye ye-VLAN efanayo futhi axhumeke ekushintsheni okufanayo.
Kodwa-ke, amalaptop omnyango wokumaketha esitezi sokuqala nesesibili axhunywe kumaswishi ahlukene, nakuba aku-VLAN efanayo. Ake sihlole ukuthi ukuxhumana phakathi kwabo kuqinisekiswa kanjani. Ukwenza lokhu, ngizofaka ikhompuyutha ephathekayo esitezi sokuqala ngekheli le-IP elithi 2 kusuka ku-Laptop192.168.20.1. Njengoba ubona, yonke into isebenza ngaphandle kwezinkinga naphezu kokuthi ama-laptops axhunywe ekushintsheni okuhlukile. Ukuxhumana kwenziwa ngenxa yokuthi kokubili ukushintshwa kuxhunywe nge-trunk.
Ngingakwazi ukusungula ukuxhumana phakathi kweLaptop2 ne-PC0? Cha, angikwazi, ngoba bangama-VLAN ahlukene. Manje sizomisa inethiwekhi yamakhompiyutha i-PC2,3,4, esizoqala ngayo ukudala i-trunk phakathi kwe-switch yesibili i-Fa0/4 kanye ne-switch yesithathu ye-Fa0/1.
Ngingena kuzilungiselelo ze-SW1 bese ngithayipha umyalo we-config t, ngemva kwalokho ngishayele int f0/4, bese ngifaka isiqu semodi yokushintsha bese ngiphuma imiyalo. Ngilungiselela ukushintshwa kwesithathu kwe-SW2 ngendlela efanayo. Sidale i-trunk, futhi ungabona ukuthi ngemuva kokuthi izilungiselelo zisebenze, umbala wamachweba ushintshile ukusuka kokuwolintshi ukuya kokuluhlaza. Manje udinga ukulungisa izimbobo ze-Fa0/2,0/3,0/4, lapho kuxhunywe khona amakhompyutha omnyango wokuthengisa wenethiwekhi ye-VLAN10. Ukuze wenze lokhu, ngiya kuzilungiselelo zokushintsha kwe-SW2, khetha ububanzi bezimbobo ze-f0/2-4 futhi ngisebenzise ukufinyelela kwemodi ye-switchport kanye ne-switchport ukufinyelela imiyalo ye-vlan 10. Njengoba ingekho inethiwekhi ye-VLAN10 kulawa machweba, idalwa ngokuzenzakalelayo uhlelo. Uma ubheka isizindalwazi se-VLAN salokhu kushintsha, ungabona ukuthi manje amachweba u-Fa0/2,0/3,0/4 angeka-VLAN10.
Ngemva kwalokhu, udinga ukumisa inethiwekhi yalawa makhompyutha angu-3 ngokufaka amakheli e-IP namamaski e-subnet. I-PC2 ithola ikheli elithi 192.168.10.3, i-PC3 ithola ikheli 192.168.10.4, futhi i-PC4 ithola ikheli le-IP 192.168.10.5.
Ukuze siphendule umbuzo wokuthi ingabe inethiwekhi yethu iyasebenza yini, ake sishaye i-PC0 esitezi sokuqala sisuka ku-PC4, esisezingeni lesi-3 noma kwesinye isakhiwo. I-Pinging yehlulekile, ngakho-ke ake sizame ukuthola ukuthi kungani singakwazanga ukukwenza.
Lapho sizama ukufaka i-Laptop0 kusuka ku-Laptop2, yonke into yasebenza kahle, naphezu kokuthi ama-laptops ayexhunywe ekushintsheni okuhlukile. Kungani manje, lapho amakhompiyutha omnyango wethu wokuthengisa exhunywe ngokunembile ekushintsheni okuhlukene okuxhunywe nge-trunk, i-ping ayisebenzi? Ukuze uqonde imbangela yenkinga, udinga ukukhumbula ukuthi ukushintshwa kusebenza kanjani.
Uma sithumela iphakethe kusuka ku-PC4 ukuze sishintshe i-SW2, ibona ukuthi iphakethe lifika ku-port Fa0/4. Iswishi ihlola isizindalwazi sayo futhi ithola ukuthi imbobo Fa0/4 ingeye-VLAN10. Ngemva kwalokhu, iswishi simaka ifreyimu enenombolo yenethiwekhi, okungukuthi, inamathisela unhlokweni we-VLAN10 ephaketheni lethrafikhi, futhi iyithumele eduze kwe-trunk kusishintshi sesibili esingu-SW1. Le switch "ifunda" unhlokweni futhi ibona ukuthi iphakethe limiselwe i-VLAN10, libheka ku-database yayo ye-VLAN futhi, ithola ukuthi ayikho i-VLAN10 lapho, ilahla iphakethe. Ngakho, amadivaysi PC2,3 kanye 4 akwazi ukuxhumana nomunye ngaphandle kwezinkinga, kodwa umzamo ukusungula ukuxhumana namakhompyutha PC0 kanye PC1 uyehluleka ngoba switch SW1 akazi lutho mayelana VLAN10 inethiwekhi.
Singayilungisa kalula le nkinga ngokuya kuzilungiselelo ze-SW1, sidale i-VLAN10 sisebenzisa umyalo we-vlan 10 bese sifaka igama layo elithi MARKETING. Ake sizame ukuphinda i-ping - ubona ukuthi amaphakethe amathathu okuqala alahliwe, futhi okwesine kuyaphumelela. Lokhu kuchazwa ukuthi ukushintsha kuqala kuhlole amakheli e-IP futhi kwanquma ikheli le-MAC, lokhu kwathatha isikhathi, ngakho amaphakethe amathathu okuqala alahlwa isikhathi sokuvala. Manje uxhumano selusunguliwe ngoba iswishi ibuyekeze ithebula layo lekheli le-MAC futhi ithumela amaphakethe ngokuqondile ekhelini elidingekayo.
Engikwenzile ukulungisa inkinga kwaba ukungena kuzilungiselelo zokushintsha okuphakathi bese ngenza inethiwekhi ye-VLAN10 lapho. Ngakho-ke, noma ngabe inethiwekhi ingahlotshaniswa ngokuqondile nokushintshwa, kusadingeka ukwazi ngawo wonke amanethiwekhi ahilelekile ekuxhumekeni kwenethiwekhi. Kodwa-ke, uma inethiwekhi yakho inamaswishi ayikhulu, ngeke ukwazi ngokoqobo ukungena kuzilungiselelo zaleyo naleyo bese ulungisa mathupha ama-VLAN ID. Kungakho sisebenzisa iphrothokholi ye-VTP, ukucushwa kwayo esizoyibheka esifundweni sevidiyo esilandelayo.
Ngakho-ke, namuhla sihlanganise konke esikuhlelile: indlela yokudala ama-VLAN, indlela yokwabela amachweba we-VLAN, nokuthi ungabuka kanjani idatha ye-VLAN. Ukwakha amanethiwekhi, sifaka imodi yokushintsha ukushintsha komhlaba wonke futhi sisebenzisa umyalo we-vlan <number>, singaphinda sinikeze igama kunethiwekhi edaliwe sisebenzisa igama elithi <name> umyalo.
Singakwazi futhi ukudala i-VLAN enye indlela ngokufaka imodi yokusebenzelana nokusebenzisa umyalo we-switchport access vlan <number>. Uma ingekho inethiwekhi enale nombolo, izodalwa ngokuzenzakalelayo isistimu. Khumbula ukusebenzisa umyalo wokuphuma ngemva kokwenza izinguquko kuzilungiselelo zokuqala, ngaphandle kwalokho ngeke zilondolozwe kusizindalwazi se-VLAN. Ungabe usunikeza izimbobo kuma-VLAN athile usebenzisa imiyalo efanelekile.
Umyalo wokufinyelela wemodi ye-switchport ushintsha isixhumi esibonakalayo sibe imodi yembobo yokufinyelela emile, ngemva kwalokho inombolo ye-VLAN ehambisanayo yabelwa embobeni ngomyalo wokufinyelela we-switchport we-vlan <number>. Ukuze ubuke i-database ye-VLAN, sebenzisa umyalo we-vlan wokubonisa, okumele ufakwe kumodi ye-EXEC yomsebenzisi. Ukuze ubuke uhlu lwezimbobo ze-trunk, sebenzisa umyalo we-show int trunk.
Siyabonga ngokuhlala nathi. Uyazithanda izindatshana zethu? Ufuna ukubona okuqukethwe okuthakaselayo okwengeziwe? Sisekele ngokufaka i-oda noma ngokuncoma kubangani, Isaphulelo sika-30% sabasebenzisi be-Habr ku-analogue ehlukile yamaseva eleveli yokungena, esungulwe yithi ngenxa yakho:
I-Dell R730xd ishibhile izikhathi ezi-2? Lapha kuphela
Source: www.habr.com