基于IP子网划分VLAN配置示例.doc

。基于IP子网划分VLAN配置示例1、组网需求 图1基于IP子网划分VLAN组网图如图1所示，某企业拥有多种业务，如IPTV、VoIP、Internet等，每种业务使用的IP地址网段各不相同。为了便于管理，现需要将同一种类型业务划分到同一VLAN中，不同类型的业务划分到不同VLAN中。Switch接收到用户报文有数据、IPTV、语音等多种业务，用户设备的IP地址网段各不相同。现需要将不同类型的业务划分到不同的VLAN中，通过不同的VLAN ID分流到不同的远端服务器上以实现业务互通。2、配置思路2.1、创建VLAN，确定每种业务所属的VLAN。2.2、关联IP子网和VLAN，实现根据报文中的源IP地址或指定网段确定VLAN。2.3、配置接口加入VLAN，实现基于IP子网的VLAN通过当前接口。2.4、使能基于IP子网划分VLAN。3、操作步骤3.1、创建VLAN#在Switch上创建VLAN100、VLAN200和VLAN300。1. system-view2. HUAWEI sysname Switch3. Switch vlan batch 100 200 3003.2、配置接口#在Switch上配置接口GE1/0/5、GE1/0/6、GE1/0/7为Hybrid类型，分别以untagged方式加入VLAN100、VLAN200和VLAN300。并使能基于IP子网划分VLAN功能。1. Switch interface gigabitethernet 1/0/52. Switch-GigabitEthernet1/0/5 port link-type hybrid3. Switch-GigabitEthernet1/0/5 port hybrid untagged vlan 1004. Switch-GigabitEthernet1/0/5 ip-subnet-vlan enable5. Switch-GigabitEthernet1/0/5 quit6. Switch interface gigabitethernet 1/0/67. Switch-GigabitEthernet1/0/6 port link-type hybrid8. Switch-GigabitEthernet1/0/6 port hybrid untagged vlan 2009. Switch-GigabitEthernet1/0/6 ip-subnet-vlan enable10. Switch-GigabitEthernet1/0/6 quit11. Switch interface gigabitethernet 1/0/712. Switch-GigabitEthernet1/0/7 port link-type hybrid13. Switch-GigabitEthernet1/0/7 port hybrid untagged vlan 30014. Switch-GigabitEthernet1/0/7 ip-subnet-vlan enable15. Switch-GigabitEthernet1/0/7 quit#在Switch上配置接口GE1/0/2加入VLAN100。1. Switch interface gigabitethernet 1/0/22. Switch-GigabitEthernet1/0/2 port link-type trunk3. Switch-GigabitEthernet1/0/2 port trunk allow-pass vlan 1004. Switch-GigabitEthernet1/0/2 quit#在Switch上配置接口GE1/0/3加入VLAN200。1. Switch interface gigabitethernet 1/0/32. Switch-GigabitEthernet1/0/3 port link-type trunk3. Switch-GigabitEthernet1/0/3 port trunk allow-pass vlan 2004. Switch-GigabitEthernet1/0/3 quit#在Switch上配置接口GE1/0/4加入VLAN300。1. Switch interface gigabitethernet 1/0/42. Switch-GigabitEthernet1/0/4 port link-type trunk3. Switch-GigabitEthernet1/0/4 port trunk allow-pass vlan 3004. Switch-GigabitEthernet1/0/4 quit3.3、配置基于IP子网划分VLAN#在Switch上配置VLAN100与IP地址192.168.1.2/24关联，优先级为2。1. Switch vlan 1002. Switch-vlan100 ip-subnet-vlan 1 ip 192.168.1.2 24 priority 23. Switch-vlan100 quit#在Switch上配置VLAN200与IP地址192.168.2.2/24关联，优先级为3。1. Switch vlan 2002. Switch-vlan200 ip-subnet-vlan 1 ip 192.168.2.2 24 priority 33. Switch-vlan200 quit#在Switch上配置VLAN300与IP地址192.168.3.2/24关联，优先级为4。1. Switch vlan 3002. Switch-vlan300 ip-subnet-vlan 1 ip 192.168.3.2 24 priority 43. Switch-vlan300 quit4、验证配置结果在Switch上执行以下命令，显示信息如下：1. Switch display ip-subnet-vlan vlan all2. -3. Vlan Index IpAddress SubnetMask Priority4. -5. 100 1 192.168.1.2 255.255.255.0 26. 200 1 192.168.2.2 255.255.255.0 37. 300 1 192.168.3.2 255.255.255.0 48. -9. ip-subnet-vlan count: 3 total count: 35、配置文件5.1、Switch的配置文件1. #2. sysname Switch3. #4. vlan batch 100 200 3005. #6. vlan 1007. ip-subnet-vlan 1 ip 192.168.1.2 255.255.255.0 priority 28. vlan 2009. ip-subnet-vlan 1 ip 192.168.2.2 255.255.255.0 priority 310. vlan 30011. ip-subnet-vlan 1 ip 192.168.3.2 255.255.255.0 priority 412. #13. interface GigabitEthernet1/0/214. port link-type trunk15. port trunk allow-pass vlan 10016. #17. interface GigabitEthernet1/0/318. port link-type trunk19. port trunk allow-pass vlan 20020. #21. interface GigabitEthernet1/0/422. port link-type trunk23. port trunk allow-pass vlan 30024. #25. interface GigabitEthernet1/0/526. port link-type hybrid27. port hybrid untagged vlan 10028. ip-subnet-vlan enable29. #30. interface GigabitEthernet1/0/631. port link-type hybrid32. port hybrid untagged vlan 20033. ip-subnet-vlan enable34.