三层交换机实现不同vlan间通信.doc

案例八 利用三层交换机实现不同vlan间通信【背景描述】某企业有两个主要部门：销售部和技术部，其中销售部的个人计算机系统分散连接在两台交换机上，他们之间需要相互进行通信，销售部和技术部也需要进行相互通信，现要在交换机上做适当配置来实现这一目标。【实现功能】 使在同一VLAN里的计算机系统能跨交换机进行通信，而在不同VLAN里的计算机系统也能进行相互通信。【使用设备】设备类型设备名称设备数量交换机switchB1路由器三层交换机SwitchA1双绞线4计算机pc3【实验拓扑】【实现步骤】步骤1.在交换机SwitchA上创建vlan 10 ，并将0/5端口划分到vlan 10 中.SwitchAenableSwitchA#configure terminalSwitchA(config)#vlan 10SwitchA(config-vlan)#name salesSwitchA(config-vlan)#exitSwitchA(config)#interface fastEthernet 0/5SwitchA(config-if)#switchport access vlan 10SwitchA(config-if)#exitSwitchA(config)#vlan 20SwitchA(config-vlan)#name technicalSwitchA(config-vlan)#exitSwitchA(config)#interface vlan 20SwitchA(config-if)#exitSwitchA(config)#interface fastEthernet 0/15SwitchA(config-if)#switchport access vlan 20SwitchA(config-if)#exit步骤2.把交换机SwichA和SwichB相连的端口定义为tag vlan模式SwitchA(config)#interface fastEthernet 0/24SwitchA(config-if)#switchport mode trunk!将F0/24端口定义为tag vlan模式验证测试:验证F0/24端口已被设为tag vlan模式SwitchA#show interfaces fastEthernet 0/24 switchportInterface Switchport Mode Access Native Protected VLAN lists- - - - - - -Fa0/24 Enabled Trunk 1 1 Disabled All步骤3.在交换机SwichB上创建vlan 10,并将0/5端口划分到vlan 10中.SwichB(config)#vlan 10SwichB(config-vlan)#name salseSwichB(config-vlan)#exitSwichB(config)#interface fastEthernet 0/5SwichB(config-if)#switchport access vlan 10步骤4.把交换机SwichB和SwichA相连的端口定义为tag vlan模式SwichB(config)#interface fastEthernet 0/24SwichB(config-if)#switchport mode trunk验证测试:验证F0/24端口已被设置为tag vlan模式SwichB#show interfaces fastEthernet 0/24 switchportInterface Switchport Mode Access Native Protected VLAN lists- - - - - - -Fa0/24 Enabled Trunk 1 1 Disabled All步骤5.验证PC1与PC3能相互通信，但PC2和PC3不能相互通信。C:Documents and SettingsAdministratorping 192.168.10.30 !在PC1的命令行方式下能ping通PC3Pinging 192.168.10.30 with 32 bytes of data:Reply from 192.168.10.30: bytes=32 time1ms TTL=128Reply from 192.168.10.30: bytes=32 time1ms TTL=128Reply from 192.168.10.30: bytes=32 time1ms TTL=128Reply from 192.168.10.30: bytes=32 timeping 192.168.10.30 !在PC2的命令行方式下验证不能ping通PC3Pinging 192.168.10.30 with 32 bytes of data:Request timed out.Request timed out.Request timed out.Request timed out.Ping statistics for 192.168.10.30: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),步骤6.设置三层交换机VLAN间通信SwitchA(config)#interface vlan 10 !创建虚拟接口vlan 10SwitchA(config-if)#ip address 192.168.10.254 255.255.255.0 !配置虚拟接口vlan 10 的地址为192.168.10.254SwitchA(config-if)#no shutdown !开启端口2009-05-23 16:42:39 5-CONFIG:Configured from outbandSwitchA(config-if)#exit2009-05-23 16:42:42 5-CONFIG:Configured from outbandSwitchA(config)#interface vlan 20 !创建虚拟接口vlan 202009-05-23 16:42:46 5-CONFIG:Configured from outbandSwitchA(config-if)#ip address 192.168.20.254 255.255.255.0 !配置虚拟接口的地址为192.168.20.2542009-05-23 16:43:06 5-CONFIG:Configured from outbandSwitchA(config-if)#no shutdown !开启端口2009-05-23 16:43:09 5-CONFIG:Configured from outbandSwitchA(config-if)#exit2009-05-23 16:43:15 5-CONFIG:Configured from outband验证测试:查看S3550路由器的状态SwitchA#show ip interface !查看IP接口的状态Interface : VL10Description : Vlan 10OperStatus : upManagementStatus : EnabledPrimary Internet address: 192.168.10.254/24Broadcast address : 255.255.255.255PhysAddress : 00d0.f8b8.289cInterface : VL20Description : Vlan 20OperStatus : upManagementStatus : EnabledPrimary Internet address: 192.168.20.254/24Broadcast address : 255.255.255.255PhysAddress : 00d0.f8b8.289b步骤7.将PC1和PC3的网关设置为192.168.10.254,将PC2的默认网关设置成192.168.20.254测试结果:不同vlan间的主机可以相互ping通参考配置SwichA#show running-config !显示交换机SwichA的全部配置System software version : 2.41(4) Build Nov 23 2005 ReleaseBuilding configuration.Current configuration : 413 bytes!version 1.0!hostname SwichAvlan 1!vlan 10 name sales!vlan 20 name technical!interface FastEthernet 0/5 switchport access vlan 10!interface FastEthernet 0/15 switchport access vlan 20!interface FastEthernet 0/24 switchport mode trunk!interface Vlan 10 ip address 192.168.10.254 255.255.255.0!interface Vlan 20 ip address 192.168.20.254 255.255.255.0!endSwichB#show running-config !显示交换机SwichB的全部配置System software version : 1.61(2) Build Aug 31 2005 ReleaseBuilding configuration.Current configuration :