利用单臂路由实现vlan间的通信.doc

2011年3月13日星期日 我做的前面配置有勿。配置交换机1，2为trunk模式sw1#conf tEnter configuration commands, one per line. End with CNTL/Z.sw1(config)#int f0/11sw1(config-if)#switchport mode trunksw2(config)#int f0/11sw2(config-if)#switchport trunk encapsulation dot1q sw2(config-if)#switchport mode trunksw2(config)#int f0/3sw2(config-if)#switchport mode trunksw2(config-if)#switchport trunk encapsulation dot1q配vtpsw1(config)#vtp mode serversw1(config)#vtp domain lzhChanging VTP domain name from zhangle to lzhsw1(config)#vtp password 123配不上密码sw2#vlan database sw2(vlan)#vtp client sw2(vlan)#vtp domain lzh2Changing VTP domain name from NULL to lzh2sw2(vlan)#vtp passwsw2(vlan)#vtp password 123456Setting device VLAN database password to 123456.sw1#vlan database (注：2950的交换机只能在database下加密）sw1(vlan)#vtp password 123Setting device VLAN databse password to 123.sw1(vlan)#vtp pruningPruning switched ONsw1(vlan)#vtp pruning ? v2-mode Set the administrative domain to V2 mode. sw1(vlan)#vtp pruning v2-mode Pruning already switched on.V2 mode enabled.sw1(vlan)#exit（配vlan）（配完SW1在SW2上看不出同步？）sw1#vlan database(早期的交换机要进入database中)sw1(vlan)#vlan 10 name ITAPPLY completed.Exiting.（在SW1是的与PC1相连的接口上配接入模式并划入一个VLAN中）sw1#conf tsw1(config)#int f0/3sw1(config-if)#switchport mode accesssw1(config-if)#switchport access vlan 10sw1(config-if)#endsw1#05:31:30: %SYS-5-CONFIG_I: Configured from console by consolesw1#sh vlan briVLAN Name Status Ports- - - -1 default active Fa0/1, Fa0/2, Fa0/4, Fa0/5 Fa0/6, Fa0/7, Fa0/8, Fa0/9 Fa0/10, Fa0/1210 IT active Fa0/311 VLAN0011 active 12 VLAN0012 active 13 VLAN0013 active 14 VLAN0014 active 15 VLAN0015 active 16 VLAN0016 active 17 VLAN0017 active 18 VLAN0018 active 19 VLAN0019 active 20 ITAA active 1002 fddi-default active 1003 trcrf-default active 1004 fddinet-default active 1005 trbrf-default active sw1#（同上）sw2#conf tEnter configuration commands, one per line. End with CNTL/Z.sw2(config)#int f0/17sw2(config-if)#swsw2(config-if)#switchport mode access sw2(config-if)#switchport access vlan 10（配子接口。目地是充当网关）Router(config)#int e0/0.10Router(config-subif)#enRouter(config-subif)#encapsulation dot1q 10Router(config-subif)#ip add 172.17.10.1 255.255.255.0Router(config)#int e0/0.20Router(config-subif)#encapsulation dot1q 20Router(config-subif)#ip add 172.17.20.10 255.255.255.0Router(config-subif)#no shuRouter(config-subif)#endRouter#sh ip int briInterface IP-Address OK? Method Status ProtocolEthernet0/0 unassigned YES unset up up Ethernet0/0.10 172.17.10.1 YES manual up up Ethernet0/0.20 172.17.20.10 YES manual up up Serial0/0 unassigned YES unset administratively down down Serial0/1 unassigned YES unset administratively down down Router#（配网关）pc1(config)#ip default-gateway 192.168.1.1 pc2(config)#ip default-gateway 10.1.1.1（注：本实验错误的反PC1,PC2配在一个VLAN中）sw2#vlan databasesw2(vlan)#no vlan 10 Deleting VLAN 10.（老师改的）sw1#show ip int briefInterface IP-Address OK? Method Status ProtocolVlan1 unassigned YES unset administratively down down FastEthernet0/1 unassigned YES unset down down FastEthernet0/2 unassigned YES unset down down FastEthernet0/3 unassigned YES unset up up FastEthernet0/4 unassigned YES unset down down FastEthernet0/5 unassigned YES unset down down FastEthernet0/6 unassigned YES unset down down FastEthernet0/7 unassigned YES unset down down FastEthernet0/8 unassigned YES unset down down FastEthernet0/9 unassigned YES unset down down FastEthernet0/10 unassigned YES unset down down FastEthernet0/11 unassigned YES unset up up FastEthernet0/12 unassigned YES unset down down sw1#show vlansw1#show vlan VLAN Name Status Ports- - - -1 default active Fa0/1, Fa0/2, Fa0/4, Fa0/5 Fa0/6, Fa0/7, Fa0/8, Fa0/9 Fa0/10, Fa0/1210 IT active Fa0/311 VLAN0011 active 12 VLAN0012 active 13 VLAN0013 active 14 VLAN0014 active 15 VLAN0015 active 16 VLAN0016 active 17 VLAN0017 active 18 VLAN0018 active 19 VLAN0019 active 20 ITAA active 1002 fddi-default active 1003 trcrf-default active 1004 fddinet-default active 1005 trbrf-default active VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2- - - - - - - - - - -1 enet 100001 1500 - - - - - 0 0 10 enet 100010 1500 - - - - - 0 0 11 enet 100011 1500 - - - - - 0 0 12 enet 100012 1500 - - - - - 0 0 13 enet 100013 1500 - - - - - 0 0 14 enet 100014 1500 - - - - - 0 0 15 enet 100015 1500 - - - - - 0 0 16 enet 100016 1500 - - - - - 0 0 17 enet 100017 1500 - - - - - 0 0 18 enet 100018 1500 - - - - - 0 0 19 enet 100019 1500 - - - - - 0 0 20 enet 100020 1500 - - - - - 0 0 1002 fddi 101002 1500 - - - - - 0 0 1003 trcrf 101003 4472 1005 3276 - - srb 0 0 1004 fdnet 101004 1500 - - - ieee - 0 0 1005 trbrf 101005 4472 - - 15 ibm - 0 0 VLAN AREHops STEHops Backup CRF VLAN AREHops STEHops Backup CRF- - - -1003 0 0 offsw1#show int f0/11 switchport Name: Fa0/11Switchport: EnabledAdministrative Mode: trunkOperational Mode: trunkAdministrative Trunking Encapsulation: dot1qOperational Trunking Encapsulation: dot1qNegotiation of Trunking: OnAccess Mode VLAN: 1 (default)Trunking Native Mode VLAN: 1 (default)Trunking VLANs Enabled: ALLPruning VLANs Enabled: 2-1001Protected: falseVoice VLAN: none (Inactive)Appliance trust: nonesw1#sw1#show mac-address-table （看SW1的MAC是不是学到PC1的MAC） Mac Address Table-Vlan Mac Address Type Ports- - - - 1 000a.f429.eb0b DYNAMIC Fa0/11 10 000a.f429.eb0b DYNAMIC Fa0/11 10 0010.7b39.f4b9 DYNAMIC Fa0/3Total Mac Addresses for this criterion: 3sw1#sw2#sw2#show macsw2#show mac-address-table （看SW2的MAC是不是学到PC2的MAC）Dynamic Address Count: 4Secure Address Count: 0Static Address (User-defined) Count: 0System Self Address Count: 51Total MAC addresses: 55Maximum MAC addresses: 8192Non-static Address Table:Destination Address Address Type VLAN Destination Port- - - -0005.74ac.694b Dynamic 1 FastEthernet0/110008.e354.6de0 Dynamic 1 FastEthernet0/30010.7b39.f4b9 Dynamic 10 FastEthernet0/110010.7b7f.7dc0 Dynamic 30 FastEthernet0/17sw2#show int f0/11 switchport Name: Fa0/11Switchport: EnabledAdministrative mode: trunkOperational Mode: trunkAdministrative Trunking Encapsulation: dot1qOperational Trunking Encapsulation: dot1qNegotiation of Trunking: DisabledAccess Mode VLAN: 0 (Inactive)Trunking Native Mode VLAN: 1 (default)Trunking VLANs Enabled: ALLTrunking VLANs Active: 1-4,10,30,100Pruning VLANs Enabled: 2-1001Priority for untagged frames: 0Override vlan tag priority: FALSEVoice VLAN: noneAppliance trust: noneSelf Loopback: Nosw2#show int f0/3 switchport Name: Fa0/3Switchport: EnabledAdministrative mode: trunkOperational Mode: trunkAdministrative Trunking Encapsulation: dot1qOperational Trunking Encapsulation: dot1qNegotiation of Trunking: DisabledAccess Mode VLAN: 0 (Inactive)Trunking Native Mode VLAN: 1 (default)Trunking VLANs Enabled: ALLTrunking VLANs Active: 1-4,10,30,100Pruning VLANs Enabled: 2-1001Priority for untagged frames: 0Override vlan tag priority: FALSEVoice VLAN: noneAppliance trust: noneSelf Loopback: Nosw2#RouterenRouterenable Router#Router#show ip int briefInterface IP-Address OK? Method Status ProtocolEthernet0/0 unassigned YES unset up up Ethernet0/0.10 172.17.10.1 YES manual up up Ethernet0/0.20 172.17.20.10 YES manual up up Serial0/0 unassigned YES unset administratively down down Serial0/1 unassigned YES unset administratively down down Router#conf tEnter configuration commands, one per line. End with CNTL/Z.Router(config)#int e0/0.10Router(config-subif)#encapsulation dot1Q 10 Router(config-subif)#ip address 192.168.1.1 255.255.255.0Router(config-subif)#endRouter#*Mar 1 06:57:13.224: %SYS-5-CONFIG_I: Configured from console by consolepngRouter#ping Router#ping 192.168.1.11Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.1.11, timeo