三层交换机的VLAN实验.doc

三层交换机的VLAN实验【实验目的】理解同一交换机VLAN划分和跨交换机VLAN划分的异同。了解VTP(VLAN Trunking Protocol)VLAN的传输协议【拓朴结构】图2-6 创建跨交换机的VLAN连接图（2）PC1：接C2950-1端口F0/1, IP地址:192.168.1.1/24，网关:192.168.1.254PC2：接C2950-1端口F0/2，IP地址:192.168.1.2/24，网关:192.168.1.254PC3：接C2950-1端口F0/3，IP地址:192.168.1.3/24，网关:192.168.1.254PC4：接C2950-1端口F0/4，IP地址:192.168.1.4/24，网关:192.168.1.254PC5：接C2950-2端口F0/1，IP地址:192.168.1.5/24，网关:192.168.1.254PC6：接C2950-2端口F0/2，IP地址:192.168.1.6/24，网关:192.168.1.254PC7：接C2950-2端口F0/3，IP地址:192.168.1.7/24，网关:192.168.1.254PC8：接C2950-2端口F0/4，IP地址:192.168.1.8/24，网关:192.168.1.254PC9：接C3500-3端口F0/1，IP地址:192.168.1.9/24，网关:192.168.1.254PC10：接C3500-3端口F0/2，IP地址:192.168.1.10/24，网关:192.168.1.254C2950-1的F0/12 端口和C3500-3 F0/12端口连接，C2950-2 F0/11 端口和C3500-3 F0/11端口连接。PC1、PC2、PC5、PC6、PC9、PC10属VLAN 10，PC7、PC8、属VLAN 20。【命令说明】1设置VTP域名 vtp domain 域名2打开级联口trunk switchport mode trunk3显示VTP状态 show vtp status4设置VTP工作模式 VTP serverserver|client|transparent参数说明：server 服务器模式，工作在此模式的交换机上可以创建VLAN、删除VLAN、修改VLAN并负责发送和转发VLAN更新消息。client 客户机模式，工作在此模式的交换机不能创建VLAN、删除VLAN、修改VLAN，它只能接收其他服务器模式交换机传来的VLAN配置信息。transparent 透明模式，对网络中某些交换机需要单独配置VLAN，可以将这些交换机配置成透明模式。工作在此模式的交换机上可以创建VLAN、删除VLAN、修改VLAN参数，这些VLAN配置信息不向外发送，但也能发送和转发VLAN更新消息。【配置清单】1未划分VLAN前在PC1测试与其它主机的连通性，由于是在同一VLAN和同一网段，能互相PING通。C:ping 192.168.1.2 目标主机与PC1接在同一交换机上Pinging 192.168.1.2 with 32 bytes of data:Reply from 192.168.1.2: bytes=32 time=60ms TTL=241Reply from 192.168.1.2: bytes=32 time=60ms TTL=241 Ping statistics for 192.168.1.2:Packets: Sent = 5, Received = 5, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 50ms, Maximum = 60ms, Average = 55msC:ping 192.168.1.5 目标主机与PC1接在不同交换机上Pinging 192.168.1.5 with 32 bytes of data:Reply from 192.168.1.5: bytes=32 time=60ms TTL=241Reply from 192.168.1.5: bytes=32 time=60ms TTL=241 Ping statistics for 192.168.1.5:Packets: Sent = 5, Received = 5, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 50ms, Maximum = 60ms, Average = 55ms2划分VLAN（1）交换机C2950-1设置SwitchenSwitch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#hostname C2950-1C2950-1(config)#exitC2950-1#vlan databaseC2950-1(vlan)#vlan 10VLAN 10 added:Name:VLAN0010C2950-1(vlan)#vlan 20VLAN 20 added: Name:VLAN0020C2950-1(vlan)#exitAPPLY completed.Exiting.C2950-1#conf tEnter configuration commands, one per line. End with CNTL/Z.C2950-1(config)#interface range f0/1 2 进入组配置状态C2950-1(config-if)#switchport access vlan 10C2950-1(config-if)#exitC2950-1(config)#interface range f0/3 - 4C2950-1(config-if)#switchport access vlan 20C2950-1(config-if)#exitC2950-1(config)#interface range f0/1 - 2C2950-1(config-if)#switchport access vlan 10C2950-1(config-if)#endC2950-1#show vlanVLAN Name Status Ports-1 default active Fa0/5, Fa0/6, Fa0/7, Fa0/8 Fa0/9, Fa0/10, Fa0/11, Fa0/1210 VLAN0010 active Fa0/1, Fa0/220 VLAN0020 active Fa0/3, Fa0/4C2950-1#测试: 在PC2上进行下面操作C:ping 192.168.1.3 不同VLAN 不能PING不通Pinging 192.168.1.3 with 32 bytes of data:Request timed out.Request timed out.Ping statistics for 192.168.1.3: Packets: Sent = 5, Received = 0, Lost = 5 (100% loss),Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0msC:ping 192.168.1.1 相同VLAN10可以PING通Pinging 192.168.1.5 with 32 bytes of data:Reply from 192.168.1.5: bytes=32 time=60ms TTL=241Reply from 192.168.1.5: bytes=32 time=60ms TTL=241 Ping statistics for 192.168.1.5:Packets: Sent = 5, Received = 5, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 50ms, Maximum = 60ms, Average = 55ms（2）交换机C2950-2设置：SwitchenSwitch#conf tEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#hostname C2950-2C2950-2(config)#exitC2950-2#vlan databaseC2950-2(vlan)#vlan 10VLAN 10 added: Name:VLAN0010C2950-2(vlan)#vlan 20VLAN 20 added: Name:VLAN0020C2950-2(vlan)#exitAPPLY completed.Exiting.C2950-2#conf tEnter configuration commands, one per line. End with CNTL/Z.C2950-2(config)#interface range f0/1 - 2C2950-2(config-if)#switchport access vlan 10C2950-2(config-if)#exitC2950-2(config)#interface range f0/3 - 4C2950-2(config-if)#switchport access vlan 20C2950-2(config-if)#exitC2950-2(config)#endC2950-2#show vlanVLAN Name Status Ports-1 default active Fa0/5, Fa0/6, Fa0/7, Fa0/8 Fa0/9, Fa0/10, Fa0/11, Fa0/1210 VLAN0010 active Fa0/1, Fa0/220 VLAN0020 active Fa0/3, Fa0/4C2950-2#测试：在PC4上进行下面操作C:ping 192.168.1.5 同一交换机 同一网段不同VLAN不能PING通Pinging 192.168.1.5 with 32 bytes of data:Request timed out.Request timed out.Ping statistics for 192.168.1.5: Packets: Sent = 5, Received = 0, Lost = 5 (100% loss),Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0msC:ping 192.168.1.3 同一交换机同一VLAN可PING同Pinging 192.168.1.3 with 32 bytes of data:Reply from 192.168.1.3: bytes=32 time=60ms TTL=241Reply from 192.168.1.3: bytes=32 time=60ms TTL=241Ping statistics for 192.168.1.3: Packets: Sent = 5, Received = 5, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 50ms, Maximum = 60ms, Average = 55msC:ping 192.168.1.1 同一VLAN不同交换机不能PING通Pinging 192.168.1.1 with 32 bytes of data:Request timed out.Request timed out.Ping statistics for 192.168.1.1: Packets: Sent = 5, Received = 0, Lost = 5 (100% loss),Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms（3）交换机C3550-3设置SwitchenSwitch#conf tSwitch(config)#hostname C3550-3C3550-3(config)#exitC3550-3#vlan databaseC3550-3(vlan)#vtp domain HL 设置VTP管理域名称HLC3550-3(vlan)#VTP server 设置交换机为服务器(server)模式C3550-3(vlan)#vlan 10VLAN 10 added: Name:VLAN0010C3550-3(vlan)#vlan 20VLAN 20 added: Name:VLAN0020C3550-3(vlan)#exitAPPLY completed.Exiting.C3550-3#conf tEnter configuration commands, one per line. End with CNTL/Z.C3550-3(config)#interface range f0/1 - 2C3550-3(config-if)#switchport access vlan 10C3550-3(config-if)#exitC3550-3(config)#interface range f0/3 - 4C3550-3(config-if)#switchport access vlan 20C3550-3(config-if)#exitC3550-3(config)#endC3550-3#show vlanVLAN Name Status Ports-1 default active Fa0/5, Fa0/6, Fa0/7, Fa0/8 Fa0/9, Fa0/10, Fa0/11, Fa0/12 Fa0/13, Fa0/1410 VLAN0010 active Fa0/1, Fa0/220 VLAN0020 active Fa0/3, Fa0/4C3550-3#conf tEnter configuration commands, one per line. End with CNTL/Z.C3550-3(config)#interface f0/11C3550-3(config-if)#switchport 指定本端口为二层交换端口C3550-3(config-if)#switchport trunk encapsulation dot1q 配置中继协议为 dot1qC3550-3(config-if)#switchport mode trunk 指定端口的模式为中继(trunk)端口C3550-3(config-if)#exitC3550-3(config)#interface f0/12C3550-3(config-if)#switchportC3550-3(config-if)#switchport trunk encapsulation dot1qC3550-3(config-if)#switchport mode trunkC3550-3(config-if)#end交换机C2950-1设置C2950-1#vlan databaseC2950-1(vlan)#vtp domain HLChanging VTP domain from NULL to hlC2950-1(vlan)#vtp client 设置交换机为客户机(client)模式C2950-1(vlan)#exitC2950-1#conf tEnter configuration commands, one per line. End with CNTL/Z.C2950-1(config)#interface f0/12C2950-1(config-if)#switchport trunk encapsulation dot1qC2950-1(config-if)#switchport mode trunkC2950-1(config-if)#end交换机C2950-2设置C2950-2#vlan databaseChanging VTP domain from NULL to hlC2950-2(vlan)#vtp domain HLC2950-2(vlan)#vtp clientC2950-2(vlan)#exitC2950-1#conf tEnter configuration commands, one per line. End with CNTL/Z.C2950-2(config)#interface f0/11C2950-2(config-if)#switchport trunk encapsulation dot1qC2950-2(config-if)#switchport mode trunkC2950-2(config-if)#end在PC9测试的结果如下:C:ipconfig /ip 192.168.1.9 255.255.255.0C:ipconfig /dg 192.168.1.254C:ping 192.168.1.10 在同一交换机、同一VLAN、同一网段可以PING通Pinging 192.168.1.10 with 32 bytes of data:Reply from 192.168.1.10: bytes=32 time=60ms TTL=241Reply from 192.168.1.10: bytes=32 time=60ms TTL=241Ping statistics for 192.168.1.10: Packets: Sent = 5, Received = 5, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 50ms, Maximum = 60ms, Average = 55msC:ping 192.168.1.1 由于配置了中继协议 dot1和配置了中继端端口，不同交换机、同一VLAN可以PING通。Pinging 192.168.1.1 with 32 bytes of data:Reply from 192.168.1.1: bytes=32 time=60ms TTL=241Reply from 192.168.1.1: bytes=32 time=60ms TTL=241Ping statistics for 192.168.1.1: Packets: Sent = 5, Received = 5, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 50ms, Maximum = 60ms, Average =