交换实验指导书

1、HCDP-IESN 第一章VLAN特性与配置第一章VLAN特性与配置实验1-1 VLAN 配置学习目的 掌握VLAN的配置方法 掌握Eth-trunk的配置方法 理解Hybrid接口类型的应用场景拓扑图S1S2G0/0/0/0/10/0/30/0/29RG0/0/9G 0/0/9GO/O/ GO/0/100/0/2HC SeriesHUAWEI TECHNOLOGIES41R1R2R3/2410.0.1D.2/2410 0.10.3/24图1-1 VLAN配置场景你是公司的网络管理员。现在公司网络是由二台交换机组成的以太网环境。 图中路由器模拟网络中的计算机，R3是一台服务器

2、。为了优化这个网络，需要 你提升S1和S2相连链路的速度和可靠性。并且创建二个VLAN，以实现广播域的 互相隔离。R2和R3处于相同的VLAN中。同时为了方便访问服务器，你应该让R1和R3能够正常通信。学习任务步骤一.基础配置与IP编址给所有设备配置IP地址和掩码。system-viewEnter system view, return user view with Ctrl+Z.Huaweisysname R1R1interface GigabitEthernet 0/0/1R1-GigabitEthernet0/0/1ip address 24system-viewEn

3、ter system view, return user view with Ctrl+Z.Huaweisysname R2R2interface GigabitEthernet 0/0/1R2-GigabitEthernet0/0/1ip address 24system-viewEnter system view, return user view with Ctrl+Z.Huaweisysname R3R3interface GigabitEthernet 0/0/2R3-GigabitEthernet0/0/2ip address 24给交换机配

4、置名称。system-viewEnter system view, return user view with Ctrl+Z.Huaweisysname S1system-viewEnter system view, return user view with Ctrl+Z.Huaweisysname S2步骤二.Eth-trunk链路聚合Eth-trunk可以将二条或多条链路捆绑成一条链路以提升链路带宽和可靠性。 将S1和S2的G0/0/9和G0/0/10接口加入到同一个Eth-trunk组可以实现企业需 求。创建Eth-trunk 接口。51 interface Eth-Trunk 1S1

5、-Eth-Trunk152 interface Eth-Trunk 1S2-Eth-Trunk1配置Eth-trunk的工作模式为静态LACP模式。S1-Eth-Trunk1bpdu enableS1-Eth-Trunk1mode lacp-staticS2-Eth-Trunk1bpdu enableS2-Eth-Trunk1mode lacp-static将S1 和S2的G0/0/9 和G0/0/10 接口加入到 Eth-trunk 接口。S1interface GigabitEthernet 0/0/9S1-GigabitEthernet0/0/9eth-trunk 1S1-Gigabit

6、Ethernet0/0/9quit51 interface GigabitEthernet 0/0/10S1-GigabitEthernet0/0/10eth-trunk 152 interface GigabitEthernet 0/0/9S2-GigabitEthernet0/0/9eth-trunk 1S2-GigabitEthernet0/0/9quitS2interface GigabitEthernet 0/0/10S2-GigabitEthernet0/0/10eth-trunk 1使用命令dispay eth-trunk查看配置情况。S1display eth-trunk 1E

7、th-Trunk1s state information is:Local:LAG ID: 1WorkingMode: STATIC1Preempt Delay: Disabled Hash arithmetic: According to SA-XOR-DA System Priority: 32768 System ID: 4c1f-cc45-aaceLeast Active-linknumber: 1 Max Active-linknumber: 8Operate status: down Number Of Up Port In Trunk: 0ActorPortName Status

8、 PortType PortPri PortNo PortKey PortState WeightGigabitEthernet0/0/9 Selected 1GE 32768 930510100010 1GigabitEthernet0/0/10 Selected 1GE 32768 1030510100010 1Partner:ActorPortName SysPri SystemID PortPri PortNo PortKey PortStateGigabitEthernetO/O/9 00000-0000-0000 00010100011GigabitEthernet0/0/10 0

9、0000-0000-0000 00010100011输出信息显示，此时链路运行模式为静态LACP模式，并且最大活动接口数阈值是8条链路。同时G0/0/9和G0/0/10接口都处于活动状态。使用命令更改活动接口数阈值。S1-Eth-Trunk1max active-linknumber 1S2-Eth-Trunk1max active-linknumber 1查看Eth-trunk链路配置情况。S1display eth-trunk 1Eth-Trunk1s state information is:Local:LAG ID: 1WorkingMode: STATICPreempt Delay:

10、 Disabled Hash arithmetic: According to SA-XOR-DASystem Priority: 32768 System ID: 4c1f-cc45-aaceLeast Active-linknumber: 1 Max Active-linknumber: 1Operate status: up Number Of Up Port In Trunk: 1ActorPortName Status PortType PortPri PortNo PortKey PortState WeightGigabitEthernet0/0/9 Selected 1GE 3

11、2768 930510111100 1GigabitEthernet0/0/10 Unselect 1GE 32768 1030510100000 1Partner:ActorPortName SysPri SystemID PortPri PortNo PortKey PortStateGigabitEthernet0/0/9 32768 4c1f-cc45-aacc 32768 930510111100GigabitEthernet0/0/10 32768 4c1f-cc45-aacc 32768 1030510100000从输出信息可以看到，G0/0/10接口状态改变为Un select

12、 0实现了 Eth-tru nk 聚合链路下一条链路传输数据，另一条链路备份的功能，提升了网络可靠性。通过关闭S1的G0/0/9接口验证备份链路功能。S1interface GigabitEthernet 0/0/9S1-GigabitEthernet0/0/9shutdown查看Eth-trunk链路信息。S1display eth-trunk 1Eth-Trunk1s state information is:Local:LAG ID: 1WorkingMode: STATICPreempt Delay: Disabled Hash arithmetic: According to SA-

13、XOR-DASystem Priority: 32768 System ID: 4c1f-cc45-aaceLeast Active-linknumber: 1 Max Active-linknumber: 1Operate status: up Number Of Up Port In Trunk: 1ActorPortName Status PortType PortPri PortNo PortKey PortState WeightGigabitEthernetO/O/9 Unselect 1GE 32768 930510100010 1GigabitEthernet0/0/10 Se

14、lected 1GE 32768 1030510111100 1Partner:ActorPortName SysPri SystemID PortPri PortNo PortKey PortStateGigabitEthernet0/0/9 00000-0000-0000 00010100011GigabitEthernet0/0/10 32768 4c1f-cc45-aacc 32768 1030510111100从输出信息看到Eth-tru nk链路中G0/0/9已经变为Un select状态，G0/0/10 由Un select状态自动转换为Selected状态继续传输数据。由此可知

15、，实现了链 路备份功能。步骤三.VLAN配置在S1和S2上创建二个VLAN用于隔离R1和R2、R3。并将S1和S2之间的 Eth-trunk链路配置成Trunk模式，实现相同VLAN之间的通信。在S1 和 S2上创建 VLAN10、VLAN20。51 vlan batch 10 2052 vlan batch 10 20更改S1的G0/0/1和 G0/0/2接口为Access模式并加入到VLAN10S1interface GigabitEthernet 0/0/1S1-GigabitEthernet0/0/1port link-type accessS1-GigabitEthernet0/0/

16、1port default vlan 1051 interface GigabitEthernet 0/0/2S1-GigabitEthernet0/0/2port link-type access S1-GigabitEthernet0/0/2port default vlan 20更改S2的G0/0/3接口为Access模式并加入到VLAN20。52 interface GigabitEthernet 0/0/3S2-GigabitEthernet0/0/3port link-type accessS2-GigabitEthernet0/0/3port default vlan 20将S1

17、和S2的Eth-trunk接口配置成Trunk接口，Trunk接口默认只允许VLAN 1通过，所以配置允许VLAN10、VLAN20通过。S1interface Eth-Trunk 1S1-Eth-Trunk1port link-type trunkS1-Eth-Trunk1port trunk allow-pass vlan 10 20S2inter Eth-Trunk 1S2-Eth-Trunk1port link-type trunkS2-Eth-Trunk1port trunk allow-pass vlan 10 20使用display port vlan命令查看Trunk接口的状态

18、S2display port vlanPortLink Type PVID Trunk VLAN ListGigabitEthernet0/0/1hybrid1 -GigabitEthernet0/0/2access1 -GigabitEthernet0/0/3hybrid20 -GigabitEthernet0/0/4hybrid1 -GigabitEthernet0/0/5hybrid1 -GigabitEthernet0/0/6hybrid1 -GigabitEthernet0/0/7hybrid1 -GigabitEthernet0/0/8hybrid1 -GigabitEtherne

19、t0/0/9hybrid0 -GigabitEthernet0/0/10hybrid0 -GigabitEthernet0/0/11hybrid1 -GigabitEthernet0/0/12hybrid1 -GigabitEthernet0/0/13hybrid1 -GigabitEthernet0/0/14hybrid1 -GigabitEthernet0/0/15hybrid1 -GigabitEthernet0/0/16hybrid1 -GigabitEthernet0/0/17hybrid1 -GigabitEthernet0/0/18hybrid1 -GigabitEthernet

20、0/0/19hybrid1 -GigabitEthernet0/0/20hybrid1 -GigabitEthernet0/0/21hybrid1 -GigabitEthernet0/0/22hybrid1 -GigabitEthernet0/0/23hybrid1 -GigabitEthernet0/0/24hybrid1 -Eth-Trunk1trunk11 10 20从输出信息看到Eth-trunk接口已经正确配置为Trunk接口并允许VLAN 10和VLAN 20通信。使用ping命令测试R2和R1、R3的连通性。R2ping -c 1 PING :

21、 56 data bytes, press CTRL_C to breakRequest time out- ping statistics -1 packet(s) transmitted0 packet(s) received100.00% packet lossR2ping -c 1 PING : 56 data bytes, press CTRL_C to breakReply from : bytes=56 Sequence=1 ttl=255 time=3 ms- ping statistic

22、s -1 packet(s) transmitted1 packet(s) received0.00% packet lossround-trip min/avg/max = 3/3/3 ms测试结果表示，在通过Trunk链路连接的二个交换机上不同VLAN的计算机 不能互相通信，相同VLAN的计算机能够互相通信。步骤四.配置Hybrid接口Hybrid接口可以实现R1和R3之间二层模式下的通信。通过和 Trunk接口的 对比掌握Hybrid接口的配置和特性。配置一：S1和S2之间的连线为Trunk接口的情况更改S1的G0/0/1接口为Hybrid模式，并加入VLAN 10。同时配置实现发送 V

23、LAN 20的数据包时去掉VLAN标记的功能。51 interface GigabitEthernet 0/0/1S1-GigabitEthernet0/0/1port default vlan 1S1-GigabitEthernet0/0/1port link-type hybridS1-GigabitEthernet0/0/1port hybrid pvid vlan 10S1-GigabitEthernet0/0/1port hybrid tagged vlan 10S1-GigabitEthernet0/0/1port hybrid untagged vlan 10 20更改S2的G0

24、/0/3接口为Hybrid模式，并加入VLAN 20。同时配置实现发送 VLAN 10的数据包时去掉VLAN标记的功能。52 interface GigabitEthernet 0/0/3S2-GigabitEthernet0/0/3port default vlan 1S2-GigabitEthernet0/0/3port link-type hybridS2-GigabitEthernet0/0/3port hybrid pvid vlan 20S2-GigabitEthernet0/0/3port hybrid untagged vlan 10 20使用命令display vlan、di

25、splay port vlan 命令查看接口情况。S1display vlan 20* : management-vlanVLAN ID Type Status MAC Learning Broadcast/Multicast/Unicast Property20 common enable enable forward forward forward defaultUntagged Port: GigabitEthernet0/0/1 GigabitEthernet0/0/2Tagged Port: Eth-Trunk1InterfacePhysicalEth-Trunk1UPGigabit

26、Ethernet0/0/1 UPGigabitEthernet0/0/2 UPS1disS1display port vlanPortLink Type PVID Trunk VLAN ListGigabitEthernet0/0/1hybrid一10 -GigabitEthernet0/0/2access20GigabitEthernet0/0/3hybrid1 -GigabitEthernet0/0/4hybrid1 -GigabitEthernet0/0/5hybrid1 -GigabitEthernet0/0/6hybrid1 -GigabitEthernet0/0/7hybrid1

27、-GigabitEthernet0/0/8hybrid1 -GigabitEthernet0/0/9hybrid0 -GigabitEthernet0/0/10hybrid0 -GigabitEthernet0/0/11hybrid1 -GigabitEthernet0/0/12hybrid1 -GigabitEthernet0/0/13hybrid1 -GigabitEthernet0/0/14hybrid1 -GigabitEthernet0/0/15hybrid1 -GigabitEthernet0/0/16hybrid1 -GigabitEthernet0/0/17hybrid1 -G

28、igabitEthernet0/0/18hybrid1 -GigabitEthernet0/0/19hybrid1 -GigabitEthernet0/0/20hybrid1 -GigabitEthernet0/0/21hybrid1 -GigabitEthernet0/0/22hybrid1 -GigabitEthernet0/0/23hybrid1 -GigabitEthernet0/0/24hybrid1 -Eth-Trunk1trunk11 10 20S2display vlan 10* : management-vlanVLAN ID Type Status MAC Learning

29、 Broadcast/Multicast/Unicast Property10 common enable enable forward forward forward defaultUntagged Port: GigabitEthernetO/O/3Tagged Port: Eth-Trunk1InterfacePhysicalEth-Trunk1UPGigabitEthernet0/0/3 UPS2display port vlanGigabitEthernet0/0/1hybrid1 -GigabitEthernet0/0/2hybrid1 -GigabitEthernet0/0/3h

30、ybrid20 -GigabitEthernet0/0/4hybrid1 -GigabitEthernet0/0/5hybrid1 -GigabitEthernet0/0/6hybrid1 -GigabitEthernet0/0/7hybrid1 -GigabitEthernet0/0/8hybrid1 -GigabitEthernet0/0/9hybrid0 -GigabitEthernet0/0/10hybrid0 -GigabitEthernet0/0/11hybrid1 -GigabitEthernet0/0/12hybrid1 -GigabitEthernet0/0/13hybrid

31、1 -GigabitEthernet0/0/14hybrid1 -GigabitEthernet0/0/15hybrid1 -GigabitEthernet0/0/16hybrid1 -GigabitEthernet0/0/17hybrid1 -PortLink Type PVID Trunk VLAN ListGigabitEthernet0/0/18hybrid1 -GigabitEthernet0/0/19hybrid1 -GigabitEthernet0/0/20hybrid1 -GigabitEthernet0/0/21hybrid1 -GigabitEthernet0/0/22hy

32、brid1 -GigabitEthernet0/0/23hybrid1 -GigabitEthernet0/0/24hybrid1 -Eth-Trunk1trunk11 10 20从输出信息可以看到S1的G0/0/1接口对VLAN 20的数据不打标记，同时G0/0/1的接口 PVID属于VLAN 10 。 S2的G0/0/3接口对VLAN 10的数据不打标 记，同时G0/0/3的接口 PVID属于VLAN 20 。使用ping命令测试R1和R2、R3之间的连通性。R1ping -c 1 PING : 56 data bytes, press CTRL_C t

33、o breakRequest time out- ping statistics -1 packet(s) transmitted0 packet(s) received100.00% packet lossR1ping -c 1 PING : 56 data bytes, press CTRL_C to breakReply from : bytes=56 Sequence=1 ttl=255 time=13 ms- ping statistics -1 packet(s) transmitted1 p

34、acket(s) received0.00% packet lossround-trip min/avg/max = 13/13/13 ms配置二：S1和S2之间的连线为Hybrid接口的情况更改S1和S2的Eth-trunk接口为Hybrid模式。在S1的Eth-trunk接口上 Un tagged VLAN 20， S2 的 Eth-tru nk 接口上 Un tagged VLAN 10。51 interface Eth-Trunk 1S1-Eth-Trunk1undo port trunk allow-pass vlan 10 20S1-Eth-Trunk1port link-type

35、 hybridS1-Eth-Trunk1port hybrid untagged vlan 1052 interface Eth-Trunk 1S2-Eth-Trunk1undo port trunk allow-pass vlan 10 20S2-Eth-Trunk1port link-type hybridS2-Eth-Trunk1port hybrid untagged vlan 20查看Eth-tru nk 1接口配置信息。S1display port vlanPortLink Type PVID Trunk VLAN ListGigabitEthernet0/0/1hybrid10

36、10GigabitEthernetO/O/2access20 -GigabitEthernetO/O/3hybrid1 -GigabitEthernet0/0/4hybrid1 -GigabitEthernetO/O/5hybrid1 -GigabitEthernetO/O/6hybrid1 -GigabitEthernetO/O/7hybrid1 -GigabitEthernetO/O/8hybrid1 -GigabitEthernetO/O/9hybrid0 -GigabitEthernet0/0/10hybrid0 -GigabitEthernetO/O/11hybrid1 -Gigab

37、itEthernetO/O/12hybrid1 -GigabitEthernetO/O/13hybrid1 -GigabitEthernetO/O/14hybrid1 -GigabitEthernetO/O/15hybrid1 -GigabitEthernetO/O/16hybrid1 -GigabitEthernetO/O/17hybrid1 -GigabitEthernetO/O/18hybrid1 -GigabitEthernetO/O/19hybrid1 -GigabitEthernet0/0/20hybrid1 -GigabitEthernetO/O/21hybrid1 -Gigab

38、itEthernetO/O/22hybrid1 -GigabitEthernetO/O/23hybrid1 -GigabitEthernetO/O/24hybrid1 -Eth-Trunk1hybrid 1-S1display vlan 10* : management-vlanVLAN ID Type Status MAC Learning Broadcast/Multicast/Unicast Property10 common enable enable forward forward forward defaultUntagged Port: Eth-Trunk1Tagged Port

39、: GigabitEthernetO/O/1InterfacePhysicalEth-Trunk1UPGigabitEthernetO/O/1 UP输出信息可以看到S1的Eth-trunk 1接口已经正确配置为Hybrid类型并按需 求对VLAN 20不标记。S2情况相似。使用ping命令测试R1和R2、R3之间的连通性。R1ping -c 1 PING : 56 data bytes, press CTRL_C to breakRequest time out- ping statistics -1 packet(s) transmitt

40、ed0 packet(s) received100.00% packet lossR1ping -c 1 PING : 56 data bytes, press CTRL_C to breakRequest time out- ping statistics -1 packet(s) transmitted0 packet(s) received100.00% packet loss通信无法成功。原因R1和R3连接的接口没有正确的识别VLAN标记。删除S1的G0/0/1接口和S2的G0/0/3接口的Un tagged配置，都重新配置 Un

41、tagged VLAN 1 命令S1interface GigabitEthernet 0/0/1S1-GigabitEthernet0/0/1undo port hybrid vlan 20S1-GigabitEthernet0/0/1port hybrid untagged vlan 1S2interface GigabitEthernet 0/0/3S2-GigabitEthernet0/0/1undo port hybrid vlan 10S2-GigabitEthernet0/0/1port hybrid untagged vlan 1使用ping命令测试R1、R2、R3之间的连通性

42、R1ping -c 1 PING : 56 data bytes, press CTRL_C to breakRequest time out- ping statistics -1 packet(s) transmitted0 packet(s) received100.00% packet lossR1ping -c 1 PING : 56 data bytes, press CTRL_C to breakReply from : bytes=56 Sequence=1 ttl=25

43、5 time=2 ms- ping statistics -1 packet(s) transmitted1 packet(s) received0.00% packet lossround-trip min/avg/max = 2/2/2 ms通过更改S1 的 G0/0/1和S2的G0/0/3接口的Un tagged参数为VLAN 1实现 了 R1和R3之间的通信。附加实验：思考并验证在步骤四中S1和S2相连的Eth-trunk接口使用Trunk模式和使用Hybrid模式 时，数据在传播的过程中有什么区别？最终设备配置S1 display current-configura

44、tion#Software Version V100R005C01SPC100sysname S1#vlan batch 10 20#stp mode rstpstp enable#undo http server enable#interface Eth-Trunk1port hybrid untagged vlan 10mode lacp-staticmax active-linknumber 1bpdu enable#interface GigabitEthernetO/O/1port hybrid pvid vlan 10port hybrid tagged vlan 10#inter

45、face GigabitEthernet0/0/2port link-type accessport default vlan 20#interface GigabitEthernet0/0/3shutdown#interface GigabitEthernet0/0/4shutdown#interface GigabitEthernet0/0/9shutdowneth-trunk 1#interface GigabitEthernet0/0/10eth-trunk 1#interface GigabitEthernet0/0/13shutdown#interface GigabitEther

46、net0/0/14shutdown#interface GigabitEthernet0/0/21shutdown#interface GigabitEthernet0/0/22shutdown#interface GigabitEthernet0/0/23shutdown#ReturnS2 display current-configuration#!Software Version V100R005C01SPC100sysname S2vlan batch 10 20#stp mode rstpstp enable#interface Eth-Trunk1port hybrid untag

47、ged vlan 20mode lacp-staticmax active-linknumber 1bpdu enable#interface GigabitEthernetO/O/1shutdown#interface GigabitEthernetO/O/2shutdown#interface GigabitEthernetO/O/3port hybrid pvid vlan 20port hybrid tagged vlan 20#interface GigabitEthernetO/O/4shutdown#interface GigabitEthernetO/O/5shutdown#i

48、nterface GigabitEthernetO/O/9eth-trunk 1#interface GigabitEthernet0/0/10eth-trunk 1#interface GigabitEthernetO/O/11shutdown#interface GigabitEthernetO/O/12shutdown#interface GigabitEthernetO/O/13shutdown#interface GigabitEthernetO/O/23shutdown#interface GigabitEthernetO/O/24shutdown#return实验1-2 MUX

49、VLAN和GVRP配置（选做）学习目的掌握GVRP的配置方法 掌握MUX VLAN的配置方法* 了解自动模式下的Voice VLAN配置方法拓扑图S1S2R51 110.0.101/2410010-2/2410.0.103/2410.0.10-4/24图 1-2 MUX VLAN和GVRP配置场景你是公司的网络管理员。现在公司网络是由二台交换机组成的以太网环境。 图中路由器代表网络中的计算机。为了优化这个网络，需要你实现广播域的互相 隔离。R1和R2处于相同的VLAN中，R3和R4分别处另一个VLAN中。公司策略 需要所有PC均可以访问R4, R3和R4除了不能与R1、R2通信外也不能互相访问

50、。 未来在S2的G0/0/24接口会使用语音设备，请提前规划语音 VLAN及相关配置。学习任务步骤一.基础配置与IP编址给所有设备配置IP地址和掩码。system-viewEnter system view, return user view with Ctrl+Z.Huaweisysname R1R1interface gO/O/1R1-GigabitEthernetO/O/1ip address 24system-viewEnter system view, return user view with Ctrl+Z.Huaweisysname R2R2interface

51、 g0/0/1R2-GigabitEthernet0/0/1ip address 24system-viewEnter system view, return user view with Ctrl+Z.Huaweisysname R3R3interface g0/0/1R3-GigabitEthernet0/0/1ip address 24system-viewEnter system view, return user view with Ctrl+Z.Huaweisysname R4R4interface Ethernet2/0/0R4-Ether

52、net2/0/0ip address 24system-viewEnter system view, return user view with Ctrl+Z.Huaweisysname R5R5interface Ethernet2/0/0R5-Ethernet2/0/0ip address 24system-viewEnter system view, return user view with Ctrl+Z.Quidwaysysname S1S1system-viewEnter system view, return user view with

53、Ctrl+Z.Quidwaysysname S2S2在R1上测试与R2、R3、R4和R5的连通性。R1ping -c 1 PING : 56 data bytes, press CTRL_C to breakReply from : bytes=56 Sequence=1 ttl=255 time=14 ms- ping statistics -1 packet(s) transmitted1 packet(s) received0.00% packet lossround-trip min/avg/max = 14/14/14 msR1ping -c 1 PING : 56 data bytes, press CTRL_C to breakReply from : bytes=56 Sequenc