第11章交换基础vlan04原理和配置

1、HUAWEI TECHNOLOGIES CO., LTD.VLAN原理和配置Copyright 2013 Huawei Technologies Co., Ltd. All rights reserved. Page 2前言 随着网络中计算机的数量越来越多，传统的以太网络开始面临冲突严重、广播泛滥以及安全性无法保障等各种问题。 VLAN（Virtual Local Area Network）即虚拟局域网，是将一个物理的局域网在逻辑上划分成多个广播域的技术。通过在交换机上配置VLAN，可以实现在同一个VLAN内的用户可以进行二层互访，而不同VLAN间的用户被二层隔离。这样既能够隔离广播域，又能够

2、提升网络的安全性。Copyright 2013 Huawei Technologies Co., Ltd. All rights reserved. Page 3学习目标学完本课程后，您应该能：理解VLAN的工作原理掌握VLAN的基本配置Copyright 2013 Huawei Technologies Co., Ltd. All rights reserved. 传统以太网Page 4l随着主机数量的增加，共享网络中的冲突会越来越严重，交换网络中的广播也会越来越多。Copyright 2013 Huawei Technologies Co., Ltd. All rights reserve

3、d. VLAN技术Page 5lVLAN能够隔离广播域。VLAN 1VLAN 2Copyright 2013 Huawei Technologies Co., Ltd. All rights reserved. 链路类型Page 6TrunkAccessVLAN3VLAN2TrunkTrunkAccessAccessAccessAccessl用户主机和交换机之间的链路为接入链路，交换机与交换机之间的链路为干道链路。Copyright 2013 Huawei Technologies Co., Ltd. All rights reserved. VLAN帧格式Page 7没有携带Tag的帧携带T

4、ag的帧0 x8100PRICFIVLAN ID（12b）2 bytes2 bytesDMACDataSMACTypeFCS6 bytes6 bytes2 bytes46-1500 bytes4 bytesDMACDataSMACTypeFCS6 bytes6 bytes2 bytes46-1500 bytes4 bytesTagTPIDTCI4 bytesl通过Tag区分不同VLAN。Copyright 2013 Huawei Technologies Co., Ltd. All rights reserved. PVIDPage 8PVID1PVID2PVID2PVID3PVID3PVID

5、1lPVID表示端口在缺省情况下所属的VLAN。l缺省情况下，X7系列交换机每个端口的PVID是1。SWASWB主机A主机C主机B主机DVLAN2VLAN2VLAN3VLAN3Copyright 2013 Huawei Technologies Co., Ltd. All rights reserved. 端口类型 AccessPage 9主机A主机C主机BUntaggedUntaggedPVID10PVID10PVID2Frame10lAccess端口在收到数据后会添加VLAN Tag，VLAN ID和端口的PVID相同。lAccess端口在转发数据前会移除VLAN Tag。SWAG0/0/

6、1G0/0/2G0/0/3Copyright 2013 Huawei Technologies Co., Ltd. All rights reserved. 端口类型TrunkPage 10l当Trunk端口收到帧时，如果该帧不包含Tag，将打上端口的PVID；如果该帧包含Tag，则不改变。l当Trunk端口发送帧时，该帧的VLAN ID在Trunk的允许发送列表中：若与端口的PVID相同时，则剥离Tag发送；若与端口的PVID不同时，则直接发送。主机A主机C主机B主机DUntaggedUntaggedFrame20UntaggedSWASWBUntaggedUntaggedPVID1PVID

7、20PVID1PVID20PVID1PVID1Copyright 2013 Huawei Technologies Co., Ltd. All rights reserved. Page 11端口类型-HybridlHybrid端口既可以连接主机，又可以连接交换机。lHybrid端口可以以Tagged 或Untagged方式加入VLAN 。G0/0/1主机A主机B服务器UntaggedFrameG0/0/1Frame32UntaggedUntaggedSWASWBG0/0/2G0/0/2G0/0/3UntaggedCopyright 2013 Huawei Technologies Co.,

8、Ltd. All rights reserved. Page 12端口类型-HybridPVID1主机A主机B服务器UntaggedFramePVID1Frame32UntaggedUntaggedSWASWBPVID100PVID2PVID3UntaggedCopyright 2013 Huawei Technologies Co., Ltd. All rights reserved. Page13VLAN端口类型总结端口类型端口类型接收帧（接收帧（IN）发送帧（发送帧（OUT）不带有不带有TAG带有带有TAGACCESS打上本接口PVID后，接收检查该帧所携带的VID是否与接口PVID相同

9、是：接收否：丢弃剥离TAG后，发送TRUNK打上接口PVID,并检查该PVID是否为接口允许的VLAN ID是：直接接收否：丢弃检查该帧所携带的VID是否为接口允许的VLAN ID是：直接接收否：丢弃检查该帧所携带的VID是否为接口允许的VLAN ID否：丢弃是：则检查该帧所携带的VID是否与接口PVID相同是：剥离TAG后，发送否：直接发送HYBRID同TRUNK同TRUNK检查该帧所携带的VID是否为接口允许的VLAN ID否：丢弃是：则检查是否配置剥离TAG是：剥离TAG后，发送否：直接发送Copyright 2013 Huawei Technologies Co., Ltd. All

10、rights reserved. Page 14VLAN划分方法VLAN 5VLAN 10基于端口G0/0/1, G0/0/7G0/0/2 G0/0/9基于MAC地址00-01-02-03-04-AA00-01-02-03-04-CC00-01-02-03-04-BB00-01-02-03-04-DD基于IP子网划分10.0.1.*10.0.2.*基于协议划分IPIPX基于策略10.0.1.* + G0/0/1+ 00-01-02-03-04-AA10.0.2.* + G0/0/2 + 00-01-02-03-04-BBG0/0/1主机A10.0.1.1主机D10.0.2.2主机B10.0.2

11、.1主机C10.0.1.2G0/0/2G0/0/7G0/0/9SWAl基于端口的VLAN划分方法在实际中最为常见。Copyright 2013 Huawei Technologies Co., Ltd. All rights reserved. Page 15VLAN配置SWAvlan 10SWA-vlan10quitSWAvlan batch 2 to 3Info: This operation may take a few seconds. Please wait for a moment.done. 主机A主机D主机B主机CSWASWBCopyright 2013 Huawei Tech

12、nologies Co., Ltd. All rights reserved. 配置验证Page 16SWAdisplay vlanThe total number of vlans is : 4-U:Up; D:Down; TG:Tagged; UT:Untagged; MP:Vlan-mapping; ST:Vlan-stacking; #: ProtocolTransparent-vlan; *:Management-vlan;-VID Type Ports -1 common UT:GE0/0/1(U) 2 common 3 common common Copyright 2013 H

13、uawei Technologies Co., Ltd. All rights reserved. Page 17配置Access端口SWAinterface GigabitEthernet 0/0/5SWA-GigabitEthernet0/0/5port link-type accessSWA-GigabitEthernet0/0/5interface GigabitEthernet 0/0/7SWA-GigabitEthernet0/0/7port link-type accessSWASWBG0/0/1G0/0/7G0/0/5主机A主机D主机B主机CCopyright 2013 Hua

14、wei Technologies Co., Ltd. All rights reserved. Page 18添加端口到VLANSWAvlan 2SWA-vlan2port GigabitEthernet 0/0/7SWA-vlan2quitSWAinterface GigabitEthernet0/0/5 SWA-GigabitEthernet0/0/5port default vlan 3SWASWBG0/0/1G0/0/7G0/0/5主机A主机D主机B主机CCopyright 2013 Huawei Technologies Co., Ltd. All rights reserved.

15、配置验证Page 19SWAdisplay vlanThe total number of vlans is : 4-U:Up; D:Down; TG:Tagged; UT:Untagged; MP:Vlan-mapping; ST:Vlan-stacking; #: ProtocolTransparent-vlan; *:Management-vlan;-VID Type Ports -1 common UT:GE0/0/1(U) 2 common UT:GE0/0/7(U) common UT:GE0/0/5(U) 10 common Copyright 2013 Huawei Techn

16、ologies Co., Ltd. All rights reserved. Page 20配置Trunk端口SWA-GigabitEthernet0/0/1port link-type trunkSWA-GigabitEthernet0/0/1port trunk allow-pass vlan 2 3SWA-GigabitEthernet0/0/1port trunk pvid vlan 1SWASWBG0/0/1G0/0/1主机A主机D主机B主机CCopyright 2013 Huawei Technologies Co., Ltd. All rights reserved. 配置验证P

17、age 21SWAdisplay vlanThe total number of vlans is : 4-U:Up; D:Down; TG:Tagged; UT:Untagged; MP:Vlan-mapping; ST:Vlan-stacking; #: ProtocolTransparent-vlan; *:Management-vlan;-VID Type Ports -1 common UT:GE0/0/1(U) 2 common UT:GE0/0/7(D) TG:GE0/0/1(U) common UT:GE0/0/5(U) TG:GE0/0/1(U)10 common Copyr

18、ight 2013 Huawei Technologies Co., Ltd. All rights reserved. 配置Hybrid端口Page 22SWA-GigabitEthernet0/0/1port link-type hybridSWA-GigabitEthernet0/0/1port hybrid tagged vlan 2 3 100SWA-GigabitEthernet0/0/2port hybrid pvid vlan 2SWA-GigabitEthernet0/0/2port hybrid untagged vlan 2 100SWA-GigabitEthernet0

19、/0/3port hybrid pvid vlan 3SWA-GigabitEthernet0/0/3port hybrid untagged vlan 3 100G0/0/1主机A主机B服务器G0/0/1SWASWBG0/0/2G0/0/2G0/0/3Copyright 2013 Huawei Technologies Co., Ltd. All rights reserved. 配置HybridPage 23SWB-GigabitEthernet0/0/1port link-type hybridSWB-GigabitEthernet0/0/1port hybrid tagged vlan 2 3 100SWB-GigabitEthernet0/0/2port hybrid pvid vlan 100SWB-GigabitEthernet0/0/2port hybrid untagged v