实验10三层交换机实现不同vlan间通信

1、案例10 利用三层交换机实现不同vlan间通信【背景描述】某企业有两个主要部门：销售部和技术部，其中销售部的个人计算机系统分散连接在两台交换机上，他们之间需要相互进行通信，销售部和技术部也需要进行相互通信，现要在交换机上做适当配置来实现这一目标。【实现功能】 使在同一VLAN里的计算机系统能跨交换机进行通信，而在不同VLAN里的计算机系统也能进行相互通信。【使用设备】设备类型设备名称设备数量交换机Switch01路由器三层交换机Switch11双绞线4计算机pc3【实验拓扑】表1 设备基本信息设备名端口及所属VLANIP信息IP地址网关Switch1 3560Fa 0/24 默认VLANSwi

2、tch0 2960Fa 0/24 默认VLANPC0Fa 0/5 VLAN 10PC1Fa 0/15 VLAN 20PC2Fa 0/5 VLAN 10【实现步骤】步骤1.在交换机Switch1上创建vlan 10 ，并将0/5端口划分到vlan 10 中.Switch1>enableSwitch1#configure terminalSwitch1(config)#vlan 10Switch1(config-vlan)#name salesSwitch1(config-vlan)#exitSwitch1(config)#interface fastEthernet 0/5Switch1(

3、config-if)#switchport access vlan 10Switch1(config-if)#exitSwitch1(config)#vlan 20Switch1(config-vlan)#name technicalSwitch1(config-vlan)#exitSwitch1(config)#interface vlan 20Switch1(config-if)#exitSwitch1(config)#interface fastEthernet 0/15Switch1(config-if)#switchport access vlan 20Switch1(config-

4、if)#exit步骤2.把交换机Swich0和Swich1相连的端口定义为tag vlan模式SwitchA(config)#interface fastEthernet 0/24SwitchA(config-if)#switchport mode trunk!将F0/24端口定义为tag vlan模式验证测试:验证F0/24端口已被设为tag vlan模式SwitchA#show interfaces fastEthernet 0/24 switchportInterface Switchport Mode Access Native Protected VLAN lists- - - -

5、- - -Fa0/24 Enabled Trunk 1 1 Disabled All步骤3.在交换机Swich1上创建vlan 10,并将0/5端口划分到vlan 10中.SwichB(config)#vlan 10SwichB(config-vlan)#name salseSwichB(config-vlan)#exitSwichB(config)#interface fastEthernet 0/5SwichB(config-if)#switchport access vlan 10步骤4.把交换机Swich0和Swich1相连的端口定义为tag vlan模式SwichB(config)#

6、interface fastEthernet 0/24SwichB(config-if)#switchport mode trunk验证测试:验证F0/24端口已被设置为tag vlan模式SwichB#show interfaces fastEthernet 0/24 switchportInterface Switchport Mode Access Native Protected VLAN lists- - - - - - -Fa0/24 Enabled Trunk 1 1 Disabled All步骤5.验证PC0与PC2能相互通信，但PC0和PC1不能相互通信。 !在PC1的命令行

7、方式下能ping通PC3Pinging 192.168.10.30 with 32 bytes of data:Reply from 192.168.10.30: bytes=32 time<1ms TTL=128Reply from 192.168.10.30: bytes=32 time<1ms TTL=128Reply from 192.168.10.30: bytes=32 time<1ms TTL=128Reply from 192.168.10.30: bytes=32 time<1ms TTL=128Ping statistics for 192.168.

8、10.30: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),Approximate round trip times in milli-seconds: Minimum = 0ms, Maximum = 0ms, Average = 0ms !在PC1的命令行方式下验证不能ping通PC2Pinging 192.168.10.30 with 32 bytes of data:Request timed out.Request timed out.Request timed out.Request timed out.Ping stati

9、stics for 192.168.10.30: Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),步骤6.设置三层交换机VLAN间通信Switch1(config)#interface vlan 10 !创建虚拟接口vlan 10Switch1Switch1(config-if)#no shutdown !开启端口2009-05-23 16:42:39 5-CONFIG:Configured from outbandSwitch1(config-if)#exit2009-05-23 16:42:42 5-CONFIG:Configur

10、ed from outbandSwitch1(config)#interface vlan 20 !创建虚拟接口vlan 202009-05-23 16:42:46 5-CONFIG:Configured from outbandSwitch12009-05-23 16:43:06 5-CONFIG:Configured from outbandSwitch1(config-if)#no shutdown !开启端口2009-05-23 16:43:09 5-CONFIG:Configured from outbandSwitch1(config-if)#exit2009-05-23 16:4

11、3:15 5-CONFIG:Configured from outband验证测试:查看S3550路由器的状态Switch1#show ip interface !查看IP接口的状态Interface : VL10Description : Vlan 10OperStatus : upManagementStatus : EnabledInterface : VL20Description : Vlan 20OperStatus : upManagementStatus : Enabled测试结果:不同vlan间的主机可以相互ping通参考配置Swich1#show running-confi

12、g !显示交换机Swich1的全部配置System software version : 2.41(4) Build Nov 23 2005 ReleaseBuilding configuration.Current configuration : 413 bytes!version 1.0!hostname Swich1vlan 1!vlan 10 name sales!vlan 20 name technical!interface FastEthernet 0/5 switchport access vlan 10!interface FastEthernet 0/15 switchpo

13、rt access vlan 20!interface FastEthernet 0/24 switchport mode trunk!interface Vlan 10!interface Vlan 20!endSwich0#show running-config !显示交换机Swich0的全部配置System software version : 1.61(2) Build Aug 31 2005 ReleaseBuilding configuration.Current configuration : 194 bytesversion 1.0!hostname Swich0vlan 1!vlan 10 name salse!interface fastEthernet 0/5 switchport access vlan 10!interface fastEthernet 0/24 switchport mode trunk!End验证：PC0 ping PC1【注意事项】1.两台交换机之间相连的端口应该设置为tag vlan模式2.需要设置PC的网关若拓扑结构改成如下：表2 设备基