NA实验VLAN间路由配置实例

1、下面是实验拓扑图：相关说明：VLAN中文叫做虚拟局域网，它的作用就是将物理上互连的网络在逻辑上划分为多个互不相干的网络，这些网络之间是无法通讯的，就好像互相之间没有连接一样，因此广播也就隔离开了。本次实验用于实现vlan间的路由。实验过程：I：配置个模拟主机PC-1 PC-2 PC-3的IP。PC-1(config)#int f0/0PC-1(config-if)#ip address 192.168.1.1 255.255.255.0PC-1(config-if)#no shPC-1(config-if)#exitPC-1(config)#no ip routing #关闭路由功能，做PC机

2、PC-1(config)#ip default-gateway 192.168.1.110 #设置默认网关PC-1(config)#exitII：在交换机KC-S上创vlan.建KC-S#vlan database KC-S(vlan)#vlan 10 name 10 #创建编号和名称为20的vlanVLAN 10 added:Name: 10KC-S(vlan)#apply APPLY completed.KC-S(vlan)#vlan 20 name 20VLAN 20 added:Name: 20KC-S(vlan)#applyAPPLY completed.KC-S(vlan)#exi

3、tKC-S#sh vlan-switch III：在交换机上将相应vlan接口上应用vlan.KC-S(config)#int f1/13KC-S(config-if)#switchport access vlan 10 #将当前接口应用到vlanKC-S(config-if)#no shKC-S(config-if)#exitKC-S(config)#int f1/14KC-S(config-if)#switchport access vlan 10KC-S(config-if)#exitKC-S(config)#int f1/15KC-S(config-if)#switchport acc

4、ess vlan 20KC-S(config-if)#exitKC-S#sh vlan-switchIV：PC-1不能ping通PC-2或PC-3，但PC-2和PC-3可以互通，可见vlan将主机阻隔PC-1#ping 192.168.2.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:Success rate is 0 percent (0/3)PC-2#ping 192.168.2.2Type escape sequence to abort

5、.Sending 5, 100-byte ICMP Echos to 192.168.2.2, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 56/76/96 msPC-2#PC-3#ping 192.168.2.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:.!Success rate is 80 percent (4/5),

6、 round-trip min/avg/max = 48/70/88 msV：将KC-S的f1/1设定为trunk模式KC-S(config)#int f1/1KC-S(config-if)#switchport mode trunk #f1/1设定为trunk模式*Mar 1 00:27:29.035: %DTP-5-TRUNKPORTON: Port Fa1/1 has become dot1q trunkKC-S(config-if)#exitKC-S(config)#exit*Mar 1 00:27:37.735: %SYS-5-CONFIG_I: Configured from co

7、nsole by consoleKC-S#sh int trunk #查看链路模式Port Mode Encapsulation Status Native vlanFa1/1 on 802.1q trunking 1VI：在路由器KC-R上设置支持trunk通信，采用子接口模式。KC-R(config)#int f0/0KC-R(config-if)#no ip address #必须no ip address和no shutdownKC-R(config-if)#no shutKC-R(config-if)#exitKC-R(config)#子接口配置：KC-R(config)#int f

8、0/0.10KC-R(config-subif)#encapsulation dot1Q 10 #设置trunk的封装协议KC-R(config-subif)#ip address 192.168.1.110 255.255.255.0KC-R(config-subif)#no shuKC-R(config-subif)#exitKC-R(config)#int f0/0.20KC-R(config-subif)#encapsulation dot1Q 20KC-R(config-subif)#ip address 192.168.2.220 255.255.255.0KC-R(config-

9、subif)#no shKC-R(config-subif)#exitVII：测试。PC-1#ping 192.168.2.1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 64/82/120 msPC-1#ping 192.168.2.2Type escape sequence to abort.Sending 5, 100-byte