分析VLAN技术概念和划分方法

1、分析 VLAN 技术概念及划分方法一、 VLAN 技能概述A, VLAN skills summaryVLAN(Virtual Local Area Network) 也就是虚拟局域 网，是一种建立在交流技能根底之上的， 经过将局域网内 的机器设备逻辑地而不是物理地区分红一个个不一样的 网段，以软件办法完成逻辑作业组的区分和办理的技能。 VLAN 的作用是使得同一 VLAN 中的成员间能够彼此通 讯，而不一样 VLAN 之间则是彼此阻隔的， 不一样的 VLAN 间的若是要通讯就要经过必要的路由设备。VLAN ( Virtual Local Area Network ) is a virtual

2、 local area network, is a kind of built on the foundation of communication skills, after the equipment will be LAN logical rather than physical area into a different network segment, complete the distinction between logical operations group in software way and management skills. The role of VLAN is

3、to make the members in the same VLAN can communicate with each other, and not the same between VLAN is another barrier, not the same between VLAN if communication is about to pass routing equipment necessary.VLAN 的长处Two, the strengths of VLAN能够操控网络播送( a ) to be able to control the network broadcast在

4、没有运用 VLAN 技能的局域网内的整个网络都是 播送域， 这样就使得网内的一台设备宣布网络播送时， 在 局域网内的任何一台设备的接口都能接收到播送， 因而当 网络内的设备越来越多时，网络上的播送也就越来越多， 占用的时刻和资源也就越来越多， 当播送多到必定的数量 时，就会影响到正常的信息的传送。 这样就能致使信息推 迟，严峻的能够形成网络的瘫痪、 阻塞， 严峻的影响了正 常的网络运用，这就是所谓的网络风暴。In the absence of the use of VLAN skills LAN the entire network are broadcast domain, which ma

5、kes a device within the network announced that the network broadcast, any equipment in the LAN interface can receive the broadcast, so when the equipment more and more within the network, the network is more and more. Take time and resources, also more and more, when the broadcast to certain quantit

6、y, delivery willaffect the normal information. This can cause information delay, serious can block paralysis, forming network, serious influence the network using the normal, it is called the network storm.在运用了 VLAN 技能的局域网中， 缩小了播送的播送 域，在一个 VLAN 中的播送风暴也不会影响到其他的 VLAN ，然后有效地削减了播送风暴对局域网网络的影响。In the use

7、of the VLAN technology in LAN, reduce the broadcast broadcast domain, in a VLAN broadcast storm will not affect the other VLAN, and effectively reduce the influence of LAN network broadcast storm.增强了网络的安全性( two ) and improve the security of the network在局域网中运用 VLAN 技能能够把彼此通讯比拟频 频的用户区分到同一个 VLAN 中，这样在同

8、一个作业组中 的信息传输只在同一个组内播送， 然后也减轻了因播送包 被截获而致使的信息走漏，增强了网络的安全性。The use of VLAN skills to communicate with each other more frequently users distinguish to the same VLAN in the LAN, so that in the same working group in thetransmission of information is sent only in the same group, and also reduce the leakage

9、 causes for broadcast packets intercepted information, enhance network security.简化网络办理员的办理作业( three ) operation for simplified network administrator.在运用 VLAN 技能后网络办理员就能够轻松的办理 网络，灵敏构建虚拟作业组。 用 VLAN 能够区分不一样的 用户到不一样的作业组， 同一作业组的用户也不用局限于 某一固定的物理规划，网络构建和保护更便利灵敏。Network management can easily in the use of V

10、LAN technology network administrator, sensitive to construct virtual working group. To distinguish between different users to the working group is not the same with VLAN, the same work group of users is not limited to a fixed physical planning, network construction and protection is more convenient

11、and sensitive.三、 VLAN 的区分办法Three, the VLAN division way一）依据端口来区分 VLAN( a ) to distinguish between VLAN based on port许多 VLAN 厂商都运用交流机的端口来区分 VLAN 成员。被设定的端口都在同一个播送域中。 例如， 一个交 流机的 1，2，3，4，5端口被界说为虚拟网 AAA ，同一交 流机的 6，7，8端口组成虚拟网 BBB 。这样做答应各端口 之间的通讯，并答应同享型网络的晋级。 可是，这种区分 形式将虚拟网约束在了一台交流机上。Many VLAN vendors are

12、 using AC machine port to distinguish VLAN members. Is a set of ports that are in the same broadcast domain. For example, an AC machine 1, 2, 3, 4, 5 port is defined as a virtual network of AAA, the same exchange 6, 7, 8 port virtual network BBB. It promised to communication between the various port

13、s, and promised to share the network promotion. However, the form of virtual network constraints in an AC machine.第二代端口 VLAN 技能答应跨过多个交流机的多个 不一样端口区分 VLAN ，不一样交流机上的若干个端口能 够组成同一个虚拟网。The second generation port VLAN skills promised across multiple AC machine multiple different ports to distinguish the VL

14、AN, not the same number of ports communication machine can form a virtual network.以交流机端口来区分网络成员，其装备进程简单明 了。因而， 从当前来看， 这种依据端口来区分 VLAN 的办 法仍然是最常用的一种办法。 不足之处是不行灵敏， 当一 台机器设备需求从一个端口移动到另一个新的端口， 可是 新端口和旧端口不在同一个 VLAN 之中时，要修正端口的 VLAN 设置，或在用户核算机上重新装备网络地址，这样 才能使这台设备加入到新的 VLAN 。In AC machine port to distinguish

15、 between members of the network equipment, the process is simple and clear. Therefore, from the current point of view, according to the port to distinguish VLAN still is a kind of the most widely used method. The deficiency is not sensitive, when a machine equipment needs to move from one port to an

16、other new port, but the new port and the old port is not in the same VLAN, amendments to the portVLAN settings, or in the user accounting machine to equipment network address, so that we can make itequipment is added to the new VLAN.(二)依据 MAC 地址区分 VLAN( two ) based on the MAC address to distinguish

17、VLAN 这种区分 VLAN 办法的最大长处就是当用户物理方 位移动时， 即从一个交流机换到其他的交流机时， 就无需 对它进行重新装备， 主动把它添加到相应的 VLAN 中。所 以，能够以为这种依据 MAC 地址的区分办法是依据用户 的 VLAN 。这种办法的缺陷是不行快捷，初始化时，一切 的用户都必须进行装备， 若是有几百个乃至上千个用户的 话，装备作业就显得适当的繁琐， 并且由于需求盯梢设备 内的 MAC 地址进行盯梢， 致使了交流机履行功率的下降。 别的， 关于运用笔记本电脑的用户来说， 他们的网卡能够 常常替换，这样， VLAN 就必须不停地装备。The largest strengt

18、hs this distinction of VLAN method is when the mobile user physical orientation, namely from an AC machine for AC machine other, there is no need to be equipped on it, take the initiative to add it to the corresponding VLAN. So, can according to the MAC address of the way that is based on the users

19、VLAN.This approach is not efficient defect, initialization, allusers must be equipped, if there are hundreds or thousands of users, equipment operation is appropriate is tedious, and because demand is shadowed in MAC address stalking, resulting in the decline of AC machines perform power. The other,

20、 on the use of notebook computer users, they can often replace the card, so, VLAN must not stop equipment.（三）依据网络层区分 VLAN（three ） according to the network layer to distinguish VLAN这种区分 VLAN 的办法是依据每个主机的网络层地 址或协议类型 （若是撑持多协议 ）区分的，尽管这种区分办 法是依据网络地址，比方 IP 地址，但它不是路由，和网 络层的路由毫无关系。 这种办法的长处是用户的物理方位 改动了，不需求重新装

21、备所属的 VLAN ，并且能够依据协 议类型来区分 VLAN ，这对网络办理者来说很重要， 还有， 这种办法不需求附加的帧标签来辨认 VLAN ，这样能够削 减网络的通讯量。 这种办法的缺陷是功率低， 由于查看每 一个数据包的网络层地址是需求耗费处置时刻的。The VLAN method is based on the type of each host inthe network layer address or agreement ( if support multi-protocol ) distinction, although this distinction is based on

22、 the network address, for example the IP address, but it is not a routing, routing has no relationship with the network layer. This method advantage is the physical range user changes, do not need to re-equip belongs to VLAN, and can distinguish VLAN according to the protocol type, the network manag

23、ement is very important, who also, this method does not need the frame label attached to identify VLAN traffic, this can reduce network. Defects in this way is low power, because the network layer address for each data packet is need to waste disposal time.依据 IP 组播区分 VLAN(four ) based on IP multicas

24、t to distinguish VLANIP 组播实际上也是一种 VLAN 的界说，即以为一个 组播组就是一个 VLAN ，这种区分的办法将 VLAN 扩大到 了广域网， 因而这种办法具有更大的灵敏性， 并且也很简 单经过路由器进行扩大， 当然这种办法不适合局域网， 主 要是功率不高。The definition of IP multicast is actually a kind of VLAN, namely that a multicast group is a VLAN, this distinction would be VLAN extended to the wide area

25、 network, so this approach has a greater sensitivity, and also very simple through the router to expand, of course, this approach is not suitable for the LAN, is the main power is not high.（五）依据规矩的 VLAN（five ） according to the rules of VLAN也称为依据战略的 VLAN 。这是最灵敏的 VLAN 区分 办法，具有主动装备的才能， 能够把关联的用户连成一体， 在逻

26、辑区分上称为“关系网络”。网络办理员只需在网管软 件中断定区分 VLAN 的规矩（或特点） ，那么当一个设备 加入网络中时，将会被“感知”，并被个人地包括进正确的 VLAN 中。一起，对设备的移动和改动也可主动辨认和盯 梢。Also known as the basis of the VLAN strategy. This is the most sensitive VLAN way, with active equipment ability, can make the user associated together, in the logical distinction is called relationship network . Thenetwork administratorneed only in networkmanagement software that distinguish VLAN rules ( or feat