我备课第4天module5-2交换技术vlan

1、交换技术VLAN-TRUNK-VTPModule5-2传统的网络设计网络范围没有界限广播域范围大大量的单播帧传输在网络中每个角落广播没有界限不宜管理和维护可能的安全隐患VLAN 综述VLAN = Broadcast Domain = Logical Network (Subnet) 分割网络灵活设计安全有效VLAN的设计设计VLAN必须考虑到分级子网的设计 :便于管理和排错减少错误信息的发送 尽量缩减路由表的大小IP地址空间的应用指导方针 每个VLAN分配一个子网.在一个共同的区域分配一个子网.VLAN 模式VLAN Trunk（cont.）VLAN干道：对于多个VLAN交换机来说，VLAN干

2、线就是两个交换机之间的连接，它在两个或两个以上的VLAN之间传输通信。每个交换机必须确定它所收到的帧属于哪个VLAN。一个交换机的任何端口都必须属于且只能属于一个VLAN，但当端口配置成trunk干线后，该端口就失去了它自身的VLAN标识，可以为该交换机内的所有VLAN传输数据。 IEEE公共帧标记协议802.1Q如果要跨越cisco交换机和其他厂商的交换机来建立多个VLAN，必须使用802.1Q协议VLAN Tag added by ing portVLAN Tag stripped by forwarding port802.1Q VLAN identifier802.1Q Frame80

3、2.1Q Trunking认识 Native VLANsConfiguring 802.1Q TrunkingConfigures the port as a VLAN trunk SwitchX(config-if)#switchport mode trunkswitchport mode access | dynamic auto | desirable | trunkSwitchX(config-if)#Configures the trunking characteristics of the portSwitchX# show interfaces fa0/11 trunkPort

4、Mode Encapsulation Status Native vlanFa0/11 desirable 802.1q trunking 1Port Vlans allowed on trunkFa0/11 1-4094Port Vlans allowed and active in management domainFa0/11 1-13SwitchX# show interfaces fa0/11 switchportName: Fa0/11Switchport: EnabledAdministrative Mode: trunkOperational Mode: downAdminis

5、trative Trunking Encapsulation: dot1qNegotiation of Trunking: OnAccess Mode VLAN: 1 (default)Trunking Native Mode VLAN: 1 (default) . . .查看 Trunk 信息SwitchX# show interfaces interface switchport | trunk 创建 VLAN 指导方针创建多少个VLAN取决于交换机.VLAN 1 出厂默认的 Ethernet VLAN. Cisco Discovery Protocol and VTP 公告发送信息使用

6、VLAN 1.Cisco Catalyst 交换机IP地址用作管理VLAN (VLAN 1 by default).如果使用 VTP, 必须在VTP server或VTP transparent 交换机上添加或删除VLAN.Adding a VLANSwitchX# configure terminalSwitchX(config)# vlan 2SwitchX(config-vlan)# name switchlab99SwitchX# show vlan id 2VLAN Name Status Ports- - - -2 switchlab99 active Fa0/2, Fa0/12V

7、LAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2- - - - - - - - - - -2 enet 100002 1500 - - - - - 0 0. . .SwitchX#Verifying a VLANSwitchX# show vlan brief | id vlan-id | name vlan-name分配 交换机端口到对应 VLANSwitchX# configure terminalSwitchX(config)# interface range fastethernet 0/2 - 4S

8、witchX(config-if)# switchport access vlan 2 SwitchX# show vlanVLAN Name Status Ports- - - -1 default active Fa0/1 2 switchlab99 active Fa0/2, Fa0/3, Fa0/4switchport access vlan vlan# | dynamicSwitchX(config-if)#SwitchX# show vlan briefVLAN Name Status Ports- - - -1 default active Fa0/12 switchlab99

9、active Fa0/2, Fa0/3, Fa0/4 3 vlan3 active4 vlan4 active1002 fddi-default act/unsup1003 token-ring-default act/unsupVLAN Name Status Ports- - - -1004 fddinet-default act/unsup1005 trnet-default act/unsupSwitchX# show vlan brief查看所有VLAN 查看所有VLAN(Cont.)SwitchX# show interfaces fa0/2 switchportName: Fa0

10、/2Switchport: EnabledAdministrative Mode: dynamic autoOperational Mode: static accessAdministrative Trunking Encapsulation: dot1qOperational Trunking Encapsulation: nativeNegotiation of Trunking: OnAccess Mode VLAN: 2 (switchlab99)Trunking Native Mode VLAN: 1 (default)- output omitted -show interfaces interface switchportSwitchX(config-if)#VTP 特征不能够创建，修改或删除 VLANs 转发VLAN通告信息同步创建 VLANs修改 VLANs删除 VLANs发送