HCIA-Datacom网络技术实验指南4. 构建以太网交换网络-p39

构建以太网交换网络4.1 实验介绍4.2 实验配置任务实验任务1：创建VLAN实验任务2：基于端口划分VLAN实验任务3：基于MAC地址划分VLAN目录在一家微型企业中，企业的办公区域分为两个房间，一个小房间为老板办公室，一个大房间为开放办公室，财务部和销售部的员工共同使用这个办公空间。我们需要通过VLAN的划分，使老板PC、财务部PC和销售部PC之间无法进行通信，以此提供一定程度的安全性和便捷性。同时在这个办公环境中，财务部和销售部各自拥有本部门的服务器，财务部PC可以访问财务部服务器，销售部PC可以访问销售部服务器，但不可跨部门访问。3实验介绍实验目的掌握创建VLAN的命令，允许VLAN内部通信，不允许VLAN之间通信掌握将交换机端口配置为Access、Trunk、Hybrid端口的命令掌握限制Trunk链路上允许传输的VLAN的命令掌握根据端口、MAC地址划分VLAN的方法4实验拓扑5PC10-1PC20-2PC20-1PC30-1Server20Server30S1S2VLAN10VLAN20VLAN20VLAN30VLAN30G0/0/1G0/0/4G0/0/5G0/0/6G0/0/10G0/0/10G0/0/1G0/0/2网络地址规划设备接口IP地址子网掩码默认网关PC10-1E0/0/110.0.10.1255.255.255.0—PC20-1E0/0/110.0.20.1255.255.255.0—PC20-2E0/0/110.0.20.2255.255.255.0—PC30-1E0/0/110.0.30.1255.255.255.0—Server20E0/0/110.0.20.10255.255.255.0—Server30E0/0/110.0.30.10255.255.255.0—4.1 实验介绍4.2 实验配置任务实验任务1：创建VLAN实验任务2：基于端口划分VLAN实验任务3：基于MAC地址划分VLAN目录实验任务1：创建VLAN实验目的：在两台交换机S1和S2上分别创建公司需要的VLAN，两台交换机上的VLAN总结如下：VLANID交换机端口PC或服务器10（老板办公室）S1：G0/0/1–G0/0/3PC10-120（销售部）S1：G0/0/4–G0/0/9PC20-1、PC20-2S2：G0/0/1Server2030（财务部）S1：G0/0/4–G0/0/9PC30-1S2：G0/0/2Server30实验任务1：创建单个VLAN创建VLAN（系统视图）vlanvlan-idVLANID实验任务1：S1的VLAN配置交换机S1：VLAN10、VLAN20和VLAN30在S1上创建VLAN[S1]vlan10[S1-vlan10]quit[S1]vlan20[S1-vlan20]quit[S1]vlan30实验任务1：批量创建VLAN批量创建VLAN（系统视图）vlanbatch[vlan-id1

vlan-id2…vlan-id3]VLANID1VLANID3VLANID2实验任务1：S2的VLAN配置交换机S2：VLAN20和VLAN30在S2上创建VLAN[S2]vlanbatch2030Info:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S2]实验任务1：验证配置结果（1）在S1上查看VLAN汇总信息[S1]displayvlansummarystaticvlan:Total4staticvlan.1102030dynamicvlan:Total0dynamicvlan.reservedvlan:Total0reservedvlan.实验任务1：验证配置结果（2）在S1上查看VLAN与端口的对应关系[S1]displayvlanThetotalnumberofvlansis:4--------------------------------------------------------------------------------U:Up;D:Down;TG:Tagged;UT:Untagged;MP:Vlan-mapping;ST:Vlan-stacking;#:ProtocolTransparent-vlan;*:Management-vlan;--------------------------------------------------------------------------------VIDTypePorts--------------------------------------------------------------------------------1commonUT:GE0/0/1(U)GE0/0/2(D)GE0/0/3(D)GE0/0/4(U)GE0/0/5(U)GE0/0/6(U)GE0/0/7(D)GE0/0/8(D)GE0/0/9(D)GE0/0/10(U)GE0/0/11(D)GE0/0/12(D)GE0/0/13(D)GE0/0/14(D)GE0/0/15(D)GE0/0/16(D)GE0/0/17(D)GE0/0/18(D)GE0/0/19(D)GE0/0/20(D)GE0/0/21(D)GE0/0/22(D)GE0/0/23(D)GE0/0/24(D)10common20common30commonVIDStatusPropertyMAC-LRNStatisticsDescription--------------------------------------------------------------------------------1enabledefaultenabledisableVLAN000110enabledefaultenabledisableVLAN001020enabledefaultenabledisableVLAN002030enabledefaultenabledisableVLAN00304.1 实验介绍4.2 实验配置任务实验任务1：创建VLAN实验任务2：基于端口划分VLAN实验任务3：基于MAC地址划分VLAN目录实验任务2：基于端口划分VLAN实验目的：交换机端口的规划总结如下：交换机端口类型VLANS1G0/0/1–G0/0/3Access10G0/0/10Trunk20和30S2G0/0/1Access20G0/0/2Access30G0/0/10Trunk20和30实验任务2：Access端口配置（1）将端口设置为Access模式（接口视图）portlink-typeaccessAccess模式实验任务2：Access端口配置（2）将端口加入VLAN（接口视图）portdefaultvlanvlan-idVLANID实验任务2：S1的Access端口配置配置S1的G0/0/1–G0/0/3端口[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]portlink-typeaccess[S1-GigabitEthernet0/0/1]portdefaultvlan10[S1-GigabitEthernet0/0/1]quit[S1]interfaceGigabitEthernet0/0/2[S1-GigabitEthernet0/0/2]portlink-typeaccess[S1-GigabitEthernet0/0/2]portdefaultvlan10[S1-GigabitEthernet0/0/2]quit[S1]interfaceGigabitEthernet0/0/3[S1-GigabitEthernet0/0/3]portlink-typeaccess[S1-GigabitEthernet0/0/3]portdefaultvlan10实验任务2：验证S1的Access配置结果在S1上查看VLAN与端口的对应关系[S1]displayvlanThetotalnumberofvlansis:4--------------------------------------------------------------------------------U:Up;D:Down;TG:Tagged;UT:Untagged;MP:Vlan-mapping;ST:Vlan-stacking;#:ProtocolTransparent-vlan;*:Management-vlan;--------------------------------------------------------------------------------VIDTypePorts--------------------------------------------------------------------------------1commonUT:GE0/0/4(U)GE0/0/5(U)GE0/0/6(U)GE0/0/7(D)GE0/0/8(D)GE0/0/9(D)GE0/0/10(U)GE0/0/11(D)GE0/0/12(D)GE0/0/13(D)GE0/0/14(D)GE0/0/15(D)GE0/0/16(D)GE0/0/17(D)GE0/0/18(D)GE0/0/19(D)GE0/0/20(D)GE0/0/21(D)GE0/0/22(D)GE0/0/23(D)GE0/0/24(D)10commonUT:GE0/0/1(U)GE0/0/2(D)GE0/0/3(D)20common30commonVIDStatusPropertyMAC-LRNStatisticsDescription--------------------------------------------------------------------------------1enabledefaultenabledisableVLAN000110enabledefaultenabledisableVLAN001020enabledefaultenabledisableVLAN002030enabledefaultenabledisableVLAN0030实验任务2：S2的Access端口配置配置S2的G0/0/1、G0/0/2端口[S2]interfaceGigabitEthernet0/0/1[S2-GigabitEthernet0/0/1]portlink-typeaccess[S2-GigabitEthernet0/0/1]portdefaultvlan20[S2-GigabitEthernet0/0/1]quit[S2]interfaceGigabitEthernet0/0/2[S2-GigabitEthernet0/0/2]portlink-typeaccess[S2-GigabitEthernet0/0/2]portdefaultvlan30实验任务2：验证S2的Access配置结果在S2上查看VLAN与端口的对应关系[S2]displayvlanThetotalnumberofvlansis:3--------------------------------------------------------------------------------U:Up;D:Down;TG:Tagged;UT:Untagged;MP:Vlan-mapping;ST:Vlan-stacking;#:ProtocolTransparent-vlan;*:Management-vlan;--------------------------------------------------------------------------------VIDTypePorts--------------------------------------------------------------------------------1commonUT:GE0/0/3(D)GE0/0/4(D)GE0/0/5(D)GE0/0/6(D)GE0/0/7(D)GE0/0/8(D)GE0/0/9(D)GE0/0/10(U)GE0/0/11(D)GE0/0/12(D)GE0/0/13(D)GE0/0/14(D)GE0/0/15(D)GE0/0/16(D)GE0/0/17(D)GE0/0/18(D)GE0/0/19(D)GE0/0/20(D)GE0/0/21(D)GE0/0/22(D)GE0/0/23(D)GE0/0/24(D)20commonUT:GE0/0/1(U)30commonUT:GE0/0/2(U)VIDStatusPropertyMAC-LRNStatisticsDescription--------------------------------------------------------------------------------1enabledefaultenabledisableVLAN000120enabledefaultenabledisableVLAN002030enabledefaultenabledisableVLAN0030实验任务2：Trunk端口配置（1）将端口设置为Trunk模式（接口视图）portlink-typetrunkTrunk模式实验任务2：Trunk端口配置（2）设置允许Trunk传输的VLAN（接口视图）porttrunkallow-passvlan{{vlan-id1[tovlan-id2]}|all}第一个VLANID最后一个VLANID实验任务2：S1和S2的Trunk端口配置配置S1的G0/0/10端口配置S2的G0/0/10端口[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]portlink-typetrunk [S1-GigabitEthernet0/0/10]porttrunkallow-passvlan2030[S1-GigabitEthernet0/0/10]undoporttrunkallow-passvlan1[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]portlink-typetrunk[S2-GigabitEthernet0/0/10]porttrunkallow-passvlan2030[S2-GigabitEthernet0/0/10]undoporttrunkallow-passvlan1实验任务2：验证Trunk配置结果查看VLAN与端口的对应关系（以S1为例）[S1]displayvlanThetotalnumberofvlansis:4--------------------------------------------------------------------------------U:Up;D:Down;TG:Tagged;UT:Untagged;MP:Vlan-mapping;ST:Vlan-stacking;#:ProtocolTransparent-vlan;*:Management-vlan;--------------------------------------------------------------------------------VIDTypePorts--------------------------------------------------------------------------------1commonUT:GE0/0/4(U)GE0/0/5(U)GE0/0/6(U)GE0/0/7(D)GE0/0/8(D)GE0/0/9(D)GE0/0/11(D)GE0/0/12(D)GE0/0/13(D)GE0/0/14(D)GE0/0/15(D)GE0/0/16(D)GE0/0/17(D)GE0/0/18(D)GE0/0/19(D)GE0/0/20(D)GE0/0/21(D)GE0/0/22(D)GE0/0/23(D)GE0/0/24(D)10commonUT:GE0/0/1(U)GE0/0/2(D)GE0/0/3(D)20commonTG:GE0/0/10(U)30commonTG:GE0/0/10(U)VIDStatusPropertyMAC-LRNStatisticsDescription--------------------------------------------------------------------------------1enabledefaultenabledisableVLAN000110enabledefaultenabledisableVLAN001020enabledefaultenabledisableVLAN002030enabledefaultenabledisableVLAN00304.1 实验介绍4.2 实验配置任务实验任务1：创建VLAN实验任务2：基于端口划分VLAN实验任务3：基于MAC地址划分VLAN目录实验任务3：基于MAC地址划分VLAN实验目的：交换机S1端口G0/0/4–G0/0/9需基于MAC地址划分VLAN。PCMAC地址VLANPC20-100-E0-FC-00-20-0120PC20-200-E0-FC-00-20-0220PC30-100-E0-FC-00-30-0130实验任务3：关联MAC地址与VLAN将MAC地址与VLAN进行关联（VLAN视图）mac-vlanmac-addressmac-addressMAC地址（H-H-H）实验任务3：相关端口配置（1）将端口设置为Hybrid模式（接口视图）portlink-typehybridHybrid模式实验任务3：相关端口配置（2）设置允许端口传输的VLAN（接口视图）porthybriduntaggedvlan{{vlan-id1[tovlan-id2]}|all}第一个VLANID最后一个VLANID实验任务3：相关端口配置（3）在端口上启用基于MAC地址划分VLAN（接口视图）mac-vlanenable实验任务3：S1上的MAC地址与VLAN关联在S1上关联MAC地址和VLAN[S1]vlan20[S1-vlan20]mac-vlanmac-address00e0-fc00-2001[S1-vlan20]mac-vlanmac-address00e0-fc00-2002[S1-vlan20]quit[S1]vlan30[S1-vlan30]mac-vlanmac-address00e0-fc00-3001实验任务3：配置S1G0/0/4端口在S1上配置G0/0/4端口[S1]interfaceGigabitEthernet0/0/4[S1-GigabitEthernet0/0/4]portlink-typehybrid[S1-GigabitEthernet0/0/4]porthybriduntaggedvlan2030[S1-GigabitEthernet0/0/4]mac-vlanenableInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1-GigabitEthernet0/0/4]实验任务3：配置S1G0/0/5–G0/0/9端口在S1上配置G0/0/4–G0/0/9端口[S1]port-groupport5-9[S1-port-group-port5-9]group-memberGigabitEthernet0/0/5toGigabitEthernet0/0/9[S1-port-group-port5-9]porthybriduntaggedvlan2030[S1-GigabitEthernet0/0/5]porthybriduntaggedvlan2030[S1-GigabitEthernet0/0/6]porthybriduntaggedvlan2030[S1-GigabitEthernet0/0/7]porthybriduntaggedvlan2030[S1-GigabitEthernet0/0/8]porthybriduntaggedvlan2030[S1-GigabitEthernet0/0/9]porthybriduntaggedvlan2030[S1-port-group-port5-9]mac-vlanenable[S1-GigabitEthernet0/0/5]mac-vlanenableInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1-GigabitEthernet0/0/6]mac-vlanenableInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1-GigabitEthernet0/0/7]mac-vlanenableInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1-GigabitEthernet0/0/8]mac-vlanenableInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1-GigabitEthernet0/0/9]mac-vlanenableInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1-port-group-port5-9]实验任务3：验证配置结果（1）查看MAC地址与VLAN的关联[S1]displaymac-vlanmac-addressall---------------------------------------------------MACAddressMASKVLANPriority---------------------------------------------------00e0-fc00-2001ffff-ffff-ffff20000e0-fc00-2002ffff-ffff-ffff20000e0-fc00-3001ffff-ffff-ffff300TotalMACVLANaddressc