構(gòu)建以太網(wǎng)交換網(wǎng)絡(luò)4.1 實(shí)驗(yàn)介紹4.2 實(shí)驗(yàn)配置任務(wù)實(shí)驗(yàn)任務(wù)1：創(chuàng)建VLAN實(shí)驗(yàn)任務(wù)2：基于端口劃分VLAN實(shí)驗(yàn)任務(wù)3：基于MAC地址劃分VLAN目錄在一家微型企業(yè)中，企業(yè)的辦公區(qū)域分為兩個(gè)房間，一個(gè)小房間為老板辦公室，一個(gè)大房間為開放辦公室，財(cái)務(wù)部和銷售部的員工共同使用這個(gè)辦公空間。我們需要通過VLAN的劃分，使老板PC、財(cái)務(wù)部PC和銷售部PC之間無法進(jìn)行通信，以此提供一定程度的安全性和便捷性。同時(shí)在這個(gè)辦公環(huán)境中，財(cái)務(wù)部和銷售部各自擁有本部門的服務(wù)器，財(cái)務(wù)部PC可以訪問財(cái)務(wù)部服務(wù)器，銷售部PC可以訪問銷售部服務(wù)器，但不可跨部門訪問。3實(shí)驗(yàn)介紹實(shí)驗(yàn)?zāi)康恼莆談?chuàng)建VLAN的命令，允許VLAN內(nèi)部通信，不允許VLAN之間通信掌握將交換機(jī)端口配置為Access、Trunk、Hybrid端口的命令掌握限制Trunk鏈路上允許傳輸?shù)腣LAN的命令掌握根據(jù)端口、MAC地址劃分VLAN的方法4實(shí)驗(yàn)拓?fù)?PC10-1PC20-2PC20-1PC30-1Server20Server30S1S2VLAN10VLAN20VLAN20VLAN30VLAN30G0/0/1G0/0/4G0/0/5G0/0/6G0/0/10G0/0/10G0/0/1G0/0/2網(wǎng)絡(luò)地址規(guī)劃設(shè)備接口IP地址子網(wǎng)掩碼默認(rèn)網(wǎng)關(guān)PC10-1E0/0/110.0.10.1255.255.255.0—PC20-1E0/0/110.0.20.1255.255.255.0—PC20-2E0/0/110.0.20.2255.255.255.0—PC30-1E0/0/110.0.30.1255.255.255.0—Server20E0/0/110.0.20.10255.255.255.0—Server30E0/0/110.0.30.10255.255.255.0—4.1 實(shí)驗(yàn)介紹4.2 實(shí)驗(yàn)配置任務(wù)實(shí)驗(yàn)任務(wù)1：創(chuàng)建VLAN實(shí)驗(yàn)任務(wù)2：基于端口劃分VLAN實(shí)驗(yàn)任務(wù)3：基于MAC地址劃分VLAN目錄實(shí)驗(yàn)任務(wù)1：創(chuàng)建VLAN實(shí)驗(yàn)?zāi)康模涸趦膳_交換機(jī)S1和S2上分別創(chuàng)建公司需要的VLAN，兩臺交換機(jī)上的VLAN總結(jié)如下：VLANID交換機(jī)端口PC或服務(wù)器10（老板辦公室）S1：G0/0/1–G0/0/3PC10-120（銷售部）S1：G0/0/4–G0/0/9PC20-1、PC20-2S2：G0/0/1Server2030（財(cái)務(wù)部）S1：G0/0/4–G0/0/9PC30-1S2：G0/0/2Server30實(shí)驗(yàn)任務(wù)1：創(chuàng)建單個(gè)VLAN創(chuàng)建VLAN（系統(tǒng)視圖）vlanvlan-idVLANID實(shí)驗(yàn)任務(wù)1：S1的VLAN配置交換機(jī)S1：VLAN10、VLAN20和VLAN30在S1上創(chuàng)建VLAN[S1]vlan10[S1-vlan10]quit[S1]vlan20[S1-vlan20]quit[S1]vlan30實(shí)驗(yàn)任務(wù)1：批量創(chuàng)建VLAN批量創(chuàng)建VLAN（系統(tǒng)視圖）vlanbatch[vlan-id1

vlan-id2…vlan-id3]VLANID1VLANID3VLANID2實(shí)驗(yàn)任務(wù)1：S2的VLAN配置交換機(jī)S2：VLAN20和VLAN30在S2上創(chuàng)建VLAN[S2]vlanbatch2030Info:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S2]實(shí)驗(yàn)任務(wù)1：驗(yàn)證配置結(jié)果（1）在S1上查看VLAN匯總信息[S1]displayvlansummarystaticvlan:Total4staticvlan.1102030dynamicvlan:Total0dynamicvlan.reservedvlan:Total0reservedvlan.實(shí)驗(yàn)任務(wù)1：驗(yàn)證配置結(jié)果（2）在S1上查看VLAN與端口的對應(yīng)關(guān)系[S1]displayvlanThetotalnumberofvlansis:4--------------------------------------------------------------------------------U:Up;D:Down;TG:Tagged;UT:Untagged;MP:Vlan-mapping;ST:Vlan-stacking;#:ProtocolTransparent-vlan;*:Management-vlan;--------------------------------------------------------------------------------VIDTypePorts--------------------------------------------------------------------------------1commonUT:GE0/0/1(U)GE0/0/2(D)GE0/0/3(D)GE0/0/4(U)GE0/0/5(U)GE0/0/6(U)GE0/0/7(D)GE0/0/8(D)GE0/0/9(D)GE0/0/10(U)GE0/0/11(D)GE0/0/12(D)GE0/0/13(D)GE0/0/14(D)GE0/0/15(D)GE0/0/16(D)GE0/0/17(D)GE0/0/18(D)GE0/0/19(D)GE0/0/20(D)GE0/0/21(D)GE0/0/22(D)GE0/0/23(D)GE0/0/24(D)10common20common30commonVIDStatusPropertyMAC-LRNStatisticsDescription--------------------------------------------------------------------------------1enabledefaultenabledisableVLAN000110enabledefaultenabledisableVLAN001020enabledefaultenabledisableVLAN002030enabledefaultenabledisableVLAN00304.1 實(shí)驗(yàn)介紹4.2 實(shí)驗(yàn)配置任務(wù)實(shí)驗(yàn)任務(wù)1：創(chuàng)建VLAN實(shí)驗(yàn)任務(wù)2：基于端口劃分VLAN實(shí)驗(yàn)任務(wù)3：基于MAC地址劃分VLAN目錄實(shí)驗(yàn)任務(wù)2：基于端口劃分VLAN實(shí)驗(yàn)?zāi)康模航粨Q機(jī)端口的規(guī)劃總結(jié)如下：交換機(jī)端口類型VLANS1G0/0/1–G0/0/3Access10G0/0/10Trunk20和30S2G0/0/1Access20G0/0/2Access30G0/0/10Trunk20和30實(shí)驗(yàn)任務(wù)2：Access端口配置（1）將端口設(shè)置為Access模式（接口視圖）portlink-typeaccessAccess模式實(shí)驗(yàn)任務(wù)2：Access端口配置（2）將端口加入VLAN（接口視圖）portdefaultvlanvlan-idVLANID實(shí)驗(yàn)任務(wù)2：S1的Access端口配置配置S1的G0/0/1–G0/0/3端口[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]portlink-typeaccess[S1-GigabitEthernet0/0/1]portdefaultvlan10[S1-GigabitEthernet0/0/1]quit[S1]interfaceGigabitEthernet0/0/2[S1-GigabitEthernet0/0/2]portlink-typeaccess[S1-GigabitEthernet0/0/2]portdefaultvlan10[S1-GigabitEthernet0/0/2]quit[S1]interfaceGigabitEthernet0/0/3[S1-GigabitEthernet0/0/3]portlink-typeaccess[S1-GigabitEthernet0/0/3]portdefaultvlan10實(shí)驗(yàn)任務(wù)2：驗(yàn)證S1的Access配置結(jié)果在S1上查看VLAN與端口的對應(yīng)關(guān)系[S1]displayvlanThetotalnumberofvlansis:4--------------------------------------------------------------------------------U:Up;D:Down;TG:Tagged;UT:Untagged;MP:Vlan-mapping;ST:Vlan-stacking;#:ProtocolTransparent-vlan;*:Management-vlan;--------------------------------------------------------------------------------VIDTypePorts--------------------------------------------------------------------------------1commonUT:GE0/0/4(U)GE0/0/5(U)GE0/0/6(U)GE0/0/7(D)GE0/0/8(D)GE0/0/9(D)GE0/0/10(U)GE0/0/11(D)GE0/0/12(D)GE0/0/13(D)GE0/0/14(D)GE0/0/15(D)GE0/0/16(D)GE0/0/17(D)GE0/0/18(D)GE0/0/19(D)GE0/0/20(D)GE0/0/21(D)GE0/0/22(D)GE0/0/23(D)GE0/0/24(D)10commonUT:GE0/0/1(U)GE0/0/2(D)GE0/0/3(D)20common30commonVIDStatusPropertyMAC-LRNStatisticsDescription--------------------------------------------------------------------------------1enabledefaultenabledisableVLAN000110enabledefaultenabledisableVLAN001020enabledefaultenabledisableVLAN002030enabledefaultenabledisableVLAN0030實(shí)驗(yàn)任務(wù)2：S2的Access端口配置配置S2的G0/0/1、G0/0/2端口[S2]interfaceGigabitEthernet0/0/1[S2-GigabitEthernet0/0/1]portlink-typeaccess[S2-GigabitEthernet0/0/1]portdefaultvlan20[S2-GigabitEthernet0/0/1]quit[S2]interfaceGigabitEthernet0/0/2[S2-GigabitEthernet0/0/2]portlink-typeaccess[S2-GigabitEthernet0/0/2]portdefaultvlan30實(shí)驗(yàn)任務(wù)2：驗(yàn)證S2的Access配置結(jié)果在S2上查看VLAN與端口的對應(yīng)關(guān)系[S2]displayvlanThetotalnumberofvlansis:3--------------------------------------------------------------------------------U:Up;D:Down;TG:Tagged;UT:Untagged;MP:Vlan-mapping;ST:Vlan-stacking;#:ProtocolTransparent-vlan;*:Management-vlan;--------------------------------------------------------------------------------VIDTypePorts--------------------------------------------------------------------------------1commonUT:GE0/0/3(D)GE0/0/4(D)GE0/0/5(D)GE0/0/6(D)GE0/0/7(D)GE0/0/8(D)GE0/0/9(D)GE0/0/10(U)GE0/0/11(D)GE0/0/12(D)GE0/0/13(D)GE0/0/14(D)GE0/0/15(D)GE0/0/16(D)GE0/0/17(D)GE0/0/18(D)GE0/0/19(D)GE0/0/20(D)GE0/0/21(D)GE0/0/22(D)GE0/0/23(D)GE0/0/24(D)20commonUT:GE0/0/1(U)30commonUT:GE0/0/2(U)VIDStatusPropertyMAC-LRNStatisticsDescription--------------------------------------------------------------------------------1enabledefaultenabledisableVLAN000120enabledefaultenabledisableVLAN002030enabledefaultenabledisableVLAN0030實(shí)驗(yàn)任務(wù)2：Trunk端口配置（1）將端口設(shè)置為Trunk模式（接口視圖）portlink-typetrunkTrunk模式實(shí)驗(yàn)任務(wù)2：Trunk端口配置（2）設(shè)置允許Trunk傳輸?shù)腣LAN（接口視圖）porttrunkallow-passvlan{{vlan-id1[tovlan-id2]}|all}第一個(gè)VLANID最后一個(gè)VLANID實(shí)驗(yàn)任務(wù)2：S1和S2的Trunk端口配置配置S1的G0/0/10端口配置S2的G0/0/10端口[S1]interfaceGigabitEthernet0/0/10[S1-GigabitEthernet0/0/10]portlink-typetrunk [S1-GigabitEthernet0/0/10]porttrunkallow-passvlan2030[S1-GigabitEthernet0/0/10]undoporttrunkallow-passvlan1[S2]interfaceGigabitEthernet0/0/10[S2-GigabitEthernet0/0/10]portlink-typetrunk[S2-GigabitEthernet0/0/10]porttrunkallow-passvlan2030[S2-GigabitEthernet0/0/10]undoporttrunkallow-passvlan1實(shí)驗(yàn)任務(wù)2：驗(yàn)證Trunk配置結(jié)果查看VLAN與端口的對應(yīng)關(guān)系（以S1為例）[S1]displayvlanThetotalnumberofvlansis:4--------------------------------------------------------------------------------U:Up;D:Down;TG:Tagged;UT:Untagged;MP:Vlan-mapping;ST:Vlan-stacking;#:ProtocolTransparent-vlan;*:Management-vlan;--------------------------------------------------------------------------------VIDTypePorts--------------------------------------------------------------------------------1commonUT:GE0/0/4(U)GE0/0/5(U)GE0/0/6(U)GE0/0/7(D)GE0/0/8(D)GE0/0/9(D)GE0/0/11(D)GE0/0/12(D)GE0/0/13(D)GE0/0/14(D)GE0/0/15(D)GE0/0/16(D)GE0/0/17(D)GE0/0/18(D)GE0/0/19(D)GE0/0/20(D)GE0/0/21(D)GE0/0/22(D)GE0/0/23(D)GE0/0/24(D)10commonUT:GE0/0/1(U)GE0/0/2(D)GE0/0/3(D)20commonTG:GE0/0/10(U)30commonTG:GE0/0/10(U)VIDStatusPropertyMAC-LRNStatisticsDescription--------------------------------------------------------------------------------1enabledefaultenabledisableVLAN000110enabledefaultenabledisableVLAN001020enabledefaultenabledisableVLAN002030enabledefaultenabledisableVLAN00304.1 實(shí)驗(yàn)介紹4.2 實(shí)驗(yàn)配置任務(wù)實(shí)驗(yàn)任務(wù)1：創(chuàng)建VLAN實(shí)驗(yàn)任務(wù)2：基于端口劃分VLAN實(shí)驗(yàn)任務(wù)3：基于MAC地址劃分VLAN目錄實(shí)驗(yàn)任務(wù)3：基于MAC地址劃分VLAN實(shí)驗(yàn)?zāi)康模航粨Q機(jī)S1端口G0/0/4–G0/0/9需基于MAC地址劃分VLAN。PCMAC地址VLANPC20-100-E0-FC-00-20-0120PC20-200-E0-FC-00-20-0220PC30-100-E0-FC-00-30-0130實(shí)驗(yàn)任務(wù)3：關(guān)聯(lián)MAC地址與VLAN將MAC地址與VLAN進(jìn)行關(guān)聯(lián)（VLAN視圖）mac-vlanmac-addressmac-addressMAC地址（H-H-H）實(shí)驗(yàn)任務(wù)3：相關(guān)端口配置（1）將端口設(shè)置為Hybrid模式（接口視圖）portlink-typehybridHybrid模式實(shí)驗(yàn)任務(wù)3：相關(guān)端口配置（2）設(shè)置允許端口傳輸?shù)腣LAN（接口視圖）porthybriduntaggedvlan{{vlan-id1[tovlan-id2]}|all}第一個(gè)VLANID最后一個(gè)VLANID實(shí)驗(yàn)任務(wù)3：相關(guān)端口配置（3）在端口上啟用基于MAC地址劃分VLAN（接口視圖）mac-vlanenable實(shí)驗(yàn)任務(wù)3：S1上的MAC地址與VLAN關(guān)聯(lián)在S1上關(guān)聯(lián)MAC地址和VLAN[S1]vlan20[S1-vlan20]mac-vlanmac-address00e0-fc00-2001[S1-vlan20]mac-vlanmac-address00e0-fc00-2002[S1-vlan20]quit[S1]vlan30[S1-vlan30]mac-vlanmac-address00e0-fc00-3001實(shí)驗(yàn)任務(wù)3：配置S1G0/0/4端口在S1上配置G0/0/4端口[S1]interfaceGigabitEthernet0/0/4[S1-GigabitEthernet0/0/4]portlink-typehybrid[S1-GigabitEthernet0/0/4]porthybriduntaggedvlan2030[S1-GigabitEthernet0/0/4]mac-vlanenableInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1-GigabitEthernet0/0/4]實(shí)驗(yàn)任務(wù)3：配置S1G0/0/5–G0/0/9端口在S1上配置G0/0/4–G0/0/9端口[S1]port-groupport5-9[S1-port-group-port5-9]group-memberGigabitEthernet0/0/5toGigabitEthernet0/0/9[S1-port-group-port5-9]porthybriduntaggedvlan2030[S1-GigabitEthernet0/0/5]porthybriduntaggedvlan2030[S1-GigabitEthernet0/0/6]porthybriduntaggedvlan2030[S1-GigabitEthernet0/0/7]porthybriduntaggedvlan2030[S1-GigabitEthernet0/0/8]porthybriduntaggedvlan2030[S1-GigabitEthernet0/0/9]porthybriduntaggedvlan2030[S1-port-group-port5-9]mac-vlanenable[S1-GigabitEthernet0/0/5]mac-vlanenableInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1-GigabitEthernet0/0/6]mac-vlanenableInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1-GigabitEthernet0/0/7]mac-vlanenableInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1-GigabitEthernet0/0/8]mac-vlanenableInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1-GigabitEthernet0/0/9]mac-vlanenableInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[S1-port-group-port5-9]實(shí)驗(yàn)任務(wù)3：驗(yàn)證配置結(jié)果（1）查看MAC地址與VLAN的關(guān)聯(lián)[S1]displaymac-vlanmac-addressall---------------------------------------------------MACAddressMASKVLANPriority---------------------------------------------------00e0-fc00-2001ffff-ffff-ffff20000e0-fc00-2002ffff-ffff-ffff20000e0-fc00-3001ffff-ffff-ffff300TotalMACVLANaddressc