Home | Mirror | Search |
Switch#vlan database % Warning: It is recommended to configure VLAN from config mode, as VLAN database mode is being deprecated. Please consult user documentation for configuring VTP/VLAN in config mode. Switch(vlan)# *Mar 1 00:29:54.407: %SYS-5-CONFIG_I: Configured from console by console Switch(vlan)#show VLAN ISL Id: 1 Name: default Media Type: Ethernet VLAN 802.10 Id: 100001 State: Operational MTU: 1500 Backup CRF Mode: Disabled Remote SPAN VLAN: No VLAN ISL Id: 2 Name: server Media Type: Ethernet VLAN 802.10 Id: 100002 State: Operational MTU: 1500 Backup CRF Mode: Disabled Remote SPAN VLAN: No VLAN ISL Id: 3 Name: office Media Type: Ethernet VLAN 802.10 Id: 100003 State: Operational MTU: 1500 Backup CRF Mode: Disabled Remote SPAN VLAN: No VLAN ISL Id: 1002 Name: fddi-default Media Type: FDDI VLAN 802.10 Id: 101002 State: Operational MTU: 1500 Backup CRF Mode: Disabled Remote SPAN VLAN: No VLAN ISL Id: 1003 Name: token-ring-default Media Type: Token Ring VLAN 802.10 Id: 101003 State: Operational MTU: 1500 Maximum ARE Hop Count: 7 Maximum STE Hop Count: 7 Backup CRF Mode: Disabled Remote SPAN VLAN: No VLAN ISL Id: 1004 Name: fddinet-default Media Type: FDDI Net VLAN 802.10 Id: 101004 State: Operational MTU: 1500 STP Type: IEEE Backup CRF Mode: Disabled Remote SPAN VLAN: No VLAN ISL Id: 1005 Name: trnet-default Media Type: Token Ring Net VLAN 802.10 Id: 101005 State: Operational MTU: 1500 STP Type: IBM Backup CRF Mode: Disabled Remote SPAN VLAN: No Switch(vlan)#
路由器配製
Router#configure terminal Router(config)#interface f0/0 Router(config-if)#no shutdown Router(config-if)#interface f0/0.1 --------------- 創建子介面1 Router(config-subif)#encapsulation dot1q 2 ------ 2為VLAN號 對應VLAN 2 Router(config-subif)#ip address 10.10.11.1 255.255.255.0 Router(config-if)#interface f0/0.2 ---------------- 創建子介面2 Router(config-subif)#encapsulation dot1q 3 ------- 3為VLAN號 對應VLAN 3 Router(config-subif)#ip address 10.10.10.1 255.255.255.0 路由器已經配製完畢,可以在Router#show run 看一下當前的配製,用Router#show interfaces 看當前連接埠的狀態,f0/0.1 和f0/0.2兩個子 介面是否為up狀態。
交換機配製
Switch#vlan database Switch(vlan)#vlan 2 name 財務部 ------- 創建vlan 2為財務部 Switch(vlan)#vlan 3 name 市場部----------創建vlan 3為市場部 Switch(vlan)#exit Switch configure terminal Switch(coning)#interface range f0/2 - 9 Switch(coning-if)#switch port access vlan 2 ------- 將f0/-f0/9連接埠分到vlan 2中 Switch(config-if)#interface range f0/10 - 14 Switch(config-if)#switchport access vlan 3 --------將端f0/10至f0/14口3分到vlan 3中 Switch(config-if)#interface f0/1 Switch(config-if)#switchport trunk encapsulation dot1q ------將連接埠封裝 Switch(config-if)#switchport mode trunk -------- 將連接埠配製為trunk模式
客戶端配製:
WorKstation 1 配製為:10.10.11.3 255.255.255.0 網關:10.10.11.1 Workstation 2 配製為:10.10.10.3 255.255.255.0 網關:10.10.10.1
3560交換機VLAN間路由的具體設置
路由, VLAN, 交換機, 設置 在3560交換機上劃三個VLAN,並且要求其中兩個VLAN間能夠互相訪問,操作如下,請指點:
過程 6.1. Switch VLan 配置步驟
激活vlan路由
Switch1#config t Switch1(config)#ip routing
創建三個VLAN
Switch1# Switch1#vlan database Switch1(vlan)#vlan 2 Switch1(vlan)#vlan 3 Switch1(vlan)#vlan 10 Switch1(vlan)#exit
給VLAN分配IP
Switch1#config t Switch1(config)#config vlan2 Switch1(config-if)#ip address 192.168.2.1 255.255.255.0 Switch1(config-if)#no shutdown Switch1#config t Switch1(config)#config vlan3 Switch1(config-if)#ip address 192.168.3.1 255.255.255.0 Switch1(config-if)#no shutdown
配VTP
Switch1# Switch1#config t Switch1(config)#vtp domain SMG Switch1(config)#vtp mode server Switch1(config)#end
交換機通往路由器的介面配IP
Switch1# Switch1#config t Switch1(config)#interface fastethernet0/1 Switch1(config-if)#no switchport Switch1(config-if)#ip address 200.1.1.1 255.255.255.0 Switch1(config-if)#no shutdown
交換機配置預設路由
Switch1# Switch1#config t Switch(config)#ip route 0.0.0.0 0.0.0.0 200.1.1.2
把VLAN號分配給IP介面
Switch1# Switch1#config t Switch1(config)#interface fastethernet0/2 Switch1(config-if)#switchport mode access Switch1(config-if)#switchport access vlan2 Switch1(config-if)#spanning-tree portfast … … Switch1# Switch1#config t Switch1(config)#interface fastethernet0/13 Switch1(config-if)#switchport mode access Switch1(config-if)#switchport access vlan3 Switch1(config-if)#spanning-tree portfast
配訪問控制列表ACL禁VLAN3子網的客戶機訪問伺服器
Switch1# Switch1#config t Switch1(config)#access-list 1 deny 192.168.3.0 0.0.0.255 Switch1(config)#access-list 1 permit any Switch1(config)#interface fastethernet0/13 (此介面接伺服器) Switch1(config-if)#ip access-group 1 out
檢查上述配置
Switch1#show vlan Switch1#show ip route Switch1#show interface gigabitethernet0/1 switchport Switch1#show run Switch1#show vtp status
存配置
Switch1#copy running-config startup-config
VLAN Trunking Protocol(VLAN 中繼協議)
Server
Switch# config terminal Switch(config)# vtp mode server Switch(config)# vtp domain cisco Switch(config)# vtp password mypassword Switch(config)# end
Switch# vlan database Switch(vlan)# vtp server Switch(vlan)# vtp domain cisco Switch(vlan)# vtp password mypassword Switch(vlan)# exit APPLY completed. Exiting.... Switch#
2960#conf t 2960(config)#int f0/15 2960(config-if)#switchport mode trunk 2960(config-if)#end 2960#vlan database 2960(vlan)#vtp client 2960(vlan)#vtp domain eng_group 2960(vlan)#vtp password mypassword 2960(vlan)#exit
cisco3750>en cisco3750#conf t cisco3750(config)#vtp domain cisco(創建域名) cisco3750(config)#vtp password 123(設置密碼) cisco3750(config)#vtp mode server(改成伺服器模式) cisco3750(config-if)#int g0/0(進入千兆連接埠) cisco3750(config-if)#switchport trunk encapsulation dot1q(封裝) cisco3750(config-if)#switch mode trunk(改成trunk模式) 3560>en 3560#conf t 3560(config)#vtp domain cisco(要以前面一致) 3560(config)#vtp password 123(要以前面一致) 3560(config)#vtp mode client(改成客戶機模式)
3750G-1.240#show vtp stat VTP Version : 2 Configuration Revision : 4 Maximum VLANs supported locally : 1005 Number of existing VLANs : 8 VTP Operating Mode : Server VTP Domain Name : cisco VTP Pruning Mode : Disabled VTP V2 Mode : Disabled VTP Traps Generation : Disabled MD5 digest : 0x5D 0x64 0xFF 0xB1 0x87 0xF7 0x5B 0x0E Configuration last modified by 0.0.0.0 at 3-1-93 00:17:47 Local updater ID is 0.0.0.0 (no valid interface found) 3750G-1.240#show vtp password VTP Password: 123