虚拟局域网(VLAN)路由设置

发布时间:2016-11-23 00:00:00 编辑:嘉辉 手机版

  虚拟网络技术打破了地理环境的制约,在不改动网络物理连接的情况下可以任意将工作站在工作组或子网之间移动,工作站组成逻辑工作组或虚拟子网,提高信息系统的运作性能,均衡网络数据流量,合理利用硬件及信息资源。下面小编准备了关于虚拟局域网(VLAN)路由设置的文章,欢迎大家参考!

  一、虚拟局域网(VLAN)

  当前在我们构造企业网络时所采用的主干网络技术一般都是基于交换和虚拟网络的。交换技术将共享介质改为独占介质,大大提高网络速度。虚拟网络技术打破了地理环境的制约,在不改动网络物理连接的情况下可以任意将工作站在工作组或子网之间移动,工作站组成逻辑工作组或虚拟子网,提高信息系统的运作性能,均衡网络数据流量,合理利用硬件及信息资源。同时,利用虚拟网络技术,大大减轻了网络管理和维护工作的负担,降低网络维护费用。随着虚拟网络技术的应用,随之必然产生了在虚拟网间如何通讯的问题.

  二、交换机间链路(ISL)协议

  ISL(Interior Switching Link)协议用于实现交换机间的VLAN中继。它是一个信息包标记协议,在支持ISL接口上发送的帧由一个标准以太网帧及相关的VLAN信息组成。如下图所示,在支持ISL的接口上可以传送来自不同VLAN的数据。

  三、虚拟局域网(VLAN)路由实例

  3.1. 例一:

  设备选用Catalyst5500交换机1台,安装WS-X5530-E3管理引擎,多块WS-X5225R及WS-X5302路由交换模块,WS-X5302被直接插入交换机,通过二个通道与系统背板上的VLAN 相连,从用户角度看认为它是1个1接口的模块,此接口支持ISL。在交换机内划有3个虚拟网,分别名为default、qbw、rgw,通过WS-X5302实现虚拟网间路由。

  以下加重下横线部分,如set system name 5500C为需设置的命令。

  设置如下:

  Catalyst 5500配置:

  begin

  set password $1$FMFQ$HfZR5DUszVHIRhrz4h6V70

  set enablepass $1$FMFQ$HfZR5DUszVHIRhrz4h6V70

  set prompt Console>

  set length 24 default

  set logout 20

  set banner motd ^C^C

  !

  #system

  set system baud 9600

  set system modem disable

  set system name 5500C

  set system location

  set system contact

  !

  #ip

  set interface sc0 1 10.230.4.240 255.255.255.0 10.230.4.255

  set interface sc0 up

  set interface sl0 0.0.0.0 0.0.0.0

  set interface sl0 up

  set arp agingtime 1200

  set ip redirect enable

  set ip unreachable enable

  set ip fragmentation enable

  set ip route 0.0.0.0 10.230.4.15 1

  set ip alias default 0.0.0.0

  !

  #Command alias

  !

  #vtp

  set vtp domain hne

  set vtp mode server

  set vtp v2 disable

  set vtp pruning disable

  set vtp pruneeligible 2-1000

  clear vtp pruneeligible 1001-1005

  set vlan 1 name default type ethernet mtu 1500 said 100001 state active

  set vlan 777 name rgw type ethernet mtu 1500 said 100777 state active

  set vlan 888 name qbw type ethernet mtu 1500 said 100888 state active

  set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active

  set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state active bridge 0x0 stp ieee

  set vlan 1005 name trnet-default type trbrf mtu 1500 said 101005 state active bridge 0x0 stp ibm

  set vlan 1003 name token-ring-default type trcrf mtu 1500 said 101003 state active parent 0 ring 0x0 mode srb aremaxhop 7 stemaxhop 7

  !

  #set boot command

  set boot config-register 0x102

  set boot system flash bootflash:cat5000-sup3.4-3-1a.bin

  !

  #module 1 : 2-port 1000BaseLX Supervisor

  set module name 1

  set vlan 1 1/1-2

  set port enable 1/1-2

  !

  #module 2 : empty

  !

  #module 3 : 24-port 10/100BaseTX Ethernet

  set module name 3

  set module enable 3

  set vlan 1 3/1-22

  set vlan 777 3/23

  set vlan 888 3/24

  set trunk 3/1 on isl 1-1005

  #module 4 empty

  !

  #module 5 empty

  !

  #module 6 : 1-port Route Switch

  set module name 6

  set port level 6/1 normal

  set port trap 6/1 disable

  set port name 6/1

  set cdp enable 6/1

  set cdp interval 6/1 60

  set trunk 6/1 on isl 1-1005

  !

  #module 7 : 24-port 10/100BaseTX Ethernet

  set module name 7

  set module enable 7

  set vlan 1 7/1-22

  set vlan 888 7/23-24

  set trunk 7/1 on isl 1-1005

  set trunk 7/2 on isl 1-1005

  !

  #module 8 empty

  !

  #module 9 empty

  !

  #module 10 : 12-port 100BaseFX MM Ethernet

  set module name 10

  set module enable 10

  set vlan 1 10/1-12

  set port channel 10/1-4 off

  set port channel 10/5-8 off

  set port channel 10/9-12 off

  set port channel 10/1-2 on

  set port channel 10/3-4 on

  set port channel 10/5-6 on

  set port channel 10/7-8 on

  set port channel 10/9-10 on

  set port channel 10/11-12 on

  #module 11 empty

  !

  #module 12 empty

  !

  #module 13 empty

  !

  #switch port analyzer

  !set span 1 1/1 both inpkts disable

  set span disable

  !

  #cam

  set cam agingtime 1-2,777,888,1003,1005 300

  end

  5500C> (enable)

  WS-X5302路由模块设置:

  Router#wri t

  Building configuration...

  Current configuration:

  !

  version 11.2

  no service password-encryption

  no service udp-small-servers

  no service tcp-small-servers

  !

  hostname Router

  !

  enable secret 5 $1$w1kK$AJK69fGOD7BqKhKcSNBf6.

  !

  ip subnet-zero

  !

  interface Vlan1

  ip address 10.230.2.56 255.255.255.0

  !

  interface Vlan777

  ip address 10.230.3.56 255.255.255.0

  !

  interface Vlan888

  ip address 10.230.4.56 255.255.255.0

  !

  no ip classless

  !

  line con 0

  line aux 0

  line vty 0 4

  password router

  login

  !

  end

  Router#

  3.1. 例二:

  交换设备仍选用Catalyst5500交换机1台,安装WS-X5530-E3管理引擎,多块WS-X5225R在交换机内划有3个虚拟网,分别名为default、qbw、rgw,通过Cisco3640路由器实现虚拟网间路由。交换机设置与例一类似。

  路由器Cisco3640,配有一块NM-1FE-TX模块,此模块带有一个快速以太网接口可以支持ISL。Cisco3640快速以太网接口与交换机上的某一支持ISL的端口实现连接,如交换机第3槽第1个接口(3/1口)。

  Router#wri t

  Building configuration...

  Current configuration:

  !

  version 11.2

  no service password-encryption

  no service udp-small-servers

  no service tcp-small-servers

  !

  hostname Router

  !

  enable secret 5 $1$w1kK$AJK69fGOD7BqKhKcSNBf6.

  !

  ip subnet-zero

  !

  interface FastEthernet1/0

  !

  interface FastEthernet1/0.1

  encapsulation isl 1

  ip address 10.230.2.56 255.255.255.0

  !

  interface FastEthernet1/0.2

  encapsulation isl 777

  ip address 10.230.3.56 255.255.255.0

  !

  interface FastEthernet1/0.3

  encapsulation isl 888

  ip address 10.230.4.56 255.255.255.0

  !

  no ip classless

  !

  line con 0

  line aux 0

  line vty 0 4

  password router

  login

  !

  end

本文已影响865
+1
0