Switch#vlan database % Warning: It is recommended to configure VLAN from config mode, as VLAN database mode is being deprecated. Please consult user documentation for configuring VTP/VLAN in config mode. Switch(vlan)# *Mar 1 00:29:54.407: %SYS-5-CONFIG_I: Configured from console by console Switch(vlan)#show VLAN ISL Id: 1 Name: default Media Type: Ethernet VLAN 802.10 Id: 100001 State: Operational MTU: 1500 Backup CRF Mode: Disabled Remote SPAN VLAN: No VLAN ISL Id: 2 Name: server Media Type: Ethernet VLAN 802.10 Id: 100002 State: Operational MTU: 1500 Backup CRF Mode: Disabled Remote SPAN VLAN: No VLAN ISL Id: 3 Name: office Media Type: Ethernet VLAN 802.10 Id: 100003 State: Operational MTU: 1500 Backup CRF Mode: Disabled Remote SPAN VLAN: No VLAN ISL Id: 1002 Name: fddi-default Media Type: FDDI VLAN 802.10 Id: 101002 State: Operational MTU: 1500 Backup CRF Mode: Disabled Remote SPAN VLAN: No VLAN ISL Id: 1003 Name: token-ring-default Media Type: Token Ring VLAN 802.10 Id: 101003 State: Operational MTU: 1500 Maximum ARE Hop Count: 7 Maximum STE Hop Count: 7 Backup CRF Mode: Disabled Remote SPAN VLAN: No VLAN ISL Id: 1004 Name: fddinet-default Media Type: FDDI Net VLAN 802.10 Id: 101004 State: Operational MTU: 1500 STP Type: IEEE Backup CRF Mode: Disabled Remote SPAN VLAN: No VLAN ISL Id: 1005 Name: trnet-default Media Type: Token Ring Net VLAN 802.10 Id: 101005 State: Operational MTU: 1500 STP Type: IBM Backup CRF Mode: Disabled Remote SPAN VLAN: No Switch(vlan)#
路由器配制
Router#configure terminal Router(config)#interface f0/0 Router(config-if)#no shutdown Router(config-if)#interface f0/0.1 --------------- 创建子接口1 Router(config-subif)#encapsulation dot1q 2 ------ 2为VLAN号 对应VLAN 2 Router(config-subif)#ip address 10.10.11.1 255.255.255.0 Router(config-if)#interface f0/0.2 ---------------- 创建子接口2 Router(config-subif)#encapsulation dot1q 3 ------- 3为VLAN号 对应VLAN 3 Router(config-subif)#ip address 10.10.10.1 255.255.255.0 路由器已经配制完毕,可以在Router#show run 看一下当前的配制,用Router#show interfaces 看当前端口的状态,f0/0.1 和f0/0.2两个子 接口是否为up状态。
交换机配制
Switch#vlan database Switch(vlan)#vlan 2 name 财务部 ------- 创建vlan 2为财务部 Switch(vlan)#vlan 3 name 市场部----------创建vlan 3为市场部 Switch(vlan)#exit Switch configure terminal Switch(coning)#interface range f0/2 - 9 Switch(coning-if)#switch port access vlan 2 ------- 将f0/-f0/9端口分到vlan 2中 Switch(config-if)#interface range f0/10 - 14 Switch(config-if)#switchport access vlan 3 --------将端f0/10至f0/14口3分到vlan 3中 Switch(config-if)#interface f0/1 Switch(config-if)#switchport trunk encapsulation dot1q ------将端口封装 Switch(config-if)#switchport mode trunk -------- 将端口配制为trunk模式
客户端配制:
WorKstation 1 配制为:10.10.11.3 255.255.255.0 网关:10.10.11.1 Workstation 2 配制为:10.10.10.3 255.255.255.0 网关:10.10.10.1
3560交换机VLAN间路由的具体设置
路由, VLAN, 交换机, 设置 在3560交换机上划三个VLAN,并且要求其中两个VLAN间能够互相访问,操作如下,请指点:
过程 12.1. Switch VLan 配置步骤
-
激活vlan路由
Switch1#config t Switch1(config)#ip routing
-
创建三个VLAN
Switch1# Switch1#vlan database Switch1(vlan)#vlan 2 Switch1(vlan)#vlan 3 Switch1(vlan)#vlan 10 Switch1(vlan)#exit
-
给VLAN分配IP
Switch1#config t Switch1(config)#config vlan2 Switch1(config-if)#ip address 192.168.2.1 255.255.255.0 Switch1(config-if)#no shutdown Switch1#config t Switch1(config)#config vlan3 Switch1(config-if)#ip address 192.168.3.1 255.255.255.0 Switch1(config-if)#no shutdown
-
配VTP
Switch1# Switch1#config t Switch1(config)#vtp domain SMG Switch1(config)#vtp mode server Switch1(config)#end
-
交换机通往路由器的接口配IP
Switch1# Switch1#config t Switch1(config)#interface fastethernet0/1 Switch1(config-if)#no switchport Switch1(config-if)#ip address 200.1.1.1 255.255.255.0 Switch1(config-if)#no shutdown
-
交换机配置缺省路由
Switch1# Switch1#config t Switch(config)#ip route 0.0.0.0 0.0.0.0 200.1.1.2
-
把VLAN号分配给IP接口
Switch1# Switch1#config t Switch1(config)#interface fastethernet0/2 Switch1(config-if)#switchport mode access Switch1(config-if)#switchport access vlan2 Switch1(config-if)#spanning-tree portfast … … Switch1# Switch1#config t Switch1(config)#interface fastethernet0/13 Switch1(config-if)#switchport mode access Switch1(config-if)#switchport access vlan3 Switch1(config-if)#spanning-tree portfast
-
配访问控制列表ACL禁VLAN3子网的客户机访问服务器
Switch1# Switch1#config t Switch1(config)#access-list 1 deny 192.168.3.0 0.0.0.255 Switch1(config)#access-list 1 permit any Switch1(config)#interface fastethernet0/13 (此接口接服务器) Switch1(config-if)#ip access-group 1 out
-
检查上述配置
Switch1#show vlan Switch1#show ip route Switch1#show interface gigabitethernet0/1 switchport Switch1#show run Switch1#show vtp status
-
存配置
Switch1#copy running-config startup-config
VLAN Trunking Protocol(VLAN 中继协议)
Server
Switch# config terminal Switch(config)# vtp mode server Switch(config)# vtp domain cisco Switch(config)# vtp password mypassword Switch(config)# end
Switch# vlan database Switch(vlan)# vtp server Switch(vlan)# vtp domain cisco Switch(vlan)# vtp password mypassword Switch(vlan)# exit APPLY completed. Exiting.... Switch#
2960#conf t 2960(config)#int f0/15 2960(config-if)#switchport mode trunk 2960(config-if)#end 2960#vlan database 2960(vlan)#vtp client 2960(vlan)#vtp domain eng_group 2960(vlan)#vtp password mypassword 2960(vlan)#exit
cisco3750>en cisco3750#conf t cisco3750(config)#vtp domain cisco(创建域名) cisco3750(config)#vtp password 123(设置密码) cisco3750(config)#vtp mode server(改成服务器模式) cisco3750(config-if)#int g0/0(进入千兆端口) cisco3750(config-if)#switchport trunk encapsulation dot1q(封装) cisco3750(config-if)#switch mode trunk(改成trunk模式) 3560>en 3560#conf t 3560(config)#vtp domain cisco(要以前面一致) 3560(config)#vtp password 123(要以前面一致) 3560(config)#vtp mode client(改成客户机模式)
3750G-1.240#show vtp stat VTP Version : 2 Configuration Revision : 4 Maximum VLANs supported locally : 1005 Number of existing VLANs : 8 VTP Operating Mode : Server VTP Domain Name : cisco VTP Pruning Mode : Disabled VTP V2 Mode : Disabled VTP Traps Generation : Disabled MD5 digest : 0x5D 0x64 0xFF 0xB1 0x87 0xF7 0x5B 0x0E Configuration last modified by 0.0.0.0 at 3-1-93 00:17:47 Local updater ID is 0.0.0.0 (no valid interface found) 3750G-1.240#show vtp password VTP Password: 123
原文出处:Netkiller 系列 手札
本文作者:陈景峯
转载请与作者联系,同时请务必标明文章原始出处和作者信息及本声明。