VLAN的配置实例

基于端口的vlan划分

以下配置为例: 注意选择copper线,可以任意选择端口

VLAN的配置实例_第1张图片

 PC配置如下:

VLAN的配置实例_第2张图片

LSW1配置如下 

[LSW1]vlan 10
[LSW1-vlan10]qu
[LSW1]interface g0/0/9
[LSW1-Gigabitethernet0/0/9] port link-type acces
[LSW1-Gigabitethernet0/0/9] port default vlan 10
[LSW1-Gigabitethernet0/0/9] qu
#显示g0/0/9的信息
[LSW1]display interface g0/0/9
GigabitEthernet0/0/9 current state : UP
Line protocol current state : UP
Description:
Switch Port, PVID :   10, TPID : 8100(Hex), The Maximum Frame Length is 9216
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 4c1f-cc6c-2c40
Last physical up time   : 2023-09-16 10:15:22 UTC-08:00
Last physical down time : 2023-09-16 10:15:21 UTC-08:00
Current system time: 2023-09-16 10:18:04-08:00
Hardware address is 4c1f-cc6c-2c40
    Last 300 seconds input rate 0 bytes/sec, 0 packets/sec
    Last 300 seconds output rate 0 bytes/sec, 0 packets/sec
    Input: 0 bytes, 0 packets
    Output: 92582 bytes, 778 packets
    Input:
      Unicast: 0 packets, Multicast: 0 packets
      Broadcast: 0 packets
    Output:
      Unicast: 0 packets, Multicast: 778 packets
      Broadcast: 0 packets
    Input bandwidth utilization  :    0%
    Output bandwidth utilization :    0%
#显示g0/0/9的vlan信息
[LSW1]display port vlan g0/0/9
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/9    access       10    -                                   
#其他端口同理
[LSW1]interface g0/0/10
[LSW1-GigabitEthernet0/0/10]port link-type access
[LSW1-GigabitEthernet0/0/10]port default vlan 10
[LSW1-GigabitEthernet0/0/10]qu
[LSW1]display interface g0/0/10
GigabitEthernet0/0/10 current state : DOWN
Line protocol current state : DOWN
Description:
Switch Port, PVID :   10, TPID : 8100(Hex), The Maximum Frame Length is 9216
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 4c1f-cc6c-2c40
Last physical up time   : -
Last physical down time : 2023-09-14 18:37:01 UTC-08:00
Current system time: 2023-09-16 10:01:30-08:00
Hardware address is 4c1f-cc6c-2c40
    Last 300 seconds input rate 0 bytes/sec, 0 packets/sec
    Last 300 seconds output rate 0 bytes/sec, 0 packets/sec
    Input: 0 bytes, 0 packets
    Output: 0 bytes, 0 packets
    Input:
      Unicast: 0 packets, Multicast: 0 packets
      Broadcast: 0 packets
    Output:
      Unicast: 0 packets, Multicast: 0 packets
      Broadcast: 0 packets
    Input bandwidth utilization  :    0%
    Output bandwidth utilization :    0%

[LSW1]display port vlan g0/0/10
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/10   access       10    -                                   

[LSW1]interface g0/0/11
[LSW1-GigabitEthernet0/0/11]port link-type access
[LSW1-GigabitEthernet0/0/11]port default vlan 10
[LSW1-GigabitEthernet0/0/11]qu
[LSW1]display interface g0/0/11
GigabitEthernet0/0/11 current state : DOWN
Line protocol current state : DOWN
Description:
Switch Port, PVID :   10, TPID : 8100(Hex), The Maximum Frame Length is 9216
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 4c1f-cc6c-2c40
Last physical up time   : -
Last physical down time : 2023-09-14 18:37:01 UTC-08:00
Current system time: 2023-09-16 10:04:08-08:00
Hardware address is 4c1f-cc6c-2c40
    Last 300 seconds input rate 0 bytes/sec, 0 packets/sec
    Last 300 seconds output rate 0 bytes/sec, 0 packets/sec
    Input: 0 bytes, 0 packets
    Output: 0 bytes, 0 packets
    Input:
      Unicast: 0 packets, Multicast: 0 packets
      Broadcast: 0 packets
    Output:
      Unicast: 0 packets, Multicast: 0 packets
      Broadcast: 0 packets
    Input bandwidth utilization  :    0%
    Output bandwidth utilization :    0%

[LSW1]display port vlan g0/0/11
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/11   access       10    -                                   
[LSW1]interface g0/0/12
[LSW1-GigabitEthernet0/0/12]port link-type access
[LSW1-GigabitEthernet0/0/12]port default vlan 10
[LSW1-GigabitEthernet0/0/12]qu
[LSW1]display interface g0/0/12
GigabitEthernet0/0/12 current state : UP
Line protocol current state : UP
Description:
Switch Port, PVID :   10, TPID : 8100(Hex), The Maximum Frame Length is 9216
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 4c1f-cc6c-2c40
Last physical up time   : 2023-09-16 10:01:17 UTC-08:00
Last physical down time : 2023-09-16 10:01:16 UTC-08:00
Current system time: 2023-09-16 10:05:01-08:00
Hardware address is 4c1f-cc6c-2c40
    Last 300 seconds input rate 0 bytes/sec, 0 packets/sec
    Last 300 seconds output rate 0 bytes/sec, 0 packets/sec
    Input: 0 bytes, 0 packets
    Output: 48909 bytes, 411 packets
    Input:
      Unicast: 0 packets, Multicast: 0 packets
      Broadcast: 0 packets
    Output:
      Unicast: 0 packets, Multicast: 411 packets
      Broadcast: 0 packets
    Input bandwidth utilization  :    0%
    Output bandwidth utilization :    0%

[LSW1]display port vlan g0/0/12
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/12   access       10    -                                   
[LSW1]display vlan 10
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
10   common  UT:GE0/0/1(D)      GE0/0/9(U)      GE0/0/10(D)     GE0/0/11(D)     
                GE0/0/12(U)                                                     

VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------
10   enable  default       enable  disable    VLAN 0010    
#创建vlan30                     
[LSW1]vlan 30
[LSW1-vlan30]qu
[LSW1]port-group pvlan30
#上面的操作重复繁琐,容易出错,这里可以对多个端口进行统一配置
[LSW1-port-group-pvlan30]group-member g0/0/13 to g0/0/16
[LSW1-port-group-pvlan30]display port-group
pvlan30
[LSW1-port-group-pvlan30]display port-group pvlan30
Portgroup: pvlan30
GigabitEthernet0/0/13
GigabitEthernet0/0/14
GigabitEthernet0/0/15
GigabitEthernet0/0/16
[LSW1-port-group-pvlan30]port link-type access
[LSW1-GigabitEthernet0/0/13]port link-type access
[LSW1-GigabitEthernet0/0/14]port link-type access
[LSW1-GigabitEthernet0/0/15]port link-type access
[LSW1-GigabitEthernet0/0/16]port link-type access
[LSW1-port-group-pvlan30]port default vlan 30
[LSW1-GigabitEthernet0/0/13]port default vlan 30
[LSW1-GigabitEthernet0/0/14]port default vlan 30
[LSW1-GigabitEthernet0/0/15]port default vlan 30
[LSW1-GigabitEthernet0/0/16]port default vlan 30
[LSW1-port-group-pvlan30]qu
[LSW1]display vlan 30
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
30   common  UT:GE0/0/13(U)     GE0/0/14(D)     GE0/0/15(D)     GE0/0/16(U)     

VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------
30   enable  default       enable  disable    VLAN 0030                         
[LSW1]display port vlan
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/1    access       10    -                                   
GigabitEthernet0/0/2    hybrid       1     -                                   
GigabitEthernet0/0/3    hybrid       1     -                                   
GigabitEthernet0/0/4    hybrid       1     -                                   
GigabitEthernet0/0/5    hybrid       1     -                                   
GigabitEthernet0/0/6    hybrid       1     -                                   
GigabitEthernet0/0/7    hybrid       1     -                                   
GigabitEthernet0/0/8    hybrid       1     -                                   
GigabitEthernet0/0/9    access       10    -                                   
GigabitEthernet0/0/10   access       10    -                                   
GigabitEthernet0/0/11   access       10    -                                   
GigabitEthernet0/0/12   access       10    -                                   
GigabitEthernet0/0/13   access       30    -                                   
GigabitEthernet0/0/14   access       30    -                                   
GigabitEthernet0/0/15   access       30    -                                   
GigabitEthernet0/0/16   access       30    -                                   
GigabitEthernet0/0/17   hybrid       1     -                                   
GigabitEthernet0/0/18   hybrid       1     -                                   
GigabitEthernet0/0/19   hybrid       1     -                                   
GigabitEthernet0/0/20   hybrid       1     -                                   
GigabitEthernet0/0/21   hybrid       1     -                                   
GigabitEthernet0/0/22   hybrid       1     -                                   
GigabitEthernet0/0/23   hybrid       1     -                                   
GigabitEthernet0/0/24   hybrid       1     -                                   

 统一创建vlan的命令

#批量创建2....100

vlan batch 2 to 100  

 华为端口恢复默认配置的命令

VLAN的配置实例_第3张图片

撤销操作或命令直接在命令前面加 undo 

不同的vlan之间逻辑上是隔离的,不能相互通信

从以下信息可以看出,PC1可以与PC2进行通信,但是PC1不能与PC3,PC4相互通信

PC>ping 192.168.10.12

Ping 192.168.10.12: 32 data bytes, Press Ctrl_C to break
From 192.168.10.12: bytes=32 seq=1 ttl=128 time=32 ms
From 192.168.10.12: bytes=32 seq=2 ttl=128 time=47 ms
From 192.168.10.12: bytes=32 seq=3 ttl=128 time=63 ms
From 192.168.10.12: bytes=32 seq=4 ttl=128 time=46 ms
From 192.168.10.12: bytes=32 seq=5 ttl=128 time=47 ms

--- 192.168.10.12 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 32/47/63 ms

PC>ping 192.168.30.11

Ping 192.168.30.11: 32 data bytes, Press Ctrl_C to break
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable

--- 192.168.10.254 ping statistics ---
  5 packet(s) transmitted
  0 packet(s) received
  100.00% packet loss

PC>ping 192.168.30.12

Ping 192.168.30.12: 32 data bytes, Press Ctrl_C to break
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable

--- 192.168.10.254 ping statistics ---
  5 packet(s) transmitted
  0 packet(s) received
  100.00% packet loss

PC>

 

基于mac地址的VLAN划分

PC-BOOK的mac地址如下

PC-BOOK-10-1:54-89-98-9F-25-B6

PC-BOOK-30-1:54-89-98-88-74-CD

[LSW1]vlan 10
[LSW1-vlan10]qu
[LSW1]vlan 30
[LSW1-vlan30]qu
[LSW1]port-group pvlan10
[LSW1-port-group-pvlan10]group-member g0/0/9 to g0/0/12
[LSW1-port-group-pvlan10]display port-group pvlan10
Portgroup: pvlan10
GigabitEthernet0/0/9
GigabitEthernet0/0/10
GigabitEthernet0/0/11
GigabitEthernet0/0/12
[LSW1-port-group-pvlan10]qu
[LSW1]port-group pvlan30
[LSW1-port-group-pvlan30]group-member g0/0/13 to g0/0/16
[LSW1-port-group-pvlan30]display port-group pvlan30
Portgroup: pvlan30
GigabitEthernet0/0/13
GigabitEthernet0/0/14
GigabitEthernet0/0/15
GigabitEthernet0/0/16
[LSW1-port-group-pvlan30]port link-type access
[LSW1-GigabitEthernet0/0/13]port link-type access
[LSW1-GigabitEthernet0/0/14]port link-type access
[LSW1-GigabitEthernet0/0/15]port link-type access
[LSW1-GigabitEthernet0/0/16]port link-type access
[LSW1-port-group-pvlan30]port default vlan 30
[LSW1-GigabitEthernet0/0/13]port default vlan 30
[LSW1-GigabitEthernet0/0/14]port default vlan 30
[LSW1-GigabitEthernet0/0/15]port default vlan 30
[LSW1-GigabitEthernet0/0/16]port default vlan 30
[LSW1-port-group-pvlan30]qu
[LSW1]port-group pvlan10
[LSW1-port-group-pvlan10]port link-type access
[LSW1-GigabitEthernet0/0/9]port link-type access
[LSW1-GigabitEthernet0/0/10]port link-type access
[LSW1-GigabitEthernet0/0/11]port link-type access
[LSW1-GigabitEthernet0/0/12]port link-type access
[LSW1-port-group-pvlan10]port default vlan 10
[LSW1-GigabitEthernet0/0/9]port default vlan 10
[LSW1-GigabitEthernet0/0/10]port default vlan 10
[LSW1-GigabitEthernet0/0/11]port default vlan 10
[LSW1-GigabitEthernet0/0/12]port default vlan 10
[LSW1-port-group-pvlan10]
[LSW1-port-group-pvlan10]display vlan
The total number of vlans is : 3
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
1    common  UT:GE0/0/1(D)      GE0/0/2(D)      GE0/0/3(D)      GE0/0/4(U)      
                GE0/0/5(U)      GE0/0/6(D)      GE0/0/7(D)      GE0/0/8(D)      
                GE0/0/17(D)     GE0/0/18(D)     GE0/0/19(D)     GE0/0/20(D)     
                GE0/0/21(D)     GE0/0/22(D)     GE0/0/23(D)     GE0/0/24(D)     

10   common  UT:GE0/0/9(U)      GE0/0/10(D)     GE0/0/11(D)     GE0/0/12(U)     

30   common  UT:GE0/0/13(U)     GE0/0/14(D)     GE0/0/15(D)     GE0/0/16(U)     


VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------

1    enable  default       enable  disable    VLAN 0001                         
10   enable  default       enable  disable    VLAN 0010                         
30   enable  default       enable  disable    VLAN 0030 

[LSW1-port-group-pvlan10]qu
[LSW1]vlan 10
[LSW1-vlan10]mac-vlan mac-address 5489-989F-25B6 priority 0
[LSW1]vlan 30
[LSW1-vlan30]mac-vlan mac-address 5489-9888-74cd priority 0
[LSW1-vlan30]int g0/0/4
[LSW1-GigabitEthernet0/0/4]port link-type hybrid
[LSW1-GigabitEthernet0/0/4]port hybrid untagged vlan 10 30
[LSW1-GigabitEthernet0/0/4]mac-vlan enable
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1-GigabitEthernet0/0/4]qu
[LSW1]int g0/0/5
[LSW1-GigabitEthernet0/0/5]port link-type hybrid
[LSW1-GigabitEthernet0/0/5]port hybrid untagged vlan 10 30
[LSW1-GigabitEthernet0/0/5]mac-vlan enable
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1-GigabitEthernet0/0/5]qu
[LSW1]display mac-vlan mac-address all
---------------------------------------------------
MAC Address     MASK            VLAN    Priority   
---------------------------------------------------
5489-989f-25b6  ffff-ffff-ffff  10      0          
5489-9888-74cd  ffff-ffff-ffff  30      0          

Total MAC VLAN address count: 2 

[LSW1]display mac-vlan vlan 10
---------------------------------------------------
MAC Address     MASK            VLAN    Priority   
---------------------------------------------------
5489-989f-25b6  ffff-ffff-ffff  10      0          

Total MAC VLAN address count: 1 

[LSW1]display mac-vlan vlan 30
---------------------------------------------------
MAC Address     MASK            VLAN    Priority   
---------------------------------------------------
5489-9888-74cd  ffff-ffff-ffff  30      0          

Total MAC VLAN address count: 1 

至此,PC-BOOK-10-1加入vlan 10,PC-BOOK-30-1加入vlan30

将 PC-BOOK-10-1和PC-BOOK-30-1所连接的交换机端口互换,依旧可以与同一个vlan中的计算机通信

VLAN的配置实例_第4张图片

PC>ping 192.168.30.11

Ping 192.168.30.11: 32 data bytes, Press Ctrl_C to break
From 192.168.30.11: bytes=32 seq=1 ttl=128 time=63 ms
From 192.168.30.11: bytes=32 seq=2 ttl=128 time=47 ms
From 192.168.30.11: bytes=32 seq=3 ttl=128 time=47 ms
From 192.168.30.11: bytes=32 seq=4 ttl=128 time=47 ms
From 192.168.30.11: bytes=32 seq=5 ttl=128 time=47 ms

--- 192.168.30.11 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 47/50/63 ms

 

基于IP地址的vlan划分

在原有的基础上扩展

PC-1030-1:IPV4地址 192.168.30.18        子网掩码:255.255.255.0

VLAN的配置实例_第5张图片

LSW1上的配置  

[LSW1]display vlan
The total number of vlans is : 3
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
1    common  UT:GE0/0/1(D)      GE0/0/2(D)      GE0/0/3(D)      GE0/0/4(U)      
                GE0/0/5(U)      GE0/0/6(D)      GE0/0/7(D)      GE0/0/8(U)      
                GE0/0/17(D)     GE0/0/18(D)     GE0/0/19(D)     GE0/0/20(D)     
                GE0/0/21(D)     GE0/0/22(D)     GE0/0/23(D)     GE0/0/24(D)     

10   common  UT:GE0/0/4(U)      GE0/0/5(U)      GE0/0/9(U)      GE0/0/10(D)     

                GE0/0/11(D)     GE0/0/12(U)                                     

30   common  UT:GE0/0/4(U)      GE0/0/5(U)      GE0/0/13(U)     GE0/0/14(D)     

                GE0/0/15(D)     GE0/0/16(U)                                     


VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------

1    enable  default       enable  disable    VLAN 0001                         
10   enable  default       enable  disable    VLAN 0010                         
30   enable  default       enable  disable    VLAN 0030                         
[LSW1]vlan 10
#按ip地址划分vlan
[LSW1-vlan10]ip-subnet-vlan 2 ip 192.168.10.0 24 priority 1
#2为子网索引,取值范围为1~12,一个vlan最多可以绑定12个子网
#192.168.10.0为子网地址,24为前缀长度,也可以采用子网掩码
#priority为优先级,取值范围为0~7,值越大优先级越高,默认值为0
[LSW1-vlan10]qu
[LSW1]vlan 30
[LSW1-vlan30]ip-subnet-vlan 1 ip 192.168.30.0 24 priority 1
[LSW1-vlan30]qu
[LSW1]interface g 0/0/8
#配置为hybrid,并使其在发送vlan 10和vlan 30的帧时剥除vlan tag
[LSW1-GigabitEthernet0/0/8]port link-type hybrid
[LSW1-GigabitEthernet0/0/8]port hybrid untagged vlan 10 30
[LSW1-GigabitEthernet0/0/8]ip-subnet-vlan enable
[LSW1-GigabitEthernet0/0/8]qu
[LSW1]display ip-subnet-vlan vlan all
 ----------------------------------------------------------------
 Vlan    Index   IpAddress           SubnetMask          Priority    
 ----------------------------------------------------------------
 10      2       192.168.10.0        255.255.255.0       1 
 30      1       192.168.30.0        255.255.255.0       1 
 ----------------------------------------------------------------
 ip-subnet-vlan count: 2  		 total count: 2 

[LSW1]display ip-subnet-vlan vlan 10
 ----------------------------------------------------------------
 Vlan    Index   IpAddress           SubnetMask          Priority    
 ----------------------------------------------------------------
 10      2       192.168.10.0        255.255.255.0       1 
 ----------------------------------------------------------------
 ip-subnet-vlan count: 1  		 total count: 2 

[LSW1]display ip-subnet-vlan vlan 30
 ----------------------------------------------------------------
 Vlan    Index   IpAddress           SubnetMask          Priority    
 ----------------------------------------------------------------
 30      1       192.168.30.0        255.255.255.0       1 
 ----------------------------------------------------------------
 ip-subnet-vlan count: 1  		 total count: 2 

 至此这台PC加入了vlan10和vlan30

[LSW1]display vlan
The total number of vlans is : 3
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
1    common  UT:GE0/0/1(D)      GE0/0/2(D)      GE0/0/3(D)      GE0/0/4(U)      
                GE0/0/5(U)      GE0/0/6(D)      GE0/0/7(D)      GE0/0/8(U)      
                GE0/0/17(D)     GE0/0/18(D)     GE0/0/19(D)     GE0/0/20(D)     
                GE0/0/21(D)     GE0/0/22(D)     GE0/0/23(D)     GE0/0/24(D)     

10   common  UT:GE0/0/4(U)      GE0/0/5(U)      GE0/0/8(U)      GE0/0/9(U)      
                GE0/0/10(D)     GE0/0/11(D)     GE0/0/12(U)                     

30   common  UT:GE0/0/4(U)      GE0/0/5(U)      GE0/0/8(U)      GE0/0/13(U)     

                GE0/0/14(D)     GE0/0/15(D)     GE0/0/16(U)                     


VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------

1    enable  default       enable  disable    VLAN 0001                         
10   enable  default       enable  disable    VLAN 0010                         
30   enable  default       enable  disable    VLAN 0030                         
[LSW1]

#切换到地址192.168.10.18后,能ping 192.168.10.11
PC>ping 192.168.10.11

Ping 192.168.10.11: 32 data bytes, Press Ctrl_C to break
From 192.168.10.11: bytes=32 seq=1 ttl=128 time=47 ms
From 192.168.10.11: bytes=32 seq=2 ttl=128 time=62 ms
From 192.168.10.11: bytes=32 seq=3 ttl=128 time=47 ms
From 192.168.10.11: bytes=32 seq=4 ttl=128 time=62 ms
From 192.168.10.11: bytes=32 seq=5 ttl=128 time=63 ms

--- 192.168.10.11 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 47/56/63 ms

#切换到192.168.30.18后,能ping 192.168.30.11
PC>ping 192.168.30.11

Ping 192.168.30.11: 32 data bytes, Press Ctrl_C to break
From 192.168.30.11: bytes=32 seq=1 ttl=128 time=62 ms
From 192.168.30.11: bytes=32 seq=2 ttl=128 time=47 ms
From 192.168.30.11: bytes=32 seq=3 ttl=128 time=47 ms
From 192.168.30.11: bytes=32 seq=4 ttl=128 time=47 ms
From 192.168.30.11: bytes=32 seq=5 ttl=128 time=31 ms

--- 192.168.30.11 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 31/46/62 ms

 

跨以太网交换机的vlan扩展

VLAN的配置实例_第6张图片

 PC配置如下

VLAN的配置实例_第7张图片

LSW1的配置

sys
Enter system view, return user view with Ctrl+Z.
[LSW1]vlan batch 10 30
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1]port-group pvlan10
[LSW1-port-group-pvlan10]group-member g0/0/9 to g0/0/12
[LSW1-port-group-pvlan10]port link-type access
[LSW1-GigabitEthernet0/0/9]port link-type access
[LSW1-GigabitEthernet0/0/10]port link-type access
[LSW1-GigabitEthernet0/0/11]port link-type access
[LSW1-GigabitEthernet0/0/12]port link-type access
[LSW1-port-group-pvlan10]port default vlan 10
[LSW1-GigabitEthernet0/0/9]port default vlan 10
[LSW1-GigabitEthernet0/0/10]port default vlan 10
[LSW1-GigabitEthernet0/0/11]port default vlan 10
[LSW1-GigabitEthernet0/0/12]port default vlan 10
[LSW1-port-group-pvlan10]qu
[LSW1]port-group pvlan30
[LSW1-port-group-pvlan30]group-member g0/0/13 to g0/0/16
[LSW1-port-group-pvlan30]port link-type access
[LSW1-GigabitEthernet0/0/13]port link-type access
[LSW1-GigabitEthernet0/0/14]port link-type access
[LSW1-GigabitEthernet0/0/15]port link-type access
[LSW1-GigabitEthernet0/0/16]port link-type access
[LSW1-port-group-pvlan30]port default vlan 30
[LSW1-GigabitEthernet0/0/13]port default vlan 30
[LSW1-GigabitEthernet0/0/14]port default vlan 30
[LSW1-GigabitEthernet0/0/15]port default vlan 30
[LSW1-GigabitEthernet0/0/16]port default vlan 30
[LSW1-port-group-pvlan30]qu
[LSW1]interface g0/0/24
[LSW1-GigabitEthernet0/0/24]port link-type trunk
[LSW1-GigabitEthernet0/0/24]port trunk allow-pass vlan 10 30
[LSW1-GigabitEthernet0/0/24]qu
[LSW1]display vlan 
The total number of vlans is : 3
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
1    common  UT:GE0/0/1(D)      GE0/0/2(D)      GE0/0/3(D)      GE0/0/4(D)      
                GE0/0/5(D)      GE0/0/6(D)      GE0/0/7(D)      GE0/0/8(D)      
                GE0/0/17(D)     GE0/0/18(D)     GE0/0/19(D)     GE0/0/20(D)     
                GE0/0/21(D)     GE0/0/22(D)     GE0/0/23(D)     GE0/0/24(U)     

10   common  UT:GE0/0/4(D)      GE0/0/5(D)      GE0/0/8(D)      GE0/0/9(U)      
                GE0/0/10(D)     GE0/0/11(D)     GE0/0/12(U)                     
             TG:GE0/0/24(U)                                                     

30   common  UT:GE0/0/4(D)      GE0/0/5(D)      GE0/0/8(D)      GE0/0/13(U)     

                GE0/0/14(D)     GE0/0/15(D)     GE0/0/16(U)                     
             TG:GE0/0/24(U)                                                     


VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------

1    enable  default       enable  disable    VLAN 0001                         
10   enable  default       enable  disable    VLAN 0010                         
30   enable  default       enable  disable    VLAN 0030                         
[LSW1]display port vlan
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/1    hybrid       1     -                                   
GigabitEthernet0/0/2    hybrid       1     -                                   
GigabitEthernet0/0/3    hybrid       1     -                                   
GigabitEthernet0/0/4    hybrid       1     -                                   
GigabitEthernet0/0/5    hybrid       1     -                                   
GigabitEthernet0/0/6    hybrid       1     -                                   
GigabitEthernet0/0/7    hybrid       1     -                                   
GigabitEthernet0/0/8    hybrid       1     -                                   
GigabitEthernet0/0/9    access       10    -                                   
GigabitEthernet0/0/10   access       10    -                                   
GigabitEthernet0/0/11   access       10    -                                   
GigabitEthernet0/0/12   access       10    -                                   
GigabitEthernet0/0/13   access       30    -                                   
GigabitEthernet0/0/14   access       30    -                                   
GigabitEthernet0/0/15   access       30    -                                   
GigabitEthernet0/0/16   access       30    -                                   
GigabitEthernet0/0/17   hybrid       1     -                                   
GigabitEthernet0/0/18   hybrid       1     -                                   
GigabitEthernet0/0/19   hybrid       1     -                                   
GigabitEthernet0/0/20   hybrid       1     -                                   
GigabitEthernet0/0/21   hybrid       1     -                                   
GigabitEthernet0/0/22   hybrid       1     -                                   
GigabitEthernet0/0/23   hybrid       1     -                                   
GigabitEthernet0/0/24   trunk        1     1 10 30
[LSW1]

LSW2与LSW1的配置同理

sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LSW2
[LSW2]undo info-center enable
Info: Information center is disabled.
[LSW2]vlan batch 10 30
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW2]port-group pvlan10
[LSW2-port-group-pvlan10]group-member g0/0/9 to g0/0/12 
[LSW2-port-group-pvlan10]port link-type access
[LSW2-GigabitEthernet0/0/9]port link-type access
[LSW2-GigabitEthernet0/0/10]port link-type access
[LSW2-GigabitEthernet0/0/11]port link-type access
[LSW2-GigabitEthernet0/0/12]port link-type access
[LSW2-port-group-pvlan10]port default vlan 10
[LSW2-GigabitEthernet0/0/9]port default vlan 10
[LSW2-GigabitEthernet0/0/10]port default vlan 10
[LSW2-GigabitEthernet0/0/11]port default vlan 10
[LSW2-GigabitEthernet0/0/12]port default vlan 10
[LSW2-port-group-pvlan10]qu
[LSW2]port-group pvlan30
[LSW2-port-group-pvlan30]group-member g0/0/13 to g0/0/16
[LSW2-port-group-pvlan30]port link-type access
[LSW2-GigabitEthernet0/0/13]port link-type access
[LSW2-GigabitEthernet0/0/14]port link-type access
[LSW2-GigabitEthernet0/0/15]port link-type access
[LSW2-GigabitEthernet0/0/16]port link-type access
[LSW2-port-group-pvlan30]port default vlan 30
[LSW2-GigabitEthernet0/0/13]port default vlan 30
[LSW2-GigabitEthernet0/0/14]port default vlan 30
[LSW2-GigabitEthernet0/0/15]port default vlan 30
[LSW2-GigabitEthernet0/0/16]port default vlan 30
[LSW2-port-group-pvlan30]qu
[LSW2]interface g0/0/24
[LSW2-GigabitEthernet0/0/24]port link-type trunk
[LSW2-GigabitEthernet0/0/24]port trunk allow-pass vlan 10 30
#这里也可以写
allow-pass vlan all
[LSW2-GigabitEthernet0/0/24]qu
[LSW2]display vlan 
The total number of vlans is : 3
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
1    common  UT:GE0/0/1(D)      GE0/0/2(D)      GE0/0/3(D)      GE0/0/4(D)      
                GE0/0/5(D)      GE0/0/6(D)      GE0/0/7(D)      GE0/0/8(D)      
                GE0/0/17(D)     GE0/0/18(D)     GE0/0/19(D)     GE0/0/20(D)     
                GE0/0/21(D)     GE0/0/22(D)     GE0/0/23(D)     GE0/0/24(U)     

10   common  UT:GE0/0/9(U)      GE0/0/10(D)     GE0/0/11(D)     GE0/0/12(U)     

             TG:GE0/0/24(U)                                                     

30   common  UT:GE0/0/13(U)     GE0/0/14(D)     GE0/0/15(D)     GE0/0/16(U)     

             TG:GE0/0/24(U)                                                     


VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------

1    enable  default       enable  disable    VLAN 0001                         
10   enable  default       enable  disable    VLAN 0010                         
30   enable  default       enable  disable    VLAN 0030                         
[LSW2]display port vlan
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/1    hybrid       1     -                                   
GigabitEthernet0/0/2    hybrid       1     -                                   
GigabitEthernet0/0/3    hybrid       1     -                                   
GigabitEthernet0/0/4    hybrid       1     -                                   
GigabitEthernet0/0/5    hybrid       1     -                                   
GigabitEthernet0/0/6    hybrid       1     -                                   
GigabitEthernet0/0/7    hybrid       1     -                                   
GigabitEthernet0/0/8    hybrid       1     -                                   
GigabitEthernet0/0/9    access       10    -                                   
GigabitEthernet0/0/10   access       10    -                                   
GigabitEthernet0/0/11   access       10    -                                   
GigabitEthernet0/0/12   access       10    -                                   
GigabitEthernet0/0/13   access       30    -                                   
GigabitEthernet0/0/14   access       30    -                                   
GigabitEthernet0/0/15   access       30    -                                   
GigabitEthernet0/0/16   access       30    -                                   
GigabitEthernet0/0/17   hybrid       1     -                                   
GigabitEthernet0/0/18   hybrid       1     -                                   
GigabitEthernet0/0/19   hybrid       1     -                                   
GigabitEthernet0/0/20   hybrid       1     -                                   
GigabitEthernet0/0/21   hybrid       1     -                                   
GigabitEthernet0/0/22   hybrid       1     -                                   
GigabitEthernet0/0/23   hybrid       1     -                                   
GigabitEthernet0/0/24   trunk        1     1 10 30

 至此,PC-10-1能跨网段ping通PC-10-3,同理PC-30-1能跨网段ping通PC-30-3

查看捕获的以太网帧是否带标记,首先需要显示vlan id,步骤如下:

编辑--->首选项

VLAN的配置实例_第8张图片

number下拉,选择802.1Q VLAN id 

VLAN的配置实例_第9张图片 

这里对LSW1的g0/0/9进行抓包,其link-type为access

对于普通终端的连接,是不需要vlan标记的

VLAN的配置实例_第10张图片

这里对LSW1的g0/0/24进行抓包,其link-type为trunk,并且带vlan标记,用于标识该数据帧属于哪个 VLAN。

VLAN的配置实例_第11张图片

你可能感兴趣的:(网络拓扑,网络)