VTP协议实验步骤
1.
实验拓扑图如下所示
:
2.
建立如图环境，测试
A
、
B
、
C
、
D
的连通性。
3.
配置
F0/11
和
F/0/12
为通道，验证配置，查看是否正常。
4.
配置
VTP
域，域名为
CISCO
，密码为
xxx,
Sw1
为服务器，
SW2
为客户机。
查看关键信息。
5.
在
SW1
上建立
vlan2
包含
A
，
建立
vlan3
包含
B
。
6.
在
SW2
上查看是否已有
vlan2
、
vlan3
。如果没有，给出解决方法。是否可以人工建立
vlan4
、
vlan5
，同样
vlan2
包含
C
，
建立
vlan3
包含
D
。测试
AC
、
BD
的连通性。
7.
启用修剪，验证配置。
8.
在中继中去除
vlan3
的修剪，查看配置并说明修剪意义。
步骤
1
删除交换机配置和
vlan.dat
文件并重启设备，按照实验拓扑图连接实验的线缆。
switch#
del
flash:vlan.dat
Delete filename [vlan.dat]?
Delete flash:vlan.dat? [confirm]
switch#
erase startup-config
Erasing the nvram filesystem will remove all files! Continue? [confirm]
[OK]
Erase of nvram: complete
switch#
reload
步骤
2
给各个交换机命名
.
switch>
enable
switch#
config t
switch(config)#
hostname sw1
sw1(config)#
步骤
3
测试连通性
,
结果如下所示
:
在
A
上用
ping
命令测试和
B
的连通性
:
C:\Documents and Settings\Administrator>ping 1.1.1 .4
Pinging 1.1.1 .4 with 32 bytes of data:
Reply from 1.1.1 .4: bytes=32 time<10ms TTL=128
Reply from 1.1.1 .4: bytes=32 time<10ms TTL=128
在
A
上用
ping
命令测试和
C
的连通性
:
C:\Documents and Settings\Administrator>ping 1.1.1 .1
Pinging 1.1.1 .1 with 32 bytes of data:
Reply from 1.1.1 .1: bytes=32 time<10ms TTL=128
Reply from 1.1.1 .1: bytes=32 time<10ms TTL=128
在
A
上用
ping
命令测试和
D
的连通性
:
C:\Documents and Settings\Administrator>ping 1.1.1 .2
Pinging 1.1.1 .2 with 32 bytes of data:
Reply from 1.1.1 .2: bytes=32 time<10ms TTL=128
Reply from 1.1.1 .2: bytes=32 time<10ms TTL=128
这里连通由于2950
交换机默认是中继，不做详细介绍：
步骤
4
配置
SW1
将
FA0/11
、和
0/12
端口组合为一个逻辑信道：
sw1(config)#interface range fastethernet0/11 - 12
sw1(config-if-range)#channel-group 1 mode on
Creating a port-channel interface Port-channel 1
配置
SW2
将
FA0/11
、和
0/12
端口组合为一个逻辑信道：
sw2(config)#interface range fastethernet0/11 - 12
sw2(config-if-range)#channel-group 1 mode on
Creating a port-channel interface Port-channel 1
sw2(config-if-range)#
使用
show etherchannel summary
命令检查快速以太通道连接：
sw1#show etherchannel 1 summary
Flags: D - down P - in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
u - unsuitable for bundling
U - in use f - failed to allocate aggregator
d - default port
Number of channel-groups in use: 1
Number of aggregators: 1
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SU) - Fa0/11(Pd) Fa0/12(P)
sw2#show etherchannel 1 summary
Flags: D - down P - in port-channel
I - stand-alone s - suspended
H - Hot-standby (LACP only)
R - Layer3 S - Layer2
u - unsuitable for bundling
U - in use f - failed to allocate aggregator
d - default port
Number of channel-groups in use: 1
Number of aggregators: 1
Group Port-channel Protocol Ports
------+-------------+-----------+-----------------------------------------------
1 Po1(SU) - Fa0/11(Pd) Fa0/12(P)
步骤
5
在
SW1
上配置
VTP
域
CISCO
并创建名为
VLAN 10
和
VLAN 20
的
VLAN
。
2950
交换机默认是
VTP
服务器模式，所以你不需要配置它。然而，如果需要的话，配置模式中启用服务器的命令是
vtp mode server
：
sw1(config)#vtp mode server
Device mode already VTP SERVER.
sw1(config)#vtp domain cisco
Changing VTP domain name from NULL to cisco
sw1(config)#vtp password xxx
Setting device VLAN database password to xxx
sw1(config)#
配置
SW2
作为
VTP
客户
sw2(config)#vtp mode client
Setting device to VTP CLIENT mode.
sw2(config)#vtp domain cisco
Domain name already set to cisco.
sw2(config)#
使用
show vtp status
命令检查
VTP
重要信息：
sw1#show vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 64
Number of existing VLANs : 5
VTP Operating Mode : Server
VTP Domain Name : cisco
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0x 8C 0xE8 0x23 0x13 0xC9 0xD9 0x 1C 0xEA
Configuration last modified by 0.0.0 .0 at 0-0-00 00:00:00
Local updater ID is 0.0.0 .0 (no valid interface found)
sw1#
----------------------------------------------------------------------
使用
show vtp counters
命令检查
VTP
发送和接收的通告请求，汇总通告，子网通告和加入消息的条目，以及检测到的配置错误。
sw1#show vtp counters
VTP statistics:
Summary advertisements received : 2
Subset advertisements received : 1
Request advertisements received : 1
Summary advertisements transmitted : 2
Subset advertisements transmitted : 2
Request advertisements transmitted : 0
Number of config revision errors : 1
Number of config digest errors : 0
Number of V1 summary errors : 0
VTP pruning statistics:
Trunk Join Transmitted Join Received Summary advts received from
non-pruning-capable device
---------------- ---------------- ---------------- ---------------------------
Po1 0 1 0
sw1#
sw2#show vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 64
Number of existing VLANs : 5
VTP Operating Mode : Client
VTP Domain Name : cisco
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0x57 0x30 0x6D 0x 7A 0x76 0x12 0x7B 0x40
Configuration last modified by 0.0.0 .0 at 0-0-00 00:00:00
sw2#
sw2#show vtp counters
VTP statistics:
Summary advertisements received : 4
Subset advertisements received : 3
Request advertisements received : 0
Summary advertisements transmitted : 2
Subset advertisements transmitted : 1
Request advertisements transmitted : 2
Number of config revision errors : 0
Number of config digest errors : 2
Number of V1 summary errors : 0
VTP pruning statistics:
Trunk Join Transmitted Join Received Summary advts received from
non-pruning-capable device
---------------- ---------------- ---------------- ---------------------------
Po1 1 0 0
步骤
6
创建
VLAN 2
和
VLAN 3
的
VLAN
，按照前面的配置要求，将每个交换机将端口划归到各自的
VLAN
。
sw1(vlan)#vlan 2
VLAN 2 added:
Name: VLAN0002
sw1(vlan)#vlan 3
VLAN 3 added:
Name: VLAN0003
sw1(vlan)#exit
APPLY completed.
Exiting....
sw1#config t
Enter configuration commands, one per line. End with CNTL/Z.
sw1(config)#interface fastethernet0/1
sw1(config-if)#switchport mode access
sw1(config-if)#switchport access vlan 2
sw1(config-if)#exit
sw1(config)#interface fastethernet0/2
sw1(config-if)#switchport access vlan 3
sw1(config-if)#
步骤
7
使用命令
show vlan brief
检验是否已经有
valn2
、
3
。
sw2#show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4
Fa0/5, Fa0/6, Fa0/7, Fa0/8
Fa0/9, Fa0/10, Fa0/13, Fa0/14
Fa0/15, Fa0/16, Fa0/17, Fa0/18
Fa0/19, Fa0/20, Fa0/21, Fa0/22
Fa0/23, Fa0/24
1002 fddi-default active
1003 token-ring-default active
1004 fddinet-default active
1005 trnet-default active
我们看出并没有，由于刚刚
VTP
服务器设置了密码，这样就将
CISCO
管理域设为了安全模式，这样防止未经授权的交换机加入到用户的域内。刚才说明了这点。这时我们只须在
SW2
上设置密码即可。
sw2#config t
Enter configuration commands, one per line. End with CNTL/Z.
sw2(config)#vtp password xxx
Setting device VLAN database password to xxx.
sw2(config)#
或许刚刚设完密码马上验证还会没有，这时不须紧张，由于交换机每五分钟发送一次通告或者有变化时，它通告邻接交换机目前的
VTP
域名和配置修订号。稍等一会在验证。
sw2#show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4
Fa0/5, Fa0/6, Fa0/7, Fa0/8
Fa0/9, Fa0/10, Fa0/13, Fa0/14
Fa0/15, Fa0/16, Fa0/17, Fa0/18
Fa0/19, Fa0/20, Fa0/21, Fa0/22
Fa0/23, Fa0/24
2 VLAN0002 active
3 VLAN0003 active
1002 fddi-default active
1003 token-ring-default active
1004 fddinet-default active
1005 trnet-default active
sw2#
在
SW2
上人工建立
vlan4
、
vlan5
sw2#vlan database
sw2(vlan)#vlan 4
VLAN 4 added:
Name: VLAN0004
sw2(vlan)#vlan 5
VLAN 5 added:
Name: VLAN0005
sw2(vlan)#exit
In CLIENT state, no apply attempted.
Exiting....
验证：
sw2#show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4
Fa0/5, Fa0/6, Fa0/7, Fa0/8
Fa0/9, Fa0/10, Fa0/13, Fa0/14
Fa0/15, Fa0/16, Fa0/17, Fa0/18
Fa0/19, Fa0/20, Fa0/21, Fa0/22
Fa0/23, Fa0/24
2 VLAN0002 active
3 VLAN0003 active
1002 fddi-default active
1003 token-ring-default active
1004 fddinet-default active
1005 trnet-default active
sw2#
这时大家会发现明明看到已经建立
vlan4
、
5
怎么会没有。大家有没有注意到交换机已经告诉大家
In CLIENT state, no apply attempted.
VTP
客户模式不能创建，删除，和修改
vlan
。
按照前面的配置要求，将每个交换机将端口划归到各自的
VLAN
。
sw2#config t
Enter configuration commands, one per line. End with CNTL/Z.
sw2(config)#interface fastethernet0/1
sw2(config-if)#switchport mode access
sw2(config-if)#switchport access vlan 2
sw2(config-if)#exit
sw2(config)#interface fastethernet0/2
sw2(config-if)#switchport access vlan 3
sw2(config-if)#
测试连通：
在
A
上用
ping
命令测试和
C
的连通性
:
C:\Documents and Settings\Administrator>ping 1.1.1 .1
Pinging 1.1.1 .1 with 32 bytes of data:
Reply from 1.1.1 .1: bytes=32 time<10ms TTL=128
Reply from 1.1.1 .1: bytes=32 time<10ms TTL=128
在
B
上用
ping
命令测试和
D
的连通性
:
C:\Documents and Settings\Administrator>ping 1.1.1 .2
Pinging 1.1.1 .2 with 32 bytes of data:
Reply from 1.1.1 .2: bytes=32 time<10ms TTL=128
Reply from 1.1.1 .2: bytes=32 time<10ms TTL=128
步骤
8
只须在
VTP
服务器上启用修剪就启用了整个管理域的修剪。
sw1(config)#vtp pruning
Pruning switched on
sw1(config)#
验证配置：
sw1#show vtp status
VTP Version : 2
Configuration Revision : 2
Maximum VLANs supported locally : 64
Number of existing VLANs : 7
VTP Operating Mode : Server
VTP Domain Name : cisco
VTP Pruning Mode : Enabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0xE3 0xBD 0xA0 0xC9 0x14 0x85 0x9B 0xFC
Configuration last modified by 0.0.0 .0 at 3-1-93 00:47:48
Local updater ID is 0.0.0 .0 (no valid interface found)
sw1#
sw2#show vtp status
VTP Version : 2
Configuration Revision : 2
Maximum VLANs supported locally : 64
Number of existing VLANs : 7
VTP Operating Mode : Client
VTP Domain Name : cisco
VTP Pruning Mode : Enabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0xE3 0xBD 0xA0 0xC9 0x14 0x85 0x9B 0xFC
Configuration last modified by 0.0.0 .0 at 3-1-93 00:47:48
sw2#
步骤
9
在
SW1
的中继中去除
vlan3
的修剪
sw1#config t
Enter configuration commands, one per line. End with CNTL/Z.
sw1(config)#interface range fastethernet0/11 - 12
sw1(config-if-range)#switchport trunk pruning vlan remove 3
sw1(config-if-range)#
验证配置：
sw1#show interface fastethernet0/11 switchport
Name: Fa0/11
Switchport: Enabled
Administrative Mode: dynamic desirable
Operational Mode: trunk (member of bundle Po1)
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2,4-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
Protected: false
Appliance trust: none
sw1#show interface fastethernet0/12 switchport
Name: Fa0/12
Switchport: Enabled
Administrative Mode: dynamic desirable
Operational Mode: trunk (member of bundle Po1)
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk private VLANs: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2,4-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
Protected: false
Appliance trust: none
sw1#
在
SW2
上验证：
sw2#show interface fastethernet0/11 switchport
Name: Fa0/11
Switchport: Enabled
Administrative Mode: dynamic desirable
Operational Mode: trunk (member of bundle Po1)
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Operational private-vlan: none
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Protected: false
Voice VLAN: none (Inactive)
Appliance trust: none
我们会发现
SW2
上并没有去除
vlan3
的修剪，说明移出修剪不同启用修剪。需要根据情况在每个交换机上配置。
修剪的意义：
交换机默认情况下是在网络上传播广播和未知数据包。这样会给整个网络带来大量的不必要流量。
VTP
修剪通过减少不必要的流量，如：广播、多播、未知等。来提高带宽利用率。