VLAN的配置实例

2023-09-21 07:45:00

基于端口的vlan划分

以下配置为例: 注意选择copper线,可以任意选择端口

 PC配置如下:

LSW1配置如下 

[LSW1]vlan 10
[LSW1-vlan10]qu
[LSW1]interface g0/0/9
[LSW1-Gigabitethernet0/0/9] port link-type acces
[LSW1-Gigabitethernet0/0/9] port default vlan 10
[LSW1-Gigabitethernet0/0/9] qu
#显示g0/0/9的信息
[LSW1]display interface g0/0/9
GigabitEthernet0/0/9 current state : UP
Line protocol current state : UP
Description:
Switch Port, PVID :   10, TPID : 8100(Hex), The Maximum Frame Length is 9216
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 4c1f-cc6c-2c40
Last physical up time   : 2023-09-16 10:15:22 UTC-08:00
Last physical down time : 2023-09-16 10:15:21 UTC-08:00
Current system time: 2023-09-16 10:18:04-08:00
Hardware address is 4c1f-cc6c-2c40
    Last 300 seconds input rate 0 bytes/sec, 0 packets/sec
    Last 300 seconds output rate 0 bytes/sec, 0 packets/sec
    Input: 0 bytes, 0 packets
    Output: 92582 bytes, 778 packets
    Input:
      Unicast: 0 packets, Multicast: 0 packets
      Broadcast: 0 packets
    Output:
      Unicast: 0 packets, Multicast: 778 packets
      Broadcast: 0 packets
    Input bandwidth utilization  :    0%
    Output bandwidth utilization :    0%
#显示g0/0/9的vlan信息
[LSW1]display port vlan g0/0/9
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/9    access       10    -                                   
#其他端口同理
[LSW1]interface g0/0/10
[LSW1-GigabitEthernet0/0/10]port link-type access
[LSW1-GigabitEthernet0/0/10]port default vlan 10
[LSW1-GigabitEthernet0/0/10]qu
[LSW1]display interface g0/0/10
GigabitEthernet0/0/10 current state : DOWN
Line protocol current state : DOWN
Description:
Switch Port, PVID :   10, TPID : 8100(Hex), The Maximum Frame Length is 9216
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 4c1f-cc6c-2c40
Last physical up time   : -
Last physical down time : 2023-09-14 18:37:01 UTC-08:00
Current system time: 2023-09-16 10:01:30-08:00
Hardware address is 4c1f-cc6c-2c40
    Last 300 seconds input rate 0 bytes/sec, 0 packets/sec
    Last 300 seconds output rate 0 bytes/sec, 0 packets/sec
    Input: 0 bytes, 0 packets
    Output: 0 bytes, 0 packets
    Input:
      Unicast: 0 packets, Multicast: 0 packets
      Broadcast: 0 packets
    Output:
      Unicast: 0 packets, Multicast: 0 packets
      Broadcast: 0 packets
    Input bandwidth utilization  :    0%
    Output bandwidth utilization :    0%

[LSW1]display port vlan g0/0/10
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/10   access       10    -                                   

[LSW1]interface g0/0/11
[LSW1-GigabitEthernet0/0/11]port link-type access
[LSW1-GigabitEthernet0/0/11]port default vlan 10
[LSW1-GigabitEthernet0/0/11]qu
[LSW1]display interface g0/0/11
GigabitEthernet0/0/11 current state : DOWN
Line protocol current state : DOWN
Description:
Switch Port, PVID :   10, TPID : 8100(Hex), The Maximum Frame Length is 9216
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 4c1f-cc6c-2c40
Last physical up time   : -
Last physical down time : 2023-09-14 18:37:01 UTC-08:00
Current system time: 2023-09-16 10:04:08-08:00
Hardware address is 4c1f-cc6c-2c40
    Last 300 seconds input rate 0 bytes/sec, 0 packets/sec
    Last 300 seconds output rate 0 bytes/sec, 0 packets/sec
    Input: 0 bytes, 0 packets
    Output: 0 bytes, 0 packets
    Input:
      Unicast: 0 packets, Multicast: 0 packets
      Broadcast: 0 packets
    Output:
      Unicast: 0 packets, Multicast: 0 packets
      Broadcast: 0 packets
    Input bandwidth utilization  :    0%
    Output bandwidth utilization :    0%

[LSW1]display port vlan g0/0/11
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/11   access       10    -                                   
[LSW1]interface g0/0/12
[LSW1-GigabitEthernet0/0/12]port link-type access
[LSW1-GigabitEthernet0/0/12]port default vlan 10
[LSW1-GigabitEthernet0/0/12]qu
[LSW1]display interface g0/0/12
GigabitEthernet0/0/12 current state : UP
Line protocol current state : UP
Description:
Switch Port, PVID :   10, TPID : 8100(Hex), The Maximum Frame Length is 9216
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 4c1f-cc6c-2c40
Last physical up time   : 2023-09-16 10:01:17 UTC-08:00
Last physical down time : 2023-09-16 10:01:16 UTC-08:00
Current system time: 2023-09-16 10:05:01-08:00
Hardware address is 4c1f-cc6c-2c40
    Last 300 seconds input rate 0 bytes/sec, 0 packets/sec
    Last 300 seconds output rate 0 bytes/sec, 0 packets/sec
    Input: 0 bytes, 0 packets
    Output: 48909 bytes, 411 packets
    Input:
      Unicast: 0 packets, Multicast: 0 packets
      Broadcast: 0 packets
    Output:
      Unicast: 0 packets, Multicast: 411 packets
      Broadcast: 0 packets
    Input bandwidth utilization  :    0%
    Output bandwidth utilization :    0%

[LSW1]display port vlan g0/0/12
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/12   access       10    -                                   
[LSW1]display vlan 10
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
10   common  UT:GE0/0/1(D)      GE0/0/9(U)      GE0/0/10(D)     GE0/0/11(D)     
                GE0/0/12(U)                                                     

VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------
10   enable  default       enable  disable    VLAN 0010    
#创建vlan30                     
[LSW1]vlan 30
[LSW1-vlan30]qu
[LSW1]port-group pvlan30
#上面的操作重复繁琐,容易出错,这里可以对多个端口进行统一配置
[LSW1-port-group-pvlan30]group-member g0/0/13 to g0/0/16
[LSW1-port-group-pvlan30]display port-group
pvlan30
[LSW1-port-group-pvlan30]display port-group pvlan30
Portgroup: pvlan30
GigabitEthernet0/0/13
GigabitEthernet0/0/14
GigabitEthernet0/0/15
GigabitEthernet0/0/16
[LSW1-port-group-pvlan30]port link-type access
[LSW1-GigabitEthernet0/0/13]port link-type access
[LSW1-GigabitEthernet0/0/14]port link-type access
[LSW1-GigabitEthernet0/0/15]port link-type access
[LSW1-GigabitEthernet0/0/16]port link-type access
[LSW1-port-group-pvlan30]port default vlan 30
[LSW1-GigabitEthernet0/0/13]port default vlan 30
[LSW1-GigabitEthernet0/0/14]port default vlan 30
[LSW1-GigabitEthernet0/0/15]port default vlan 30
[LSW1-GigabitEthernet0/0/16]port default vlan 30
[LSW1-port-group-pvlan30]qu
[LSW1]display vlan 30
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
30   common  UT:GE0/0/13(U)     GE0/0/14(D)     GE0/0/15(D)     GE0/0/16(U)     

VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------
30   enable  default       enable  disable    VLAN 0030                         
[LSW1]display port vlan
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/1    access       10    -                                   
GigabitEthernet0/0/2    hybrid       1     -                                   
GigabitEthernet0/0/3    hybrid       1     -                                   
GigabitEthernet0/0/4    hybrid       1     -                                   
GigabitEthernet0/0/5    hybrid       1     -                                   
GigabitEthernet0/0/6    hybrid       1     -                                   
GigabitEthernet0/0/7    hybrid       1     -                                   
GigabitEthernet0/0/8    hybrid       1     -                                   
GigabitEthernet0/0/9    access       10    -                                   
GigabitEthernet0/0/10   access       10    -                                   
GigabitEthernet0/0/11   access       10    -                                   
GigabitEthernet0/0/12   access       10    -                                   
GigabitEthernet0/0/13   access       30    -                                   
GigabitEthernet0/0/14   access       30    -                                   
GigabitEthernet0/0/15   access       30    -                                   
GigabitEthernet0/0/16   access       30    -                                   
GigabitEthernet0/0/17   hybrid       1     -                                   
GigabitEthernet0/0/18   hybrid       1     -                                   
GigabitEthernet0/0/19   hybrid       1     -                                   
GigabitEthernet0/0/20   hybrid       1     -                                   
GigabitEthernet0/0/21   hybrid       1     -                                   
GigabitEthernet0/0/22   hybrid       1     -                                   
GigabitEthernet0/0/23   hybrid       1     -                                   
GigabitEthernet0/0/24   hybrid       1     -                                   

 统一创建vlan的命令

#批量创建2....100

vlan batch 2 to 100  

 华为端口恢复默认配置的命令

撤销操作或命令直接在命令前面加 undo 

不同的vlan之间逻辑上是隔离的,不能相互通信

从以下信息可以看出,PC1可以与PC2进行通信,但是PC1不能与PC3,PC4相互通信

PC>ping 192.168.10.12

Ping 192.168.10.12: 32 data bytes, Press Ctrl_C to break
From 192.168.10.12: bytes=32 seq=1 ttl=128 time=32 ms
From 192.168.10.12: bytes=32 seq=2 ttl=128 time=47 ms
From 192.168.10.12: bytes=32 seq=3 ttl=128 time=63 ms
From 192.168.10.12: bytes=32 seq=4 ttl=128 time=46 ms
From 192.168.10.12: bytes=32 seq=5 ttl=128 time=47 ms

--- 192.168.10.12 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 32/47/63 ms

PC>ping 192.168.30.11

Ping 192.168.30.11: 32 data bytes, Press Ctrl_C to break
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable

--- 192.168.10.254 ping statistics ---
  5 packet(s) transmitted
  0 packet(s) received
  100.00% packet loss

PC>ping 192.168.30.12

Ping 192.168.30.12: 32 data bytes, Press Ctrl_C to break
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable
From 192.168.10.11: Destination host unreachable

--- 192.168.10.254 ping statistics ---
  5 packet(s) transmitted
  0 packet(s) received
  100.00% packet loss

PC>

 

基于mac地址的VLAN划分

PC-BOOK的mac地址如下

PC-BOOK-10-1:54-89-98-9F-25-B6

PC-BOOK-30-1:54-89-98-88-74-CD

[LSW1]vlan 10
[LSW1-vlan10]qu
[LSW1]vlan 30
[LSW1-vlan30]qu
[LSW1]port-group pvlan10
[LSW1-port-group-pvlan10]group-member g0/0/9 to g0/0/12
[LSW1-port-group-pvlan10]display port-group pvlan10
Portgroup: pvlan10
GigabitEthernet0/0/9
GigabitEthernet0/0/10
GigabitEthernet0/0/11
GigabitEthernet0/0/12
[LSW1-port-group-pvlan10]qu
[LSW1]port-group pvlan30
[LSW1-port-group-pvlan30]group-member g0/0/13 to g0/0/16
[LSW1-port-group-pvlan30]display port-group pvlan30
Portgroup: pvlan30
GigabitEthernet0/0/13
GigabitEthernet0/0/14
GigabitEthernet0/0/15
GigabitEthernet0/0/16
[LSW1-port-group-pvlan30]port link-type access
[LSW1-GigabitEthernet0/0/13]port link-type access
[LSW1-GigabitEthernet0/0/14]port link-type access
[LSW1-GigabitEthernet0/0/15]port link-type access
[LSW1-GigabitEthernet0/0/16]port link-type access
[LSW1-port-group-pvlan30]port default vlan 30
[LSW1-GigabitEthernet0/0/13]port default vlan 30
[LSW1-GigabitEthernet0/0/14]port default vlan 30
[LSW1-GigabitEthernet0/0/15]port default vlan 30
[LSW1-GigabitEthernet0/0/16]port default vlan 30
[LSW1-port-group-pvlan30]qu
[LSW1]port-group pvlan10
[LSW1-port-group-pvlan10]port link-type access
[LSW1-GigabitEthernet0/0/9]port link-type access
[LSW1-GigabitEthernet0/0/10]port link-type access
[LSW1-GigabitEthernet0/0/11]port link-type access
[LSW1-GigabitEthernet0/0/12]port link-type access
[LSW1-port-group-pvlan10]port default vlan 10
[LSW1-GigabitEthernet0/0/9]port default vlan 10
[LSW1-GigabitEthernet0/0/10]port default vlan 10
[LSW1-GigabitEthernet0/0/11]port default vlan 10
[LSW1-GigabitEthernet0/0/12]port default vlan 10
[LSW1-port-group-pvlan10]
[LSW1-port-group-pvlan10]display vlan
The total number of vlans is : 3
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
1    common  UT:GE0/0/1(D)      GE0/0/2(D)      GE0/0/3(D)      GE0/0/4(U)      
                GE0/0/5(U)      GE0/0/6(D)      GE0/0/7(D)      GE0/0/8(D)      
                GE0/0/17(D)     GE0/0/18(D)     GE0/0/19(D)     GE0/0/20(D)     
                GE0/0/21(D)     GE0/0/22(D)     GE0/0/23(D)     GE0/0/24(D)     

10   common  UT:GE0/0/9(U)      GE0/0/10(D)     GE0/0/11(D)     GE0/0/12(U)     

30   common  UT:GE0/0/13(U)     GE0/0/14(D)     GE0/0/15(D)     GE0/0/16(U)     


VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------

1    enable  default       enable  disable    VLAN 0001                         
10   enable  default       enable  disable    VLAN 0010                         
30   enable  default       enable  disable    VLAN 0030 

[LSW1-port-group-pvlan10]qu
[LSW1]vlan 10
[LSW1-vlan10]mac-vlan mac-address 5489-989F-25B6 priority 0
[LSW1]vlan 30
[LSW1-vlan30]mac-vlan mac-address 5489-9888-74cd priority 0
[LSW1-vlan30]int g0/0/4
[LSW1-GigabitEthernet0/0/4]port link-type hybrid
[LSW1-GigabitEthernet0/0/4]port hybrid untagged vlan 10 30
[LSW1-GigabitEthernet0/0/4]mac-vlan enable
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1-GigabitEthernet0/0/4]qu
[LSW1]int g0/0/5
[LSW1-GigabitEthernet0/0/5]port link-type hybrid
[LSW1-GigabitEthernet0/0/5]port hybrid untagged vlan 10 30
[LSW1-GigabitEthernet0/0/5]mac-vlan enable
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1-GigabitEthernet0/0/5]qu
[LSW1]display mac-vlan mac-address all
---------------------------------------------------
MAC Address     MASK            VLAN    Priority   
---------------------------------------------------
5489-989f-25b6  ffff-ffff-ffff  10      0          
5489-9888-74cd  ffff-ffff-ffff  30      0          

Total MAC VLAN address count: 2 

[LSW1]display mac-vlan vlan 10
---------------------------------------------------
MAC Address     MASK            VLAN    Priority   
---------------------------------------------------
5489-989f-25b6  ffff-ffff-ffff  10      0          

Total MAC VLAN address count: 1 

[LSW1]display mac-vlan vlan 30
---------------------------------------------------
MAC Address     MASK            VLAN    Priority   
---------------------------------------------------
5489-9888-74cd  ffff-ffff-ffff  30      0          

Total MAC VLAN address count: 1 

至此,PC-BOOK-10-1加入vlan 10,PC-BOOK-30-1加入vlan30

将 PC-BOOK-10-1和PC-BOOK-30-1所连接的交换机端口互换,依旧可以与同一个vlan中的计算机通信

PC>ping 192.168.30.11

Ping 192.168.30.11: 32 data bytes, Press Ctrl_C to break
From 192.168.30.11: bytes=32 seq=1 ttl=128 time=63 ms
From 192.168.30.11: bytes=32 seq=2 ttl=128 time=47 ms
From 192.168.30.11: bytes=32 seq=3 ttl=128 time=47 ms
From 192.168.30.11: bytes=32 seq=4 ttl=128 time=47 ms
From 192.168.30.11: bytes=32 seq=5 ttl=128 time=47 ms

--- 192.168.30.11 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 47/50/63 ms

 

基于IP地址的vlan划分

在原有的基础上扩展

PC-1030-1:IPV4地址 192.168.30.18        子网掩码:255.255.255.0

LSW1上的配置  

[LSW1]display vlan
The total number of vlans is : 3
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
1    common  UT:GE0/0/1(D)      GE0/0/2(D)      GE0/0/3(D)      GE0/0/4(U)      
                GE0/0/5(U)      GE0/0/6(D)      GE0/0/7(D)      GE0/0/8(U)      
                GE0/0/17(D)     GE0/0/18(D)     GE0/0/19(D)     GE0/0/20(D)     
                GE0/0/21(D)     GE0/0/22(D)     GE0/0/23(D)     GE0/0/24(D)     

10   common  UT:GE0/0/4(U)      GE0/0/5(U)      GE0/0/9(U)      GE0/0/10(D)     

                GE0/0/11(D)     GE0/0/12(U)                                     

30   common  UT:GE0/0/4(U)      GE0/0/5(U)      GE0/0/13(U)     GE0/0/14(D)     

                GE0/0/15(D)     GE0/0/16(U)                                     


VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------

1    enable  default       enable  disable    VLAN 0001                         
10   enable  default       enable  disable    VLAN 0010                         
30   enable  default       enable  disable    VLAN 0030                         
[LSW1]vlan 10
#按ip地址划分vlan
[LSW1-vlan10]ip-subnet-vlan 2 ip 192.168.10.0 24 priority 1
#2为子网索引,取值范围为1~12,一个vlan最多可以绑定12个子网
#192.168.10.0为子网地址,24为前缀长度,也可以采用子网掩码
#priority为优先级,取值范围为0~7,值越大优先级越高,默认值为0
[LSW1-vlan10]qu
[LSW1]vlan 30
[LSW1-vlan30]ip-subnet-vlan 1 ip 192.168.30.0 24 priority 1
[LSW1-vlan30]qu
[LSW1]interface g 0/0/8
#配置为hybrid,并使其在发送vlan 10和vlan 30的帧时剥除vlan tag
[LSW1-GigabitEthernet0/0/8]port link-type hybrid
[LSW1-GigabitEthernet0/0/8]port hybrid untagged vlan 10 30
[LSW1-GigabitEthernet0/0/8]ip-subnet-vlan enable
[LSW1-GigabitEthernet0/0/8]qu
[LSW1]display ip-subnet-vlan vlan all
 ----------------------------------------------------------------
 Vlan    Index   IpAddress           SubnetMask          Priority    
 ----------------------------------------------------------------
 10      2       192.168.10.0        255.255.255.0       1 
 30      1       192.168.30.0        255.255.255.0       1 
 ----------------------------------------------------------------
 ip-subnet-vlan count: 2  		 total count: 2 

[LSW1]display ip-subnet-vlan vlan 10
 ----------------------------------------------------------------
 Vlan    Index   IpAddress           SubnetMask          Priority    
 ----------------------------------------------------------------
 10      2       192.168.10.0        255.255.255.0       1 
 ----------------------------------------------------------------
 ip-subnet-vlan count: 1  		 total count: 2 

[LSW1]display ip-subnet-vlan vlan 30
 ----------------------------------------------------------------
 Vlan    Index   IpAddress           SubnetMask          Priority    
 ----------------------------------------------------------------
 30      1       192.168.30.0        255.255.255.0       1 
 ----------------------------------------------------------------
 ip-subnet-vlan count: 1  		 total count: 2 

 至此这台PC加入了vlan10和vlan30

[LSW1]display vlan
The total number of vlans is : 3
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
1    common  UT:GE0/0/1(D)      GE0/0/2(D)      GE0/0/3(D)      GE0/0/4(U)      
                GE0/0/5(U)      GE0/0/6(D)      GE0/0/7(D)      GE0/0/8(U)      
                GE0/0/17(D)     GE0/0/18(D)     GE0/0/19(D)     GE0/0/20(D)     
                GE0/0/21(D)     GE0/0/22(D)     GE0/0/23(D)     GE0/0/24(D)     

10   common  UT:GE0/0/4(U)      GE0/0/5(U)      GE0/0/8(U)      GE0/0/9(U)      
                GE0/0/10(D)     GE0/0/11(D)     GE0/0/12(U)                     

30   common  UT:GE0/0/4(U)      GE0/0/5(U)      GE0/0/8(U)      GE0/0/13(U)     

                GE0/0/14(D)     GE0/0/15(D)     GE0/0/16(U)                     


VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------

1    enable  default       enable  disable    VLAN 0001                         
10   enable  default       enable  disable    VLAN 0010                         
30   enable  default       enable  disable    VLAN 0030                         
[LSW1]

#切换到地址192.168.10.18后,能ping 192.168.10.11
PC>ping 192.168.10.11

Ping 192.168.10.11: 32 data bytes, Press Ctrl_C to break
From 192.168.10.11: bytes=32 seq=1 ttl=128 time=47 ms
From 192.168.10.11: bytes=32 seq=2 ttl=128 time=62 ms
From 192.168.10.11: bytes=32 seq=3 ttl=128 time=47 ms
From 192.168.10.11: bytes=32 seq=4 ttl=128 time=62 ms
From 192.168.10.11: bytes=32 seq=5 ttl=128 time=63 ms

--- 192.168.10.11 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 47/56/63 ms

#切换到192.168.30.18后,能ping 192.168.30.11
PC>ping 192.168.30.11

Ping 192.168.30.11: 32 data bytes, Press Ctrl_C to break
From 192.168.30.11: bytes=32 seq=1 ttl=128 time=62 ms
From 192.168.30.11: bytes=32 seq=2 ttl=128 time=47 ms
From 192.168.30.11: bytes=32 seq=3 ttl=128 time=47 ms
From 192.168.30.11: bytes=32 seq=4 ttl=128 time=47 ms
From 192.168.30.11: bytes=32 seq=5 ttl=128 time=31 ms

--- 192.168.30.11 ping statistics ---
  5 packet(s) transmitted
  5 packet(s) received
  0.00% packet loss
  round-trip min/avg/max = 31/46/62 ms

 

跨以太网交换机的vlan扩展

 PC配置如下

LSW1的配置

<LSW1>sys
Enter system view, return user view with Ctrl+Z.
[LSW1]vlan batch 10 30
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1]port-group pvlan10
[LSW1-port-group-pvlan10]group-member g0/0/9 to g0/0/12
[LSW1-port-group-pvlan10]port link-type access
[LSW1-GigabitEthernet0/0/9]port link-type access
[LSW1-GigabitEthernet0/0/10]port link-type access
[LSW1-GigabitEthernet0/0/11]port link-type access
[LSW1-GigabitEthernet0/0/12]port link-type access
[LSW1-port-group-pvlan10]port default vlan 10
[LSW1-GigabitEthernet0/0/9]port default vlan 10
[LSW1-GigabitEthernet0/0/10]port default vlan 10
[LSW1-GigabitEthernet0/0/11]port default vlan 10
[LSW1-GigabitEthernet0/0/12]port default vlan 10
[LSW1-port-group-pvlan10]qu
[LSW1]port-group pvlan30
[LSW1-port-group-pvlan30]group-member g0/0/13 to g0/0/16
[LSW1-port-group-pvlan30]port link-type access
[LSW1-GigabitEthernet0/0/13]port link-type access
[LSW1-GigabitEthernet0/0/14]port link-type access
[LSW1-GigabitEthernet0/0/15]port link-type access
[LSW1-GigabitEthernet0/0/16]port link-type access
[LSW1-port-group-pvlan30]port default vlan 30
[LSW1-GigabitEthernet0/0/13]port default vlan 30
[LSW1-GigabitEthernet0/0/14]port default vlan 30
[LSW1-GigabitEthernet0/0/15]port default vlan 30
[LSW1-GigabitEthernet0/0/16]port default vlan 30
[LSW1-port-group-pvlan30]qu
[LSW1]interface g0/0/24
[LSW1-GigabitEthernet0/0/24]port link-type trunk
[LSW1-GigabitEthernet0/0/24]port trunk allow-pass vlan 10 30
[LSW1-GigabitEthernet0/0/24]qu
[LSW1]display vlan 
The total number of vlans is : 3
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
1    common  UT:GE0/0/1(D)      GE0/0/2(D)      GE0/0/3(D)      GE0/0/4(D)      
                GE0/0/5(D)      GE0/0/6(D)      GE0/0/7(D)      GE0/0/8(D)      
                GE0/0/17(D)     GE0/0/18(D)     GE0/0/19(D)     GE0/0/20(D)     
                GE0/0/21(D)     GE0/0/22(D)     GE0/0/23(D)     GE0/0/24(U)     

10   common  UT:GE0/0/4(D)      GE0/0/5(D)      GE0/0/8(D)      GE0/0/9(U)      
                GE0/0/10(D)     GE0/0/11(D)     GE0/0/12(U)                     
             TG:GE0/0/24(U)                                                     

30   common  UT:GE0/0/4(D)      GE0/0/5(D)      GE0/0/8(D)      GE0/0/13(U)     

                GE0/0/14(D)     GE0/0/15(D)     GE0/0/16(U)                     
             TG:GE0/0/24(U)                                                     


VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------

1    enable  default       enable  disable    VLAN 0001                         
10   enable  default       enable  disable    VLAN 0010                         
30   enable  default       enable  disable    VLAN 0030                         
[LSW1]display port vlan
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/1    hybrid       1     -                                   
GigabitEthernet0/0/2    hybrid       1     -                                   
GigabitEthernet0/0/3    hybrid       1     -                                   
GigabitEthernet0/0/4    hybrid       1     -                                   
GigabitEthernet0/0/5    hybrid       1     -                                   
GigabitEthernet0/0/6    hybrid       1     -                                   
GigabitEthernet0/0/7    hybrid       1     -                                   
GigabitEthernet0/0/8    hybrid       1     -                                   
GigabitEthernet0/0/9    access       10    -                                   
GigabitEthernet0/0/10   access       10    -                                   
GigabitEthernet0/0/11   access       10    -                                   
GigabitEthernet0/0/12   access       10    -                                   
GigabitEthernet0/0/13   access       30    -                                   
GigabitEthernet0/0/14   access       30    -                                   
GigabitEthernet0/0/15   access       30    -                                   
GigabitEthernet0/0/16   access       30    -                                   
GigabitEthernet0/0/17   hybrid       1     -                                   
GigabitEthernet0/0/18   hybrid       1     -                                   
GigabitEthernet0/0/19   hybrid       1     -                                   
GigabitEthernet0/0/20   hybrid       1     -                                   
GigabitEthernet0/0/21   hybrid       1     -                                   
GigabitEthernet0/0/22   hybrid       1     -                                   
GigabitEthernet0/0/23   hybrid       1     -                                   
GigabitEthernet0/0/24   trunk        1     1 10 30
[LSW1]

LSW2与LSW1的配置同理

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname LSW2
[LSW2]undo info-center enable
Info: Information center is disabled.
[LSW2]vlan batch 10 30
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW2]port-group pvlan10
[LSW2-port-group-pvlan10]group-member g0/0/9 to g0/0/12 
[LSW2-port-group-pvlan10]port link-type access
[LSW2-GigabitEthernet0/0/9]port link-type access
[LSW2-GigabitEthernet0/0/10]port link-type access
[LSW2-GigabitEthernet0/0/11]port link-type access
[LSW2-GigabitEthernet0/0/12]port link-type access
[LSW2-port-group-pvlan10]port default vlan 10
[LSW2-GigabitEthernet0/0/9]port default vlan 10
[LSW2-GigabitEthernet0/0/10]port default vlan 10
[LSW2-GigabitEthernet0/0/11]port default vlan 10
[LSW2-GigabitEthernet0/0/12]port default vlan 10
[LSW2-port-group-pvlan10]qu
[LSW2]port-group pvlan30
[LSW2-port-group-pvlan30]group-member g0/0/13 to g0/0/16
[LSW2-port-group-pvlan30]port link-type access
[LSW2-GigabitEthernet0/0/13]port link-type access
[LSW2-GigabitEthernet0/0/14]port link-type access
[LSW2-GigabitEthernet0/0/15]port link-type access
[LSW2-GigabitEthernet0/0/16]port link-type access
[LSW2-port-group-pvlan30]port default vlan 30
[LSW2-GigabitEthernet0/0/13]port default vlan 30
[LSW2-GigabitEthernet0/0/14]port default vlan 30
[LSW2-GigabitEthernet0/0/15]port default vlan 30
[LSW2-GigabitEthernet0/0/16]port default vlan 30
[LSW2-port-group-pvlan30]qu
[LSW2]interface g0/0/24
[LSW2-GigabitEthernet0/0/24]port link-type trunk
[LSW2-GigabitEthernet0/0/24]port trunk allow-pass vlan 10 30
#这里也可以写
allow-pass vlan all
[LSW2-GigabitEthernet0/0/24]qu
[LSW2]display vlan 
The total number of vlans is : 3
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
1    common  UT:GE0/0/1(D)      GE0/0/2(D)      GE0/0/3(D)      GE0/0/4(D)      
                GE0/0/5(D)      GE0/0/6(D)      GE0/0/7(D)      GE0/0/8(D)      
                GE0/0/17(D)     GE0/0/18(D)     GE0/0/19(D)     GE0/0/20(D)     
                GE0/0/21(D)     GE0/0/22(D)     GE0/0/23(D)     GE0/0/24(U)     

10   common  UT:GE0/0/9(U)      GE0/0/10(D)     GE0/0/11(D)     GE0/0/12(U)     

             TG:GE0/0/24(U)                                                     

30   common  UT:GE0/0/13(U)     GE0/0/14(D)     GE0/0/15(D)     GE0/0/16(U)     

             TG:GE0/0/24(U)                                                     


VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------

1    enable  default       enable  disable    VLAN 0001                         
10   enable  default       enable  disable    VLAN 0010                         
30   enable  default       enable  disable    VLAN 0030                         
[LSW2]display port vlan
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/1    hybrid       1     -                                   
GigabitEthernet0/0/2    hybrid       1     -                                   
GigabitEthernet0/0/3    hybrid       1     -                                   
GigabitEthernet0/0/4    hybrid       1     -                                   
GigabitEthernet0/0/5    hybrid       1     -                                   
GigabitEthernet0/0/6    hybrid       1     -                                   
GigabitEthernet0/0/7    hybrid       1     -                                   
GigabitEthernet0/0/8    hybrid       1     -                                   
GigabitEthernet0/0/9    access       10    -                                   
GigabitEthernet0/0/10   access       10    -                                   
GigabitEthernet0/0/11   access       10    -                                   
GigabitEthernet0/0/12   access       10    -                                   
GigabitEthernet0/0/13   access       30    -                                   
GigabitEthernet0/0/14   access       30    -                                   
GigabitEthernet0/0/15   access       30    -                                   
GigabitEthernet0/0/16   access       30    -                                   
GigabitEthernet0/0/17   hybrid       1     -                                   
GigabitEthernet0/0/18   hybrid       1     -                                   
GigabitEthernet0/0/19   hybrid       1     -                                   
GigabitEthernet0/0/20   hybrid       1     -                                   
GigabitEthernet0/0/21   hybrid       1     -                                   
GigabitEthernet0/0/22   hybrid       1     -                                   
GigabitEthernet0/0/23   hybrid       1     -                                   
GigabitEthernet0/0/24   trunk        1     1 10 30

 至此,PC-10-1能跨网段ping通PC-10-3,同理PC-30-1能跨网段ping通PC-30-3

查看捕获的以太网帧是否带标记,首先需要显示vlan id,步骤如下:

编辑--->首选项

number下拉,选择802.1Q VLAN id 

 

这里对LSW1的g0/0/9进行抓包,其link-type为access

对于普通终端的连接,是不需要vlan标记的

这里对LSW1的g0/0/24进行抓包,其link-type为trunk,并且带vlan标记,用于标识该数据帧属于哪个 VLAN。

更多推荐

实用的嵌入式编码技巧:第三部分

每个触发器都有两个我们在风险方面违反的关键规格。“建立时间”是时钟到来之前输入数据必须稳定的最小纳秒数。“保持时间”告诉我们在时钟转换后保持数据存在多长时间。这些规格因逻辑设备而异。有些可能需要数十纳秒的设置和/或保持时间;其他人则需要少一个数量级。图9.1:建立和保持时间如果我们倾向于编织,我们将尊重这些参数,并且触

《思维与智慧》简介及投稿邮箱

《思维与智慧》自1982年创刊,经国家新闻出版署批准,由河北省教育厅主管,河北行知文化传媒有限责任公司主办的益智励志类大众文化期刊。《思维与智慧》办刊宗旨是:“开发思维,启迪智慧,滋润心灵”,以通俗形式、简明语言介绍创新思维学的基本知识,展示创新思维的哲理性、深刻性,但力戒抽象议论,而应深入浅出,夹叙夹议,寓理于事。主

Nginx之会话管理解读

目录session概念问题引进Nginx_hash高级负载均衡ip_hashhash$cookie_xxxhash$request_uri补充知识点:服务器扩容session概念Session对象存储特定用户会话所需的属性及配置信息。这样,当用户在应用程序的Web页之间跳转时,存储在Session对象中的变量将不会丢失

我的安卓AOSP开发使用到的教程汇总【安卓12】

目录投屏软件日志打印脚本bat【gpt生成的】摄像头定位静默安装APP系统签名多线程使用APK打包APKOTA差分包制作服务和主线程通信代码注释模板阿里云ClassAOSP教程添加默认APN关闭双击电源键打开相机ubuntu安装遇到的bug投屏软件scrcpy【设置为系统变量后可以投屏的情况下使用adb并且查看log】

秒杀场景设计

1.活动页面静态化处理没有到活动时间页面静态化处理避免访问服务端2.使用cdn让用户可以获取就近的所需静态页面内容3.限制用户同一时间点击次数4.把商品库存提前放入redis,秒杀请求直接操作redis防止操作直接落库打崩数据库5.使用lua脚本操作redis保证操作原子性,确保不会发生超买超卖。具体就是先查看商品id

只需3步部署Django项目到Kubernetes上

1.目标本文讲述了如何通过3步,把Django项目部署在K8S上。本文适用读者:了解Django项目的开发。了解K8S的用途。2.具体步骤把一个Django项目部署在Kubernete环境上,只需以下3步:创建镜像部署在Kubernetes环境上配置MySQL接下来我们依次讲述具体步骤。3.第一步:创建镜像假设已有Dj

软件设计师考试学习1

前言计算机组成原理及体系结构数据的表示进制的转换原码反码补码移码最高位是符号位,负数符号位为1反码补码正数和原码一样,负数有区别反码符号位不动,其他位置取反补码在反码基础上加1移码是将补码的符号为取反在原码和反码中,正0和负0的表示是不一样的而在补码中,正0和负0的表示都是00000000-128的补码是1000000

Java基于SpringBoot的财务管理系统,附源码,教程

博主介绍:✌程序员徐师兄、7年大厂程序员经历。全网粉丝30W+,Csdn博客专家、掘金/华为云/阿里云/InfoQ等平台优质作者、专注于Java技术领域和毕业项目实战✌文章目录一简介第二.主要技术第三、部分效果图第四章系统设计4.1功能结构4.2数据库设计4.2.1数据库E/R图4.2.2数据库表第五章系统功能实现5.

Android kotlin开源项目-功能标题目录

目录一、BRVAH二、开源项目标题目录1、RV列表动效2、拖拽与侧滑3、数据库4、树形图(多级菜单)5、轮播图与头条6、网络库7、表格标8、统计图表三、源码文件目录图一、BRVAHBaseRecyclerViewAdapterHelper简称BRVAH二、开源项目标题目录1、RV列表动效序号功能标题适配器、多个控件框架

《Web安全基础》08. 漏洞发现

web1:漏洞发现1.1:操作系统1.2:WEB应用1.3:APP应用1.4:API接口&系统端口1.4.1:API关键字1.4.2:服务&端口1.4.3:相关资源2:总结本系列侧重方法论,各工具只是实现目标的载体。命令与工具只做简单介绍,其使用另见《安全工具录》。1:漏洞发现1.1:操作系统相关资料:Goby官网:h

大模型时代下向量数据库的创新与变革

前言:在当今信息时代,数据库扮演着关键的角色,用于存储和管理各种类型的数据。向量数据库是一种专门设计用于高维数据存储和快速检索的数据库系统。在不断创新和变革后,腾讯云不久前发布了AI原生(AINative)向量数据库。文章目录向量数据库发展背景和现状AI加持下,向量数据库是否应该重新定义?取其精华,优势思考如何快速申请

热文推荐