VLAN02-CFANZ编程社区

VLAN配置实验

一、实验1 如图,通过配置Access链路和Trunk链路，实现VLAN内主机互通(PC1和PC3互通，PC2和PC4互通)。 PC1：192.168.1.1 属于vlan 10 PC2：192.168.1.2 属于vlan 20 PC3：192.168.1.3 属于vlan 10 PC4：192.168.1.4 属于vlan 20

SW1配置命令

<Huawei>system-view                   
[Huawei]sysname SW1
[SW1]
[SW1]vlan 10
[SW1-vlan10]quit 
[SW1]vlan 20
[SW1-vlan20]q
[SW1]
[SW1]int gi0/0/1	
[SW1-GigabitEthernet0/0/1]port link-type access 	
[SW1-GigabitEthernet0/0/1]port default vlan 10
[SW1-GigabitEthernet0/0/1]undo shutdown
[SW1-GigabitEthernet0/0/1]q
[SW1]int gi0/0/2	
[SW1-GigabitEthernet0/0/2]port link-type access 
[SW1-GigabitEthernet0/0/2]port default vlan 20
[SW1-GigabitEthernet0/0/2]undo shutdown
[SW1-GigabitEthernet0/0/2]quit
[SW1]
[SW1]int gi0/0/24
[SW1-GigabitEthernet0/0/24]port link-type trunk 
[SW1-GigabitEthernet0/0/24]port trunk allow-pass vlan all
[SW1-GigabitEthernet0/0/24]q
[SW1]return               
<SW1>save

SW2配置命令

<Huawei>
<Huawei>system-view
[Huawei]
[Huawei]sysname SW2
[SW2]
[SW2]vlan batch 10 20
[SW2]
[SW2]int gi0/0/1	
[SW2-GigabitEthernet0/0/1]port link-type access 	
[SW2-GigabitEthernet0/0/1]port default vlan 10
[SW2-GigabitEthernet0/0/1]undo shutdown
[SW2-GigabitEthernet0/0/1]q
[SW2]int gi0/0/2	
[SW2-GigabitEthernet0/0/2]port link-type access 
[SW2-GigabitEthernet0/0/2]port default vlan 20
[SW2-GigabitEthernet0/0/2]undo shutdown
[SW2-GigabitEthernet0/0/2]quit
[SW2]
[SW2]int gi0/0/24
[SW2-GigabitEthernet0/0/24]port link-type trunk 
[SW2-GigabitEthernet0/0/24]port trunk allow-pass vlan 10 20
[SW2-GigabitEthernet0/0/24]q
[SW2]<Ctrl+z>        
<SW2>save

验证分别为PC1~PC4配置IP地址，进行Ping测试，PC1和PC3互通，PC2和PC4互通，PC1和PC2或PC4不通。

二、实验2

通过Hybrid链路实现access链路功能，如图： 交换机配置：

[sw1]vlan 10     #创建vlan
[sw1-vlan10]description vlan_10   #vlan名字/描述
[sw1-vlan10]q
[sw1]
[sw1]int gi0/0/1
[sw1-GigabitEthernet0/0/1]port link-type hybrid 	#设置端口类型为hybrid(默认，该命令可省略)
[sw1-GigabitEthernet0/0/1]port hybrid pvid vlan 10  #设置端口PVID，数据帧进入时，自动打上vlan10的标签
[sw1-GigabitEthernet0/0/1]undo shutdown #开启端口
[sw1-GigabitEthernet0/0/1]quit
[sw1]
[sw1]int gi0/0/2
[sw1-GigabitEthernet0/0/2]port link-type hybrid 
[sw1-GigabitEthernet0/0/2]port hybrid pvid vlan 10
[sw1-GigabitEthernet0/0/2]undo shutdown 
[sw1-GigabitEthernet0/0/2]quit
[sw1]
[sw1]int gi0/0/1
[sw1-GigabitEthernet0/0/1]port hybrid untagged vlan 10  #数据帧出流量需要剥除标签信息
[sw1-GigabitEthernet0/0/1]q
[sw1]int gi0/0/2
[sw1-GigabitEthernet0/0/2]port hybrid untagged vlan 10
[sw1-GigabitEthernet0/0/2]q
[sw1]display port vlan  #查看端口PVID信息
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/1    hybrid       10    -                                   
GigabitEthernet0/0/2    hybrid       10    -                                   
GigabitEthernet0/0/3    hybrid       1     -                                   
GigabitEthernet0/0/4    hybrid       1     -                                   
GigabitEthernet0/0/5    hybrid       1     -                                   
...                     ...          ...   ...       
GigabitEthernet0/0/22   hybrid       1     -                                   
GigabitEthernet0/0/23   hybrid       1     -                                   
GigabitEthernet0/0/24   hybrid       1     -                                            


[sw1]display vlan #查看VLAN信息，vlan10中端口1和2已经是UT状态
The total number of vlans is : 2
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
1    common  UT:GE0/0/1(U)      GE0/0/2(U)      GE0/0/3(D)      GE0/0/4(D)      
                GE0/0/5(D)      GE0/0/6(D)      GE0/0/7(D)      GE0/0/8(D)      
                GE0/0/9(D)      GE0/0/10(D)     GE0/0/11(D)     GE0/0/12(D)     
                GE0/0/13(D)     GE0/0/14(D)     GE0/0/15(D)     GE0/0/16(D)     
                GE0/0/17(D)     GE0/0/18(D)     GE0/0/19(D)     GE0/0/20(D)     
                GE0/0/21(D)     GE0/0/22(D)     GE0/0/23(D)     GE0/0/24(D)     

10   common  UT:GE0/0/1(U)      GE0/0/2(U)                                      


VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------
1    enable  default       enable  disable    VLAN 0001                         
10   enable  default       enable  disable    VLAN 0010                         
[sw1]
<sw1>save  #保存配置

验证： PC1和PC2可以相互ping通。

交换机处理数据帧的过程： 1.当交换机接收到一个数据帧时，会为该数据帧打一个标签，依靠的是 display port vlan 该显示结果中对应端口下的 PVID 参数。 2.当交换机将一个数据帧转发出去的时候，查看的是 display vlan 该显示结果中，在对应的VLAN后面的成员端口，同时要注意这些端口在发送出去数据时，是否携带标签（TG/UT）。

三、实验3 通过Hybrid链路，实现access和trunk链路功能，实现VLAN 10内PC1和PC3互通，VLAN 20内PC2和PC4互通。如图： SW1配置

<Huawei>undo terminal monitor   #关闭屏幕输出开关。
<Huawei>system-view 
[Huawei]sysname SW1
[SW1]
[SW1]user-interface console 0  
[SW1-ui-console0]screen-length 200 #设置屏幕长度，默认值为24
[SW1-ui-console0]screen-width 120  #设置屏幕宽度，默认值为80
[SW1-ui-console0]idle-timeout 0 0 #关闭超时断连功能，第一个0位代表分钟，第二个0位代表秒（默认 10 分钟 0 秒）
[SW1-ui-console0]q
[SW1]
[SW1]vlan batch 10 20
[SW1]
[SW1]int gi0/0/1	
[SW1-GigabitEthernet0/0/1]port link-type hybrid 	
[SW1-GigabitEthernet0/0/1]port hybrid pvid vlan 10 	
[SW1-GigabitEthernet0/0/1]port hybrid untagged vlan 10	
[SW1-GigabitEthernet0/0/1]undo shutdown 
[SW1-GigabitEthernet0/0/1]quit
[SW1]
[SW1]int gi0/0/2	
[SW1-GigabitEthernet0/0/2]port link-type hybrid 
[SW1-GigabitEthernet0/0/2]port hybrid pvid vlan 20	
[SW1-GigabitEthernet0/0/2]port hybrid untagged vlan 20
[SW1-GigabitEthernet0/0/2]undo shutdown 
[SW1-GigabitEthernet0/0/2]quit
[SW1]
[SW1]int gi0/0/24	
[SW1-GigabitEthernet0/0/24]port link-type hybrid 	
[SW1-GigabitEthernet0/0/24]port hybrid tagged vlan 10 20
[SW1-GigabitEthernet0/0/24]undo shutdown 
[SW1-GigabitEthernet0/0/24]quit

[SW1]display vlan 
The total number of vlans is : 3
--------------------------------------------------------------------------------
U: Up;         D: Down;         TG: Tagged;         UT: Untagged;
MP: Vlan-mapping;               ST: Vlan-stacking;
#: ProtocolTransparent-vlan;    *: Management-vlan;
--------------------------------------------------------------------------------

VID  Type    Ports                                                          
--------------------------------------------------------------------------------
1    common  UT:GE0/0/1(U)      GE0/0/2(U)      GE0/0/3(D)      GE0/0/4(D)      
                GE0/0/5(D)      GE0/0/6(D)      GE0/0/7(D)      GE0/0/8(D)      
                GE0/0/9(D)      GE0/0/10(D)     GE0/0/11(D)     GE0/0/12(D)     
                GE0/0/13(D)     GE0/0/14(D)     GE0/0/15(D)     GE0/0/16(D)     
                GE0/0/17(D)     GE0/0/18(D)     GE0/0/19(D)     GE0/0/20(D)     
                GE0/0/21(D)     GE0/0/22(D)     GE0/0/23(D)     GE0/0/24(U)     

10   common  UT:GE0/0/1(U)                                                      
             TG:GE0/0/24(U)                                                     

20   common  UT:GE0/0/2(U)                                                      

             TG:GE0/0/24(U)                                                     


VID  Status  Property      MAC-LRN Statistics Description      
--------------------------------------------------------------------------------

1    enable  default       enable  disable    VLAN 0001                         
10   enable  default       enable  disable    VLAN 0010                         
20   enable  default       enable  disable    VLAN 0020                         
	
[SW1]display port vlan 
Port                    Link Type    PVID  Trunk VLAN List
-------------------------------------------------------------------------------
GigabitEthernet0/0/1    hybrid       10    -                                   
GigabitEthernet0/0/2    hybrid       20    -                                   
GigabitEthernet0/0/3    hybrid       1     -                                   
GigabitEthernet0/0/4    hybrid       1     -                                                                     
......................(此处省略)                               
GigabitEthernet0/0/23   hybrid       1     -                                   
GigabitEthernet0/0/24   hybrid       1     10 20
[SW1]return
<SW1>save

SW2配置

[SW2]vlan batch 10 20 
[SW2]int gi0/0/1
[SW2-GigabitEthernet0/0/1]port link-type hybrid
[SW2-GigabitEthernet0/0/1]port hybrid pvid vlan 10	
[SW2-GigabitEthernet0/0/1]port hybrid untagged vlan 10
[SW2-GigabitEthernet0/0/1]un shu
[SW2-GigabitEthernet0/0/1]q
[SW2]int gi0/0/2
[SW2-GigabitEthernet0/0/2]port link-type hybrid
[SW2-GigabitEthernet0/0/2]port hybrid pvid vlan 20	
[SW2-GigabitEthernet0/0/2]port hybrid untagged vlan 20
[SW2-GigabitEthernet0/0/2]q
[SW2]int gi0/0/24
[SW2-GigabitEthernet0/0/24]port link-ty hybrid 	
[SW2-GigabitEthernet0/0/24]port hybrid tagged vlan 10 20
[SW2-GigabitEthernet0/0/24]un sh 
[SW2-GigabitEthernet0/0/24]quit
<SW2>save

验证： PC1与PC3可以互相Ping通，PC2和PC4也可以互相ping通。 四、实验4，hybrid链路配置 如图，通过hybrid链路实现PC1和PC2能够访问服务器Server，但PC1和PC2不能互通的效果。 SW1

[SW1]vlan batch 10 20 100
[SW1]int gi0/0/1
[SW1-GigabitEthernet0/0/1]port hybrid pvid vlan 10	
[SW1-GigabitEthernet0/0/1]port hybrid untagged vlan 10 100
[SW1-GigabitEthernet0/0/1]undo shutdown 
[SW1-GigabitEthernet0/0/1]q
[SW1]int gi0/0/2
[SW1-GigabitEthernet0/0/2]port hybrid pvid vlan 20	
[SW1-GigabitEthernet0/0/2]port hybrid untagged vlan 20 100
[SW1-GigabitEthernet0/0/2]un sh
[SW1-GigabitEthernet0/0/2]q
[SW1]int gi0/0/24
[SW1-GigabitEthernet0/0/24]port hybrid tagged vlan 10 20 100
[SW1-GigabitEthernet0/0/24]un sh
[SW1-GigabitEthernet0/0/24]quit 
[SW1]
<SW1>save

SW2

[SW2]vlan batch 10 20 100
[SW2]int gi0/0/1
[SW2-GigabitEthernet0/0/1]port hybrid pvid vlan 100
[SW2-GigabitEthernet0/0/1]port hybrid untagged vlan 10 20 100	
[SW2-GigabitEthernet0/0/1]un shu
[SW2-GigabitEthernet0/0/1]q
[SW2]int gi0/0/24	
[SW2-GigabitEthernet0/0/24]port hybrid tagged vlan 10 20 100	
[SW2-GigabitEthernet0/0/24]dis this 
#
interface GigabitEthernet0/0/24
 port hybrid tagged vlan 10 20 100
#
return
[SW2-GigabitEthernet0/0/24]q
[SW2]
<SW2>save

验证验证可得，PC1与Server可以互通，PC2与Server可以互通，PC1和PC2不能互通。