VLAN原理和基本配置课件

,单击此处编辑母版标题样式,单击此处编辑母版文本样式,第二级,第三级,杭州华三通信技术有限公司,VLAN,原理和基本配置,ISSUE 1.0,日期：,杭州华三通信技术有限公司 版权所有，未经授权不得使用与传播,VLAN,技术简介,VLAN,类型,VLAN,技术原理,VLAN,的基本配置,目录,广播风暴,二层交换机,设备发出的广播帧在广播域中传播，占用网络带宽，降低设备性能。,二层交换机,PCA,PCB,PCC,PCD,广播帧,二层交换机,用路由器来隔离广播,二层交换机,路由器能够隔离广播，减小广播域范围。,路由器,PCA,PCB,PCC,PCD,广播帧,二层交换机,用,VLAN,隔离广播,VLAN1,二层交换机,PCA,PCB,PCC,PCD,广播帧,VLAN2,二层交换机使用,VLAN,隔离广播，减小广播域范围。,VLAN,的优点,有效控制广播域范围,增强局域网的安全性,灵活构建虚拟工作组,PCA,PCB,PCC,PCD,工作组,1,工作组,2,VLAN,技术简介,VLAN,类型,VLAN,技术原理,VLAN,的基本配置,目录,基于端口的VLAN,E1/0/1,E1/0/2,E1/0/3,E1/0/4,PCA,PCB,PCC,PCD,VLAN Table,VLAN ID,Port,10,E1/0/1,10,E1/0/2,20,E1/0/3,20,E1/0/4,VLAN 10,VLAN 20,基于MAC,地址,的VLAN,E1/0/1,E1/0/2,E1/0/3,E1/0/4,PCA,PCB,PCC,PCD,VLAN Table,VLAN ID,MAC Address,10,MAC_A,10,MAC_B,20,MAC_C,20,MAC_D,VLAN 10,VLAN 20,基于,协议,的VLAN,E1/0/1,E1/0/2,E1/0/3,E1/0/4,PCA,PCB,PCC,PCD,VLAN Table,VLAN ID,Protocol,10,IP,20,IPX,VLAN 10,运行,IP,协议,VLAN 20,运行,IPX,协议,基于,子网,的VLAN,E1/0/1,E1/0/2,E1/0/3,E1/0/4,10.0.0.1/24,VLAN Table,VLAN ID,IP,子网,10,10.0.0.0/24,20,20.0.0.0/24,VLAN 10,VLAN 20,10.0.0.2/24,20.0.0.1/24,20.0.0.2/24,VLAN,技术简介,VLAN,类型,VLAN,技术原理,VLAN,的基本配置,目录,VLAN 10,VLAN 20,VLAN,标签,PCA,PCB,PCC,PCD,带有,VLAN10,标签的以太网帧,带有,VLAN20,标签的以太网帧,交换机用,VLAN,标签来区分不同,VLAN,的以太网帧,802.1Q,帧格式,DA,SA,Type,Data,CRC,标准以太网帧,DA,SA,Type,Data,CRC,tag,TPID,Priority,CFI,VLAN ID,TCI,带有,IEEE802.1Q,标记的以太网帧,单交换机,VLAN,标签操作,PCA,PCB,PCC,PCD,不带,VLAN,标签的,以太网帧,在,进入,交换机端口时，附,加,缺省,VLAN,标签,出,交换机端口时，,去,掉,VLAN,标签,Tag=20,Tag=10,Access,链路类型端口,PCA,PCB,PCC,PCD,Access,端口,只允许缺省,VLAN,通过，仅接收和发送一个,VLAN,的数据帧,一般用于连接用户设备,Tag=20,Tag=10,跨交换机,VLAN,标签操作,PCA,PCB,PCC,PCD,不带,VLAN,标签的,以太网帧,带有,VLAN,标签的以太网帧在交换机间传递,Tag=20,Tag=10,E1/0/1,E1/0/2,E1/0/1,E1/0/2,E1/0/24,E1/0/24,SWA,SWB,PCA,PCB,PCC,PCD,Trunk,端口,PVID:20,允许多个,VLAN,通过，可以接收和发送多个,VLAN,的数据帧,缺省,VLAN,的以太网帧不带标签,一般用于交换机之间连接,Trunk,端口,PVID:20,Access,端口,PVID:20,Access,端口,PVID:10,Access,端口,PVID:10,Access,端口,PVID:20,Tag=10,Trunk,链路类型端口,E1/0/1,E1/0/2,E1/0/1,E1/0/2,E1/0/24,E1/0/24,允许多个,VLAN,通过，可以接收和发送多个,VLAN,的数据帧,Hybrid,端口和,Trunk,端口的不同之处在于：,Hybrid,端口允许多个,VLAN,的以太网帧不带标签,Trunk,端口只允许缺省,VLAN,的以太网帧不带标签,PCA,PCB,PCC,Tag=20,Hybrid,端口,PVID:30,Untag:10,20,30,Tag=10,Hybrid,端口,PVID:10,Untag:10,30,Hybrid,端口,PVID:20,Untag:20,30,Hybrid,链路类型端口,VLAN,技术简介,VLAN,类型,VLAN,技术原理,VLAN,的基本配置,目录,VLAN,基本配置,创建,VLAN,并进入,VLAN,视图,将指定端口加入到当前,VLAN,中,Switch,vlan,vlan-id,Switch-vlan10,port,interface-list,配置,Trunk,端口,配置端口的链路类型为,Trunk,类型,允许指定的,VLAN,通过当前,Trunk,端口,设置,Trunk,端口的缺省,VLAN,Switch-Ethernet1/0/1,port link-type trunk,Switch-Ethernet1/0/1,port trunk permit vlan,vlan-id-list,|all,Switch-Ethernet1/0/1,port trunk pvid vlan,vlan-id,配置,Hybrid,端口,配置端口的链路类型为,Hybrid,类型,允许指定的,VLAN,通过当前,Hybrid,端口,设置,Hybrid,端口的缺省,VLAN,Switch-Ethernet1/0/1,port link-type hybrid,Switch-Ethernet1/0/1,port hybrid vlan,vlan-id-list,tagged|untagged,Switch-Ethernet1/0/1,port hybrid pvid vlan,vlan-id,VLAN,配置示例,PCA,PCB,PCC,PCD,E1/0/2,E1/0/1,E1/0/2,E1/0/1,E1/0/24,E1/0/24,SWAvlan 10,SWA-vlan10port Ethernet1/0/1,SWAvlan 20,SWA-vlan20port Ethernet1/0/2,SWAinterface Ethernet1/0/24,SWA-Ethernet1/0/24port link-type trunk,SWA-Ethernet1/0/24,port trunk permit vlan 10 20,SWA,SWB,SWBvlan 10,SWB-vlan10port Ethernet1/0/1,SWBvlan 20,SWB-vlan20port Ethernet1/0/2,SWBinterface Ethernet1/0/24,SWB-Ethernet1/0/24port link-type trunk,SWB-Ethernet1/0/24,port trunk permit vlan 10 20,VLAN,显示及维护,display vlan,VLAN function is enabled.,Total 3 VLAN exist(s).,Now,the following VLAN exist(s):,1(default),2,10,display vlan 2,VLAN ID:2,VLAN Type:static,Route interface:not configured,Description:VLAN 0002,Tagged Ports:none,Untagged Ports:,Ethernet1/0/1 Ethernet1/0/3 Ethernet1/0/4,display interface ethernet 1/0/1,.,PVID:1,Mdi type:auto,Port link-type:access,Tagged VLAN ID:none,Untagged VLAN ID:1,Port priority:0,.,VLAN,中哪些端口打标签,VLAN,中哪些端口不打标签,当前交换机存在的,VLAN,当前端口的缺省,VLAN,当前端口链路类型为,Access,