Cisco交换机设置点滴
交换机虚拟网(Virtual LANs)的设置:
Catalyst 5000上实现VLAN划分及外部VLAN路由设置
分配VTP域(a VTP Domain)
将Cat5000加入域
指定中继端口(a Trunk)
Dynamic ISL
分配VLAN到端口
设置VLAN 20
配置Router
注:存在三个VLAN,在VLAN之间通过Router做路由.
-
分配VTP域
什么是VTP?
VTP是VLAN Trunk PRotocol的简写,它提供每个设备 (router 或 LAN-switch)在中继端口(trunk ports)发送广播. 这些广播被发送到一个组播地址,并被所有相邻设备接收. 这些广播列出了发送设备的治理域,它的配置修订号,已知的VLAN, 及已知VLAN的确定参数.通过听这些广播,在相同治理域的所有设备都可以学习到在发送设备上配置的新的VLAN.使用这种方法,新的 VLAN只需要在治理域内的一台设备上建立和配置.信息会自动被相同治理域内的其它设备学到.
分配VTP域
首先分配VTP域名(a VTP domain name),在相同治理域内的交换机可以通过VTP协议互相学习VTP信息.
Cat5001 (enable) sho vtp domain
Domain Name Domain Index VTP Version Local Mode
-------------------------------- ------------ ----------- -----------
1 1 server
Advt Interval Vlan-count Max-vlan-storage Config Revision SNMP Traps
------------- ---------- ---------------- --------------- -----------
300 5 256 0 disabled
Last Updater
---------------
0.0.0.0
Cat5001 (enable)
Cat5001 (enable) set vtp domain cisco
VTP domain cisco modified
Cat5001 (enable) sho vtp domain
Domain Name Domain Index VTP Version Local Mode
-------------------------------- ------------ ----------- -----------
cisco 1 1 server
Advt Interval Vlan-count Max-vlan-storage Config Revision SNMP Traps
------------- ---------- ---------------- --------------- -----------
300 5 256 0 disabled
Last Updater
---------------
0.0.0.0
Cat5001 (enable)
--------------------------------------------------------------------------------
将Catalyst 5002加入域
需要将Catalyst 5002加入名为cisco的VTP治理域, 并设为VTP client,它将接收来自VTP server 的VTP配置及更新.
注重:Catalyst 5000系列交换机默认为VTP server.
cat5002 (enable)
cat5002 set vtp domain cisco mode client
指定中继端口(Trunk ports)
VLAN Trunk协议(VTP)只在中继口(ISL , LANE 和802.10)上传输,应在二个Catalyst5000
交换机间定义哪个口作为中继端口(Trunk port).
Inter-Switch Link (ISL) 中继用于Fast Ethernet和Gigabit Ethernet端口
IEEE 802.10中继用于FDDI/CDDI端口
LAN Emulation (LANE) 中继用于ATM 端口
Cat5001 (enable) set trunk 1/1 on
Port 1/1 mode set to on.
Cat5001 (enable)
Wed Jun 19 1996, 15:00:02 Port 1/1 has become trunk.
--------------------------------------------------------------------------------
Dynamic ISL
有了DISL(Dynamic ISL), 你不需要修改远端的Catalyst 5000;以下信息将显示在远端的Catalyst 5000.
Wed Jun 19 1996, 15:51:59 Port 1/2 has become trunk.
Cat5001 (enable) sho trunk
Port Mode Status
------- --------- ------------
1/1 on trunking
1/2 auto not-trunking
2/1-2 off not-trunking
5/1 auto not-trunking
5/2 auto not-trunking
5/3 auto not-trunking
5/4 auto not-trunking
5/5 auto not-trunking
5/6 auto not-trunking
5/7 auto not-trunking
5/8 auto not-trunking
5/9 auto not-trunking
5/10 auto not-trunking
5/11 auto not-trunking
5/12 auto not-trunking
Port Vlans allowed
------- ---------------------------------------------------------------------
1/1 1-1000
1/2 1-1000
2/1-2 1-1000
5/1 1-1000
5/2 1-1000
5/3 1-1000
5/4 1-1000
5/5 1-1000
5/6 1-1000
5/7 1-1000
5/8 1-1000
5/9 1-1000
5/10 1-1000
5/11 1-1000
5/12 1-1000
Port Vlans active
------- ---------------------------------------------------------------------
1/1 1
1/2 1
2/1-2 1
5/1 1
5/2 1
5/3 1
5/4 1
5/5 1
5/6 1
5/7 1
5/8 1
5/9 1
5/10 1
5/11 1
5/12 1
注重: DISL在Cisco IOS软件中不支持.
分配VLAN到端口
Cat5001 (enable) set vlan 2 3/2-20
VLAN 2 modified.
VLAN 1 modified.
VLAN Mod/Ports
---- -----------------------
2 1/1
3/2-20
Cat5001 (enable) set vlan 20 5/1-6
VLAN 20 modified.
VLAN 1 modified.
VLAN Mod/Ports
---- -----------------------
20 1/1
5/1-6
Configure additional information for VLAN 20.
On the other Catalyst 5000 :
Cat5002 (enable) set vlan 2 4/1-2,5/6-12
VLAN 2 modified.
VLAN 1 modified.
VLAN Mod/Ports
---- -----------------------
2 1/2
4/1-3,4/5-23
5/6-12
Configure additional information for VLAN 20.
Cat5002 (enable) set vlan 20 5/1-5
VLAN 20 modified.
VLAN 1 modified.
VLAN Mod/Ports
---- -----------------------
20 1/2
5/1-5
Configure VLAN 20 on a VTP server.
显示端口配置
Cat5001 (enable) show port
Port Name Status Vlan Level Duplex Speed Type
1/1 connected 1 normal half 100 100BaseTX
1/2 connected trunk normal half 100 100BaseTX
2/1 connecting 1 normal half 100 FDDI
2/2 connected 1 normal half 100 FDDI
4/1 inactive 2 normal half 10 10BaseT
4/2 inactive 2 normal half 10 10BaseT
4/3 inactive 2 normal half 10 10BaseT
4/4 notconnect 1 normal half 10 10BaseT
4/5 inactive 2 normal half 10 10BaseT
4/6
此时, VLAN 2 和VLAN 20 还未激活.所以在VLAN 2和VLAN 20的端口是inactive状态.
设置VLAN 20
假如在网络里有VTP server和VTP clent,请在VTP server上设置VLAN 20
Cat5001 (enable) set vlan 20
VLAN 20 modified
这将激活在所有治理域cisco内的VLAN 20
Cat5001 (enable) sho vlan 20
VLAN Name Status Mod/Ports
---- -------------------------------- --------- ----------------------------
20 VLAN0020 active 1/1
5/1-6
VLAN Type SAID MTU Parent RingNo BridgeNo Stp Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- ------ ------
20 enet 100020 1500 - - - - 0 0
配置Router
conf t
interface FastEthernet0/0.1
encapsulation isl 20
ip address 1.1.1.1 255.255.255.0
interface FastEthernet0/0.2
encapsulation isl 2
ip address 2.2.2.1 255.255.255.0
interface FastEthernet0/0.3
encapsulation isl 1
ip address 172.16.80.1 255.255.255.0
Router eigrp 666
network 1.0.0.0
network 2.0.0.0
network 172.16.80.0
end
writ mem