Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Network equipment configuration and management-isolating the network of each company through VLAN division

2025-03-26 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

Theoretical study

Question1: briefly describe the development history of Ethernet?

1. Using coaxial cable to build Ethernet

two。 Using HUB to build Ethernet

3. Ethernet made up of switches

4. Use router switch to set up local area network

5. Using single-arm routing Technology to build Local area Network

6. Using router switch to set up local area network

What is the concept and meaning of question 2:VLAN?

VLAN concept: virtual local area network is a switch technology that reduces broadcast domain and isolates physical network by dividing logical channels.

The meaning of VLAN: reduce the network broadcast domain and improve the efficiency of network communication; logical isolation increases the security of network access; increase the flexibility of networking.

What are the types of question 3:VLAN?

Static VLAN and dynamic VLAN

Static VLAN is an interface-based VLAN

There are four types of dynamic VLAN: based on interface VLAN;, VLAN; based on MAC address, VLAN; based on protocol, transmission process of VLAN;VLAN frame based on IP subnet

Question 4: what is the difference between an access link and a trunk link?

Access link: used for each VLAN member to access. The corresponding interface is called access link interface. Access members can only communicate with other members within the same VLAN. Access links are often used to directly connect computers.

Trunk link: it is used to expand the communication of VLAN, and the corresponding interface is called trunk link interface. Trunk link is often used for the interface connection of trunk link between switches. After establishing the trunk link interface, the members of the same VLAN between the two switches can communicate with each other, so the trunk link is often used to expand the implementation of VLAN. The protocols used in the relay link are ISL and 802.1Q.

Question 5: what is the difference between a local VLAN and an extended VLAN?

1. If VLAN trunking is not implemented across the switch, all VLAN configurations work only on the local switch. This VLAN configuration is called local VLAN.

Logical interval between VLAN, unless inter-VLAN routing technology is used, VLAN cannot communicate; hosts within the same VLAN can communicate, and the VLAN tag is marked when the interface receives the Ethernet frame, and the VLAN tag will be removed after transmission to the destination interface; the access link only applies to the access link access, and the relay link trunk,VLAN information only works locally.

two。 The technology of realizing host communication within the same VLAN through VLAN relay technology across switches is called extended VLAN.

It can realize the host communication in the same VALN of different switches, but the logical interval between VLAN; both switches are cisco devices, you can use ISL protocol to achieve VALN relay, otherwise 802.1Q can be used to achieve VALN relay; the VLAN partition on each switch can be manually configured on each switch, or it can be realized automatically through VTP protocol.

Job task description

Companies An and B, which are located on the same floor, respectively have several computers, which are directly connected to the same switch on this floor. Because these two companies are independent companies, they are in the consideration of information security protection. Do not want to communicate between the computers of both sides, consider how to realize the configuration of the equipment.

Task implementation

Design the network topology according to the basic task requirements (paste the topology diagram of PT)

Basic configuration of the switch (local VLAN configuration)

(1) configure the VLAN information of the switch

Switch > en

Switch#config

Configuring from terminal, memory, or network [terminal]?

Enter configuration commands, one per line. End with CNTL/Z.

Switch (config) # vlan 2

Switch (config-vlan) # name Acompany

Switch (config-vlan) # exi

Switch (config) # vlan 3

Switch (config-vlan) # name Bcompany

Switch (config-vlan) # exi

Switch (config) # in

Switch (config) # interface f0bin1

Switch (config-if) # sw

Switch (config-if) # switchport a

Switch (config-if) # switchport access vlan 2

Switch (config-if) # in f0bin2

Switch (config-if) # sw

Switch (config-if) # switchport a

Switch (config-if) # switchport m

Switch (config-if) # switchport mode a

Switch (config-if) # switchport mode access

Switch (config-if) # sw

Switch (config-if) # switchport a

Switch (config-if) # switchport access vlan 3

Switch (config-if) # in

Switch (config-if) # in f0bin3

Switch (config-if) # sw

Switch (config-if) # switchport m

Switch (config-if) # switchport mode a

Switch (config-if) # switchport mode access

Switch (config-if) # sw

Switch (config-if) # switchport a

Switch (config-if) # switchport access vlan 2

Switch (config-if) # in f0amp 4

Switch (config-if) # sw

Switch (config-if) # switchport m

Switch (config-if) # switchport mode a

Switch (config-if) # switchport mode access

Switch (config-if) # sw

Switch (config-if) # switchport a

Switch (config-if) # switchport access vlan 3

Switch (config-if) #

(2) Ping testing and viewing VLAN information

Test:

Pc1 can ping to pc3, not ping to pc2

Pc2 can ping to pc4, not ping to pc3

View VLAN information:

Switch#show vlan

VLAN Name Status Ports

1 default active Fa0/5, Fa0/6, Fa0/7, Fa0/8

Fa0/9, Fa0/10, Fa0/11, Fa0/12

Fa0/13, Fa0/14, Fa0/15, Fa0/16

Fa0/17, Fa0/18, Fa0/19, Fa0/20

Fa0/21, Fa0/22, Fa0/23, Fa0/24

Gig1/1, Gig1/2

2 Acompany active Fa0/1, Fa0/3

3 Bcompany active Fa0/2, Fa0/4

1002 fddi-default act/unsup

1003 token-ring-default act/unsup

1004 fddinet-default act/unsup

1005 trnet-default act/unsup

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2

1 enet 100001 1500-00

2 enet 100002 1500-00

3 enet 100003 1500-00

1002 fddi 101002 1500-00

1003 tr 101003 1500-00

1004 fdnet 101004 1500-ieee-00

1005 trnet 101005 1500-ibm-00

Remote SPAN VLANs

Primary Secondary Type Ports

Switch#

Work expansion

The above tasks have changed with the site changes of the two companies. Now the PC1 of Company An and the PC2 of Company B are connected to the same switch, while the PC3 of Company An and the PC4 of Company B are connected to another switch. If you still need to realize that computers within the company can communicate and the two companies cannot communicate with each other, how to set it up? (extended VLAN configuration)

Configure PC1 and PC3 on the same VLAN,PC2 and PC4 on the same VLAN

SW1:

Switch >

Switch > EN

Switch#config

Configuring from terminal, memory, or network [terminal]?

Enter configuration commands, one per line. End with CNTL/Z.

Switch (config) # hos

Switch (config) # hostname swich2

Swich2 (config) # vlan 2

Swich2 (config-vlan) # exi

Swich2 (config) # vlan 3

Swich2 (config-vlan) # exi

Swich2 (config) # in

Swich2 (config) # interface f0bin1

Swich2 (config-if) # sw

Swich2 (config-if) # switchport t

Swich2 (config-if) # switchport trunk en

Swich2 (config-if) # switchport trunk encapsulation doq

Swich2 (config-if) # switchport trunk encapsulation dot

Swich2 (config-if) # switchport trunk encapsulation dot1q

Swich2 (config-if) # sw

Swich2 (config-if) # switchport m

Swich2 (config-if) # switchport mode t

Swich2 (config-if) # switchport mode trunk

% LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down

% LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up

Swich2 (config-if) # in

Swich2 (config-if) # in f0bin2

Swich2 (config-if) # sw

Swich2 (config-if) # switchport m

Swich2 (config-if) # switchport mode a

Swich2 (config-if) # switchport mode access

Swich2 (config-if) # sw

Swich2 (config-if) # switchport a

Swich2 (config-if) # switchport access vlan 2

Swich2 (config-if) # in

Swich2 (config-if) # in f0bin3

Swich2 (config-if) # sw

Swich2 (config-if) # switchport m

Swich2 (config-if) # switchport mode a

Swich2 (config-if) # switchport mode access

Swich2 (config-if) # s

Swich2 (config-if) # sw

Swich2 (config-if) # switchport a

Swich2 (config-if) # switchport access vlan 3

Swich2 (config-if) # exi

Swich2 (config) #

SW2:

Switch > EN

Switch#config

Configuring from terminal, memory, or network [terminal]?

Enter configuration commands, one per line. End with CNTL/Z.

Switch (config) # h

Switch (config) # hostname sw

Switch (config) # hostname switch3

Switch3 (config) # vlan 2

Switch3 (config-vlan) # exi

Switch3 (config) # vlan 3

Switch3 (config-vlan) # exi

Switch3 (config) # in

Switch3 (config) # interface f0bin1

Switch3 (config-if) # sw

Switch3 (config-if) # switchport m

Switch3 (config-if) # switchport

Switch3 (config-if) # switchport

Switch3 (config-if) # switchport trunk en

Switch3 (config-if) # switchport trunk encapsulation do

Switch3 (config-if) # switchport trunk encapsulation dot1q

Switch3 (config-if) # sw

Switch3 (config-if) # switchport m

Switch3 (config-if) # switchport mode t

Switch3 (config-if) # switchport mode trunk

Switch3 (config-if) # in

Switch3 (config-if) # in f0bin2

Switch3 (config-if) # sw

Switch3 (config-if) # switchport M

Switch3 (config-if) # switchport Mode a

Switch3 (config-if) # switchport Mode access

Switch3 (config-if) # sw

Switch3 (config-if) # switchport a

Switch3 (config-if) # switchport access vlan 2

Switch3 (config-if) # exi

Switch3 (config) # in

Switch3 (config) # interface f0bin3

Switch3 (config-if) # sw

Switch3 (config-if) # switchport m

Switch3 (config-if) # switchport mode a

Switch3 (config-if) # switchport mode access

Switch3 (config-if) # sw

Switch3 (config-if) # switchport a

Switch3 (config-if) # switchport access vlan 3

Switch3 (config-if) #

Check the trunk interface of switch 1:

Swich2#show interfaces trunk

Port Mode Encapsulation Status Native vlan

Fa0/1 on 802.1q trunking 1

Port Vlans allowed on trunk

Fa0/1 1-1005

Port Vlans allowed and active in management domain

Fa0/1 1,2,3

Port Vlans in spanning tree forwarding state and not pruned

Fa0/1 1,2,3

Swich2#

Pairwise test, pc1 and PC3 can be PING connected, PC2 and PC4 can be PING connected.

Think about the question:

Question 1: what is the function of native VLAN?

Native vlan transmits all kinds of vlan data over trunk links and is valid only for trunk interfaces

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report