Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

VLAN partition

2025-01-24 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

Today, I will introduce the static vlan partition, vlan Trunk configuration and port aggregation. What is vlan? In fact, vlan is (Virtual Local Area Network), that is, "virtual local area network" means to divide the broadcast domain. VLAN technology is more flexible and has the following advantages: the management overhead of moving, adding and modifying network devices is reduced; broadcasting activities can be controlled; network security can be improved.

Next, we will use GNS3 simulation topology diagram to introduce the specific method of vlan partition in detail. First, create the following topology diagram on GNS3.

Then we use SecureCRT to connect remotely

Here is the diagram of the configuration process of sw1, and then introduce what the underlined command means in the following figure.

Conf t enters global configuration mode

No ip routing turns off the routing function

Vlan 10 ~ (th) 20 creates 10 and 20 vlan

Int f1max 2 enters the interface mode of f1max 2.

Switchport mode access sets layer 2 interface mode

Switchport access vlan10 adds the interface setting of f1bin2 to vlan10.

Do show vlan-sw b to view current vlan partition status

Int range f1max 0-1 enters multi-port mode

Switchport mode trunk defines the interface type as trunk

Switchport trunk encapsulation dot1q defines the encapsulation type as dot1q

Channel-group 1 mode on opens the Ethernet channel

The picture above shows the configuration process of sw2, which also introduces the meaning of issuing commands (in fact, it is the same as above)

Conf t enters global configuration mode

No ip routing turns off the routing function

Vlan 10 ~ (th) 20 creates 10 and 20 vlan

Int f1max 2 enters the interface mode of f1max 2.

Switchport mode access sets layer 2 interface mode

Switchport access vlan10 adds the interface setting of f1bin2 to vlan10.

Do show vlan-sw b to view current vlan partition status

Int range f1max 0-1 enters multi-port mode

Switchport mode trunk defines the interface type as trunk

Switchport trunk encapsulation dot1q defines the encapsulation type as dot1q

Channel-group 1 mode on opens the Ethernet channel

(note: because the meaning of each command is already described in the sw1 configuration notes, I use abbreviations for sw2 configuration.)

Finally, as shown in the figure above, the IP addresses of four PCs are configured with GNS3's vpcs, and then the ping connection experiment is carried out with pc4. When we use pc4 ping to connect to the pc2 host of the same vlan20, we can ping, but when the ping is connected to pc1 and pc3 of different vlan, it is not reachable, indicating that ping is not available.

The above is the experimental process of vlan division, I hope you can comment more!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report