科技行者

行者学院 转型私董会 科技行者专题报道 网红大战科技行者

知识库

知识库 安全导航

至顶网网络频道虚拟局域网(VLAN)路由实例

虚拟局域网(VLAN)路由实例

  • 扫一扫
    分享文章到微信

  • 扫一扫
    关注官方公众号
    至顶头条

在交换机内划有3个虚拟网,分别名为default、qbw、rgw,通过WS-X5302实现虚拟网间路由。

作者:论坛整理 来源:zdnet网络安全 2008年3月19日

关键字: VLAN VLAN划分 vlan技术 vlan配置 虚拟局域网

  • 评论
  • 分享微博
  • 分享邮件

  1. 例一:

  

  设备选用Catalyst5500交换机1台,安装WS-X5530-E3管理引擎,多块WS-X5225R及WS-X5302路由交换模块,WS-X5302被直接插入交换机,通过二个通道与系统背板上的VLAN 相连,从用户角度看认为它是1个1接口的模块,此接口支持ISL。在交换机内划有3个虚拟网,分别名为default、qbw、rgw,通过WS-X5302实现虚拟网间路由。

  以下加重下横线部分,如set system name 5500C为需设置的命令。 

  设置如下:

  Catalyst 5500配置: 

  begin

  set password $1$FMFQ$HfZR5DUszVHIRhrz4h6V70

  

  set enablepass $1$FMFQ$HfZR5DUszVHIRhrz4h6V70

  

  set prompt Console>

  

  set length 24 default

  

  set logout 20

  

  set banner motd ^C^C

  

  !

  

  #system

  

  set system baud 9600

  

  set system modem disable

  

  set system name 5500C

  

  set system location

  

  set system contact

  

  !

  

  #ip

  

  set interface sc0 1 10.230.4.240 255.255.255.0 10.230.4.255

  

  set interface sc0 up

  

  set interface sl0 0.0.0.0 0.0.0.0

  

  set interface sl0 up

  

  set arpagingtime 1200

  

  set ip redirect  enable

  

  set ip unreachable  enable

  

  set ip fragmentation enable

  

  set ip route 0.0.0.0 10.230.4.15 1

  

  set ip alias default 0.0.0.0

  

  !

  

  #Command alias

  

  !

  

  #vtp

  

  set vtp domain hne

  

  set vtp mode server

  

  set vtp v2 disable

  

  set vtp pruning disable

  

  set vtp pruneeligible 2-1000

  

  clear vtp pruneeligible 1001-1005

  

  set vlan 1 name default type ethernet mtu 1500 said 100001 state active

  

  set vlan 777 name rgw type ethernet mtu 1500 said 100777 state active

  

  set vlan 888 name qbw type ethernet mtu 1500 said 100888 state active

  

  set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active

  

  set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state active bridge 0x0 stp ieee

  

  set vlan 1005 name trnet-default type trbrf mtu 1500 said 101005 state active bridge 0x0 stp ibm

  

  set vlan 1003 name token-ring-default type trcrf mtu 1500 said 101003 state active parent 0 ring 0x0 mode srb aremaxhop 7 stemaxhop 7

  

  !

  

  #set boot command

  

  set boot config-register 0x102

  

  set boot system flashbootflash:cat5000-sup3.4-3-1a.bin

  

  !

  

  #module 1 : 2-port 1000BaseLX Supervisor

  

  set module name  1 

  

  set vlan 1  1/1-2

  

  set port enable   1/1-2

  

  !

  

  #module 2 : empty

  

  !

  

  #module 3 : 24-port 10/100BaseTX Ethernet

  

  set module name  3 

  

  set module enable 3

  

  set vlan 1  3/1-22

  

  set vlan 777 3/23

  

  set vlan 888 3/24

  

  set trunk3/1 on isl 1-1005

  

  #module 4 empty

  

  !

  

  #module 5 empty

  

  !

  

  #module 6 : 1-port Route Switch

  

  set module name  6 

  

  set port level   6/1 normal

  

  set port trap    6/1 disable

  

  set port name    6/1

  

  set cdp enable  6/1

  

  set cdp interval 6/1 60

  

  set trunk 6/1 on isl 1-1005

  

  !

  

  #module 7 : 24-port 10/100BaseTX Ethernet

  

  set module name  7 

  

  set module enable 7

  

  set vlan 1  7/1-22

  

  set vlan 888 7/23-24

  

  set trunk 7/1 on isl 1-1005

  

  set trunk 7/2 on isl 1-1005

  

  !

  

  #module 8 empty

  

  !

  

  #module 9 empty

  

  !

  

  #module 10 : 12-port 100BaseFX MM Ethernet

  

  set module name  10 

  

  set module enable 10

  

  set vlan 1  10/1-12

  

  set port channel 10/1-4 off

  

  set port channel 10/5-8 off

  

  set port channel 10/9-12 off

  

  set port channel 10/1-2 on

  

  set port channel 10/3-4 on

  

  set port channel 10/5-6 on

  

  set port channel 10/7-8 on

  

  set port channel 10/9-10 on

  

  set port channel 10/11-12 on

  

  #module 11 empty

  

  !

  

  #module 12 empty

  

  !

  

  #module 13 empty

  

  !

  

  #switch port analyzer

  

  !set span 1 1/1 both inpkts disable

  

  set span disable

  

  !

  

  #cam

  

  set cam agingtime 1-2,777,888,1003,1005 300

  

  end

  

  5500C> (enable)

  

  WS-X5302路由模块设置:

  

  Router#wri t

  

  Building configuration...

  

  Current configuration:

  

  !

  

  version 11.2

  

  no service password-encryption

  

  no service udp-small-servers

  

  no service tcp-small-servers

  

  !

  

  hostname Router

  

  !

  

  enable secret 5 $1$w1kK$AJK69fGOD7BqKhKcSNBf6.

  

  !

  

  ip subnet-zero

  

  !

  

  interface Vlan1

  

  ip address 10.230.2.56 255.255.255.0

  

  !

  

  interface Vlan777

  

  ip address 10.230.3.56 255.255.255.0

  

  !

  

  interface Vlan888

  

  ip address 10.230.4.56 255.255.255.0

  

  !

  

  no ip classless

  

  !

  

  line con 0

  

  line aux 0

  

  line vty 0 4

  

  password router

  

  login

  

  !

  

  end

  

  Router#

  3.1. 例二:

  交换设备仍选用Catalyst5500交换机1台,安装WS-X5530-E3管理引擎,多块WS-X5225R在交换机内划有3个虚拟网,分别名为default、qbw、rgw,通过Cisco3640路由器实现虚拟网间路由。交换机设置与例一类似。

  路由器Cisco3640,配有一块NM-1FE-TX模块,此模块带有一个快速以太网接口可以支持ISL。Cisco3640快速以太网接口与交换机上的某一支持ISL的端口实现连接,如交换机第3槽第1个接口(3/1口)。

  

  Router#wri t

  

  Building configuration... 

  

  Current configuration:

  

  !

  

  version 11.2

  

  no service password-encryption

  

  no service udp-small-servers

  

  no service tcp-small-servers

  

  !

  

  hostname Router

  

  !

  

  enable secret 5 $1$w1kK$AJK69fGOD7BqKhKcSNBf6.

  

  !

  

  ip subnet-zero

  

  !

  

  interface FastEthernet1/0

  

  !

  

  interface FastEthernet1/0.1

  

  encapsulation isl 1

  

  ip address 10.230.2.56 255.255.255.0

  

  !

  

  interface FastEthernet1/0.2

  

  encapsulation isl 777

  

  ip address 10.230.3.56 255.255.255.0

  

  !

  

  interface FastEthernet1/0.3

  

  encapsulation isl 888

  

  ip address 10.230.4.56 255.255.255.0

  

  !

  

  no ip classless

  

  !

  

  line con 0

  

  line aux 0

  

  line vty 0 4

  

  password router

  

  login

  

  !

  

  end

  

  Router#

    • 评论
    • 分享微博
    • 分享邮件
    邮件订阅

    如果您非常迫切的想了解IT领域最新产品与技术信息,那么订阅至顶网技术邮件将是您的最佳途径之一。

    重磅专题
    往期文章
    最新文章