路由交換設(shè)備項(xiàng)目化管理與配置 課件 項(xiàng)目10 路由器實(shí)現(xiàn)VLAN間通信

項(xiàng)目10路由器實(shí)現(xiàn)VLAN間通信目錄CONTENTS知識(shí)鏈接路由器基本概念和命令項(xiàng)目設(shè)計(jì)網(wǎng)絡(luò)拓?fù)鋱D、IP地址、設(shè)備初始配置項(xiàng)目描述為小企業(yè)搭建安全網(wǎng)絡(luò)項(xiàng)目實(shí)施與驗(yàn)證設(shè)備配置，解決環(huán)路問題0103020401PART020304知識(shí)鏈接10.1VLAN間的通信0102處于不同VLAN的計(jì)算機(jī)通信必須使用三層設(shè)備，如三層交換機(jī)或路由器

知識(shí)鏈接10.1路由器物理接口實(shí)現(xiàn)VLAN間通信0102路由器物理接口實(shí)現(xiàn)VLAN間通信是使用路由器的物理接口作為VLAN的網(wǎng)關(guān)。常使用路由器子接口實(shí)現(xiàn)交換機(jī)連接路由器的接口類型配置為Trunk根據(jù)報(bào)文的VLANTag不同，路由器將收到的報(bào)文交由對(duì)應(yīng)的子接口處理子接口接收到報(bào)文，剝除VLAN標(biāo)簽后進(jìn)行三層轉(zhuǎn)發(fā)或其他處理子接口發(fā)出的報(bào)文，又會(huì)將相應(yīng)的VLAN標(biāo)簽添加到報(bào)文中后再發(fā)送，從而實(shí)現(xiàn)VLAN間通信知識(shí)鏈接10.2單臂路由實(shí)現(xiàn)VLAN間通信0102創(chuàng)建子接口命令interfaceinterface-typeinterface-number.sub-interfacenumberinterfaceGigabitEthernet0/0/0.10配置子接口VLAN終結(jié)命令dot1qterminationvidvlan-id配置子接口ARP使能命令arpbroadcastenable知識(shí)鏈接02PART010304項(xiàng)目描述10.3項(xiàng)目簡介0102

如圖10-3所示，A公司的局域網(wǎng)由若干臺(tái)華為公司S3700系列交換機(jī)、一臺(tái)S5700、一臺(tái)R2220路由器組成并劃分了四個(gè)VLAN，其中，有三個(gè)VLAN用于管理網(wǎng)絡(luò)中的計(jì)算機(jī)，還有一個(gè)VLAN用于管理公司的服務(wù)器，包括Web服務(wù)器和DNS服務(wù)器。現(xiàn)需要這四個(gè)VLAN間設(shè)備能夠相互通信，網(wǎng)絡(luò)中處于不同VLAN中的計(jì)算機(jī)能夠用域名訪問公司網(wǎng)絡(luò)服務(wù)器中的網(wǎng)絡(luò)資源。公司網(wǎng)絡(luò)工程師擬使用路由器AR1物理子接口實(shí)現(xiàn)VLAN間互訪。項(xiàng)目描述03PART010204項(xiàng)目設(shè)計(jì)單擊輸入你的正文10.4總體設(shè)計(jì)項(xiàng)目設(shè)計(jì)

基于路由器物理子接口實(shí)現(xiàn)VLAN間通信由五部分組成，第一部分是實(shí)驗(yàn)環(huán)境搭建，配置終端計(jì)算機(jī)的IP地址、DNS服務(wù)和Web服務(wù)；第二部分是基于GVRP創(chuàng)建VLAN，所有局域網(wǎng)的交換機(jī)啟用GVRP，在與終端相連的接入交換機(jī)LSW4、LSW5和LSW6手動(dòng)創(chuàng)建靜態(tài)VLAN；第三部分是基于接口劃分VLAN，把交換機(jī)LSW4、LSW5和LSW6與終端相連的接口劃進(jìn)所屬VLAN；第四部分配置路由器物理接口GE0/0/0的子接口；第五部分是項(xiàng)目實(shí)施結(jié)果驗(yàn)證，同一VLAN計(jì)算機(jī)能通信，不同VLAN計(jì)算機(jī)能通過AR1路由器機(jī)通信。計(jì)算機(jī)名IP地址VLANID網(wǎng)關(guān)PC11192.168.10.11/2410192.168.10.254/24PC12192.168.10.12/2410192.168.10.254/24PC13192.168.10.13/2410192.168.10.254/24PC21192.168.50.21/2450192.168.50.254/24PC22192.168.50.22/2450192.168.50.254/24PC23192.168.50.23/2450192.168.50.254/24PC31192.168.100.31/24100192.168.100.254/24PC32192.168.100.32/24100192.168.100.254/24PC33192.168.100.33/24100192.168.100.254/24Web-DNSServer192.168.40.1/2440192.168.40.254/2404PART010203項(xiàng)目實(shí)施與驗(yàn)證單擊輸入你的正文10.5項(xiàng)目實(shí)施與驗(yàn)證0102項(xiàng)目實(shí)施與驗(yàn)證

項(xiàng)目實(shí)施環(huán)境搭建——配置IP地址10.5項(xiàng)目實(shí)施與驗(yàn)證0102項(xiàng)目實(shí)施與驗(yàn)證

項(xiàng)目實(shí)施環(huán)境搭建——配置Web服務(wù)、DNS服務(wù)10.5配置GVRP創(chuàng)建VLAN0102項(xiàng)目實(shí)施與驗(yàn)證配置Trunk口并開啟交換機(jī)GVRP功能<Huawei>sys[Huawei]undoinfo-centerenable[Huawei]gvrp[Huawei]intGigabitEthernet0/0/1[Huawei-GigabitEthernet0/0/1]portlink-typetrunk[Huawei-GigabitEthernet0/0/1]porttrunkallow-passvlan104050100[Huawei-GigabitEthernet0/0/1]gvrp[Huawei]intGigabitEthernet0/0/2[Huawei-GigabitEthernet0/0/2]portlink-typetrunk[Huawei-GigabitEthernet0/0/2]porttrunkallow-passvlan104050100[Huawei-GigabitEthernet0/0/2]gvrp[Huawei]intGigabitEthernet0/0/3[Huawei-GigabitEthernet0/0/3]portlink-typetrunk[Huawei-GigabitEthernet0/0/3]porttrunkallow-passvlan104050100[Huawei-GigabitEthernet0/0/3]gvrp[Huawei-GigabitEthernet0/0/3]quit10.5配置GVRP創(chuàng)建VLAN0102項(xiàng)目實(shí)施與驗(yàn)證在LSW2交換機(jī)開啟設(shè)備GVRP功能，配置Trunk接口并開啟Trunk接口的GVRP功能[Huawei]gvrp[Huawei]intGigabitEthernet0/0/1[Huawei-GigabitEthernet0/0/1]portlink-typetrunk[Huawei-GigabitEthernet0/0/1]porttrunkallow-passvlan104050100[Huawei-GigabitEthernet0/0/1]gvrp[Huawei-GigabitEthernet0/0/1]quit[Huawei]intEthernet0/0/1[Huawei-Ethernet0/0/1]portlink-typetrunk[Huawei-Ethernet0/0/1]porttrunkallow-passvlan104050100[Huawei-Ethernet0/0/1]gvrp[Huawei-Ethernet0/0/1]quit[Huawei]intEthernet0/0/2[Huawei-Ethernet0/0/2]portlink-typetrunk[Huawei-Ethernet0/0/2]porttrunkallow-passvlan104050100[Huawei-Ethernet0/0/2]gvrp10.5配置GVRP創(chuàng)建VLAN0102項(xiàng)目實(shí)施與驗(yàn)證在LSW3交換機(jī)開啟設(shè)備GVRP功能，配置Trunk接口并開啟Trunk接口的GVRP功能[Huawei]gvrp[Huawei]intGigabitEthernet0/0/1[Huawei-GigabitEthernet0/0/1]portlink-typetrunk[Huawei-GigabitEthernet0/0/1]porttrunkallow-passvlan104050100[Huawei-GigabitEthernet0/0/1]gvrp[Huawei-GigabitEthernet0/0/1]quit[Huawei]intEthernet0/0/1[Huawei-Ethernet0/0/1]portlink-typetrunk[Huawei-Ethernet0/0/1]porttrunkallow-passvlan104050100[Huawei-Ethernet0/0/1]gvrp10.5配置GVRP創(chuàng)建VLAN0102項(xiàng)目實(shí)施與驗(yàn)證在LSW4交換機(jī)開啟設(shè)備GVRP功能，配置Trunk接口并開啟Trunk接口的GVRP功能[Huawei]gvrp[Huawei-Ethernet0/0/1]portlink-typetrunk[Huawei-Ethernet0/0/1]porttrunkallow-passvlan104050100[Huawei-Ethernet0/0/1]gvrp[Huawei-Ethernet0/0/1]quit交換機(jī)LSW1、LSW4、LSW5和LSW6手動(dòng)創(chuàng)建靜態(tài)VLAN[Huawei]vlanbatch104050100<Huawei>disvlan10.5基于接口劃分VLAN0102項(xiàng)目實(shí)施與驗(yàn)證在LSW4交換機(jī)開啟設(shè)備GVRP功能，配置Trunk接口并開啟Trunk接口的GVRP功能[Huawei]intGigabitEthernet0/0/4[Huawei-GigabitEthernet0/0/1]portlink-typeaccess[Huawei-GigabitEthernet0/0/1]portdefaultvlan40[Huawei-GigabitEthernet0/0/1]quit把交換機(jī)LSW4、LSW5和LSW6的Access接口加入對(duì)應(yīng)的VLAN10.5配置GVRP創(chuàng)建VLAN0102項(xiàng)目實(shí)施與驗(yàn)證配置路由器AR1子接口[Huawei]interfaceGigabitEthernet0/0/0.10[Huawei-GigabitEthernet0/0/0.10]dot1qterminationvid10[Huawei-GigabitEthernet0/0/0.10]ipaddress192.168.10.25424 [Huawei-GigabitEthernet0/0/0.10]arpbroadcastenable[Huawei-GigabitEthernet0/0/0.10]quit

[Huawei]intGigabitEthernet0/0/0.40 [Huawei-GigabitEthernet0/0/0.40]dot1qterminationvid40[Huawei-GigabitEthernet0/0/0.40]ipaddress192.168.40.25424[Huawei-GigabitEthernet0/0/0.40]arpbroadcastenable[Huawei-GigabitEthernet0/0/0.40]quit10.5配置GVRP創(chuàng)建VLAN0102項(xiàng)目實(shí)施與驗(yàn)證配置路由器AR1子接口[Huawei]intGigabitEthernet0/0/0.50[Huawei-GigabitEthernet0/0/0.50]dot1qterminationvid50[Huawei-GigabitEthernet0/0/0.50]ipaddress192.168.50.25424[Huawei-GigabitEthernet0/0/0.50]arpbroadcastenable[Huawei-GigabitEthernet0/0/0.50]quit

[Huawei]intGigabitEthernet0/0/0.100[Huawei-GigabitEthernet0/0/0.100]dot1qterminationvid100