CISCO官方配置手册VLAN.pdf资源-CSDN文库

需积分: 16 114 浏览量 2013-03-29 15:28:22 上传评论收藏 414KB PDF 举报

### CISCO官方配置手册VLAN知识点详解 #### 理解VLANs VLAN（虚拟局域网）是一种逻辑划分方法，它可以根据功能、项目团队或应用需求将网络分割成多个逻辑部分，而不考虑用户的物理位置。通过这种方式，即使用户不在同一物理局域网段上，也能将其归入同一个VLAN。这种逻辑分段有助于提高网络安全性、管理效率以及性能。 **VLAN的特性：** - **逻辑分组：** VLAN允许根据业务需求而非地理位置来组织网络。 - **广播域隔离：** VLAN内的广播和多播流量仅在该VLAN内传播。 - **增强的安全性：** VLAN间通信通常需要通过路由器实现，从而增加了额外的安全层。 - **灵活的资源分配：** VLAN使得管理员能够更加灵活地分配网络资源。 #### 配置正常范围VLANs (VLAN ID 1~1005) **配置步骤：** 1. **创建VLAN：** 使用`vlan`命令创建一个新的VLAN。例如，`vlan 10 name Marketing`创建了一个名为Marketing的VLAN 10。 2. **分配端口：** 将交换机端口分配给特定VLAN。例如，`interface FastEthernet0/1`选择接口，然后使用`switchport access vlan 10`将该端口分配给VLAN 10。 3. **验证配置：** 使用`show vlan`命令查看所有已定义的VLAN及其成员。 #### 配置扩展范围VLANs (VLAN ID 1006~4094) **配置步骤：** 1. **创建扩展VLAN：** 与正常范围VLAN类似，使用`vlan`命令创建新的扩展范围VLAN。 2. **分配端口：** 同样地，使用`switchport access vlan`命令将端口分配给扩展范围的VLAN。 3. **启用支持：** 在某些情况下，可能需要在交换机上启用对扩展范围VLAN的支持。这可以通过`vtp mode server`和`vtp version 3`等命令完成。 #### 显示VLANs 使用`show vlan`命令可以显示当前所有VLAN的配置信息，包括VLAN ID、名称、状态和端口成员等。 #### 配置VLAN Trunks VLAN Trunk是一种允许单个物理链路传输多个VLAN数据的技术。这对于连接不同的交换机或路由器非常有用。 **配置步骤：** 1. **选择接口：** 使用`interface`命令选择需要配置为Trunk的接口。 2. **启用Trunk模式：** 使用`switchport mode trunk`命令将接口设置为Trunk模式。 3. **配置封装类型：** 可选地，指定Trunk的封装类型，如`switchport trunk encapsulation dot1q`。 4. **允许VLAN通过：** 使用`switchport trunk allowed vlan`命令指定允许通过Trunk的VLAN列表。 #### 配置VLAN Membership Policy Server (VMPS) VMPS是一种用于动态确定端口所属VLAN的机制。它可以基于MAC地址或其他标准来决定端口的VLAN成员资格。 **配置步骤：** 1. **启动服务：** 使用`vmps`命令启动VMPS服务。 2. **配置服务器地址：** 使用`vmps server address`命令配置VMPS服务器的地址。 3. **设置策略：** 可以使用`vmps policy`命令设置端口成员资格的策略。 4. **验证配置：** 使用`show vmps`命令验证VMPS配置是否正确。 ### 总结本文档详细介绍了Catalyst 3550多层交换机软件配置指南中的VLAN配置部分。它不仅涵盖了VLAN的基本概念，还深入讲解了如何配置正常范围和扩展范围的VLAN，如何显示VLAN信息，配置VLAN Trunk以及配置VLAN Membership Policy Server。这些知识对于网络工程师来说非常重要，可以帮助他们更好地管理和优化网络结构，提高网络安全性和性能。

资源推荐

资源详情

资源评论

CHAPTER

11-1

Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-02

Configuring VLANs

This chapter describes how to configure normal-range VLANs (VLAN IDs 1 to 1005) and

extended-range VLANs (VLAN IDs 1006 to 4094) on your Catalyst 3550 switch. It includes information

about VLAN modes and the VLAN Membership Policy Server (VMPS).

Note For complete syntax and usage information for the commands used in this chapter, see the command

reference for this release.

The chapter includes these sections:

• Understanding VLANs, page 11-1

• Configuring Normal-Range VLANs, page 11-4

• Configuring Extended-Range VLANs, page 11-11

• Displaying VLANs, page 11-14

• Configuring VLAN Trunks, page 11-15

• Configuring VMPS, page 11-26

Understanding VLANs

A VLAN is a switched network that is logically segmented by function, project team, or application,

without regard to the physical locations of the users. VLANs have the same attributes as physical LANs,

but you can group end stations even if they are not physically located on the same LAN segment. Any

switch port can belong to a VLAN, and unicast, broadcast, and multicast packets are forwarded and

flooded only to end stations in the VLAN. Each VLAN is considered a logical network, and packets

destined for stations that do not belong to the VLAN must be forwarded through a router or bridge as

shown in Figure 11-1. Because a VLAN is considered a separate logical network, it contains its own MIB

information and can support its own implementation of spanning tree. See Chapter 15, “Configuring

STP” and Chapter 16, “Configuring MSTP.”

Note Before you create VLANs, you must decide whether to use VLAN Trunking Protocol (VTP) to maintain

global VLAN configuration for your network. For more information on VTP, see Chapter 12,

“Configuring VTP.”

11-2

Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-02

Chapter 11 Configuring VLANs

Understanding VLANs

Figure 11-1 shows an example of VLANs segmented into logically defined networks.

Figure 11-1 VLANs as Logically Deﬁned Networks

VLANs are often associated with IP subnetworks. For example, all the end stations in a particular IP

subnet belong to the same VLAN. Interface VLAN membership on the switch is assigned manually on

an interface-by-interface basis. When you assign switch interfaces to VLANs by using this method, it is

known as interface-based, or static, VLAN membership.

Traffic between VLANs must be routed or fallback bridged. A Catalyst 3550 switch can route traffic

between VLANs by using switch virtual interfaces (SVIs). An SVI must be explicitly configured and

assigned an IP address to route traffic between VLANs. For more information, see the “Switch Virtual

Interfaces” section on page 9-4 and the “Configuring Layer 3 Interfaces” section on page 9-20.

Supported VLANs

The Catalyst 3550 switch supports 1005 VLANs in VTP client, server, and transparent modes. VLANs

are identified with a number from 1 to 4094. VLAN IDs 1002 through 1005 are reserved for Token Ring

and FDDI VLANs. VTP only learns normal-range VLANs, with VLAN IDs 1 to 1005; VLAN IDs

greater than 1005 are extended-range VLANs and are not stored in the VLAN database. The switch must

be in VTP transparent mode when you create VLAN IDs from 1006 to 4094.

The switch supports per-VLAN spanning-tree plus (PVST+) and rapid PVST+ with a maximum of 128

spanning-tree instances. One spanning-tree instance is allowed per VLAN. See the “Normal-Range

VLAN Configuration Guidelines” section on page 11-5 for more information about the number of

spanning-tree instances and the number of VLANs. The switch supports both Inter-Switch Link (ISL)

and IEEE 802.1Q trunking methods for sending VLAN traffic over Ethernet ports.

Floor 1

Floor 2

Engineering

VLAN

Cisco router

Fast

Ethernet

Floor 3

Marketing

VLAN

Accounting

VLAN

16751

11-3

Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-02

Chapter 11 Configuring VLANs

Understanding VLANs

VLAN Port Membership Modes

You configure a port to belong to a VLAN by assigning a membership mode that determines the kind of

traffic the port carries and the number of VLANs to which it can belong. Table 11-1 lists the membership

modes and membership and VTP characteristics.

Table 11-1 Port Membership Modes

Membership Mode VLAN Membership Characteristics VTP Characteristics

Static-access A static-access port can belong to one VLAN and is

manually assigned to that VLAN. For more information,

see the “Assigning Static-Access Ports to a VLAN”

section on page 11-10.

VTP is not required. If you do not want

VTP to globally propagate information, set

the VTP mode to transparent to disable

VTP. To participate in VTP, there must be

at least one trunk port on the switch

connected to a trunk port of a second

switch.

Trunk (ISL or

IEEE 802.1Q)

A trunk port is a member of all VLANs by default,

including extended-range VLANs, but membership can be

limited by configuring the allowed-VLAN list. You can

also modify the pruning-eligible list to block flooded

traffic to VLANs on trunk ports that are included in the

list. For information about configuring trunk ports, see the

“Configuring an Ethernet Interface as a Trunk Port”

section on page 11-18.

VTP is recommended but not required.

VTP maintains VLAN configuration

consistency by managing the addition,

deletion, and renaming of VLANs on a

network-wide basis. VTP exchanges

VLAN configuration messages with other

switches over trunk links.

Dynamic access A dynamic-access port can belong to one VLAN (VLAN

ID 1 to 4094), and is dynamically assigned by a VMPS.

The VMPS can be a Catalyst 5000 or Catalyst 6500 series

switch, for example, but never a Catalyst 3550 switch.

You can have dynamic-access ports and trunk ports on the

same switch, but you must connect the dynamic-access

port to an end station and not to another switch.

For configuration information, see the “Configuring

Dynamic Access Ports on VMPS Clients” section on

page 11-30.

VTP is required.

Configure the VMPS and the client with the

same VTP domain name.

You can change the reconfirmation interval

and retry count on the VMPS client switch.

Voice VLAN A voice VLAN port is an access port attached to a Cisco

IP Phone, configured to use one VLAN for voice traffic

and another VLAN for data traffic from a device attached

to the phone. For more information about voice VLAN

ports, see Chapter 13, “Configuring Voice VLAN.”

VTP is not required; it has no affect on

voice VLAN.

Tunnel

(dot1q-tunnel)

Tunnel ports are used for 802.1Q tunneling to maintain

customer VLAN integrity across a service provider

network. You configure a tunnel port on an edge switch in

the service provider network and connect it to an 802.1Q

trunk port on a customer interface, creating an asymmetric

link. A tunnel port belongs to a single VLAN that is

dedicated to tunneling.

For more information about tunnel ports, see Chapter 14,

“Configuring IEEE 802.1Q and Layer 2 Protocol

Tunneling.”

VTP is not required. You manually assign

the tunnel port to a VLAN by using the

switchport access vlan interface

configuration command.

11-4

Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-02

Chapter 11 Configuring VLANs

Configuring Normal-Range VLANs

For more detailed definitions of the modes and their functions, see Table 11-4 on page 11-17.

When a port belongs to a VLAN, the switch learns and manages the addresses associated with the port

on a per-VLAN basis. For more information, see the “Managing the MAC Address Table” section on

page 6-19.

Configuring Normal-Range VLANs

Normal-range VLANs are VLANs with VLAN IDs 1 to 1005. If the switch is in VTP server or

transparent mode, you can add, modify or remove configurations for VLANs 2 to 1001 in the VLAN

database. (VLAN IDs 1 and 1002 to 1005 are automatically created and cannot be removed.)

Note When the switch is in VTP transparent mode, you can also create extended-range VLANs (VLANs with

IDs from 1006 to 4094), but these VLANs are not saved in the VLAN database. See the “Configuring

Extended-Range VLANs” section on page 11-11.

Configurations for VLAN IDs 1 to 1005 are written to the file vlan.dat (VLAN database), and you can

display them by entering the show vlan privileged EXEC command. The vlan.dat file is stored in Flash

memory.

Caution You can cause inconsistency in the VLAN database if you attempt to manually delete the vlan.dat file.

If you want to modify the VLAN configuration, use the commands described in these sections and in the

command reference for this release. To change the VTP configuration, see Chapter 12, “Configuring

VTP.”

You use the interface configuration mode to define the port membership mode and to add and remove

ports from VLANs. The results of these commands are written to the running-configuration file, and you

can display the file by entering the show running-config privileged EXEC command.

You can set these parameters when you create a new normal-range VLAN or modify an existing VLAN

in the VLAN database:

• VLAN ID

• VLAN name

• VLAN type (Ethernet, Fiber Distributed Data Interface [FDDI], FDDI network entity title [NET],

TrBRF, or TrCRF, Token Ring, Token Ring-Net)

• VLAN state (active or suspended)

• Maximum transmission unit (MTU) for the VLAN

• Security Association Identifier (SAID)

• Bridge identification number for TrBRF VLANs

• Ring number for FDDI and TrCRF VLANs

• Parent VLAN number for TrCRF VLANs

• Spanning Tree Protocol (STP) type for TrCRF VLANs

• VLAN number to use when translating from one VLAN type to another

11-5

Catalyst 3550 Multilayer Switch Software Configuration Guide

78-16610-02

Chapter 11 Configuring VLANs

Configuring Normal-Range VLANs

Note This section does not provide configuration details for most of these parameters. For complete

information on the commands and parameters that control VLAN configuration, see the command

reference for this release.

This section includes information about these topics about normal-range VLANs:

• Token Ring VLANs, page 11-5

• Normal-Range VLAN Configuration Guidelines, page 11-5

• VLAN Configuration Mode Options, page 11-6

• Saving VLAN Configuration, page 11-7

• Default Ethernet VLAN Configuration, page 11-7

• Creating or Modifying an Ethernet VLAN, page 11-8

• Deleting a VLAN, page 11-10

• Assigning Static-Access Ports to a VLAN, page 11-10

Token Ring VLANs

Although the switch does not support Token Ring connections, a remote device such as a Catalyst 5000

series switch with Token Ring connections could be managed from one of the supported switches.

Switches running VTP version 2 advertise information about these Token Ring VLANs:

• Token Ring TrBRF VLANs

• Token Ring TrCRF VLANs

For more information on configuring Token Ring VLANs, see the Catalyst 5000 Series Software

Configuration Guide.

Normal-Range VLAN Configuration Guidelines

Follow these guidelines when creating and modifying normal-range VLANs in your network:

• The switch supports 1005 VLANs in VTP client, server, and transparent modes.

• Normal-range VLANs are identified with a number between 1 and 1001. VLAN numbers 1002

through 1005 are reserved for Token Ring and FDDI VLANs.

• VLAN configuration for VLANs 1 to 1005 are always saved in the VLAN database. If VTP mode

is transparent, VTP and VLAN configuration are also saved in the switch running configuration file.

• The switch also supports VLAN IDs 1006 through 4094 in VTP transparent mode (VTP disabled).

These are extended-range VLANs, and configuration options are limited. Extended-range VLANs

are not saved in the VLAN database. See the “Configuring Extended-Range VLANs” section on

page 11-11.

• Before you can create a VLAN, the switch must be in VTP server mode or VTP transparent mode.

If the switch is a VTP server, you must define a VTP domain, or VTP will not function.

• The switch does not support Token Ring or FDDI media. The switch does not forward FDDI,

FDDI-Net, TrCRF, or TrBRF traffic, but it does propagate the VLAN configuration through VTP.

剩余33页未读，继续阅读

评论收藏

内容反馈

lp825653553

粉丝: 0
资源: 1

CISCO官方配置手册VLAN.pdf

CISCO官方配置手册VLAN-Bridge+STP.pdf

Cisco Nexus 交换机（中文）配置手册.pdf

CISCO路由器配置手册(强烈推荐).pdf

Cisco3550配置手册_2003.pdf

2960交换机简要配置手册中文.pdf

思科2950CR官方配置命令手册.pdf

思科交换机_路由器配置命令大全.pdf

CISCO路由器配置手册

CISCO路由器配置手册之虚拟局域网(VLAN)路由实例.pdf

Cisco-N9N-Vxlan配置手册（英文）.pdf

CCNA最新实验手册【200-120】+314页.pdf

CISCO路由器配置手册之虚拟局域网(VLAN)路由实例宣贯.pdf

Cisco交换机常用配置命令参考.pdf

cisco产品配置手册[收集].pdf

实验手册CCNA.pdf

cisco4506交换机配置手册[收集].pdf

6500交换机配置维护手册.pdf

cisco手册.pdf

CISCO路由器设备巡检手册.pdf

《Cisco网络技术》课程实验指导书--交换机与路由器配置.pdf

思科交换机、路由器配置命令.pdf

【大营家】MoreWiFi网关设备接入配置说明.pdf

CCNA实验手册.pdf

cisco交换机及路由器配置命令.pdf

Cisco+华为命令行差别.pdf

3550配置手册[借鉴].pdf

Cisco-Packet-Tracer-使用教程手册.pdf

解决Win 10与不兼容VirtualBox操作过程文档+（附带软件）.zip

计算机网络知识点总结(谢希仁第八版).pdf

最新资源