|
VLAN是英文Virtual Local Area Network的缩写，即虚拟局域网。一方面，VLAN建立在局域网交换机的基础之上；另一方面，VLAN是局域交换网的灵魂。这是因为通过VLAN用户能方便地在网络中移动和快捷地组建宽带网络，而无需改变任何硬件和通信线路。这样，网络管理员就能从逻辑上对用户和网络资源进行分配，而无需考虑物理连接方式。 VLAN充分体现了现代网络技术的重要特征：高速、灵活、管理简便和扩展容易。是否具有VLAN功能是衡量局域网交换机的一项重要指标。网络的虚拟化是未来网络发展的潮流。
VLAN与普通局域网从原理上讲没有什么不同，但从用户使用和网络管理的角度来看，VLAN与普通局域网最基本的差异体现在：VLAN并不局限于某一网络或物理范围，VLAN中的用户可以位于一个园区的任意位置，甚至位于不同的国家。
经典配置：
Catalyst 5000 参数
源码:
实验命令
clear ip permit
clear ip route
clear vlan
clear vtp
debug ip packet
ping
set interface sc0
set ip permit
set ip route
set vlan
set vtp
show cam
show config
show flash
show interface
show ip permit
show ip route
show log
show mac
show module
show port
show system
show users
show version
show vlan
show vtp
telnet
配置说明
1.R1
2.R2
3.R3
4.R4
5.R5
6.R6
7.CAT5K
R1
Current configuration:
!
version 11.2
no service password-encryption
!
hostname r1
!
enable password cisco
!
!
!
interface Ethernet0
ip address 130.10.7.1 255.255.255.0
no ip directed-broadcast
no ip mroute-cache
!
interface Serial0
ip address 130.10.1.1 255.255.255.0
encapsulation frame-relay
ip ospf network point-to-multipoint
!
interface Serial1
ip address 130.10.4.1 255.255.255.0
clockrate 2000000
!
interface BRI0
no ip address
no ip directed-broadcast
no ip mroute-cache
shutdown
!
router ospf 10
redistribute connected subnets
network 130.10.1.0 0.0.0.255 area 0
network 130.10.4.0 0.0.0.255 area 1
network 130.10.7.0 0.0.0.255 area 2
!
no ip classless
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end
R2
Current configuration:
!
version 11.2
no service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname R2
!
enable password cisco
!
!
!
interface Serial0
ip address 130.10.4.2 255.255.255.0
no fair-queue
!
interface Serial1
no ip address
shutdown
!
interface TokenRing0
ip address 130.10.5.2 255.255.255.0
ring-speed 16
!
router ospf 20
network 130.10.5.0 0.0.0.255 area 1
network 130.10.4.0 0.0.0.255 area 1
!
no ip classless
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end
R3
Current configuration:
!
version 11.2
no service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname R3
!
enable password cisco
!
!
!
interface Serial0
no ip address
shutdown
no fair-queue
!
interface Serial1
no ip address
shutdown
!
interface TokenRing0
ip address 130.10.5.3 255.255.255.0
ring-speed 16
!
interface TokenRing1
ip address 130.10.6.3 255.255.255.0
ring-speed 16
!
router ospf 30
redistribute connected subnets
network 130.10.5.0 0.0.0.255 area 1
!
no ip classless
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end
R5
Current configuration:
!
version 11.2
no service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname R5
!
enable password cisco
!
!
!
interface Ethernet0
ip address 130.10.3.5 255.255.255.0
no ip directed-broadcast
no ip route-cache
no ip mroute-cache
no mop enabled
!
interface Serial0
ip address 130.10.1.5 255.255.255.0
encapsulation frame-relay
ip ospf network point-to-multipoint
frame-relay map ip 130.10.1.1 100 broadcast
frame-relay map ip 130.10.1.6 100 broadcast
!
interface Serial1
no ip address
shutdown
!
router ospf 50
redistribute connected subnets
network 130.10.1.0 0.0.0.255 area 0
network 130.10.3.0 0.0.0.255 area 2
!
no ip classless
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end
R6
Current configuration:
!
version 11.2
no service password-encryption
!
hostname R6
!
enable password cisco
!
!
!
interface Serial0
ip address 130.10.1.6 255.255.255.0
encapsulation frame-relay
ip ospf network point-to-multipoint
frame-relay map ip 130.10.1.1 110 broadcast
frame-relay map ip 130.10.1.5 110 broadcast
!
interface Serial1
no ip address
no ip mroute-cache
shutdown
!
interface TokenRing0
ip address 130.10.2.6 255.255.255.0
ring-speed 16
!
interface BRI0
no ip address
shutdown
!
router ospf 60
redistribute connected subnets
network 130.10.1.0 0.0.0.255 area 0
!
no ip classless
!
!
line con 0
line aux
0
line vty 0 4
password cisco
login
!
end
CAT5K
begin
set password $1$0o8Z$GDCVUXu2Kn3mgBDKwF00h1
set enablepass $1$0o8Z$GDCVUXu2Kn3mgBDKwF00h1
set prompt Cat5k>
set length 24 default
set logout 20
set banner motd ^C^C
!
#system
set system baud 9600
set system modem disable
set system name
set system location
set system contact
!
#snmp
set snmp community read-only public
set snmp community read-write private
set snmp community read-write-all secret
set snmp rmon disable
set snmp trap disable module
set snmp trap disable chassis
set snmp trap disable bridge
set snmp trap disable repeater
set snmp trap disable vtp
set snmp trap disable auth
set snmp trap disable ippermit
set snmp trap disable vmps
set snmp trap disable entity
set snmp trap disable config
set snmp trap disable stpx
!
#ip
set interface sc0 2 130.10.7.100 255.255.255.0 130.10.7.255
set interface sc0 up
set interface sl0 0.0.0.0 0.0.0.0
set interface sl0 up
set arp agingtime 1200
set ip redirect enable
set ip unreachable enable
set ip fragmentation enable
set ip route 0.0.0.0 130.10.7.1 1
set ip alias default 0.0.0.0
!
#Command alias
!
#vmps
set vmps server retry 3
set vmps server reconfirminterval 60
set vmps tftpserver 0.0.0.0 vmps-config-database.1
set vmps state disable
!
#dns
set ip dns disable
!
#tacacs+
set tacacs attempts 3
set tacacs directedrequest disable
set tacacs timeout 5
set authentication login tacacs disable
set authentication login local enable
set authentication enable tacacs disable
set authentication enable local enable
!
#bridge
set bridge ipx snaptoether 8023raw
set bridge ipx 8022toether 8023
set bridge ipx 8023rawtofddi snap
!
#vtp
set vtp domain cisco
set vtp mode server
set vtp passwd cisco
set vtp v2 disable
set vtp pruning disable
set vtp pruneeligible 2-1000
clear vtp pruneeligible 1001-1005
set vlan 1 name default type ethernet mtu 1500 said 100001 state active
set vlan 2 name VLAN2 type ethernet mtu 1500 said 100002 state active
set vlan 3 name VLAN3 type ethernet mtu 1500 said 100003 state active
set vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active
set vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state active
set vlan 100
5 name trnet-default type trbrf mtu 1500 said 101005 state active
set vlan 1003 name token-ring-default type trcrf mtu 1500 said 101003 state active
!
#spantree
#uplinkfast groups
set spantree uplinkfast disable
#backbonefast
set spantree backbonefast disable
#vlan 1
set spantree enable 1
set spantree fwddelay 15 1
set spantree hello 2 1
set spantree maxage 20 1
set spantree priority 32768 1
#vlan 2
set spantree enable 2
set spantree fwddelay 15 2
set spantree hello 2 2
set spantree maxage 20 2
set spantree priority 32768 2
#vlan 3
set spantree enable 3
set spantree fwddelay 15 3
set spantree hello 2 3
set spantree maxage 20 3
set spantree priority 32768 3
#vlan 1003
set spantree enable 1003
set spantree fwddelay 4 1003
set spantree hello 2 1003
set spantree maxage 10 1003
set spantree priority 32768 1003
set spantree portstate 1003 auto 0
set spantree portcost 1003 62
set spantree portpri 1003 4
set spantree portfast 1003 disable
#vlan 1005
set spantree disable 1005
set spantree fwddelay 4 1005
set spantree hello 2 1005
set spantree maxage 10 1005
set spantree priority 32768 1005
set spantree multicast-address 1005 ieee
!
#cgmp
set cgmp disable
set cgmp leave disable
!
#syslog
set logging console enable
set logging server disable
set logging level cdp 2 default
set logging level mcast 2 default
set logging level disl 5 default
set logging level dvlan 2 default
set logging level earl 2 default
set logging level fddi 2 default
set logging level ip 2 default
set logging level pruning 2 default
set logging level snmp 2 default
set logging level spantree 2 default
set logging level sys 5 default
set logging level tac 2 default
set logging level tcp 2 default
set logging level telnet 2 default
set logging level tftp 2 default
set logging level vtp 2 default
set logging level vmps 2 default
set logging level kernel 2 default
set logging level filesys 2 default
set logging level drip 2 default
set logging level pagp 5 default
set logging level mgmt 5 default
set logging level mls 5 default
set logging level protfilt 2 default
!
#ntp
set ntp broadcastclient disable
set ntp broadcastdelay 3000
set ntp client disable
clear timezone
set summertime disable
!
#permit list
set ip permit enable
set ip permit 13
0.10.1.6 255.255.255.255
set ip permit 130.10.2.6 255.255.255.255
!
#drip
set tokenring reduction enable
set tokenring distrib-crf disable
!
#igmp
set igmp disable
!
#module 1 : 2-port 100BaseTX Supervisor
set module name 1
set vlan 1 1/1-2
set port enable 1/1-2
set port level 1/1-2 normal
set port duplex 1/1-2 half
set port trap 1/1-2 disable
set port name 1/1-2
set port security 1/1-2 disable
set port membership 1/1-2 static
set cdp enable 1/1-2
set cdp interval 1/1-2 60
set trunk 1/1 on isl 1-1005
set trunk 1/2 auto isl 1-1005
set spantree portfast 1/1-2 disable
set spantree portcost 1/1-2 19
set spantree portpri 1/1-2 32
set spantree portvlanpri 1/1 0
set spantree portvlanpri 1/2 0
set spantree portvlancost 1/1 cost 18
set spantree portvlancost 1/2 cost 18
!
#module 2 : 12-port 10/100BaseTX Ethernet
set module name 2
set module enable 2
set vlan 1 2/1-4
set vlan 2 2/5-8
set vlan 3 2/9-12
set port enable 2/1-12
set port level 2/1-12 normal
set port speed 2/1-12 auto
set port trap 2/1-12 disable
set port name 2/1-12
set port security 2/1-12 disable
set port broadcast 2/1-12 0
set port membership 2/1-12 static
set cdp enable 2/1-12
set cdp interval 2/1-12 60
set trunk 2/1 auto isl 1-1005
set trunk 2/2 auto isl 1-1005
set trunk 2/3 auto isl 1-1005
set trunk 2/4 auto isl 1-1005
set trunk 2/5 auto isl 1-1005
set trunk 2/6 auto isl 1-1005
set trunk 2/7 auto isl 1-1005
set trunk 2/8 auto isl 1-1005
set trunk 2/9 auto isl 1-1005
set trunk 2/10 auto isl 1-1005
set trunk 2/11 auto isl 1-1005
set trunk 2/12 auto isl 1-1005
set spantree portfast 2/1-12 disable
set spantree portcost 2/1-12 100
set spantree portpri 2/1-12 32
set spantree portvlanpri 2/1 0
set spantree portvlanpri 2/2 0
set spantree portvlanpri 2/3 0
set spantree portvlanpri 2/4 0
set spantree portvlanpri 2/5 0
set spantree portvlanpri 2/6 0
set spantree portvlanpri 2/7 0
set spantree portvlanpri 2/8 0
set spantree portvlanpri 2/9 0
set spantree portvlanpri 2/10 0
set spantree portvlanpri 2/11 0
set spantree portvlanpri 2/12 0
set spantree portvlancost 2/1 cost 99
set spantree portvlancost 2/2 cost 99
set spantree portvlancost 2/3 cost 99
set spantree portvlancost 2/4 cost 99
set spantree portvlancost 2/5 cost 99
set spantree portvlancost 2/6 cost 99
set spantree portvlancost
2/7 cost 99
set spantree portvlancost 2/8 cost 99
set spantree portvlancost 2/9 cost 99
set spantree portvlancost 2/10 cost 99
set spantree portvlancost 2/11 cost 99
set spantree portvlancost 2/12 cost 99
!
#module 3 empty
!
#module 4 empty
!
#module 5 empty
!
#switch port analyzer
set span disable
!
#cam
set cam agingtime 1-3,1003,1005 300
end
|
