{"id":948,"date":"2008-10-07T22:36:00","date_gmt":"2008-10-07T14:36:00","guid":{"rendered":"http:\/\/note.systw.net\/note\/?p=948"},"modified":"2023-11-07T22:47:18","modified_gmt":"2023-11-07T14:47:18","slug":"cisco-vlan","status":"publish","type":"post","link":"https:\/\/systw.net\/note\/archives\/948","title":{"rendered":"Cisco Vlan"},"content":{"rendered":"\n

\u57fa\u672c\u6982\u5ff5<\/strong><\/p>\n\n\n\n

\u4ea4\u63db\u5668\u4e0b\u7684\u6240\u6709port\u9810\u8a2d\u70bavlan1\u7684\u6210\u54e1
switch\u8a2d\u5b9a\u5f8c,\u5c31\u6703\u7522\u751f\u4e00\u4efdconfig.text\u548cvlan.dat\u7684\u6a94\u6848
switch\u7684startup-config\u5b58\u5728FLASH\u88e1\u7684config.text\u6a94,\u56e0\u70baSWITCH\u6c92\u6709NVRAM,\u6240\u4ee5\u7528FLASH\u53bb\u6a21\u64ec
switch\u8981\u9084\u539f\u6210\u9810\u8a2d\u503c,\u9664\u4e86\u6bba\u6389startup-config\u9084\u8981\u522a\u9664vlan.dat,\u5426\u5247VLAN\u7684\u8cc7\u8a0a\u90fd\u9084\u6703\u5b58\u5728
\u6b65\u9a5f\u5982\u4e0b
#delete vlan.dat
#erase startup-config
#reload<\/p>\n\n\n\n

…<\/p>\n\n\n\n

cisco vlan type<\/strong>
Static VLAN configuration<\/strong>:\u4e3b\u8981\u4ee5port\u6c7a\u5b9avlan
\u3000\u8a2d\u5b9a\u8f03\u7c21\u55ae
Dynamic VLAN assignment<\/strong>:\u53ef\u7528mac address\u6c7a\u5b9avlan
\u3000cisco dynamic VLANs require a VMPS(VLAN Membership Policy Server)
\u3000A network administrator must assign(static or dynamic) the user’s MAC address to a VLAN in the database of a VMPS
ps:
For more information about VMPS, refer to the “Configuring VMPS” section in a Catalyst  <\/p>\n\n\n\n

… <\/p>\n\n\n\n

vlan\u4e92\u9023 <\/strong>
vlan\u4e92\u9023\u9700\u7528\u5230\u7b2c\u4e09\u5c64\u8a2d\u5099,\u5982router
\u65b9\u6cd5\u67092\u7a2e:
1\u4f7f\u7528\u4e00\u689d\u7dda,\u4e5f\u7a31router on a stick(\u4e00\u6839\u68d2\u4e0a\u7684\u8def\u7531\u5668)
\u3000\u5168\u90e8vlan\u7528\u4e00\u689dtrunk\u9023\u5230router\u55ae\u4e00\u4ecb\u9762,\u6709\u591a\u5c11vlan\u5c31\u9700\u5728\u8a2d\u5b9a\u591a\u5c11\u5b50\u754c\u9762
\u3000ps:router\u4ecb\u9762\u6700\u597d\u8981fastethernet\u4ee5\u4e0a,ex:2600\u7cfb\u5217\u4ee5\u4e0a\u7684router
2\u4f7f\u7528\u591a\u689d\u7dda
\u3000\u5404vlan\u5206\u5225\u9023\u5230router\u7684\u5404\u4ecb\u9762<\/p>\n\n\n\n

route on a strick\u7f3a\u9ede<\/strong>
The router becomes a single point of failure for the network.
There is a possibility of inadequate bandwidth for each VLAN.
Additional overhead on the router can occur.<\/p>\n\n\n\n

………………………………………………………<\/p>\n\n\n\n

static vlan\u8a2d\u5b9a <\/strong><\/p>\n\n\n\n

\u65b0\u589evlan <\/strong><\/p>\n\n\n\n

\u65b9\u6cd51(2950switch\u70ba\u4e3b) 
1.
\u9032\u5165vlan\u8a2d\u5b9a\u6a21\u5f0f 
#vlan database <\/strong>\u3000\/\/\u9032\u5165\u5f8c\u63d0\u793a\u7b26\u865f\u70ba(vlan) \u3000
2.
\u65b0\u589evlan 
(vlan)#[no] vlan < vlan-id> [ name < vlan-name>]  <\/strong>
\u4f7f\u7528no\u53ea\u6703\u522a\u9664vlan,\u4f46\u4e26\u4e0d\u6703\u628a\u88ab\u522a\u9664\u7684vlan\u548cport\u9593\u7684\u95dc\u806f\u79fb\u9664
< vlan-id>\u53ef\u8a2d\u7bc4\u570d\u70ba\u70ba1-1005. 1,1002-1005\u662f\u81ea\u52d5\u5efa\u7acb\u7684\u7684\u4fdd\u7559vlan,\u800c1002-1005\u7528\u65bctoken-ring,fddi
ps:vlan-id\u53ef\u652f\u63f4Extended-range,\u53ef\u5c07\u7bc4\u570d\u64f4\u5c55\u52304096,\u4f46\u9700\u900f\u904eVTP3,\u4e14\u8cc7\u6599\u4e0d\u5b58\u5728vlan database\u3000
[name < vlan-name>]\u82e5\u6c92\u8a2dname,\u5247\u6703\u81ea\u52d5\u5efa\u7acb\u9810\u8a2d\u540d\u7a31\u70bavlan+id number
ex:vlan id\u70ba20,\u5247\u9810\u8a2d\u540d\u7a31\u70bavlan0020
ex:
\u65b0\u589evlan 2 \u4e14\u540d\u7a31\u70ba20vlan
(config)#vlan 2 name 20vlan
VLAN 2 added:
    Name:20vlan<\/p>\n\n\n\n

\u65b9\u6cd52
(config)#vlan <1-1005> [vlan-name] <\/strong>
ps:switch1900,2950,2960\u652f\u63f4<\/p>\n\n\n\n

… <\/p>\n\n\n\n

\u66f4\u6539vlan\u540d\u7a31<\/strong>
(config)#vlan < vlan-id>
(config-vlan)#name < vlan-name> <\/strong><\/p>\n\n\n\n

ps 
(vlan)#?
vlan                    Add, delete, or modify values associated with a single VLAN
vtp                     Perform VTP administrative functions.
exit                    Apply changes, bump revision number, and exit mode
help                    Description of the interactive help system
abort                   Exit mode without applying the changes
apply                   Apply current changes and bump revision number<\/p>\n\n\n\n

…<\/p>\n\n\n\n

\u6307\u5b9aport\u6240\u5c6cVLAN<\/strong><\/p>\n\n\n\n

1.
\u5c07port mode\u8a2d\u70baaccess 
(config)#int < interface>
(config-if)#switchport mode access<\/strong> <\/strong>
ps:port\u9810\u8a2d\u662faccess mode 
ps:port mode\u662faccess\u624d\u53ef\u5c07port\u6307\u5230\u67d0vlan 
ps:\u4e3b\u6a5f\u8981\u4ee5access port\u9023\u63a5

2.
\u5c07port\u6307\u5b9a\u5230\u67d0vlan 
(config-if)#switchport access vlan <1-1005><\/strong> <\/strong>
ex:
\u5c07fastethernet0\/1\u4ecb\u9762\u6307\u5b9a\u5230vlan2 
(config)#int fa0\/1 
(config-if)#switchport mode access 
(config-if)#switchport access vlan 2 <\/p>\n\n\n\n

ps:
1900switch\u7684\u6307\u4ee4\u70ba
(config-if)#vlan-membership static <1-1005>
static\u82e5\u6539\u70badynamic\u5247\u7531vmps\u52d5\u614b\u914d\u7f6e 
ps:vmps(vlan membership policy server)\u4e3b\u8981\u529f\u80fd\u662f\u5c0d\u61c9mac\u4f4d\u7f6e\u5230vlan
<\/p>\n\n\n\n

ps:
2950(config-if)#switchport ?
nonegotiate             Set trunking to nonegotiate
trunk                   Set trunking characteristics of the interface
access                  Set access mode characteristics of the interface
mode                    Set trunking mode of the interface
port-security           Security related command<\/p>\n\n\n\n

2950(config-if)#switchport mode ?
trunk                   Set trunking mode to TRUNK unconditionally
access                  Set trunking mode to ACCESS unconditionally
dynamic                 Set trunking mode to dynamically negotiate access or trunk mode<\/p>\n\n\n\n

2950(config-if)#switchport mode dynamic ?
auto                    Set trunking mode dynamic negotiation parameter to AUTO
desirable               Set trunking mode dynamic negotiation parameter to DESIRABLE<\/p>\n\n\n\n

…………………………………………. <\/p>\n\n\n\n

vlan\u5176\u4ed6\u8a2d\u5b9a <\/strong><\/p>\n\n\n\n

\u8a2d\u5b9aSVI
(config)#int vlan < vlan id><\/strong>
(config-if)#ip addr < ip > < mask> 
\u53ef\u5728vlan\u4e0a\u8a2dip
\u82e5\u6b64vlan\u6c92\u6709\u4efb\u4f55port up,\u5247SVI\u72c0\u614b\u6703\u7531UP\u8b8a\u70baDOWN
ps
\u53ef\u4f7f\u7528(config-if)#switchport autostate exclude \u8b93SVI\u72c0\u614b\u4e00\u76f4\u4fdd\u6301\u70baup<\/p>\n\n\n\n

\u5728switch\u4e0a\u8a2d\u5b9aip 
(config)#int vlan 1
(config-if)#ip addr < ip> < mask> <\/strong>
ps:\u7531\u65bccatalyst switch\u7cfb\u5217\u9810\u8a2d\u7684\u7ba1\u7406\u662fvlan1,\u56e0\u6b64\u8a2d\u5b9avlan1\u7684ip,\u7b49\u540c\u65bc\u8a2d\u5b9a\u9019\u53f0switch\u7684ip 
ps:cdp\u548cvtp\u6703\u7528vlan1\u904b\u4f5c
ps:\u958b\u555f\u700f\u89bd\u5668\u8f38\u5165switch ip\u4f4d\u7f6e\u5373\u53ef\u9032\u5165switch\u8a2d\u5b9a\u756b\u9762
ps:\u57f7\u884cno shutdown\u53ef\u555f\u52d5vlan1,\u9810\u8a2d\u5df1\u555f\u52d5<\/p>\n\n\n\n

\u986f\u793avlan1\u7684\u4ecb\u9762\u8cc7\u8a0a
>show interfaces vlan1<\/strong>
\u756b\u9762\u5927\u81f4\u5982\u4e0b
Vlan 1 is up, line protocol is up
\u3000Hardware is CPU Interface, address is 000C.2721.3927 (bia 000C.2721.3927)
\u3000Internet address is 197.10.1.99 \/24 \/\/switch\u7684ip\u4f4d\u7f6e
\u3000MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
\u3000\u3000reliability 255\/255, txload 1\/255, rxload 1\/255
\u3000Auto-duplex, Auto-speed
\u3000Encapsulation ARPA, loopback not set \/\/\u5c01\u88dd\u578b\u614b\u70baarpa
\u3000ARP type: ARPA, ARP Timeout 04:00:00
\u3000Last input 02:29:44, output never, output hang never
\u3000Last clearing of “show interface” counters never
\u3000Input queue: 0\/75\/0\/0 (size\/max\/drops\/flushes); Total output drops: 0
\u3000Queueing strategy: fifo
\u3000Output queue :0\/40 (size\/max)
\u3000\u30005 minute input rate 0 bits\/sec, 0 packets\/sec
\u3000\u30005 minute output rate 0 bits\/sec, 0 packets\/sec
\u3000\u3000269 packets input, 71059 bytes, 0 no buffer
\u3000\u3000Received 6 broadcasts, 0 runts, 0 giants, 0 throttles
\u3000\u30000 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
\u3000\u30007290 packets output, 429075 bytes, 0 underruns
\u3000\u30000 output errors, 3 interface resets
\u3000\u30000 output buffer failures, 0 output buffers swapped out <\/p>\n\n\n\n

………………………………………………………………………………………………<\/p>\n\n\n\n

\u4e86\u89e3vlan\u72c0\u6cc1 <\/strong><\/p>\n\n\n\n

cisco\u5efa\u8b70\u7684troubleshooting process<\/strong>
1check\u5be6\u9ad4\u6307\u793a\u71c8
2\u5f9e\u5916\u754ccheck\u55ae\u4e00switch\u8a2d\u5b9a
3check layer1\u9023\u7d50\u72c0\u614b
4check layer2\u9023\u7d50\u72c0\u614b
5check vlan\u4e2d\u7684\u5176\u4ed6switch<\/p>\n\n\n\n

#show interface [interface] switchport<\/strong>
\u82e5\u4e0d\u6307\u5b9ainterface\u5247\u5217\u51fa\u5168\u90e8\u4ecb\u9762\u7684switchport\u72c0\u614b
\u756b\u9762\u5927\u81f4\u5982\u4e0b(\u4ee5show int fa0\/12 switchport\u70ba\u4f8b)
Name: Fa0\/12
Switchport:Enabled
Administrative mode: dynamic           \/\/\u6307\u5b9a\u6b64port\u70badynamic
Operational mode: trunk               \/\/\u6b63\u5728\u4f5c\u696d\u7684port mode\u70batrunk
Administrative Trunking Encapsulation: dot1q
Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: ALL
Pruning VLANs Enabled: 2-1001
Protected: false
Voice vlan: none (Inactive)
Appliance trust: none<\/p>\n\n\n\n

\u770bVLAN\u72c0\u614b
#show vlan [id|brief]<\/strong><\/strong>
brief:\u53ef\u628a\u6240\u6709VLAN\u53ca\u5176\u64c1\u6709\u7684PORT\u7c21\u55ae\u7684\u986f\u793a 
id:\u6307\u5b9a\u500b\u5225vlan
ps:
\u4ee5show vlan brief\u70ba\u4f8b
\u756b\u9762\u5927\u81f4\u5982\u4e0b
VLAN Name                             Status    Ports
—- ——————————– ——— ——————————-
1    default                          active    Fa0\/2, Fa0\/3, Fa0\/4
                                                Fa0\/5, Fa0\/6, Fa0\/7, Fa0\/8
                                                Fa0\/9, Fa0\/10, Fa0\/11
20   2950vlan                       active    Fa0\/1, Fa0\/12    \/\/vlan\u540d\u70ba2950vlan,\u6210\u54e1\u6709fa0\/1,fa0\/2              
1002 fddi-default                     active
1003 token-ring-default               active
1004 fddinet-default                  active
1005 trnet-default                    active
VLAN Type  SAID       MTU   Parent RingNo BridgeNo Stp  BrdgMode Trans1 Trans2
—- —– ———- —– —— —— ——– —- ——– —— ——
1    enet  100001     1500  –      –      –        –    –        0      0
1002 fddi  101002     1500  –      –      –        –    –        0      0
1003 tr    101003     1500  –      –      –        –    –        0      0
1004 fdnet 101004     1500  –      –      –        ieee –        0      0
1005 trnet 101005     1500  –      –      –        ibm  –        0      0
ps:
\u4ee5show vlan id\u70ba\u4f8b(show vlan 20)
\u756b\u9762\u5927\u81f4\u5982\u4e0b
VLAN Name                             Status    Ports
—- ——————————– ——— ——————————-
20   2950vlan                         active    Fa0\/1, Fa0\/12
VLAN Type  SAID       MTU   Parent RingNo BridgeNo Stp  BrdgMode Trans1 Trans2
—- —– ———- —– —— —— ——– —- ——– —— ——
20   enet  100020     1500  –      –      –        –    –        0      0
ps:\u57281900switch,\u8981\u5f97\u77e5port\u5728vlan\u7684\u72c0\u6cc1,\u9700\u4f7f\u7528show vlan-membership<\/p>\n","protected":false},"excerpt":{"rendered":"

\u57fa\u672c\u6982\u5ff5 \u4ea4\u63db\u5668\u4e0b\u7684\u6240\u6709port\u9810\u8a2d\u70bavlan1\u7684\u6210\u54e1swi …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[34],"tags":[],"class_list":["post-948","post","type-post","status-publish","format-standard","hentry","category-cisco-layer2"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/948","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/comments?post=948"}],"version-history":[{"count":0,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/948\/revisions"}],"wp:attachment":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/media?parent=948"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/categories?post=948"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/tags?post=948"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}