Tong Quan Ve VLAN

8/6/2019 Tong Quan Ve VLAN

1/41

Tng quan vVLAN (VLAN Overview)Tng quan vVLAN (VLAN Overview)

Segmentation

Flexibility

Security

3rd floor

2nd floor

1st floor

SALES HR ENG

A VLAN = A broadcast domain = Logical network (subnet)


2/41

Tng quan vVLAN (VLAN Overview)


3/41

Ni DungNi Dung

Khi nim vVLAN

Khi nim v Trunking

VLAN Trunking Protocol (VTP)

Cu hnh switch for trunking

Thay i kt ni VLAN

Thay i spanning-tree


4/41

Tng quan vVLAN (VLAN Overview)

L mt nhm cc thit b mng

khng b gii hn v a lMi cng vic cu hnh Vlan uc thc hin bng phn mm

Mi Vlan l mt min qung b

C kh nng m rng v bo mt


5/41

Hot ng ca VLAN (VLAN Operations)Hot ng ca VLAN (VLAN Operations)

Switch A

Green

VLAN

Black

VLAN

Red

VLAN

Each logical VLAN is like a separate physical bridge


6/41

Switch A

Green

VLAN

Black

VLAN

Red

VLAN

Switch B

Green

VLAN

Black

VLAN

Red

VLAN


VLANs can span across multiple switches



7/41

Switch A

Green

VLAN

Black

VLAN

Red

VLAN

Switch B

Green

VLAN

Black

VLAN

Red

VLAN

Trunk


VLANs can span across multiple switches

Trunks carries traffic for multiple VLANs

Fast Ethernet



8/41

VLAN5

Static VLAN Dynamic VLAN

MAC = 1111.1111.1111

Trunk

VMPS

1111.1111.1111 = vlan 10

VLAN10

Port e0/9Port e0/4

Cc loi Vlan

VMPS=Vlan Management plicy sever


9/41

Hot ng ca ng Trunk


10/41

Hot ng ca ng Trunk


11/41

Hot ng ca ng Trunk


12/41

Hot ng ca ng Trunk


13/41


14/41

ISL TaggingISL Tagging


15/41

ISL EncapsulationISL Encapsulation

ISL HeaderISL Header

26 bytes26 bytesEncapsulated Ethernet frame

CRCCRC

4 bytes4 bytes

Frames encapsulated withISL header and CRC

Support for

many VLANs (1024)


16/41

Giao thc Vlan trunking (VTP)Giao thc Vlan trunking (VTP)

1.new vlan added

3.Sync to the latest vlan information

2

VTP Domain


17/41

G

iao th

c Vlan trunking (VTP)G

iao th

c Vlan trunking (VTP)

Duy tr cu hnh Vlan thng nht trong mt min qun

tr

VTP l mt giao thc thng ip s dng gi trunk lp

2 qun l s thm xo v t tn cc Vlan trong mt

min nht nhH tr trunks trn mi trng mng hn hp

Tp trung cc thng tin v s thay i t tt c cc

Switch trong mng


18/41

Cc ch hot ng ca VTPCc ch hot ng ca VTP

Transparent

Sends/forwards

advertisements Synchronize

Not saved inNVRAM

Create vlansModify vlansDelete vlansSends/forwardsadvertisementsSynchronizeSaved in NVRAM

Forwardsadvertisements

Does not

synchronize

Saved in NVRAM


19/41

Hot ng ca VTPHot ng ca VTP

VTP advertisement c gi ra nh l multicast frames

VTP servers v clients ng b ho ch s thay i cuhnh theo ch s mi

C sau 5 pht hoc khi c thay i cu hnh th VTP

advertisement c gi ti cc switch


20/41

Hot ng ca VTPHot ng ca VTP

1.Add new VLAN

2.Rev 3 --> Rev 4

Server

Client Client

4.Rev 3 --> Rev 45.Sync new vlan info

3 3

4.Rev 3 --> Rev 45.Sync new vlan info


21/41

VTP PruningVTP Pruning

Tng bng thng bng cch gim v ct bnhng ti khng cn thit

Example: Station A gi broadcast, broadcastch cchuyn n cc port c gn cho redVLAN


22/41

VTP PruningVTP Pruning

Switch 4

Switch 2

Switch 6 Switch 3 Switch 1

Port 2

Floodedtraffic ispruned

RedVLAN

Port 1

Switch 5

A

B


23/41

Cu Hnh VLAN

Cu Hnh Vlan trn Catalyst1900 v 2950


24/41

Rcs-Sud-Est

Configurations can come frommany sources

Configurations will act indevice memory

Console port

Auxiliary port

Interfaces

PC or Unix server

Web or NetworkManagementserver

Virtual terminal

External Configuration SourcesExternal Configuration Sources

Telnet

TFTP


25/41

Kt ni vo cng qun l trn router


26/41


27/41

1900 switch>en

Switch#config t

Switch(config)#hostname 1900

1900(config)#vlan 2 name khoatoan

1900(config)#vlan 3 nam

e khoaly1900(config)#exit


28/41

2950 SwitchSwitch>en

Switch#config t

Switch(config)#hostname 29502950#vlan database

2950(vlan)#vlan 22950(vlan)#name khoatoan

2950(vlan)#vlan 3

2950(vlan)#name khoaLy

2950(vna)#exit


29/41

Xem thng tin cu hnh Vlan1900#sh vlan

1900#sh vlan brief

Switch_2#show vlan VLAN Name Status Ports

1 default active e0/1 e0/2, e0/3, e0/4, e0/5,

e0/10, e0/11, e0/122 khoatoan active

3 Khoaly active

4 vlan0004 active

5 vlan0005 active


30/41

Cu hnh vlan c nh i vi switch 1900

1900(config)#int e0/2

1900(config-if)#vlan-m

em

bership static 21900(config)#int e0/3

1900(config-if)#vlan-membership static 2

1900(config)#int e0/41900(config-if)#vlan-membership static 3


31/41

2950(config)#intport

2950(config-if)#switchport acess vlan vlan-id

V d2950(config)#int e0/2

2950(config-if)#switchport acess vlan 2





Cu hnh vlan c nh i vi switch 2950


32/41

Xem thng tin cu hnh Vlan1900#sh vlan

1900#sh vlan brief

Switch_2#show vlan VLAN Name Status Ports

1 default active e0/1, e0/5, e0/10, e0/11,

Fa0/122 khaotoan active e0/2, e0/3

3 Khoaly active e0/4

4 vlan0004 active

5 vlan0005 active


33/41


34/41


35/41

Interface fa0/1.1Encapsulation dot1q 1I

p address 192

.168.1.652

55.2

55.2

55.192

Interfact fa0/1.2Encapsulation dot1q 2Ip address 192.168.1.129 255.255.255.224

Port1 dot1q TrunkPort 2, 3 Vlan1, Port 4 Vlan2


36/41

Khai bo kiu ng gi trn trunk port

Mc nh th catalyst 1900 ch h ch kiu ng giISL, v 2950 ch h ch 802.1q (dot1q)

Catalyst 3550 h ch c hai v th bn c th sdng kiu ng gi thch hp

switch(config-if)# switchport encapsulation dot1q

Hocswitch(config-if)# switchport encapsulation isl


37/41

Cu hnh kiu ng gi trn cc cng logic

ca router2600# config t

2600(config)# int f0/0.1

2600(config-subif)# encapsulation dot1q vlan-number

Hoc

2600(config-subif)# encapsulation islvlan-number


38/41

V d

2950#vlan database

2950(vlan)#vlan 22950(vlan)#exit

2950#config t

2950(config)#int fa0/12950(config-if)#switchportmode trunk2950(config-if)#


39/41

2950#config t2950(config)#int fa0/32950(config-if)#switchport acess vlan 2

2950#config t2950(config)#int fa0/22950(config-if)#switchport acess vlan 1

2950#config t2950(config)#int vlan 12950(config-if)# ip address 172.16.10.2

255.255.255.128

V d


40/41

V d

Router#config tRouter(config)# int f0/0Router(config-if)#no ip addressRouter(config-if)#no shutdownRouter(config-if)# int f0/0.1Router(config-subif)# encapsulation dot1q 1Router(config-subif)# ip address 172.16.10.1 255.255.255.128Router(config-if)# int f0/0.2Router(config-subif)# encapsulation dot1q 2Router(config-subif)# ip address 172.16.10.254 255.255.255.128


41/41

Cu hnh VTP2950#vtp domain dhbk

2950#vtp password abcd

2950#vtp mode client

2950#vtp mode server

2950#vtp mode transparent

Documents

Tong Quan Ve VLAN