0818 VLAN的隔离技术实验.docx
- 文档编号:9201025
- 上传时间:2023-02-03
- 格式:DOCX
- 页数:23
- 大小:152.39KB
0818 VLAN的隔离技术实验.docx
《0818 VLAN的隔离技术实验.docx》由会员分享,可在线阅读,更多相关《0818 VLAN的隔离技术实验.docx(23页珍藏版)》请在冰豆网上搜索。
0818VLAN的隔离技术实验
VLAN的隔离技术实验
2014年8月15日
10:
49
1端口隔离
端口隔离是物理层次上的隔离,是基于端口,配置端口隔离后,无论是哪个VLAN,两个端口间都不能通信,端口隔离适用于控制同一VLAN的不同用户之间的通信。
实验要求:
1测试相同隔离VLAN10,相同组间能否通信
2测试不同隔离VLAN10,不同组间能否通信
3测试隔离VLAN10和非隔离VLAN10间能否通信
PC1上的测试:
PC>ping10.0.1.2
Ping10.0.1.2:
32databytes,PressCtrl_Ctobreak
From10.0.1.2:
bytes=32seq=1ttl=128time=16ms
From10.0.1.2:
bytes=32seq=2ttl=128time=16ms
From10.0.1.2:
bytes=32seq=3ttl=128time<1ms
From10.0.1.2:
bytes=32seq=4ttl=128time=16ms
From10.0.1.2:
bytes=32seq=5ttl=128time=16ms
PC>ping10.0.1.3
Ping10.0.1.3:
32databytes,PressCtrl_Ctobreak
From10.0.1.3:
bytes=32seq=1ttl=128time<1ms
From10.0.1.3:
bytes=32seq=2ttl=128time=47ms
From10.0.1.3:
bytes=32seq=3ttl=128time=16ms
From10.0.1.3:
bytes=32seq=4ttl=128time=16ms
From10.0.1.3:
bytes=32seq=5ttl=128time<1ms
PC>ping10.0.1.4
Ping10.0.1.4:
32databytes,PressCtrl_Ctobreak
From10.0.1.4:
bytes=32seq=1ttl=128time=16ms
From10.0.1.4:
bytes=32seq=2ttl=128time<1ms
From10.0.1.4:
bytes=32seq=3ttl=128time=16ms
From10.0.1.4:
bytes=32seq=4ttl=128time=15ms
From10.0.1.4:
bytes=32seq=5ttl=128time=31ms
未配置前PC1能和所有的PC通信,在SW1配置端口隔离,命令如下:
vlanbatch1020
interfaceEthernet0/0/1
portlink-typeaccess
portdefaultvlan10
port-isolateenablegroup10
#
interfaceEthernet0/0/2
portlink-typeaccess
portdefaultvlan10
port-isolateenablegroup10
#
interfaceEthernet0/0/3
portlink-typeaccess
portdefaultvlan10
port-isolateenablegroup20
#
interfaceEthernet0/0/4
portlink-typeaccess
portdefaultvlan10
在PC1、PC3和PC4上分别进行测试:
PC1上进行测试:
PC>ping10.0.1.2
Ping10.0.1.2:
32databytes,PressCtrl_Ctobreak
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
PC>ping10.0.1.3
Ping10.0.1.3:
32databytes,PressCtrl_Ctobreak
From10.0.1.3:
bytes=32seq=1ttl=128time=31ms
From10.0.1.3:
bytes=32seq=2ttl=128time=15ms
From10.0.1.3:
bytes=32seq=3ttl=128time=15ms
From10.0.1.3:
bytes=32seq=4ttl=128time=16ms
From10.0.1.3:
bytes=32seq=5ttl=128time=32ms
PC>ping10.0.1.4
Ping10.0.1.4:
32databytes,PressCtrl_Ctobreak
From10.0.1.4:
bytes=32seq=1ttl=128time=15ms
From10.0.1.4:
bytes=32seq=2ttl=128time<1ms
From10.0.1.4:
bytes=32seq=3ttl=128time=16ms
From10.0.1.4:
bytes=32seq=4ttl=128time=32ms
From10.0.1.4:
bytes=32seq=5ttl=128time=16ms
PC3上进行测试:
PC>ping10.0.1.1
Ping10.0.1.1:
32databytes,PressCtrl_Ctobreak
From10.0.1.1:
bytes=32seq=1ttl=128time=15ms
From10.0.1.1:
bytes=32seq=2ttl=128time=31ms
From10.0.1.1:
bytes=32seq=3ttl=128time=16ms
From10.0.1.1:
bytes=32seq=4ttl=128time=32ms
From10.0.1.1:
bytes=32seq=5ttl=128time=16ms
PC>ping10.0.1.2
Ping10.0.1.2:
32databytes,PressCtrl_Ctobreak
From10.0.1.2:
bytes=32seq=1ttl=128time<1ms
From10.0.1.2:
bytes=32seq=2ttl=128time=15ms
From10.0.1.2:
bytes=32seq=3ttl=128time=16ms
From10.0.1.2:
bytes=32seq=4ttl=128time=16ms
From10.0.1.2:
bytes=32seq=5ttl=128time=15ms
PC>ping10.0.1.4
Ping10.0.1.4:
32databytes,PressCtrl_Ctobreak
From10.0.1.4:
bytes=32seq=1ttl=128time=31ms
From10.0.1.4:
bytes=32seq=2ttl=128time=15ms
From10.0.1.4:
bytes=32seq=3ttl=128time<1ms
From10.0.1.4:
bytes=32seq=4ttl=128time=31ms
From10.0.1.4:
bytes=32seq=5ttl=128time<1ms
PC4上进行测试:
PC>ping10.0.1.1
Ping10.0.1.1:
32databytes,PressCtrl_Ctobreak
From10.0.1.1:
bytes=32seq=1ttl=128time=15ms
From10.0.1.1:
bytes=32seq=2ttl=128time=16ms
From10.0.1.1:
bytes=32seq=3ttl=128time=15ms
From10.0.1.1:
bytes=32seq=4ttl=128time<1ms
From10.0.1.1:
bytes=32seq=5ttl=128time=31ms
PC>ping10.0.1.2
Ping10.0.1.2:
32databytes,PressCtrl_Ctobreak
From10.0.1.2:
bytes=32seq=1ttl=128time=15ms
From10.0.1.2:
bytes=32seq=2ttl=128time=31ms
From10.0.1.2:
bytes=32seq=3ttl=128time=16ms
From10.0.1.2:
bytes=32seq=4ttl=128time=47ms
From10.0.1.2:
bytes=32seq=5ttl=128time=15ms
PC>ping10.0.1.3
Ping10.0.1.3:
32databytes,PressCtrl_Ctobreak
From10.0.1.3:
bytes=32seq=1ttl=128time=31ms
From10.0.1.3:
bytes=32seq=2ttl=128time=15ms
From10.0.1.3:
bytes=32seq=3ttl=128time=15ms
From10.0.1.3:
bytes=32seq=4ttl=128time=15ms
From10.0.1.3:
bytes=32seq=5ttl=128time=15ms
[SW1]disport-isolategroupall//查看接口的隔离情况
Theportsinisolategroup10:
Ethernet0/0/1Ethernet0/0/2
Theportsinisolategroup20:
Ethernet0/0/3
测试结果表明,相同VLAN内的端口隔离:
1如果端口在同一个隔离组内则不能相互通信
2如果端口不在同一个隔离组内则能相互通信
3同一VLAN内,隔离端口和非隔离端口间能相互通信。
2MUXVLAN
MUXVLAN提供了一种在VLAN的端口间进行二层流量隔离的机制。
MUXVLAN分为主VLAN和从VLAN,从VLAN又分为互通型从VLAN和隔离型从VLAN。
端口的通信原则:
1主VLAN与从VLAN之间可以相互通信
2互通型从VLAN内的端口之间可以互相通信,隔离型从VLAN内的端口之间不能互相通信
3不同从VLAN之间不能互相通信
注:
1每台交换机上只能将一个VLAN划入隔离性VLAN,但可以将多个VLAN划入不同的互通型VLAN。
2划入MUXVLAN的VLAN不能在配置三层的IP地址,因为MUXVLAN是二层的机制,会产生冲突。
实验验证:
1隔离型VLAN内部能否通信
2相同互通型VLAN之间能否通信
3不同互通型VLAN之间能否通信
4互通型VLAN和隔离型VLAN间能否通信
未做配置之前,在PC1上测试,如下:
PC>ping10.0.1.2
Ping10.0.1.2:
32databytes,PressCtrl_Ctobreak
From10.0.1.2:
bytes=32seq=1ttl=128time=31ms
From10.0.1.2:
bytes=32seq=2ttl=128time=15ms
From10.0.1.2:
bytes=32seq=3ttl=128time=31ms
From10.0.1.2:
bytes=32seq=4ttl=128time=16ms
From10.0.1.2:
bytes=32seq=5ttl=128time=47ms
PC>ping10.0.1.3
Ping10.0.1.3:
32databytes,PressCtrl_Ctobreak
From10.0.1.3:
bytes=32seq=1ttl=128time=15ms
From10.0.1.3:
bytes=32seq=2ttl=128time=15ms
From10.0.1.3:
bytes=32seq=3ttl=128time=15ms
From10.0.1.3:
bytes=32seq=4ttl=128time=31ms
From10.0.1.3:
bytes=32seq=5ttl=128time=16ms
PC>ping10.0.1.4
Ping10.0.1.4:
32databytes,PressCtrl_Ctobreak
From10.0.1.4:
bytes=32seq=1ttl=128time=16ms
From10.0.1.4:
bytes=32seq=2ttl=128time=16ms
From10.0.1.4:
bytes=32seq=3ttl=128time=32ms
From10.0.1.4:
bytes=32seq=4ttl=128time=16ms
From10.0.1.4:
bytes=32seq=5ttl=128time=16ms
PC>ping10.0.1.5
Ping10.0.1.5:
32databytes,PressCtrl_Ctobreak
From10.0.1.5:
bytes=32seq=1ttl=128time=16ms
From10.0.1.5:
bytes=32seq=2ttl=128time=15ms
From10.0.1.5:
bytes=32seq=3ttl=128time=15ms
From10.0.1.5:
bytes=32seq=4ttl=128time=15ms
From10.0.1.5:
bytes=32seq=5ttl=128time=16ms
在SW1上完成配置:
vlanbatch102030100
#
vlan100
mux-vlan
subordinateseparate10
subordinategroup2030
#
interfaceEthernet0/0/1
portlink-typeaccess
portdefaultvlan30
portmux-vlanenable
#
interfaceEthernet0/0/2
portlink-typeaccess
portdefaultvlan30
portmux-vlanenable
#
interfaceEthernet0/0/3
portlink-typeaccess
portdefaultvlan10
portmux-vlanenable
#
interfaceEthernet0/0/4
portlink-typeaccess
portdefaultvlan10
portmux-vlanenable
#
interfaceEthernet0/0/5
portlink-typeaccess
portdefaultvlan20
portmux-vlanenable
查看接口的划分情况:
[SW1]dismux-vlan
PrincipalSubordinateTypeInterface
-----------------------------------------------------------------------------
100-principal
10010separateEthernet0/0/3Ethernet0/0/4
10020groupEthernet0/0/5
10030groupEthernet0/0/1Ethernet0/0/2
-----------------------------------------------------------------------------
在PC1、PC3和PC5上进行测试:
PC1上的测试:
PC>ping10.0.1.2
Ping10.0.1.2:
32databytes,PressCtrl_Ctobreak
From10.0.1.2:
bytes=32seq=1ttl=128time=16ms
From10.0.1.2:
bytes=32seq=2ttl=128time=15ms
From10.0.1.2:
bytes=32seq=3ttl=128time=15ms
From10.0.1.2:
bytes=32seq=4ttl=128time=15ms
From10.0.1.2:
bytes=32seq=5ttl=128time=31ms
PC>ping10.0.1.3
Ping10.0.1.3:
32databytes,PressCtrl_Ctobreak
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
PC>ping10.0.1.4
Ping10.0.1.4:
32databytes,PressCtrl_Ctobreak
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
PC>ping10.0.1.5
Ping10.0.1.5:
32databytes,PressCtrl_Ctobreak
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
From10.0.1.1:
Destinationhostunreachable
PC3上的测试:
PC>ping10.0.1.1
Ping10.0.1.1:
32databytes,PressCtrl_Ctobreak
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
PC>ping10.0.1.2
Ping10.0.1.2:
32databytes,PressCtrl_Ctobreak
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
PC>ping10.0.1.4
Ping10.0.1.4:
32databytes,PressCtrl_Ctobreak
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
PC>ping10.0.1.5
Ping10.0.1.5:
32databytes,PressCtrl_Ctobreak
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunreachable
From10.0.1.3:
Destinationhostunr
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- 0818 VLAN的隔离技术实验 VLAN 隔离 技术 实验