某公司有若干名员工,现在公司业务扩展需要,拟整体搬迁到新办公楼。新办公楼里给配置了一台三层交换机,和2台二层交换机。现公司为了业务需求,需要把员工分为两类人员,一类普通员工、一类管理人员,要求:
1、能够在二层隔离两类人员的广播信息
2、能够在三层实现两类人员的信息互通。
假如你是公司网络管理人员,请你规划好网络拓扑,完成实验测试。所有网络产品均为Cisco。
拓扑图
SW1
SW1>enable SW1#configure terminal SW1(config)#vlan 10 SW1(config-vlan)#name VLAN10 SW1(config-vlan)#exit SW1(config)#vlan 20 SW1(config-vlan)#name VLAN20 SW1(config-vlan)#exit SW1(config)#interface FastEthernet0/2 SW1(config-if)#SW1port access vlan 10 SW1(config-if)#exit SW1(config)#interface FastEthernet0/11 SW1(config-if)#SW1port access vlan 20 SW1(config-if)#exit SW1(config)#interface FastEthernet0/1 SW1(config-if)#SW1port mode trunk
SW2
SW2>enable SW2#configure terminal SW2(config)#vlan 10 SW2(config-vlan)#name VLAN10 SW2(config-vlan)#exit SW2(config)#vlan 20 SW2(config-vlan)#name VLAN20 SW2(config-vlan)#exit SW2(config)#interface FastEthernet0/1 SW2(config-if)#SW2port mode trunk %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up SW2(config-if)#exit SW2(config)#interface FastEthernet0/2 SW2(config-if)#SW2port access vlan 10 SW2(config-if)#exit SW2(config)#interface FastEthernet0/11 SW2(config-if)#SW2port access vlan 20
SW3
SW3>enable SW3#configure terminal SW3#vlan database % Warning: It is recommended to configure VLAN from config mode, as VLAN database mode is being deprecated. Please consult user documentation for configuring VTP/VLAN in config mode. SW3(vlan)# %SYS-5-CONFIG_I: Configured from console by console vlan 10 name VLAN10 VLAN 10 modified: Name: VLAN10 SW3(vlan)#vlan 20 name VLAN20 VLAN 20 modified: Name: VLAN20 SW3(vlan)#exit SW3#configure terminal Enter configuration commands, one per line. End with CNTL/Z. SW3(config)#int vlan 10 SW3(config-if)# %LINK-5-CHANGED: Interface Vlan10, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, changed state to up SW3(config-if)#ip add 192.168.1.1 255.255.255.0 SW3(config-if)#no shut SW3(config-if)#int vlan 20 SW3(config-if)# %LINK-5-CHANGED: Interface Vlan20, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan20, changed state to up SW3(config-if)#ip add 192.168.2.1 255.255.255.0 SW3(config-if)#no shutdown SW3(config-if)#ip routing SW3(config)#
Pc0 ping pc1,pc2,pc3
思路:利用三层交换机实现不同vlan之间的通信。