当网络中有多台交换机时，位于不同交换机上的相同VLAN的主机之间时如何通信的呢？我们使用Trunk实现跨交换机VLAN通信。还有以太网通道的操作哦。
实验拓扑
两台交换机直连，每台下面再连接两台VPC，划分VLAN，地址规划如下：
| 名称 | 接口 | VLAN | 地址 |
|---|---|---|---|
| PC1 | SW1-f1/0 | vlan 10 | 192.168.10.10/24 |
| PC2 | SW1-f1/1 | vlan 20 | 192.168.10.20/24 |
| PC3 | SW2-f1/0 | vlan 10 | 192.168.10.30/24 |
| PC4 | SW2-f1/1 | vlan 20 | 192.168.10.40/24 |
配置方法
SW1(config)#interface fastEthernet 1/2
SW1(config-if)#switchport mode trunk
SW1(config-if)#switchport trunk encapsulation dot1q
SW1(config-if)#end
配置过程
交换机划分 VLAN
- SW1
SW1#conf t
SW1(config)#no ip routing
SW1(config)#vlan 10,20
SW1(config-vlan)#ex
SW1(config)#int f1/0
SW1(config-if)#sw m a
SW1(config-if)#sw a v 10
SW1(config-if)#ex
SW1(config)#int f1/1
SW1(config-if)#sw m a
SW1(config-if)#sw a v 20
SW1(config-if)#ex
SW1(config)#do show vlan-sw b
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa1/2, Fa1/3, Fa1/4, Fa1/5
Fa1/6, Fa1/7, Fa1/8, Fa1/9
Fa1/10, Fa1/11, Fa1/12, Fa1/13
Fa1/14, Fa1/15
10 VLAN0010 active Fa1/0
20 VLAN0020 active Fa1/1
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
- SW2
SW2#conf t
SW2(config)#no ip routing
SW2(config)#vlan 10,20
SW2(config-vlan)#ex
SW2(config)#int f1/0
SW2(config-if)#sw m a
SW2(config-if)#sw a v 10
SW2(config-if)#ex
SW2(config)#int f1/1
SW2(config-if)#sw m a
SW2(config-if)#sw a v 20
SW2(config-if)#ex
SW2(config)#do show vlan-sw b
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa1/2, Fa1/3, Fa1/4, Fa1/5
Fa1/6, Fa1/7, Fa1/8, Fa1/9
Fa1/10, Fa1/11, Fa1/12, Fa1/13
Fa1/14, Fa1/15
10 VLAN0010 active Fa1/0
20 VLAN0020 active Fa1/1
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
配置 Trunk
- SW1
SW1(config)#interface fastEthernet 1/2
SW1(config-if)#switchport mode trunk
SW1(config-if)#switchport trunk encapsulation dot1q
SW1(config-if)#end
- 查询验证
SW1#show interfaces fastEthernet 1/2 switchport
Name: Fa1/2
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: Disabled
Access Mode VLAN: 0 ((Inactive))
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: ALL
Trunking VLANs Active: 1,10,20
Protected: false
Priority for untagged frames: 0
Override vlan tag priority: FALSE
Voice VLAN: none
Appliance trust: none
- SW2
SW2(config)#int f1/2
SW2(config-if)#sw m t
SW2(config-if)#sw t e d
SW2(config-if)#do show int f1/2 switchport
Name: Fa1/2
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: Disabled
Access Mode VLAN: 0 ((Inactive))
Trunking Native Mode VLAN: 1 (default)
Trunking VLANs Enabled: ALL
Trunking VLANs Active: 1,10,20
Protected: false
Priority for untagged frames: 0
Override vlan tag priority: FALSE
Voice VLAN: none
Appliance trust: none
PING 测试
- PC1
PC1> ip 192.168.10.10
Checking for duplicate address...
PC1 : 192.168.10.10 255.255.255.0
PC1> ping 192.168.10.20
host (192.168.10.20) not reachable
PC1> ping 192.168.10.30
84 bytes from 192.168.10.30 icmp_seq=1 ttl=64 time=1.876 ms
84 bytes from 192.168.10.30 icmp_seq=2 ttl=64 time=1.853 ms
84 bytes from 192.168.10.30 icmp_seq=3 ttl=64 time=1.992 ms
84 bytes from 192.168.10.30 icmp_seq=4 ttl=64 time=0.000 ms
84 bytes from 192.168.10.30 icmp_seq=5 ttl=64 time=1.853 ms
PC1> ping 192.168.10.40
host (192.168.10.40) not reachable
PC1 PING PC3 抓包
- 在
SW1的F1/0接口开启抓包
- 在
SW1的F1/2接口开启抓包
数据包在出交换机时被打上
vlan 10的标签。
- PC2
PC2> ip 192.168.10.20
Checking for duplicate address...
PC1 : 192.168.10.20 255.255.255.0
PC2> ping 192.168.10.10
host (192.168.10.10) not reachable
PC2> ping 192.168.10.30
host (192.168.10.30) not reachable
PC2> ping 192.168.10.40
84 bytes from 192.168.10.40 icmp_seq=1 ttl=64 time=1.992 ms
84 bytes from 192.168.10.40 icmp_seq=2 ttl=64 time=1.999 ms
84 bytes from 192.168.10.40 icmp_seq=3 ttl=64 time=1.870 ms
84 bytes from 192.168.10.40 icmp_seq=4 ttl=64 time=1.842 ms
84 bytes from 192.168.10.40 icmp_seq=5 ttl=64 time=1.846 ms
PC2 PING PC4 抓包
- 在
SW1的F1/1接口开启抓包
- 在
SW1的F1/2接口开启抓包
数据包在出交换机时被打上
vlan 20的标签。
- PC3
PC3> ip 192.168.10.30
Checking for duplicate address...
PC1 : 192.168.10.30 255.255.255.0
PC3> ping 192.168.10.10
84 bytes from 192.168.10.10 icmp_seq=1 ttl=64 time=1.878 ms
84 bytes from 192.168.10.10 icmp_seq=2 ttl=64 time=1.849 ms
84 bytes from 192.168.10.10 icmp_seq=3 ttl=64 time=1.840 ms
84 bytes from 192.168.10.10 icmp_seq=4 ttl=64 time=1.842 ms
84 bytes from 192.168.10.10 icmp_seq=5 ttl=64 time=1.845 ms
PC3> ping 192.168.10.20
host (192.168.10.20) not reachable
PC3> ping 192.168.10.40
host (192.168.10.40) not reachable
- PC4
PC4> ip 192.168.10.40
Checking for duplicate address...
PC1 : 192.168.10.40 255.255.255.0
PC4> ping 192.168.10.10
host (192.168.10.10) not reachable
PC4> ping 192.168.10.20
84 bytes from 192.168.10.20 icmp_seq=1 ttl=64 time=1.962 ms
84 bytes from 192.168.10.20 icmp_seq=2 ttl=64 time=1.994 ms
84 bytes from 192.168.10.20 icmp_seq=3 ttl=64 time=1.981 ms
84 bytes from 192.168.10.20 icmp_seq=4 ttl=64 time=1.991 ms
84 bytes from 192.168.10.20 icmp_seq=5 ttl=64 time=1.965 ms
PC4> ping 192.168.10.30
host (192.168.10.30) not reachable
以太网通道
创建以太网通道可以增加链路的带宽，以及可靠性。
拓扑图
在当前实验的基础上，在交换机之间增加一条链路。
配置过程
接口配成 Trunk
- SW1
SW1#conf t
SW1(config)#int f1/3
SW1(config-if)#sw m t
SW1(config-if)#sw t e d
SW1(config-if)#no sh
- SW2
SW2#conf t
SW2(config)#int f1/3
SW2(config-if)#sw m t
SW2(config-if)#sw t e d
SW2(config-if)#no sh
接口绑定到一起
- SW1
SW1(config-if)#exit
SW1(config)#int range fastEthernet 1/2 - 3
SW1(config-if-range)#channel-group 1 mode on
Creating a port-channel interface Port-channel1
SW1(config-if-range)#
*Mar 1 00:56:50.555: %EC-5-BUNDLE: Interface Fa1/2 joined port-channel Po1
SW1(config-if-range)#
*Mar 1 00:56:53.487: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel1, changed state to up
- SW2
SW2(config-if)#ex
SW2(config)#int r f1/2 - 3
SW2(config-if-range)#ch 1 m o
Creating a port-channel interface Port-channel1
SW2(config-if-range)#
*Mar 1 01:00:16.955: %EC-5-BUNDLE: Interface Fa1/2 joined port-channel Po1
SW2(config-if-range)#
*Mar 1 01:00:19.875: %LINEPROTO-5-UPDOWN: Line protocol on Interface Port-channel1, changed state to up
故障模拟
验证以太网通道的可靠性，断开两个交换机的
f1/2接口，查看连通性。事先使用PC1对PC3进行长PING。
- 断开接口
SW1(config-if-range)#ex
SW1(config)#int f1/2
SW1(config-if)#sh
SW1(config-if)#
*Mar 1 01:05:35.947: %EC-5-UNBUNDLE: Interface Fa1/2 left the port-channel Po1
*Mar 1 01:05:35.995: %EC-5-BUNDLE: Interface Fa1/3 joined port-channel Po1
*Mar 1 01:05:36.451: %DTP-5-NONTRUNKPORTON: Port Fa1/2 has become non-trunk
*Mar 1 01:05:36.491: %DTP-5-TRUNKPORTON: Port Fa1/3 has become dot1q trunk
SW1(config-if)#
*Mar 1 01:05:37.887: %LINK-5-CHANGED: Interface FastEthernet1/2, changed state to administratively down
SW1(config-if)#
*Mar 1 01:05:37.947: %LINK-3-UPDOWN: Interface Port-channel1, changed state to up
SW1(config-if)#
*Mar 1 01:05:38.887: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/2, changed state to down
*Mar 1 01:05:38.991: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/3, changed state to up
SW2(config-if-range)#ex
SW2(config)#int f1/2
SW2(config-if)#sh
SW2(config-if)#
*Mar 1 01:06:57.415: %EC-5-UNBUNDLE: Interface Fa1/2 left the port-channel Po1
*Mar 1 01:06:57.447: %EC-5-BUNDLE: Interface Fa1/3 joined port-channel Po1
*Mar 1 01:06:57.915: %DTP-5-NONTRUNKPORTON: Port Fa1/2 has become non-trunk
*Mar 1 01:06:57.947: %DTP-5-TRUNKPORTON: Port Fa1/3 has become dot1q trunk
SW2(config-if)#
*Mar 1 01:06:59.375: %LINK-5-CHANGED: Interface FastEthernet1/2, changed state to administratively down
SW2(config-if)#
*Mar 1 01:06:59.411: %LINK-3-UPDOWN: Interface Port-channel1, changed state to up
SW2(config-if)#
*Mar 1 01:07:00.375: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/2, changed state to down
*Mar 1 01:07:00.443: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1/3, changed state to up
- PING 测试
PC1> ping 192.168.10.30 -t
84 bytes from 192.168.10.30 icmp_seq=1 ttl=64 time=1.975 ms
84 bytes from 192.168.10.30 icmp_seq=2 ttl=64 time=1.866 ms
84 bytes from 192.168.10.30 icmp_seq=3 ttl=64 time=1.849 ms
84 bytes from 192.168.10.30 icmp_seq=4 ttl=64 time=0.978 ms
84 bytes from 192.168.10.30 icmp_seq=5 ttl=64 time=1.851 ms
84 bytes from 192.168.10.30 icmp_seq=6 ttl=64 time=1.842 ms
84 bytes from 192.168.10.30 icmp_seq=7 ttl=64 time=1.896 ms
84 bytes from 192.168.10.30 icmp_seq=8 ttl=64 time=1.879 ms
84 bytes from 192.168.10.30 icmp_seq=9 ttl=64 time=1.877 ms
84 bytes from 192.168.10.30 icmp_seq=10 ttl=64 time=1.853 ms
84 bytes from 192.168.10.30 icmp_seq=11 ttl=64 time=1.988 ms
84 bytes from 192.168.10.30 icmp_seq=12 ttl=64 time=1.846 ms
84 bytes from 192.168.10.30 icmp_seq=13 ttl=64 time=1.839 ms
84 bytes from 192.168.10.30 icmp_seq=14 ttl=64 time=1.996 ms
84 bytes from 192.168.10.30 icmp_seq=15 ttl=64 time=1.847 ms
84 bytes from 192.168.10.30 icmp_seq=16 ttl=64 time=1.862 ms
84 bytes from 192.168.10.30 icmp_seq=17 ttl=64 time=1.847 ms
84 bytes from 192.168.10.30 icmp_seq=18 ttl=64 time=1.886 ms
84 bytes from 192.168.10.30 icmp_seq=19 ttl=64 time=1.849 ms
84 bytes from 192.168.10.30 icmp_seq=20 ttl=64 time=1.844 ms
84 bytes from 192.168.10.30 icmp_seq=21 ttl=64 time=1.886 ms
84 bytes from 192.168.10.30 icmp_seq=22 ttl=64 time=1.844 ms
84 bytes from 192.168.10.30 icmp_seq=23 ttl=64 time=1.889 ms
84 bytes from 192.168.10.30 icmp_seq=24 ttl=64 time=1.858 ms
84 bytes from 192.168.10.30 icmp_seq=25 ttl=64 time=1.965 ms
84 bytes from 192.168.10.30 icmp_seq=26 ttl=64 time=1.842 ms
84 bytes from 192.168.10.30 icmp_seq=27 ttl=64 time=1.848 ms
84 bytes from 192.168.10.30 icmp_seq=28 ttl=64 time=1.997 ms
84 bytes from 192.168.10.30 icmp_seq=29 ttl=64 time=1.843 ms
84 bytes from 192.168.10.30 icmp_seq=30 ttl=64 time=1.972 ms
84 bytes from 192.168.10.30 icmp_seq=31 ttl=64 time=1.847 ms
84 bytes from 192.168.10.30 icmp_seq=32 ttl=64 time=1.844 ms
84 bytes from 192.168.10.30 icmp_seq=33 ttl=64 time=0.968 ms
192.168.10.30 icmp_seq=34 timeout
192.168.10.30 icmp_seq=35 timeout
192.168.10.30 icmp_seq=36 timeout
192.168.10.30 icmp_seq=37 timeout
192.168.10.30 icmp_seq=38 timeout
192.168.10.30 icmp_seq=39 timeout
192.168.10.30 icmp_seq=40 timeout
192.168.10.30 icmp_seq=41 timeout
192.168.10.30 icmp_seq=42 timeout
192.168.10.30 icmp_seq=43 timeout
192.168.10.30 icmp_seq=44 timeout
192.168.10.30 icmp_seq=45 timeout
192.168.10.30 icmp_seq=46 timeout
192.168.10.30 icmp_seq=47 timeout
192.168.10.30 icmp_seq=48 timeout
192.168.10.30 icmp_seq=49 timeout
192.168.10.30 icmp_seq=50 timeout
192.168.10.30 icmp_seq=51 timeout
192.168.10.30 icmp_seq=52 timeout
192.168.10.30 icmp_seq=53 timeout
192.168.10.30 icmp_seq=54 timeout
192.168.10.30 icmp_seq=55 timeout
192.168.10.30 icmp_seq=56 timeout
192.168.10.30 icmp_seq=57 timeout
192.168.10.30 icmp_seq=58 timeout
192.168.10.30 icmp_seq=59 timeout
192.168.10.30 icmp_seq=60 timeout
192.168.10.30 icmp_seq=61 timeout
192.168.10.30 icmp_seq=62 timeout
192.168.10.30 icmp_seq=63 timeout
192.168.10.30 icmp_seq=64 timeout
192.168.10.30 icmp_seq=65 timeout
192.168.10.30 icmp_seq=66 timeout
192.168.10.30 icmp_seq=67 timeout
192.168.10.30 icmp_seq=68 timeout
192.168.10.30 icmp_seq=69 timeout
192.168.10.30 icmp_seq=70 timeout
192.168.10.30 icmp_seq=71 timeout
192.168.10.30 icmp_seq=72 timeout
192.168.10.30 icmp_seq=73 timeout
192.168.10.30 icmp_seq=74 timeout
192.168.10.30 icmp_seq=75 timeout
192.168.10.30 icmp_seq=76 timeout
192.168.10.30 icmp_seq=77 timeout
192.168.10.30 icmp_seq=78 timeout
192.168.10.30 icmp_seq=79 timeout
192.168.10.30 icmp_seq=80 timeout
192.168.10.30 icmp_seq=81 timeout
192.168.10.30 icmp_seq=82 timeout
192.168.10.30 icmp_seq=83 timeout
192.168.10.30 icmp_seq=84 timeout
192.168.10.30 icmp_seq=85 timeout
192.168.10.30 icmp_seq=86 timeout
192.168.10.30 icmp_seq=87 timeout
192.168.10.30 icmp_seq=88 timeout
192.168.10.30 icmp_seq=89 timeout
84 bytes from 192.168.10.30 icmp_seq=90 ttl=64 time=1.846 ms
84 bytes from 192.168.10.30 icmp_seq=91 ttl=64 time=1.982 ms
84 bytes from 192.168.10.30 icmp_seq=92 ttl=64 time=1.840 ms
84 bytes from 192.168.10.30 icmp_seq=93 ttl=64 time=1.849 ms
84 bytes from 192.168.10.30 icmp_seq=94 ttl=64 time=1.841 ms
84 bytes from 192.168.10.30 icmp_seq=95 ttl=64 time=1.846 ms
84 bytes from 192.168.10.30 icmp_seq=96 ttl=64 time=1.841 ms
84 bytes from 192.168.10.30 icmp_seq=97 ttl=64 time=1.861 ms
84 bytes from 192.168.10.30 icmp_seq=98 ttl=64 time=0.844 ms
84 bytes from 192.168.10.30 icmp_seq=99 ttl=64 time=0.833 ms
最后
这是关于使用Trunk实现跨交换机VLAN通信的实验，和以太网通道怎么创建方法。下一篇关于三层交换的实验。