supervlan配置案例
- 0关注
- 2收藏 4120浏览
组网及说明
某局点的某部门目前使用了一个业务VLAN来实现网络通信，由于业务扩展的需要，增加了一个新的部门，为了使新部门更方便的接入网络，网络管理员想让新部门使用原来的业务VLAN的IP，但是又想两个部门处在不同的广播域，因此希望采用supervlan技术，实现两个部门使用不同的VLAN，但是使用同一个业务地址段。
部门1使用VLAN 100，部门2使用VLAN 200，共同使用192.168.10.0/24的这个业务网段上网。
配置步骤
1、分别给交换机命名
2、在SW1交换机创建VLAN 10，指定为supervlan，创建VLAN 10,VLAN 20，指定为VLAN 10的subvlan
3、给VLAN 10配置IP地址
4、SW1交换机与SW2、SW3交换机的互联接口开启trunk，仅trunk相应的VLAN
5、分别在SW2、SW3交换机创建业务VLAN，并与SW1互联的接口开启trunk，仅trunk相应的VLAN
配置关键点
SW1:
[H3C]sysname SW1
[SW1]vlan 100
[SW1-vlan100]quit
[SW1]vlan 200
[SW1-vlan200]quit
[SW1]vlan 10
[SW1-vlan10]supervlan //将VLAN 10配置为supervlan
[SW1-vlan10]subvlan 100 //将VLAN 100配置为subvlan
[SW1-vlan10]subvlan 200 //将VLAN 200配置为subvlan
[SW1-vlan10]quit
[SW1]int gi 1/0/1
[SW1-GigabitEthernet1/0/1]port link-type trunk
[SW1-GigabitEthernet1/0/1]undo port trunk permit vlan 1
[SW1-GigabitEthernet1/0/1]port trunk permit vlan 100
[SW1-GigabitEthernet1/0/1]description <connect to SW2>
[SW1-GigabitEthernet1/0/1]quit
[SW1]int gi 1/0/2
[SW1-GigabitEthernet1/0/2]port link-type trunk
[SW1-GigabitEthernet1/0/2]undo port trunk permit vlan 1
[SW1-GigabitEthernet1/0/2]port trunk permit vlan 200
[SW1-GigabitEthernet1/0/2]description <connect to SW3>
[SW1-GigabitEthernet1/0/2]quit
[SW1]int vlan 10
[SW1-Vlan-interface10]ip address 192.168.10.254 255.255.255.0 //给VLAN 10配置IP地址
[SW1-Vlan-interface10]undo shutdown
[SW1-Vlan-interface10]quit
SW2:
[H3C]sysname SW2
[SW2]vlan 100
[SW2-vlan100]quit
[SW2]int gi 1/0/1
[SW2-GigabitEthernet1/0/1]port link-type trunk
[SW2-GigabitEthernet1/0/1]undo port trunk permit vlan 1
[SW2-GigabitEthernet1/0/1]port trunk permit vlan 100
[SW2-GigabitEthernet1/0/1]description <connect to SW1>
[SW2-GigabitEthernet1/0/1]quit
[SW2]int ran gi 1/0/2 to gi 1/0/24
[SW2-if-range]port link-type access
[SW2-if-range]port access vlan 100
[SW2-if-range]quit
SW3:
[H3C]sysname SW3
[SW3]vlan 200
[SW3-vlan200]quit
[SW3]int gi 1/0/1
[SW3-GigabitEthernet1/0/1]port link-type trunk
[SW3-GigabitEthernet1/0/1]undo port trunk permit vlan 1
[SW3-GigabitEthernet1/0/1]port trunk permit vlan 200
[SW3-GigabitEthernet1/0/1]description <connect to SW1>
[SW3-GigabitEthernet1/0/1]quit
[SW3]int range gi 1/0/2 to gi 1/0/24
[SW3-if-range]port link-type access
[SW3-if-range]port access vlan 200
[SW3-if-range]quit
测试：
PC_4和PC_5分别设置IP地址，在SW1交换机看能否学习到了ARP和MAC
[SW1]dis supervlan //查看supervlan的信息
Super VLAN ID: 10
Sub-VLAN ID: 100, 200
VLAN ID: 10
VLAN type: Static
It is a super VLAN.
Route interface: Configured
IPv4 address: 192.168.10.254
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0010
Name: VLAN 0010
Tagged ports: None
Untagged ports: None
VLAN ID: 100
VLAN type: Static
It is a sub-VLAN.
Route interface: Configured
IPv4 address: 192.168.10.254
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0100
Name: VLAN 0100
Tagged ports:
[SW1]dis supervlan 10
Super VLAN ID: 10
Sub-VLAN ID: 100, 200
VLAN ID: 10
VLAN type: Static
It is a super VLAN.
Route interface: Configured
IPv4 address: 192.168.10.254
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0010
Name: VLAN 0010
Tagged ports: None
Untagged ports: None
VLAN ID: 100
VLAN type: Static
It is a sub-VLAN.
Route interface: Configured
IPv4 address: 192.168.10.254
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0100
Name: VLAN 0100
Tagged ports:
GigabitEthernet1/0/1
Untagged ports: None
VLAN ID: 200
VLAN type: Static
It is a sub-VLAN.
Route interface: Configured
IPv4 address: 192.168.10.254
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0200
Name: VLAN 0200
Tagged ports:
GigabitEthernet1/0/2
Untagged ports: None
[SW1]
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作