Building 1 Management
|
VLAN
|
IPv4
|
IPv6
|
core1.campusX
|
10
|
172.2X.10.1/24
|
2001:DB8:X:10::1/64
|
dist1-b1.campusX
|
10
|
172.2X.10.2/24
|
2001:DB8:X:10::2/64
|
edge1-b1.campusX
|
10
|
172.2X.10.3/24
|
2001:DB8:X:10::3/64
|
edge2-b1.campusX
|
10
|
172.2X.10.4/24
|
2001:DB8:X:10::4/64
|
Building 2 Management
|
VLAN
|
IPv4
|
IPv6
|
core1.campusX
|
20
|
172.2X.20.1/24
|
2001:DB8:X:20::1/64
|
dist1-b2.campusX
|
20
|
172.2X.20.2/24
|
2001:DB8:X:20::2/64
|
edge1-b2.campusX
|
20
|
172.2X.20.3/24
|
2001:DB8:X:20::3/64
|
edge2-b2.campusX
|
20
|
172.2X.20.4/24
|
2001:DB8:X:20::4/64
|
Asosiy kalitda:
interface vlan 1
no ip address
no ipv6 address 2001:DB8:X:0::0:1/64
shutdown
!
interface vlan 10
description Management VLAN Building 1
ip address 172.2X.10.1 255.255.255.0
ipv6 address 2001:DB8:X:10::1/64
no shutdown
!
interface vlan 20
description Management VLAN Building 2
ip address 172.2X.20.1 255.255.255.0
ipv6 address 2001:DB8:X:20::1/64
no shutdown
!
1-binoda:
interface vlan 1
no ip address
no ipv6 address 2001:DB8:X:0::1:N/64
shutdown
!
interface vlan 10
description Management VLAN Building 1
ip address 172.2X.10.N 255.255.255.0
ipv6 address 2001:DB8:X:10::N/64
no shutdown
!
2-binoda:
interface vlan 1
no ip address
no ipv6 address 2001:DB8:X:0::2:N/64
shutdown
!
interface vlan 20
description Management VLAN Building 2
ip address 172.2X.20.N 255.255.255.0
ipv6 address 2001:DB8:X:20::N/64
no shutdown
!
Qatorga e'tibor bering !!
Eslatma: VLAN 1-dan barcha IP-manzillarni (IPv4 va IPv6-ni) olib tashlash va VLAN 1-ni yangi boshqaruv VLAN-larida (VLAN 10 yoki VLAN 20) hech narsa sozlanishidan oldin o'chirib qo'yish juda muhimdir.
Izoh: Agar siz quyidagi yozuvlarni ko'rsangiz:
mac-address-table static c42f.13fb.0000 interface FastEthernet1/12 vlan 20
konfiguratsiyasida, VLAN 1-dan VLAN boshqaruvini ko'chirish uchun yuqoridagi ketma-ketlik to'g'ri bajarilmagan. Agar sizning konfiguratsiyangizda bu kabi yozuvlar mavjud bo'lsa, aytib o'tilgan VLAN interfeysini o'chirishga urinib ko'ring (yuqoridagi misolda VLAN 20), buzilgan konfiguratsiya oldiga "yo'q" qo'yib, keyin VLAN interfeysini qayta tiklang yana. Agar bu ishlamasa (mac-address-table liniyasi hali ham mavjud), laboratoriya o'qituvchisidan yordam so'rang.
Kalitlar orasidagi aloqani tekshiring. Ping qila olasizmi?
Eslatma: boshqarish VLAN-larini o'zgartirish tugmachaga masofadan kirish orqali erishish juda qiyin - bu odatda kalitning konsol portiga kirish orqali amalga oshiriladi (xuddi shu erda biz laboratoriyada). Cisco IOS har qanday paketlarni VLAN 10 yoki VLAN 20-da ko'chirmasdan oldin VLAN 1-ni o'chirishni talab qiladi, shuning uchun IPv4-manzil ko'chirilayotganda IPv6 orqali kalitga kirish hiyla-nayrangidan ham foydalana olmaymiz.
interface vlan 11
description STAFF VLAN of Building 1
ip address 172.2X.11.1 255.255.255.0
ipv6 address 2001:DB8:X:11::1/64
no shutdown
X-ni talabalar shaharchasi raqamiga almashtiring. Boshqa barcha VLAN-lar uchun ham xuddi shunday qiling.
Tugatgandan so'ng, sizning Core kaliti ham IPv4, ham IPv6 manzillari bilan tuzilgan VLAN 11, 12, 21 va 22 bo'lishi kerak.
Savol: Har bir VLAN-da tuzilgan IP-manzilning ahamiyati nimada?
Javob: Ushbu IP-manzil endi ushbu VLAN-ga ulangan har bir qurilma uchun standart shlyuz bo'lib xizmat qiladi. Shunday qilib, VLAN 11-da foydalanuvchi standart shlyuz 172.2X.11.1 va boshqalarga ega bo'ladi.
Eslatma: Ushbu konfiguratsiya faqat yadro tugmachasida ishlaydi, tarqatish va kirish kalitlari emas.
Edge Switch portlarini belgilash
Endi STAFF va STUDENT VLANlari yaratilib, ularning har biriga IPv4 va IPv6 manzillari tayinlangan bo'lsa, endi biz oxirgi foydalanuvchilarni ushbu VLAN-larga ko'chiramiz.
Endi faqat chekka kalitlarga STAFF va STUDENT VLAN kirish uchun har biri 7 ta portni belgilang (masalan, 1-bino uchun):
STAFF va STUDENT VLANlari uchun IP manzillarini sozlang.
Endi STAFF va STUDENT VLAN-larning IP-manzillarini Core Switch-da sozlaymiz. VLAN 11, 1-binoda joylashgan STAFF VLAN uchun misol:
interface range Fast1/0 - 6
description Access Port VLAN 11 STAFF
switchport mode access
switchport access vlan 11
!
interface range Fast1/7 - 13
description Access Port VLAN 12 STUDENT
switchport mode access
switchport access vlan 12
Har bir vlanning qaysi portlari a'zolar yoki magistrallar ekanligini tekshiring:
show vlan-switch id ``
STAFF vlan-ga ulangan kompyuterlar mavjudligini tasavvur qiling. Ular kalitni ping qilishlari mumkinmi? Javobingizni tushuntiring.
Endi buyruqni bajaring:
show interface description
Nimani ko'rasiz?
Shuning uchun barcha interfeyslarda tavsif satri tuzilganligiga ishonch hosil qilish juda muhim - yuqoridagi diagnostika buyrug'i har qanday operatorga bir qarashda qaysi interfeys qaysi funktsiya uchun ishlatilishini ko'rishga imkon beradi.
Ulanishni tekshirish
O'zingizning bino ichidagi tugmachadan ikkinchisiga o'tishni sinab ko'ring. Boshqaruv interfeysi manzillarini ping qilish.
Endi Core Switch-da tuzilgan STAFF va STUDENT subnet manzillarini ping qilib ko'ring. Nimani ko'rasiz?
Talabalar shaharchangizdagi boshqa binoda joylashgan kalitlardan birini ping qila olasizmi? Nima bo'ladi?
Do'stlaringiz bilan baham: 
