Topshiriq: Ushbu laboratoriya ishida quyidagi vazifalar bajariladi
Yüklə 209,97 Kb.
|
|
1-Tajriba ishi VLAN yaratish va sozlash Ishdan maqsad: VLAN yaratish va sozlashni o'rganish. Topshiriq: Ushbu laboratoriya ishida quyidagi vazifalar bajariladi: - 13.4-rasm rasmda ko’rsatilganidek qurilmalarni interfeyslarini sozlang; - Port interfeyslarini kirish portlari va magistral portlar sifatida belgilang; - VLAN yarating; - Trunk port ulanish turidan foydalangan holda portlar bo’ylab VLAN teglarini sozlang; - Portning VLAN identifikatoridan foydalangan holda interfeys uchun standart VLAN ni sozlang; - VLAN lar o’rtasidagi aloqani tekshiring. Nazariy qism VLAN (Virtual Local Area Network, virtual local network) - bu marshrutizatorlar va kommutatorlardagi funksiya bo'lib, bitta fizik tarmoq interfeysida (Ethernet, Wi-Fi interfeysi) bir nechta virtual mahalliy tarmoqlarni yaratish imkonini beradi. VLAN-lar fizik topologiyadan mustaqil bo'lgan mantiqiy tarmoq topologiyasini yaratish uchun ishlatiladi. VLAN-dan foydalanishga misollar: - Turli xil kommutatorlarga ulangan kompyuterlarni bitta tarmoqga birlashtirish. Aytaylik, sizda turli xil kommutatorlarga ulangan kompyuterlar bor, lekin ularni bitta tarmoqqa birlashtirish kerak. Biz ba'zi kompyuterlarni VLAN 1 virtual lokal tarmog'iga, boshqalarini esa VLAN 2 tarmog'iga birlashtiramiz. VLAN funksiyasi tufayli har bir virtual tarmoqdagi kompyuterlar huddi bir kommutatorga ulangandek ishlaydi.VLAN-lardan foydalanishning afzalliklari - Qurilmalarning guruhlarga moslashuvchan bo'linishi. Qoidaga ko'ra, bitta quyi tarmoq bitta VLAN-ga mos keladi. Turli VLANlarda joylashgan kompyuterlar bir-biridan ajratilgan bo'ladi. Shuningdek, siz turli xil kommutatorlarga ulangan kompyuterlarni bitta virtual tarmoqqa birlashtirishingiz mumkin.
Tarmoqdagi translyatsiya trafigini kamaytirish. Har bir VLAN alohida translyatsiya domenini ifodalaydi. Translyatsiya trafigi turli VLAN-lar o'rtasida translyatsiya qilinmaydi. Agar siz bir xil VLAN-ni turli xil kommutatorlarda sozlasangiz, u holda turli kommutatorlarning portlari bitta translyatsiya domenini tashkil qiladi. - Tarmoq xavfsizligining oshishi va boshqarishni osonlashishi. Virtual quyi tarmoqlarga bo'lingan tarmoqda har bir VLAN uchun siyosat va xavfsizlik qoidalarini qo'llash qulay. Siyosat bitta qurilmaga emas, balki butun ichki tarmoqga qo‘llaniladi. - Qurilmalar va tarmoq kabeli miqdorini kamayishi. Yangi VLAN yaratish kommutatorni sotib olishni va tarmoq kabelini o’rnatishni talab qilmaydi. Biroq, siz VLAN-ni qo'llab-quvvatlaydigan qimmatroq boshqariladigan kommutatorlardan foydalanishingiz kerak. VLAN texnologiyasi xarakteristikasi Tizimdagi VLAN-lar maksimal soni - 4096 (VLAN 0 va VLAN 4095 zahiralangan). Tizimdagi VLANIF interfeyslarining maksimal soni - 4094. Odatda, har bir kommutator portida VLAN 1 yoki boshqaruv VLAN mavjud. Boshqaruv tarmog'ini o'chirib bo'lmaydi, lekin qo'shimcha VLAN-larni yaratish va ushbu muqobil VLAN-larga qo'shimcha portlarni belgilash mumkin. VLAN-ni tayinlash besh xil usullardan biri asosida amalga oshirilishi mumkin, jumladan port, MAC manzili, IP quyi tarmog'i, protokol va siyosat asosida amalga oshirish. Portga asoslangan usul standart va eng keng tarqalgan VLAN tayinlash usuli hisoblanadi. Ushbu usul yordamida VLAN-lar kommutator qurilmasidagi port raqamlariga qarab tasniflanadi.
Switch(config-if)#ip Switch(config-if)#ip ad Switch(config-if)#ip address 192.168.4.1 255.255.255.0 Switch(config-if)#des Switch(config-if)#description oqtuvchilar Switch(config-if)#ex Switch(config-if)#exit Switch(config)#ex Switch(config)#exit Switch# %SYS-5-CONFIG_I: Configured from console by console Switch#show Switch#show run Switch#show running-config Building configuration... Current configuration : 1633 bytes ! version 12.2 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname Switch spanning-tree mode pvst spanning-tree extend system-id ! interface FastEthernet0/1 switchport access vlan 2 ! interface FastEthernet0/2 switchport access vlan 3 switchport mode access ! interface FastEthernet0/3 switchport access vlan 3 switchport mode access ! interface FastEthernet0/4 switchport access vlan 4 switchport mode access ! interface FastEthernet0/5 switchport access vlan 4 switchport mode access ! interface FastEthernet0/6 interface Vlan1 no ip address shutdown ! interface Vlan2 description boshliqlar mac-address 0060.5c7e.ce01 ip address 192.168.2.1 255.255.255.0 ! interface Vlan3 description dasturchilar mac-address 0060.5c7e.ce02 ip address 192.168.3.1 255.255.255.0 ! interface Vlan4 description oqtuvchilar mac-address 0060.5c7e.ce03 ip address 192.168.4.1 255.255.255.0 ! line con 0 ! line vty 0 4 login line vty 5 15 login end Switch# Switch#wr Switch#write me Switch#write memory Building configuration... [OK] Switch# Switch# %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan2, changed state to down %LINK-5-CHANGED: Interface FastEthernet0/4, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan4, changed state to up %LINK-3-UPDOWN: Interface FastEthernet0/4, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan4, changed state to down %LINK-5-CHANGED: Interface FastEthernet0/1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan2, changed state to up Switch con0 is now available Press RETURN to get started. Kod yozish oynasi: Yüklə 209,97 Kb. Dostları ilə paylaş:
|