Cisco 的基本配置实例之四----vlan的规划及配置（接入交换机）

4.2 接入交换机的相关配置

## 在此例中，我们联入的是一台接入交换机，此交换机的gi0/1口上联至核心交换机。也就意味着我们需要配置gi0/1为trunk口。具体的配置如下：

D-2960-3(config)#int gi0/1

D-2960-3(config-if)#switchport mode trunk

## 配置此接口的模式为trunk，在cisoc2960交换机中，配置完接口模式为trunk后就可以了，不需要进一步配置此trunk口的封装状态，因为其默认的也是唯一的封装类型就是dot1q，并且此系列交换机并没有专门的封装配置命令。

D-2960-3(config-if)#exit

D-2960-3(config)#exit

D-2960-3#sh int tru                     # 退至特权配置模式验证一下刚才的配置

Port        Mode         Encapsulation  Status        Native vlan

Gi0/1       auto         802.1q         trunking      1

# 这个端口已经配置成trunk模式，并且封装成802.1q了

Port        Vlans allowed on trunk

Gi0/1       1-4094

Port        Vlans allowed and active in management domain

Gi0/1       1-2,10,20,30,40,50,60,70,80,100,110,120,150,160

Port        Vlans in spanning tree forwarding state and not pruned

Gi0/1       1-2,10,20,30,40,50,60,70,80,100,110,120,150,160

D-2960-3#conf t                                                     # 进入到全局配置模式

D-2960-3(config)#vtp mode client

# 配置vtp模式为client，与核心交换机的server模式相呼应。

D-2960-3(config)#vtp domain pjoe

# 配置vtp域为pjoe，只有一个域中的交换机才能互传vlan信息。

D-2960-3(config)#vtp password pjoeserver                # 配置vtp密码

D-2960-3(config)#end

D-2960-3#sh vtp status                              # 退出到特权模式验证一下刚才的有关vtp的配置

VTP Version                       : 2

Configuration Revision                : 23

Maximum VLANs supported locally    : 255

Number of existing VLANs           : 19

VTP Operating Mode              : Client            # 模式已经设置成client

VTP Domain Name                 : pjoe             # 域名已经设置成pjoe

VTP Pruning Mode                : Disabled

VTP V2 Mode                     : Disabled

VTP Traps Generation                : Disabled

MD5 digest                      : 0xEC 0x30 0xEF 0x6F 0xA5 0x9A 0x39 0x7B

# 密码已经配置完毕，但是被加密显示了

Configuration last modified by 192.168.113.254 at 12-3-07 22:58:54

##稍等一会后，验证一下是否学习到了核心交换机的vlan信息，它的学习有一小段的过程30秒的样子。

D-2960-3#sh vlan                                                    # 验证一下vlan信息是否全部学到。

VLAN Name                             Status    Ports

---- -------------------------------- --------- -------------------------------

    default                                active    Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/,Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/,Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/,Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/,a0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Fa0/, Gi0/

    firewall                                active   

# ok，核心交换机上配置好的vlan信息已经被这台交换机学习到了，剩下的工作仅需要将相应的端口添加到相应的vlan中就可以了，此处不赘述。   

   Engineering                            active     

   Procurement                           active   

   QAQC                             active   

   Operation                             active   

   Yard                                 active   

   BM                                 active   

   HRAD                             active   

   Facility                                active   

  Finance                               active   

  GO                                 active   

  Wlan                                active   

  Server                                active   

  Client                                 active   

 fddi-default                              act/unsup

 token-ring-default                         act/unsup

 fddinet-default                            act/unsup

 trnet-default                              act/unsup

VLAN Type  SAID       MTU   Parent RingNo BridgeNo Stp  BrdgMode Trans1 Trans2

---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------

    enet         -      -      -        -    -                

    enet         -      -      -        -    -                

   enet         -      -      -        -    -                

   enet         -      -      -        -    -                

   enet         -      -      -        -    -                

   enet         -      -      -        -    -                

   enet         -      -      -        -    -                

   enet         -      -      -        -    -                

   enet         -      -      -        -    -                

   enet         -      -      -        -    -                

  enet         -      -      -        -    -                

  enet         -      -      -        -    -                

  enet         -      -      -        -    -                

  enet         -      -      -        -    -                

  enet         -      -      -        -    -                

 fddi         -      -      -        -    -              

D-2960-3#

# 配置这台交换机的管理IP

D-2960-3(config)#int vlan 1                                            # 管理ip地址我们配置在vlan1上

D-2960-3(config-if)#ip address 192.168.113.222 255.255.255.0 # 设置实际的ip地址

D-2960-3(config-if)#exit

D-2960-3(config)#ip default-gateway 192.168.113.254     # 设置这台交换机的网关，此地址即为核心交换机vlan1的地址。

D-2960-3(config)#end

D-2960-3#sh run                  # 验证一下完整的配置。

D-2960-3#sh run

Switch#
//为VLAN配置ip地址（就是默认网关）
Switch(config)#interface vlan 10
Switch(config-if)#
%LINK-5-CHANGED: Interface Vlan10, changed state to up
Switch(config-if)#ip address 192.168.1.1 255.255.255.0
Switch(config-if)#no shutdown
Switch(config-if)#exit
Switch(config)#interface vlan 20
Switch(config-if)#
%LINK-5-CHANGED: Interface Vlan20, changed state to up
Switch(config-if)#ip address 192.168.2.1 255.255.255.0
Switch(config-if)#no shutdown
Switch(config-if)#exit
Switch(config)#interface vlan 30
Switch(config-if)#
%LINK-5-CHANGED: Interface Vlan30, changed state to up
Switch(config-if)#ip address 192.168.3.1 255.255.255.0
Switch(config-if)#no shutdown
Switch(config-if)#exit

Building configuration...

Current configuration :  bytes

!

version 12.2

no service pad

service timestamps debug uptime

service timestamps log uptime

service password-encryption

!

hostname D--

!

enable password  12090F18170805172924

!

no aaa new-model

system mtu routing 

ip subnet-zero

!

no file verify auto

spanning-tree mode pvst

spanning-tree extend system-id

!

vlan internal allocation policy ascending

!

interface FastEthernet0/

!

interface FastEthernet0/

!

interface FastEthernet0/

!

(省略… …)

interface FastEthernet0/

!

interface FastEthernet0/

!

interface FastEthernet0/

!

interface FastEthernet0/

!

interface GigabitEthernet0/

!

interface GigabitEthernet0/

!

interface Vlan1

 ip address 192.168.113.222 255.255.255.0

 no ip route-cache

!

ip default-gateway 192.168.113.254

ip http server

!

control-plane

!

!

line con 

 password  12090F18170805172924

line vty  

 password  12090F18170805172924

 login

line vty  

 login

!

end

D-2960-3#