MUX-VLAN Huawei

cemerbas 29 Haziran 2019 Huawei Leave a comment 244 Views

1.Cihaz genel yapılandırma ve IP address ayarlamaları.
Tüm routerlerin IP adreslerini ve subnet mask ayarlamalarını yapalım.
system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname Router1
[Router1]interface g0/0/1
[Router1-GigabitEthernet0/0/1]ip address 10.0.10.1 24
system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname Router2
[Router2]interface g0/0/1
[Router2-GigabitEthernet0/0/1]ip address 10.0.10.2 24
system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname Router3
[Router3]interface g0/0/1
[Router3-GigabitEthernet0/0/1]ip address 10.0.10.3 24

system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname Router5
[Router5]interface g0/0/2
[Router5-GigabitEthernet0/0/2]ip address 10.0.10.5 24
system-view
Enter system view, return user view with Ctrl+Z.
[Quidway]sysname Switch1
[Switch1] system-view
Enter system view, return user view with Ctrl+Z.
[Quidway]sysname Switch2
[Switch2]

Router1 cihazının Router2, Router3, Router4 ve Router5 routerları ile bağlantısı olup olmadığını kontrol edelim.
[Router1]ping -c 1 10.0.10.2
PING 10.0.10.2: 56 data bytes, press CTRL_C to break
Reply from 10.0.10.2: bytes=56 Sequence=1 ttl=255 time=14 ms
— 10.0.10.2 ping statistics —
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 14/14/14 ms
[Router1]ping -c 1 10.0.10.3
PING 10.0.10.3: 56 data bytes, press CTRL_C to break
Reply from 10.0.10.3: bytes=56 Sequence=1 ttl=255 time=5 ms
— 10.0.10.3 ping statistics —
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 5/5/5 ms
[Router1]ping -c 1 10.0.10.4
PING 10.0.10.4: 56 data bytes, press CTRL_C to break
Reply from 10.0.10.4: bytes=56 Sequence=1 ttl=255 time=15 ms
— 10.0.10.4 ping statistics —
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 15/15/15 ms
[Router1]ping -c 1 10.0.10.5
PING 10.0.10.5: 56 data bytes, press CTRL_C to break
Reply from 10.0.10.5: bytes=56 Sequence=1 ttl=255 time=6 ms
— 10.0.10.5 ping statistics —
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 6/6/6 ms

  1. GVRP konfigürasyonu.
    GVRP , VLAN bilgilerinin paylaşılmasını sağlayan bir protokoldür
    Switch1 ve S2cihazlarının G0/0/9 interfacesini trunk modda ayarlayarak ve tüm vlanlara erişim sağlayabilmeleri için konfigüre edelim.
    [Switch1]interface g0/0/9
    [Switch1-GigabitEthernet0/0/9]port link-type trunk
    [Switch1-GigabitEthernet0/0/9]port trunk allow-pass vlan all
    [Switch2]interface g0/0/9
    [Switch2-GigabitEthernet0/0/9]port link-type trunk
    [Switch2-GigabitEthernet0/0/9]port trunk allow-pass vlan all

Switch1 ve Switch2 cihazlarında GVRP etkinleştirelim.
[Switch1]gvrp
[Switch2]gvrp
GVRP durum bilgilerini görüntülemek için display GVRPstatus komutunu kullanırız.
[Switch1]display gvrp status
GVRP is enabled
[Switch2]display gvrp status
GVRP is enabled
Normal modda çalışması için Switch1 G0 / 0/9 interfacesini ayarlayalım.
[Switch1]interface g0/0/9
[Switch1-GigabitEthernet0/0/9]gvrp
[Switch1-GigabitEthernet0/0/9]gvrp registration normal
[Switch1-GigabitEthernet0/0/9]bpdu enable

Fixed modda çalışması için Switch2 G0 / 0/9 interfacesini ayarlayalım.
[Switch2]interface g0/0/9
[Switch2-GigabitEthernet0/0/9]gvrp
[Switch2-GigabitEthernet0/0/9]gvrp registration fixed
[Switch2-GigabitEthernet0/0/9]bpdu enable

GVRP statistics görüntülemek için display GVRP statistics komutunu kullanırız.
[Switch1]display gvrp statistics
GVRP statistics on port GigabitEthernet0/0/9
GVRP status : Enabled
GVRP registrations failed : 0
GVRP last PDU origin : 4c1f-cc45-aacc
GVRP registration type : Normal

Mevcut durumda Switch1 hakkında VLAN bilgilerini görüntülemek için display vlan komutunu çalıştıralım.
[Switch1]display vlan
The total number of vlans is : 1
—————————————————————————-
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;

: ProtocolTransparent-vlan; *: Management-vlan;

—————————————————————————-
VID Type Ports
—————————————————————————-
1 common UT:GE0/0/1(U) GE0/0/2(U) GE0/0/3(U) GE0/0/4(U)
GE0/0/5(U) GE0/0/6(D) GE0/0/7(D) GE0/0/8(D)
GE0/0/9(U) GE0/0/10(D) GE0/0/11(D) GE0/0/12(D)
GE0/0/13(D) GE0/0/14(D) GE0/0/15(D) GE0/0/16(D)
GE0/0/17(D) GE0/0/18(D) GE0/0/19(D) GE0/0/20(D)
GE0/0/21(D) GE0/0/22(D) GE0/0/23(D) GE0/0/24(D)
VID Status Property MAC-LRN Statistics Description
—————————————————————————-
1 enable default enable disable VLAN 0001
Switch2 için VLAN 10, VLAN 20 ve VLAN 100 u oluşturalım.
[Switch2]vlan batch 10 20 100
Info: This operation may take a few seconds. Please wait for a moment…done.
Tekrar Switch1 cihazının VLAN bilgilerini görüntüleyelim.
[Switch1]display vlan
The total number of vlans is : 4
—————————————————————————-
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;

: ProtocolTransparent-vlan; *: Management-vlan;

—————————————————————————-
VID Type Ports
—————————————————————————-
1 common UT:GE0/0/1(U) GE0/0/2(U) GE0/0/3(U) GE0/0/4(U)
GE0/0/5(U) GE0/0/6(D) GE0/0/7(D) GE0/0/8(D)
GE0/0/9(U) GE0/0/10(D) GE0/0/11(D) GE0/0/12(D)
GE0/0/13(D) GE0/0/14(D) GE0/0/15(D) GE0/0/16(D)
GE0/0/17(D) GE0/0/18(D) GE0/0/19(D) GE0/0/20(D)
GE0/0/21(D) GE0/0/22(D) GE0/0/23(D) GE0/0/24(D)
10 dynamic TG:GE0/0/9(U)
20 dynamic TG:GE0/0/9(U)
100 dynamic TG:GE0/0/9(U)
VID Status Property MAC-LRN Statistics Description
—————————————————————————-
1 enable default enable disable VLAN 0001
10 enable default enable disable VLAN 0010
20 enable default enable disable VLAN 0020
100 enable default enable disable VLAN 0100
Yukarıdaki bilgiler Switch1 cihazının ,Switch2 cihazının hakkındaki VLAN bilgileri öğrendiğini göstermektedir.
Switch1 için VLAN 30 oluşturalım ve Switch1 ve Switch2 nin VLAN bilgi değişiklikleri gözlemleyelim.

[Switch1]vlan 30
[Switch1-vlan30]quit
[Switch1]display vlan
The total number of vlans is : 5
—————————————————————————-
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;

: ProtocolTransparent-vlan; *: Management-vlan;

—————————————————————————-
VID Type Ports
—————————————————————————-
1 common UT:GE0/0/1(U) GE0/0/2(U) GE0/0/3(U) GE0/0/4(U)
GE0/0/5(U) GE0/0/6(D) GE0/0/7(D) GE0/0/8(D)
GE0/0/9(U) GE0/0/10(D) GE0/0/11(D) GE0/0/12(D)
GE0/0/13(D) GE0/0/14(D) GE0/0/15(D) GE0/0/16(D)
GE0/0/17(D) GE0/0/18(D) GE0/0/19(D) GE0/0/20(D)
GE0/0/21(D) GE0/0/22(D) GE0/0/23(D) GE0/0/24(D)
10 dynamic TG:GE0/0/9(U)
20 dynamic TG:GE0/0/9(U)
30 common TG:GE0/0/9(U)
100 dynamic TG:GE0/0/9(U)
VID Status Property MAC-LRN Statistics Description
—————————————————————————-
1 enable default enable disable VLAN 0001
10 enable default enable disable VLAN 0010
20 enable default enable disable VLAN 0020
30 enable default enable disable VLAN 0030
100 enable default enable disable VLAN 0100
[Switch2]display vlan
The total number of vlans is : 4
—————————————————————————-
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;

: ProtocolTransparent-vlan; *: Management-vlan;

—————————————————————————-
VID Type Ports
—————————————————————————-
1 common UT:GE0/0/1(U) GE0/0/2(U) GE0/0/3(U) GE0/0/4(U)
GE0/0/5(U) GE0/0/6(D) GE0/0/7(D) GE0/0/8(D)
GE0/0/9(U) GE0/0/10(D) GE0/0/11(D) GE0/0/12(D)
GE0/0/13(D) GE0/0/14(D) GE0/0/15(D) GE0/0/16(D)
GE0/0/17(D) GE0/0/18(D) GE0/0/19(D) GE0/0/20(D)
GE0/0/21(D) GE0/0/22(D) GE0/0/23(D) GE0/0/24(D)
10 common TG:GE0/0/9(U)
20 common TG:GE0/0/9(U)
100 common TG:GE0/0/9(U)
VID Status Property MAC-LRN Statistics Description
—————————————————————————-
1 enable default enable disable VLAN 0001
10 enable default enable disable VLAN 0010
20 enable default enable disable VLAN 0020
100 enable default enable disable VLAN 0100
Yukarıdaki bilgiler Switch2 cihazının ,S1cihazı hakkındaki VLAN bilgileri öğrendiğini göstermektedir.

  1. MUX VLANs konfigürasyonu
    Mux vlan da farklı vlanların birbirleri ile haberleşmemeleri ve aynı vlandaki bazı cihazların da haberleşmeleri ile oluşmuş bir protokoldür. Haberleşmeyen cihazlar ise birbiri ile isolete edilerek sadece haberleşecegi tek bir yer ile isolate edilerek kullanılan bir teknolojidir.
    MUX VLAN primary VLAN olarak VLAN 100 oluşturalım , secondary vlan olarak da VLAN 10 ve VLAN 20yi oluşturalım.
    [Switch1]vlan 10
    [Switch1-vlan10]quit
    [Switch1]vlan 20
    [Switch1-vlan20]quit
    [Switch1]vlan 100
    [Switch1-vlan100]mux-vlan
    [Switch1-vlan100]subordinate group 10
    [Switch1-vlan100]subordinate separate 20
    [Switch2]vlan 100
    [Switch2-vlan100]mux-vlan
    [Switch2-vlan100]subordinate group 10
    [Switch2-vlan100]subordinate separate 20
    MUX VLAN fonksiyonunu Switch2 cihazının G0/0/5 interfacesinde VLAN 100 ü oluşturalım ve Router5 cihazının üzerinden geçşini sağlayalım ve MUX VLAN fonksiyonunu etkinleştirelim.
    [Switch2]interface GigabitEthernet 0/0/5
    [Switch2-GigabitEthernet0/0/5]port link-type access
    [Switch2-GigabitEthernet0/0/5]port default vlan 100
    [Switch2-GigabitEthernet0/0/5]port mux-vlan enable
    Switch1 cihazının G0/0/1 ve G0/0/2 interfacelerinde VLAN 10 oluşturalım ve Router1 ve Router2 cihazlarının üzerinden geçişlerini saglayalım ve MUX vlan fonksiyonunu etkinleştirelim.
    [Switch1]interface GigabitEthernet 0/0/1
    [Switch1-GigabitEthernet0/0/1]port link-type access
    [Switch1-GigabitEthernet0/0/1]port default vlan 10
    [Switch1-GigabitEthernet0/0/1]port mux-vlan enable
    [Switch1-GigabitEthernet0/0/1]interface GigabitEthernet 0/0/2
    [Switch1-GigabitEthernet0/0/2]port link-type access
    [Switch1-GigabitEthernet0/0/2]port default vlan 10
    [Switch1-GigabitEthernet0/0/2]port mux-vlan enable
    Switch1 cihazının G0/0/3 ve G0/0/4 interfacelerinde VLAN 20 oluşturalım ve Router3 ve Router4 cihazlarının üzerinden geçişlerini saglayalım ve MUX vlan fonksiyonunu etkinleştirelim.
    [Switch1]interface GigabitEthernet 0/0/3
    [Switch1-GigabitEthernet0/0/3]port link-type access
    [Switch1-GigabitEthernet0/0/3]port default vlan 20
    [Switch1-GigabitEthernet0/0/3]port mux-vlan enable
    [Switch2]interface GigabitEthernet 0/0/4
    [Switch2-GigabitEthernet0/0/4]port link-type access
    [Switch2-GigabitEthernet0/0/4]port default vlan 20
    [Switch2-GigabitEthernet0/0/4]port mux-vlan enable
    Tüm MUX VLAN bilgilerini görüntüleyebilmek için display mux-vlan komutunu çalıştıralım.
    [Switch1]display mux-vlan
    Principal Subordinate Type Interface
    —————————————————————————-
    100 – principal
    100 20 separate GigabitEthernet0/0/3
    100 10 group GigabitEthernet0/0/1 GigabitEthernet0/0/2
    [Switch2]display mux-vlan
    Principal Subordinate Type Interface
    —————————————————————————-
    100 – principal GigabitEthernet0/0/5
    100 20 separate GigabitEthernet0/0/4
    100 10 group
    —————————————————————————-

Router1 cihazından Router2, Router3, R4ve Router5 cihazlarına ping batarak bağlantının olup olmadını kontrol edelim.
[Router1]ping -c 1 10.0.10.2
PING 10.0.10.2: 56 data bytes, press CTRL_C to break
Reply from 10.0.10.2: bytes=56 Sequence=1 ttl=255 time=3 ms
— 10.0.10.2 ping statistics —
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 3/3/3 ms
[Router1]ping -c 1 10.0.10.3
PING 10.0.10.3: 56 data bytes, press CTRL_C to break
Request time out
— 10.0.10.3 ping statistics —
1 packet(s) transmitted
0 packet(s) received
100.00% packet loss
[Router1]ping -c 1 10.0.10.4
PING 10.0.10.4: 56 data bytes, press CTRL_C to break
Request time out
— 10.0.10.4 ping statistics —
1 packet(s) transmitted
0 packet(s) received
100.00% packet loss
[Router1]ping -c 1 10.0.10.5
PING 10.0.10.5: 56 data bytes, press CTRL_C to break
Reply from 10.0.10.5: bytes=56 Sequence=1 ttl=255 time=3 ms
— 10.0.10.5 ping statistics —
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 3/3/3 ms
Router3 cihazından Router2 ,Router4 ve Router5 cihazlarına pink atarak bağlantının olmadıgını test edelim..
[Router3]ping -c 1 10.0.10.2
PING 10.0.10.2: 56 data bytes, press CTRL_C to break
Request time out
— 10.0.10.2 ping statistics —
1 packet(s) transmitted
0 packet(s) received
100.00% packet loss
[Router3]ping -c 1 10.0.10.4
PING 10.0.10.4: 56 data bytes, press CTRL_C to break
Request time out
— 10.0.10.4 ping statistics —
1 packet(s) transmitted
0 packet(s) received
100.00% packet loss
[Router3]ping -c 1 10.0.10.5
PING 10.0.10.5: 56 data bytes, press CTRL_C to break
Reply from 10.0.10.5: bytes=56 Sequence=1 ttl=255 time=3 ms
— 10.0.10.5 ping statistics —
1 packet(s) transmitted
1 packet(s) received
0.00% packet loss
round-trip min/avg/max = 3/3/3 ms

  1. Voice vlan konfigürasyonu.
    Hizmet geliştirme gereksinimlerini karşılamak için, voice VLAN Switch2 cihazınınG0/0/24 interfacesinde oluşturalım.
    Switch2 cihazında VLAN 30 ve VLAN 200ü oluşturalım.VLAN 200ü voice vlan olark ayarlayalım.
    [Switch2]vlan batch 30 200
    Info: This operation may take a few seconds. Please wait for a moment…done.
    Switch2 cihazının G0/0/24 interfacesini , interface type ve default vlan ayarlarını yapılandıralım.Voice device Vlan 30 oldugunu varsayalım.
    [Switch2]interface GigabitEthernet 0/0/24
    [Switch2-GigabitEthernet0/0/24]port hybrid pvid vlan 30
    [Switch2-GigabitEthernet0/0/24]port hybrid untagged vlan 30
    Switch2 cihazı için bir OUI addressi oluşturalım. Voice devices media access control (MAC)adresi 0011-2200-0000 ve subnet maskı ise ffff-ff00-0000 olarak ayarlayalım.
    [Switch2]voice-vlan mac-address 0011-2200-0000 mask ffff-ff00-0000
    Switch2 cihazının G0/0/24 interfacesinde voice VLAN fonksiyonunu etkinleştirelim.
    [Switch2]interface GigabitEthernet 0/0/24
    [Switch2-GigabitEthernet0/0/24]voice-vlan 200 enable
    [Switch2-GigabitEthernet0/0/24]voice-vlan mode auto
    [Switch2-GigabitEthernet0/0/24]voice-vlan security enable
    Voive vlanın OUI addresini görebilmek için display voice-vlan oui komutu ile bakalım.
    [Switch2]display voice-vlan oui
    —————————————————
    OuiAddress Mask Description
    —————————————————
    0011-2200-0000 ffff-ff00-0000
    Voice VLAN yapılandırmaları görüntülemek için display voice-vlan 200 status komutunu çalıştırılım.
    [Switch2]display voice-vlan 200 status
    Voice VLAN Configurations:
    ———————————————————–
    Voice VLAN ID : 200
    Voice VLAN status : Enable
    Voice VLAN aging time : 1440(minutes)
    Voice VLAN 8021p remark : 6
    Voice VLAN dscp remark : 46
    ———————————————————–
    Port Information:
    ———————————————————–
    Port Add-Mode Security-Mode Legacy
    ———————————————————–
    GigabitEthernet0/0/24 Auto Security Disable
    Final Configurations
    [Switch1]display current-configuration
    #
    !Software Version V100R006C00SPC800
    sysname Switch1
    #
    vlan batch 10 20 30 100
    #
    gvrp
    #
    vlan 100
    mux-vlan
    subordinate separate 20
    subordinate group 10
    #
    interface GigabitEthernet0/0/1
    port link-type access
    port default vlan 10
    port mux-vlan enable
    undo ntdp enable
    undo ndp enable
    bpdu disable
    #
    interface GigabitEthernet0/0/2
    port link-type access
    port default vlan 10
    port mux-vlan enable
    undo ntdp enable
    undo ndp enable
    bpdu disable
    #
    interface GigabitEthernet0/0/3
    port link-type access
    port default vlan 20
    port mux-vlan enable
    undo ntdp enable
    undo ndp enable
    bpdu disable
    #
    interface GigabitEthernet0/0/9
    port link-type trunk
    port trunk allow-pass vlan 2 to 4094
    undo ntdp enable
    undo ndp enable
    gvrp
    #
    interface GigabitEthernet0/0/10
    shutdown
    undo ntdp enable
    undo ndp enable
    bpdu disable
    #
    Return
    [Switch2]display current-configuration
    #
    !Software Version V100R006C00SPC800
    sysname Switch2
    #
    voice-vlan mac-address 0011-2200-0000 mask ffff-ff00-0000
    #
    vlan batch 10 20 30 100 200
    #
    gvrp
    #
    vlan 100
    mux-vlan
    subordinate separate 20
    subordinate group 10
    #
    interface GigabitEthernet0/0/4
    port link-type access
    port default vlan 20
    port mux-vlan enable
    undo ntdp enable
    undo ndp enable
    bpdu disable
    #
    interface GigabitEthernet0/0/5
    port link-type access
    port default vlan 100
    port mux-vlan enable
    undo ntdp enable
    undo ndp enable
    bpdu disable
    #
    interface GigabitEthernet0/0/9
    port link-type trunk
    port trunk allow-pass vlan 2 to 4094
    undo ntdp enable
    undo ndp enable
    gvrp
    gvrp registration fixed
    #
    interface GigabitEthernet0/0/10
    shutdown
    undo ntdp enable
    undo ndp enable
    bpdu disable
    #
    interface GigabitEthernet0/0/24
    voice-vlan 200 enable
    port hybrid pvid vlan 30
    port hybrid untagged vlan 30
    undo ntdp enable
    undo ndp enable
    bpdu disable
    #
    Return

About cemerbas

Check Also

Next Generation Firewall (NGFW) Huawei

Next Generation Firewall (NGFW) üzerinden geçen trafiği, Application identification, User identification ve Content identification temellerine …

Bir yanıt yazın

* Powered by WordPress | Designed by Cem Kemal Erbaş
© Copyright 2015 - 2024, All RigReservedhts