企业实战多台交换机划分vlan
1.场景说明
#场景说明
1.公司在一层楼里，有4个办公室，每个办公室放一台24口接入交换机，分别上联到机房核新交换机。
2.每个办公室有2个独立的部门，每部门计划不超过6人。
3.每个办公室还有1台视频会议终端，有2个监控摄像头。
4.根据表格划分VLAN，并确保所有设备之间都可以互通。
2.VLAN规划
| 部门 | 网段 | 网关IP | VLAN | VLAN描述 |
|---|---|---|---|---|
| 部门1-1 | 172.16.11.0/24 | 172.16.11.254 | 11 | Bumen1-1 |
| 部门1-2 | 172.16.12.0/24 | 172.16.12.254 | 12 | Bumen1-2 |
| 部门2-1 | 172.16.21.0/24 | 172.16.21.254 | 21 | Bumen2-1 |
| 部门2-2 | 172.16.22.0/24 | 172.16.22.254 | 22 | Bumen2-2 |
| 部门3-1 | 172.16.31.0/24 | 172.16.31.254 | 31 | Bumen3-1 |
| 部门3-2 | 172.16.32.0/24 | 172.16.32.254 | 32 | Bumen3-2 |
| 部门4-1 | 172.16.41.0/24 | 172.16.41.254 | 41 | Bumen4-1 |
| 部门4-2 | 172.16.42.0/24 | 172.16.42.254 | 42 | Bumen4-2 |
| 视频会议 | 172.16.100.0/24 | 172.16.100.254 | 100 | Shipinhuiyi |
| 监控 | 172.16.101.0/24 | 172.16.101.254 | 101 | Jiankong |
二层交换机
3.拓扑图
4.配置ASW1
<Huawei>sys
[Huawei]sysname ASW1
[ASW1]undo info-center enable
[ASW1]vlan batch 11 12 100 101
[ASW1]vlan 11
[ASW1-vlan11]description Bumen1-1
[ASW1-vlan11]vlan 12
[ASW1-vlan12]description Bumen1-2
[ASW1-vlan12]vlan 100
[ASW1-vlan100]description Shipinhuiyi
[ASW1-vlan100]vlan 101
[ASW1-vlan101]description Jiankong
[ASW1-port-group-bumen1-1]group-member g0/0/1 to g0/0/6
[ASW1-port-group-bumen1-1]port link-type access
[ASW1-port-group-bumen1-1]port default vlan 11
[ASW1-port-group-bumen1-1]quit
[ASW1-port-group-bumen1-2]group-member g0/0/7 to g0/0/12
[ASW1-port-group-bumen1-2]port link-type access
[ASW1-port-group-bumen1-2]port default vlan 12
[ASW1-port-group-bumen1-2]quit
[ASW1]port-group Shipinhuiyi
[ASW1-port-group-shipinhuiyi]group-member GigabitEthernet 0/0/13 to GigabitEther
net 0/0/14
[ASW1-port-group-shipinhuiyi]port link-type access
[ASW1-port-group-shipinhuiyi]port default vlan 100
[ASW1-port-group-shipinhuiyi]quit
[ASW1]port-group Jiankong
[ASW1-port-group-jiankong]group-member g0/0/15 to g0/0/18
[ASW1-port-group-jiankong]port link-type access
[ASW1-port-group-jiankong]port default vlan 101
[ASW1-port-group-jiankong]quit
[ASW1]interface GigabitEthernet 0/0/24
[ASW1-GigabitEthernet0/0/24]port trunk allow-pass vlan 11 12 100 101
[ASW1-GigabitEthernet0/0/24]undo port trunk allow-pass vlan 1
5.配置ASW2
<Huawei>sys
[Huawei]sysname ASW2
[ASW2]undo info-center enable
[ASW2]vlan batch 21 22 100 101
[ASW2]vlan 21
[ASW2-vlan21]description Bumen2-1
[ASW2-vlan21]vlan 22
[ASW2-vlan22]description Bumen2-2
[ASW2-vlan22]vlan 100
[ASW2-vlan100]description Shipinhuiyi
[ASW2-vlan100]vlan 101
[ASW2-vlan101]description Jiankong
[ASW2-vlan101]quit
[ASW2]port-group Bumen2-1
[ASW2-port-group-bumen2-1]group-member g0/0/1 to g0/0/6
[ASW2-port-group-bumen2-1]port link-type access
[ASW2-port-group-bumen2-1]port default vlan 21
[ASW2-port-group-bumen2-1]quit
[ASW2]interface GigabitEthernet 0/0/24
[ASW2-GigabitEthernet0/0/24]port link-type trunk
[ASW2-GigabitEthernet0/0/24]port trunk allow-pass vlan 21 22 100 101
[ASW2-GigabitEthernet0/0/24]undo port trunk allow-pass vlan 1
<ASW2>sys
[ASW2]port-group bumen2-2
[ASW2-port-group-bumen2-2]group-member g0/0/7 to g0/0/12
[ASW2-port-group-bumen2-2]port link-type access
[ASW2-port-group-bumen2-2]port default vlan 22
[ASW2-port-group-bumen2-2]quit
[ASW2]port-group Shipinhuiyi
[ASW2-port-group-shipinhuiyi]group-member g0/0/13 to g0/0/14
[ASW2-port-group-shipinhuiyi]port link-type access
[ASW2-port-group-shipinhuiyi]port default vlan 100
[ASW2-port-group-shipinhuiyi]quit
[ASW2]port-group Jiankong
[ASW2-port-group-jiankong]group-member g0/0/15 to g0/0/18
[ASW2-port-group-jiankong]port link-type access
[ASW2-port-group-jiankong]port default vlan 101
[ASW2-port-group-jiankong]quit
6.配置ASW3
<Huawei>sys
[Huawei]sysname ASW3
[ASW3]undo info-center enable
[ASW3]vlan batch 31 32 100 101
[ASW3]vlan 31
[ASW3-vlan31]description Bumen3-1
[ASW3-vlan31]vlan 32
[ASW3-vlan32]description Bumen3-2
[ASW3-vlan32]vlan 100
[ASW3-vlan100]description Shipinhuiyi
[ASW3-vlan100]vlan 101
[ASW3-vlan101]description Jiankong
[ASW3-vlan101]quit
[ASW3]port-group Bument3-1
[ASW3-port-group-bument3-1]group-member g0/0/1 to g0/0/6
[ASW3-port-group-bument3-1]port link-type access
[ASW3-port-group-bument3-1]port default vlan 31
[ASW3-port-group-bument3-1]quit
[ASW3]interface GigabitEthernet 0/0/24
[ASW3-GigabitEthernet0/0/24]port link-type trunk
[ASW3-GigabitEthernet0/0/24]port trunk allow-pass vlan 31 32 100 101
[ASW3-GigabitEthernet0/0/24]undo port trunk allow-pass vlan 1
[ASW3-GigabitEthernet0/0/24]quit
[ASW3]port-group Bumen3-2
[ASW3-port-group-bumen3-2]group-member g0/0/7 to g0/0/12
[ASW3-port-group-bumen3-2]port link-type access
[ASW3-port-group-bumen3-2]port default vlan 32
[ASW3-port-group-bumen3-2]quit
[ASW3]port-group Shipinhuiyi
[ASW3-port-group-shipinhuiyi]group-member g0/0/13 to g0/0/14
[ASW3-port-group-shipinhuiyi]port link-type access
[ASW3-port-group-shipinhuiyi]port default vlan 100
[ASW3-port-group-shipinhuiyi]quit
[ASW3]port-group Jiankong
[ASW3-port-group-jiankong]group-member g0/0/15 to g0/0/18
[ASW3-port-group-jiankong]port link-type access
[ASW3-port-group-jiankong]port default vlan 101
7.配置ASW4
<Huawei>sys
[Huawei]sysname ASW4
[ASW4]undo info-center enable
[ASW4]vlan batch
[ASW4]vlan batch 41 42 100 101
[ASW4]vlan 41
[ASW4-vlan41]description bumen4-1
[ASW4-vlan41]vlan 42
[ASW4-vlan42]description bumen4-2
[ASW4-vlan42]vlan 100
[ASW4-vlan100]description shipinhuiyi
[ASW4-vlan100]vlan 101
[ASW4-vlan101]description jiankong
[ASW4-vlan101]quit
[ASW4]port-group bumen4-1
[ASW4-port-group-bumen4-1]group-member g0/0/1 to g0/0/6
[ASW4-port-group-bumen4-1]port link-type access
[ASW4-port-group-bumen4-1]port default vlan 41
[ASW4-port-group-bumen4-1]quit
[ASW4]port-group bumen4-2
[ASW4-port-group-bumen4-2]group-member g0/0/7 to g0/0/12
[ASW4-port-group-bumen4-2]port link-type access
[ASW4-port-group-bumen4-2]port default vlan 42
[ASW4-port-group-bumen4-2]quit
[ASW4]port-group shipinhuiyi
[ASW4-port-group-shipinhuiyi]port link-ty
[ASW4-port-group-shipinhuiyi]group-member g0/0/13 to g0/0/14
[ASW4-port-group-shipinhuiyi]port link-type access
[ASW4-port-group-shipinhuiyi]port default vlan 100
[ASW4]port-group jiankong
[ASW4-port-group-jiankong]group-member g0/0/15 to g0/0/18
[ASW4-port-group-jiankong]port link-type access
[ASW4-port-group-jiankong]port default vlan 101
[ASW4-GigabitEthernet0/0/24]port link-type trunk
[ASW4-GigabitEthernet0/0/24]port trunk allow-pass vlan 41 42 100 101
[ASW4-GigabitEthernet0/0/24]undo port trunk all
[ASW4-GigabitEthernet0/0/24]undo port trunk allow-pass vlan 1
8.配置CE1
<HUAWEI>sys
[*HUAWEI]sysname ce1
[*ce1]vlan batch 11 12 21 22 31 32 41 42 100 101
[*ce1]vlan 11
[*ce1-vlan11]description bumen1-1
[*ce1-vlan11]vlan 12
[*ce1-vlan12]description bumen1-2
[*ce1-vlan12]vlan 21
[*ce1-vlan21]description bumen2-1
[*ce1-vlan21]vlan 22
[*ce1-vlan22]description bumen2-2
[*ce1-vlan22]vlan 31
[*ce1-vlan31]description bumen3-1
[*ce1-vlan31]vlan 32
[*ce1-vlan32]description bumen3-2
[*ce1-vlan32]vlan 41
[*ce1-vlan41]description bumen4-1
[*ce1-vlan41]vlan 42
[*ce1-vlan42]description bumen4-2
[*ce1-vlan42]vlan 100
[*ce1-vlan100]description shipinhuiyi
[*ce1-vlan100]vlan 101
[*ce1-vlan101]description jiankong
[*ce1-vlan101]quit
[*ce1]interface vlanif 11
[*ce1-Vlanif11]ip address 172.16.11.254
[*ce1-Vlanif11]quit
[*ce1]interface vlanif 12
[*ce1-Vlanif12]ip address 172.16.12.254
[*ce1-Vlanif12]quit
[*ce1]interface vlanif 21
[*ce1-Vlanif21]ip address 172.16.21.254
[*ce1-Vlanif21]quit
[*ce1]interface vlanif 22
[*ce1-Vlanif22]ip address 172.16.22.254
[*ce1-Vlanif22]quit
[*ce1]interface vlanif 31
[*ce1-Vlanif31]ip address 172.16.31.254
[*ce1-Vlanif31]quit
[*ce1]interface vlanif 41
[*ce1-Vlanif41]ip address 172.16.41.254
[*ce1-Vlanif41]quit
[*ce1]interface vlanif 100
[*ce1-Vlanif100]ip address 172.16.100.254
[*ce1-Vlanif100]quit
[*ce1]interface vlanif 101
[*ce1-Vlanif101]ip address 172.16.101.254
[*ce1-Vlanif101]quit
[*ce1]interface GE1/0/0
[*ce1-GE1/0/0]port link-type trunk
[*ce1-GE1/0/0]port trunk allow-pass vlan 11 12 100 101
[*ce1-GE1/0/0]undo port trunk allow-pass vlan 1
[*ce1-GE1/0/0]undo shutdown
[*ce1-GE1/0/0]quit
[*ce1]interface GE 1/0/1
[*ce1-GE1/0/1]port link-type trunk
[*ce1-GE1/0/1]port trunk allow-pass vlan 21 22 100 101
[*ce1-GE1/0/1]undo port trunk allow-pass vlan 1
[*ce1-GE1/0/1]undo shutdown
[*ce1-GE1/0/1]quit
[*ce1]interface GE 1/0/2
[*ce1-GE1/0/2]port link-type trunk
[*ce1-GE1/0/2]port trunk allow-pass vlan 31 32 100 101
[*ce1-GE1/0/2]undo port trunk allow-pass vlan 1
[*ce1-GE1/0/2]undo shutdown
[*ce1-GE1/0/2]quit
[*ce1]interface GE 1/0/3
[*ce1-GE1/0/3]port link-type trunk
[*ce1-GE1/0/3]port trunk allow-pass vlan 41 42 100 101
[*ce1-GE1/0/3]undo port trunk allow-pass vlan 1
[*ce1-GE1/0/3]undo shutdown
[*ce1-GE1/0/3]quit
[*ce1]commit
9.测试
