-
Virtual Local Area Network (VLAN).
The development of switching technology has also accelerated the application of new switching technology (VLAN). By dividing the enterprise network into virtual network VLAN CIDR blocks, network management and network security can be strengthened, and unnecessary data broadcasting can be controlled. In a shared network, a physical network segment is a broadcast domain.
In a switched network, a broadcast domain can be a virtual network segment consisting of an arbitrarily selected set of Layer 2 network addresses (MAC addresses). In this way, the division of workgroups in the network can break through the geographical limitations of the shared network and be divided entirely according to the management function. This workflow-based grouping model greatly improves the management capabilities of network planning and reorganization.
Workstations in the same VLAN, regardless of which switch they are actually connected to, communicate with each other as if they were on separate hubs. Broadcasts in the same VLAN can only be heard by members in the VLAN and are not transmitted to other users.
VLAN, which can well control the generation of unnecessary broadcast storms. In addition, if there is no route, different VLANs cannot communicate with each other, which increases the security between different departments in the enterprise network. Network administrators can configure routes between VLANs to manage information exchange between different management units within the enterprise.
Switches are divided into VLANs based on the MAC address of the user's workstation. Therefore, the user can freely move around the enterprise network, and no matter where he accesses the switched network, he can freely communicate with other users in the VLAN.
A VLAN can be composed of mixed network devices, such as 10M Ethernet and 100
Ethernet, Token Network, FDDI, CDDI, etc., can be workstations, servers, hubs, network uplink backbones, and so on.
VLAN management requires complex specialized software, which meets the functions of VLAN division and monitoring of the entire network, as well as other extended management functions through the comprehensive management of management objects such as users, MAC addresses, switch port numbers, and VLAN numbers. Nowadays, the more common VLAN partitioning method is based on MAC address. However, there are also some vendors that offer more VLAN partitioning methods
MAC addresses, protocol addresses, switch ports, network application types, user permissions, and more.
When selecting a switch, you should carefully examine the VLAN function of the purchased switch and select a switch that meets the requirements and is easy to manage according to the actual needs of your enterprise. At the same time, special attention should be paid to the fact that most of the VLANs of switches from different vendors are incompatible.
-
In fact, in this way, you are equivalent to making SW2 a core switch.
Solution: 1. Set the interconnection link between SW1 and SW2 as a trunk and allow-pass VLAN all;
2. Delete the IP route-static command of SW1 and use the default route to point to the IP of SW2
That is: ip route-static
3. Do static routing on SW2 to achieve inter-VLAN communication
ip route-static
ip route-static
4. Make the default route on SW2 to achieve access to the external network.
The private IP address or interface of the IP Route-Static R2 router.
5. Set the default route on R2 to point to the gateway address of the Internet.
Basic terms for switches:
The transmission modes of the switch are full-duplex, half-duplex, full-duplex and half-duplex adaptive.
The full duplex of the switch means that the switch can receive data while sending data, and the two are synchronized, which is like we usually play **, and we can hear each other's voices while talking. Current switches all support full-duplex. The advantage of full-duplex is that it has little lag and high speed.
When it comes to full duplex, we can't help but mention another concept that closely corresponds to it, that is, "half-duplex", the so-called half-duplex refers to a period of time when only one action occurs, for a simple example, a narrow road, at the same time can only have one car through, when there are currently two cars open, in this case, only one can pass first, wait until the head and then the other car opens, this example vividly illustrates the principle of half-duplex. Early walkie-talkies, as well as early hubs and other equipment, were half-duplex products. With the continuous advancement of technology, semi-double unions have gradually withdrawn from the stage of history.
Broadly speaking, there are two types of network switches: WAN switches and LAN switches. WAN switches are mainly used in the telecommunications field to provide a basic platform for communication.
LAN switches are used in local area networks to connect terminal devices, such as PCs and network printers. In terms of transmission medium and transmission speed, it can be divided into Ethernet switches, fast Ethernet switches, Gigabit Ethernet switches, FDDI switches, ATM switches and token ring switches.
In terms of large-scale applications, it can be divided into enterprise-level switches, departmental switches, and workgroup switches. Generally speaking, enterprise-level switches are rack-mounted, departmental switches can be rack-type (with a small number of slots) or fixed configuration, while workgroup-level switches are fixed-configuration (with relatively simple functions). On the other hand, from the perspective of application scale, when used as a backbone switch, the switch that supports large enterprise applications with more than 500 information points is an enterprise-level switch, the switch that supports medium-sized enterprises with less than 300 information points is a department-level switch, and the switch that supports less than 100 information points is a workgroup-level switch.
The switches described in this article refer to LAN switches.
-
Huawei's traffic shield bureau changes the communication configuration between the VLAN of the macro orange machine.
-
1. Router.
2. Layer 3 switches.
Each VLAN on the switch is connected separately through different physical interfaces of the router: this method has the advantage of being easy to manage, but the disadvantage is that it is difficult to expand the network. Each time a new VLAN is added, the router's ports and access links on the switch need to be consumed, and a new network cable needs to be rerouted.
Routers, on the other hand, usually don't have too many LAN interfaces.
-
1. Before configuring, run the erase startup-config or no vlan 2-101 commands to clear the previous configuration and restart the switch.
2. Create a VLAN of the switch and set the port.
3. Set multiple VLANs of switch 2 and set port trunk attributes.
4. Set the PC address of the connection.
5. From the output information, you can see that the Trunk attribute of port F0 3 of switch 2 is set. PCs ping each other to test their connectivity. Test vlan10: PC1 ping PC3.
-
Dear, I'm glad to answer for you: Users in different VLANs can communicate with each otherA: Good morning! <>
1First, VLAN partitioning can help control traffic, reduce equipment investment, simplify network management, and improve network security. Since the VLAN isolates the broadcast storm, it also isolates the communication between different VLAN2
Layer 3 switches are required to route and distribute traffic between different VLANs. The Layer 3 switch adds all VLANs and sets the ports3Enable the routing function of Layer 3 switches4
Set up a VLAN gateway and click the Wizard button to configure it5Create or select a VLAN for configuration6Set the port slave and other information, and click "Next"7
Enter the gateway for the VLAN. Click "finish"; This VLAN is configured, and other VLANs are configured according to the above operations, and after completion, communication between different VLANs can be carried out. Thank you for your patience.
The above is my full reply, if you are satisfied with my service, please give a thumbs up, and I wish you all the best! Peace and joy!
-
It must be routed, because the two VLANs are different networks, so without routing, data can only be transmitted at Layer 2, and ordinary Layer 2 switches cannot follow the information in Layer 3 headers. If there is no VLAN, the data sent from this port will cause a broadcast storm for the entire network.
or cause network congestion.
Similar to ATM transmission, the VPI and communication between the VPI and the tomb need to be through 3 layers of equipment**. The reason is not related to the marking of VLANs, but more to do with the IP addresses of different VLANs.
When planning, use different IP address subnets.
Of course, you can also plan different IP addresses in the same VLAN.
Don't use sharing, sharing in win98, win2000, winxp and other versions of different versions of the processing is different, there are serious security vulnerabilities. >>>More
What are Zhao Benshan's two daughters doing?
First of all, you have to think clearly.
Which one do you really love? >>>More
What to do every day: Do a small thing for the other person: such as hot milk, squeeze toothpaste. >>>More
The total capacitance of the two capacitors in series is generally known, i.e., c=c1*c2 (c1+c2). >>>More