What you must learn to configure a VLAN on a switch

There are many ways to solve the problem of communicating with the Internet according to the conditions you propose.

1. Layer 3 switch, set up three VLANs, and set up Layer 3 protocols, such as VLAN if 10 IP, VLAN if 20 VLAN if 30 (communicate with the Internet router) IP VLAN10 and 20 are the computer network segments, then the computer IP address is set to the network segment of VLAN 10 or 20, and the gateway is the IP address of the corresponding VLAN. And set the default path next-hop on the Layer 3 switch by the peer address pointing to VLAN30.

Second, the use of single-arm routing, with the router sub-interface function, here is not much to introduce, computer settings and router network connection methods:

Home Network Environment Cabling]:

1. There is a cat (modem): cat (modem) - router WAN port; The LAN port of the router --- a computer.

2. No modem: network cable --- router WAN port; The LAN port of the router --- a computer.

Set the method of automatic acquisition of computer IP and DNS]:

Win7 system setting method:

Right-click [Network] Properties [Change Adapter Settings] [Local Connection] [Right-click Local Connection Properties] [Double-click TPC IP Protocol] [Then click "Automatically Get IP Address"], and then click "Automatically Get DNS" Server Address] [Click OK].

The Chinese name of VLAN (Virtual Local Area Network) is"Virtual LAN"。[1]

A virtual local area network (VLAN) is a logical set of devices and users that are not limited by physical location, but can be organized according to factors such as function, department, and application, and communicate with each other as if they were in the same network segment. VLAN is a relatively new technology that works at Layer 2 and Layer 3 of the OSI reference model, where a VLAN is a broadcast domain, and communication between VLANs is done through Layer 3 routers. Compared with traditional LAN technology, VLAN technology is more flexible and has the following advantages:

reduced management overhead for the movement, addition, and modification of network devices; It is possible to control broadcasting activities; It can improve the security of the network. [1]

There are six ways to divide VLANs, and the benefits of each type of partition are:

1. The benefits of dividing VLANs by port: The configuration process of dividing network members by switch ports is simpler and clearer. Doing so allows communication between ports and allows for the upgrade of shared networks.

3. Divide VLANs by network layer: If the user's physical location changes, there is no need to reconfigure the VLAN to which the user belongs, and VLANs can be divided according to the protocol type. This method does not require additional frame labels to identify VLANs, which reduces the amount of traffic on the network.

4. Divide VLANs by IP multicast: The VLANs are extended to the WAN, so this method has more flexibility and is also easy to expand through routers.

With this approach, the entire network can be easily scaled by routers, and some products also support hosts on one port belonging to different VLANs.

6. Divided by user definition and non-user authorization: To adapt to special VLAN networks, VLANs can be defined and designed according to the special requirements of specific network users, and VLANs can be accessed by non-VLAN group users.

Huawei switches for example

1. Create VLAN2. The command is vlan 2

2. Enter the port, set the port type to access, and then join the port to VLAN2. The command is as follows:

huawei]int gigabitethernet 0 0 1 entry port.

huawei-gigabitethernet0 0 1]port link-type access Set the port type to access

huawei-gigabitethernet0 0 1]port default vlan 2 port joins vlan2

3. Run the dis vlan 2 command to check the VLAN status and find that port 1 belongs to VLAN 2.

What brand of switch? The commands of different manufacturers are different, but those that support VLAN division come with a web interface, and you can directly enter the web interface intuitively.

1.Broadcast storm prevention and reduce the broadcast domain.

2.Secure, which enhances the security of the local area network, and groups of users containing sensitive data can be isolated from the rest of the network, reducing the likelihood of leaking confidential information.

Day, the teacher is a eunuch and writes fucking p