华为S5700划分VLAN配置方案
公司新加一台S5700的交换机扩展网络段,之前的网络结构是路由器CISCO2800下面级联交换机,端口FastEthernet0/0 IP地址192.168.1.254,作为网关,级联的交换机都不做配置。
结构图如下:
现在加入一台三层交换机S5700,划分几个VLAN
vlan2:192.168.7.254 255.255.255.0
vlan3:192.168.8.254 255.255.255.0
vlan4:192.168.9.254 255.255.255.0
vlan100:192.168.1.254 255.255.255.0
vlan1000:192.168.100.253 255.255.255.0
增加的几个网段,整个网络结构也只有S5700这块有变动,其他地方没做改动,从上面两图可以看出来。
然后是我的基本配置:
[Quidway]system-view
[Quidway]sysname Switch
[Switch]vlan 100
[Switch-vlan100]description admin_Vlan
[Switch-vlan100]quit
[Switch]aaa
[Switch-aaa]local-user **** password cipher ****
info: A new user added
[Switch-aaa]local-user **** service-type telnet
[Switch-aaa]local-user **** privilege level 15
[Switch-aaa]quit
[Switch]user-interface vty 0 4
[Switch-ui-vty0-4]authentication-mode aaa
[Switch-ui-vty0-4]return
<Switch>
<Switch>system-view
[Switch]interface vlanif 100
[Switch-Vlanif100]ip address 192.168.1.254 255.255.255.0
[Switch-Vlanif100]quit
[Switch]vlan 2
[Switch-vlan2]quit
[Switch]interface vlanif 2
[Switch-Vlanif2]ip address 192.168.7.254 255.255.255.0 [Switch-Vlanif2]quit
[Switch]vlan 3
[Switch-vlan3]quit
[Switch]interface vlanif 3
[Switch-Vlanif3]ip address 192.168.8.254 255.255.255.0 [Switch-Vlanif3]quit
[Switch]vlan 4
[Switch-vlan4]quit
[Switch]interface vlanif 4
[Switch-Vlanif4]ip address 192.168.9.254 255.255.255.0 [Switch-Vlanif4]quit
[Switch]vlan 1000
[Switch-vlan1000] ip address 192.168.100.253 255.255.255.0
[Switch]interface GE 0/0/1
[Switch-Ethernet0/0/1]port link-type access
[Switch-Ethernet0/0/1]port default vlan 2
[Switch-Ethernet0/0/1]quit
!
!
!
[Switch]interface GE 0/0/7
[Switch-Ethernet0/0/7]port link-type access
[Switch-Ethernet0/0/7]port default vlan 3
[Switch-Ethernet0/0/7]quit
!
!
!
[Switch]interface GE 0/0/13
[Switch-Ethernet0/0/13]port link-type access
[Switch-Ethernet0/0/13]port default vlan 4
[Switch-Ethernet0/0/13]quit
!
!
!
!
[Switch]interface GE0/0/23
[Switch-Ethernet0/0/23]port link-type access
[Switch-Ethernet0/0/23]port default vlan 100
[Switch-Ethernet0/0/23]quit
[Switch]interface GE 0/0/24
[Switch-GigabitEthernet0/0/1]port link-type access
[Switch-GigabitEthernet0/0/1]port default vlan 1000
[Switch-GigabitEthernet0/0/1]quit
ip route-static 0.0.0.0 0.0.0.0 192.168.100.254
ip route-static 0.0.0.0 0.0.0.0 192.168.1.138
ip route-static 192.168.0.0 255.255.255.0 192.168.100.254
ip route-static 192.168.2.0 255.255.255.0 192.168.100.254
192.168.0.0和192.168.2.0是外地分公司的网络段,因为服务器等都是在192.168.1.0下面的
然后是路由器部分部分配置:
interface FastEthernet0/0
description connect to local lan
ip address 192.168.100.254 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
description connect to local new lan
ip address 192.168.4.254 255.255.255.0
duplex auto
speed auto
!
interface Serial0/1/1
description connect to shanghai
bandwidth 384
ip address 10.168.2.1 255.255.255.0
ip tcp header-compression iphc-format
max-reserved-bandwidth 100
service-policy output sh
ip rtp header-compression iphc-format
router eigrp 10
redistribute static
network 10.0.0.0
network 192.168.1.0
network 192.168.4.0
no auto-summary
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.1.138
ip route 192.168.1.0 255.255.255.0 192.168.100.253 ip route 192.168.7.0 255.255.255.0 192.168.100.253
ip route 192.168.8.0 255.255.255.0 192.168.100.253
ip route 192.168.9.0 255.255.255.0 192.168.100.253
配置的都是一些简单的,交换机的功能没有完全发挥出来。
这个里面192.168.1.138用主机做的上网行为管理,我现在用192.168.1.254做网关的话,上网速度非常慢,简直到了不能容忍的地步,而之前没加5700的时候很正常,不知道是不是配置的原因,大神们帮忙看看啊!!!
另外感谢沈绘沈老师前期耐心帮忙解答的很多困惑问题!
路由器里面这一段
router eigrp 10
redistribute static
network 10.0.0.0
network 192.168.1.0
network 192.168.4.0
no auto-summary
R1(config-router)#no network 192.168.1.0 0.0.0.255
之后没有后面出现的ping,tracert异常的情况了,不过还是网速慢,不能容忍。