华为ENSP--VLAN配置

项目拓扑

项目任务

一、链路聚合配置

在LSW1和LSW2上创建Eth-Trunk 1并配置该Eth-Trunk为静态LACP模式，然后将G0/0/9和G0/0/10接口加入Eth-Trunk 1，在LSW1上将LACP优先级设为100，将LSW1设为主动端


展开代码
# LSW1配置
[LSW1]interface Eth-Trunk 1
[LSW1-Eth-Trunk1]mode lacp
[LSW1-Eth-Trunk1]q
[LSW1]lacp priority 100
[LSW1]interface GigabitEthernet 0/0/9
[LSW1-GigabitEthernet0/0/9]eth-trunk 1
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1-GigabitEthernet0/0/9]q
[LSW1]interface GigabitEthernet 0/0/10
[LSW1-GigabitEthernet0/0/10]eth-trunk 1
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW1-GigabitEthernet0/0/10]q
[LSW1]

# LSW2配置
[LSW2]interface Eth-Trunk 1
[LSW2-Eth-Trunk1]mode lacp	
[LSW2-Eth-Trunk1]trunkport GigabitEthernet 0/0/9
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW2-Eth-Trunk1]trunkport GigabitEthernet 0/0/10
Info: This operation may take a few seconds. Please wait for a moment...done.
[LSW2-Eth-Trunk1]q
[LSW2]

二、配置Eth-Trunk链路为Trunk，并允许所有VLAN通过

交换机端口的类型默认为Hybrid端口，将Eth-Trunk1的端口类型配置为Trunk，并允许所有VLAN的报文通过该端口


展开代码
# LSW1配置
[LSW1]interface Eth-Trunk 1
[LSW1-Eth-Trunk1]port link-type trunk
[LSW1-Eth-Trunk1]port trunk allow-pass vlan all
[LSW1-Eth-Trunk1]q
[LSW1]

# LSW2配置
[LSW2]interface Eth-Trunk 1
[LSW2-Eth-Trunk1]port link-type trunk
[LSW2-Eth-Trunk1]port trunk allow-pass vlan all
[LSW2-Eth-Trunk1]q
[LSW2]

三、创建VLAN、并配置相应的ACCESS端口

将LSW3、AR1、AR3、LSW4设备作为客户端主机。在LSW1、LSW2上分别创建VLAN，并使用两种不同方式将端口加入到已创建的VLAN中。将所有连接客户端的端口类型配置为Access


展开代码
# 在LSW1上，将端口G0/0/13、G0/0/1分别加入到VLAN3、VLAN4
[LSW1]interface GigabitEthernet 0/0/13
[LSW1-GigabitEthernet0/0/13]port link-type access
[LSW1-GigabitEthernet0/0/13]q
[LSW1]interface GigabitEthernet 0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type access
[LSW1-GigabitEthernet0/0/1]q
[LSW1]vlan 2
[LSW1-vlan2]vlan 3
[LSW1-vlan3]port  GigabitEthernet 0/0/13
[LSW1-vlan3]vlan 4
[LSW1-vlan4]port GigabitEthernet 0/0/1
[LSW1-vlan4]q
[LSW1]

# 在LSW2上，将端口G0/0/3、G0/0/6分别加入到VLAN4、VLAN2
[LSW2]vlan batch 2 to 4
Info: This operation may take a few seconds. Please wait for a moment...done.	
[LSW2]interface GigabitEthernet 0/0/3
[LSW2-GigabitEthernet0/0/3]port link-type access
[LSW2-GigabitEthernet0/0/3]port default vlan 4
[LSW2-GigabitEthernet0/0/3]q	
[LSW2]interface GigabitEthernet 0/0/06
[LSW2-GigabitEthernet0/0/6]port link-type access
[LSW2-GigabitEthernet0/0/6]port default vlan 2
[LSW2-GigabitEthernet0/0/6]q
[LSW2]

确认在LSW1、LSW2中已经建立好VLAN，并将相应端口划分到对应VLAN中（以LSW1为例）


展开代码
[LSW1]display vlan

四、为客户端配置IP地址

分别为主机AR1、LSW3、AR3、LSW4配置IP地址。由于无法直接为交换机的物理接口分配IP地址，因此将LSW3、LSW4的本地管理接口VLANIF 1作为用户接口，配置IP地址


展开代码
# AR1配置
[AR1]interface GigabitEthernet 0/0/1
[AR1-GigabitEthernet0/0/1]ip address 10.0.4.1 24
[AR1-GigabitEthernet0/0/1]q
[AR1]

# LSW3配置
[LSW3]interface Vlanif 1
[LSW3-Vlanif1]ip address 10.0.4.2 24
[LSW3-Vlanif1]q
[LSW3]

# LSW4配置
[LSW4]interface Vlanif 1
[LSW4-Vlanif1]ip address 10.0.4.4 24
[LSW4-Vlanif1]q
[LSW4]

# AR3配置
[AR3]interface GigabitEthernet 0/0/2
[AR3-GigabitEthernet0/0/2]ip address 10.0.4.3 24
[AR3-GigabitEthernet0/0/2]q
[AR3]

五、检测设备连通性，验证VLAN配置结果

用ping命令，同属于VLAN 4中的AR1和AR3之间能够相互通信，其他不同VLAN间的设备无法通信


展开代码
<AR1>ping 10.0.4.3

六、配置Hybrid端口

配置端口类型为Hybrid，可以实现端口为来自不同VLAN报文打上标签或去除标签的功能。本任务中，需要通过配置Hybrid端口来允许VLAN 2和VLAN 4之间可以互相通信

将LSW1上的G0/0/1端口和LSW2上的G0/0/3和G0/0/6端口类型配置为Hybrid。同时，配置这些端口发送数据帧时能够去掉VLAN 2和VLAN 4的标签


展开代码
# LSW1配置
[LSW1]interface GigabitEthernet 0/0/1
[LSW1-GigabitEthernet0/0/1]undo port default vlan 
[LSW1-GigabitEthernet0/0/1]port link-type hybrid
[LSW1-GigabitEthernet0/0/1]port hybrid untagged vlan 2 4
[LSW1-GigabitEthernet0/0/1]port hybrid pvid vlan 4
[LSW1-GigabitEthernet0/0/1]q
[LSW1]

# LSW2配置
[LSW2]interface GigabitEthernet 0/0/3
[LSW2-GigabitEthernet0/0/3]undo port default vlan 
[LSW2-GigabitEthernet0/0/3]port link-type hybrid
[LSW2-GigabitEthernet0/0/3]port hybrid untagged vlan 2 4
[LSW2-GigabitEthernet0/0/3]port hybrid pvid vlan 4
[LSW2-GigabitEthernet0/0/3]q
[LSW2]interface GigabitEthernet 0/0/6
[LSW2-GigabitEthernet0/0/6]undo port default vlan
[LSW2-GigabitEthernet0/0/6]port link-type hybrid
[LSW2-GigabitEthernet0/0/6]port hybrid untagged vlan 2 4
[LSW2-GigabitEthernet0/0/6]port hybrid pvid vlan 2
[LSW2-GigabitEthernet0/0/6]q
[LSW2]

执行port hybrid pvid vlan命令，可以配置端口收到数据帧时需要给数据帧添加的VLAN标签。同时port hybrid untagged vlan 命令可以配置该端口在向主句转发数据帧之前，删除相应的VLAN标签

执行ping命令，测试VLAN 3中的AR1与AR3是否还能通信

执行ping命令，测试VLAN 2中的LSW4能否与VLAN 4中的AR1通信

通过配置Hybrid端口，使VLAN 2内的主机能够接收到来自VLAN 4的报文，反之亦然。而没有配置HYbrid端口的VLAN 3中地址为10.0.4.2的主机仍无法与其它VLAN主机通信

目录