S5000P系列交换机Port Based Vlan的配置
一、组网需求: 目前市场有部分网吧反馈:使用我司S5000P作为网吧的核心,需要实现多个VLAN间的广播隔离,同时又能让客户端能访问服务器上的电影游戏等资源。在S5000P系列上可以用Port Based VLAN实现以上功能,以下将用S5024P为例。
二、组网图:
三、步骤: 我们以一个具体网吧的实例来讲解具体如何,请先看需求: 网吧是这样的,共有三个VLAN,要把1-6号作为公共端口,让其它的端口都能访问到它,7-12作为一个VLAN,13-24作为一个VLAN
如下: 以24端口为监控端口、其他端口为被监控端口为例,参考如下 <Quidway>system-view Enter system view, return to user view with Ctrl+Z. [Quidway]vlan 1 [Quidway-Vlan1]port g0/1 to g0/12 user-group 2 //将1到12端口加入用户组2 The VLAN state has been changed to port-based VLAN! //提示VLAN类型发生转换 [Quidway-Vlan1]port g0/1 to g0/6 user-group 3 [Quidway-Vlan1]port g0/13 to g0/24 user-group 3 [Quidway-Vlan1]undo port g0/1 to g0/24 user-group 1 //一定记得将好的端口从默认的用户组1中删除,否则将不起作用 [Quidway-Vlan1]display vlan 1 VLAN State: port-based VLAN VLAN ID: 1 Route Interface: configured IP Address: 192.168.0.1 Subnet Mask: 255.255.0.0 Tagged Ports: none Untagged Ports: GigabitEthernet0/1 GigabitEthernet0/2 GigabitEthernet0/3 GigabitEthernet0/4 GigabitEthernet0/5 GigabitEthernet0/6 GigabitEthernet0/7 GigabitEthernet0/8 GigabitEthernet0/9 GigabitEthernet0/10 GigabitEthernet0/11 GigabitEthernet0/12 GigabitEthernet0/13 GigabitEthernet0/14 GigabitEthernet0/15 GigabitEthernet0/16 GigabitEthernet0/17 GigabitEthernet0/18 GigabitEthernet0/19 GigabitEthernet0/20 GigabitEthernet0/21 GigabitEthernet0/22 GigabitEthernet0/23 GigabitEthernet0/24 User-group: User-group-2: GigabitEthernet0/1 GigabitEthernet0/2 GigabitEthernet0/3 GigabitEthernet0/4 GigabitEthernet0/5 GigabitEthernet0/6 GigabitEthernet0/7 GigabitEthernet0/8 GigabitEthernet0/9 GigabitEthernet0/10 GigabitEthernet0/11 GigabitEthernet0/12 User-group-3: GigabitEthernet0/1 GigabitEthernet0/2 GigabitEthernet0/3 GigabitEthernet0/4 GigabitEthernet0/5 GigabitEthernet0/6 GigabitEthernet0/13 GigabitEthernet0/14 GigabitEthernet0/15 GigabitEthernet0/16 GigabitEthernet0/17 GigabitEthernet0/18 GigabitEthernet0/19 GigabitEthernet0/20 GigabitEthernet0/21 GigabitEthernet0/22 GigabitEthernet0/23 GigabitEthernet0/24 [Quidway-Vlan1]
以上就成功的实现了网吧的需求,完成后千万记得保存哦!
四、关键点: 1. Port Based VLAN和普通802.1Q VLAN是不能同时的,开启Port Based VLAN后即会自动关闭802.1Q VLAN 2. 如果想开启Port Based VLAN,就必须将802.1Q VLAN设置为初始化状态 3. S5000P软件版本D008以上(含D008)才支持Port Based VLAN,如果版本较低,请先升级{zx1}软件版本 |