原文引用自:http://www.mrz001.com/?p=897
1、 使用GNS3搭建交换机
拓扑介绍:
R1:插了交换模块的路由器,模拟交换机
R3、R4、R5、R6:测试交换机配置用,IP与VLAN如图
C1、C2桥接VMWare的本地虚拟网卡,本次实验C1桥在VMnet4,C2桥在VMnet5上
(C1、C2的目的是为了让VMware的虚拟机接入GNS)
本次实验配置拓扑并非重点,简单介绍下,详细见附件GNS3VLAN.rar:
R1重要命令如下
R1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#int f1/14
R1(config-if)#
R1(config-if)#switchport mode trunk
R1(config-if)#switchport trunk encapsulation dot1q
R1(config-if)#switchport trunk allowed vlan all
R1(config-if)#no sh
R1(config-if)#
R1#
R1#show run
Building configuration...
Current configuration : 1520 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
no ip routing
no ip cef
!
!
!
!
no ip domain lookup
ip domain name lab.local
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
no ip route-cache
shutdown
duplex auto
speed auto
vlan-id dot1q 2
exit-vlan-config
!
!
interface FastEthernet0/1
no ip address
no ip route-cache
shutdown
duplex auto
speed auto
!
interface FastEthernet1/0
switchport access vlan 2
!
interface FastEthernet1/1
switchport access vlan 10
!
interface FastEthernet1/2
switchport access vlan 10
!
interface FastEthernet1/3
!
interface FastEthernet1/4
!
interface FastEthernet1/5
!
interface FastEthernet1/6
!
interface FastEthernet1/7
!
interface FastEthernet1/8
!
interface FastEthernet1/9
!
interface FastEthernet1/10
switchport access vlan 100
!
interface FastEthernet1/11
switchport access vlan 100
!
interface FastEthernet1/12
!
interface FastEthernet1/13
!
interface FastEthernet1/14
switchport mode trunk
!
interface FastEthernet1/15
switchport mode trunk
!
interface Vlan1
no ip address
no ip route-cache
!
!
!
no ip http server
no ip http secure-server
!
!
!
!
!
!
control-plane
!
!
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end
R1#
R3#
R3#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R3(config)#int f0/0
R3(config-if)#ip add 10.0.0.11 255.255.255.0
R3(config-if)#no sh
R3(config-if)#exit
R3(config)#no ip routing
R3(config)#^Z
R3#
R4#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R4(config)#int f0/0
R4(config-if)#ip add 10.0.0.12 255.255.255.0
R4(config-if)#no sh
R4(config-if)#exit
R4(config)#no ip routing
R4(config)#^Z
R4#
R5#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R5(config)#int f0/0
R5(config-if)#ip add 10.0.0.101 255.255.255.0
R5(config-if)#no sh
R5(config-if)#exit
R5(config)#no ip o
*Mar 1 00:04:43.595: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Mar 1 00:04:44.595: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R5(config)#no ip routing
R5(config)#^Z
R6#
R6#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R6(config)#int f0/0
R6(config-if)#ip add 10.0.0.102 255.255.255.0
R6(config-if)#no sh
R6(config-if)#exit
R6(config)#no ip rout
*Mar 1 00:05:16.675: %LINK-3-UPDOWN: Interface FastEthernet0/0, changed state to up
*Mar 1 00:05:17.675: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up
R6(config)#no ip routing
R6(config)#
R6(config)#
R6(config)#
R6(config)#^Z
R6#
2、 测试交换机VLAN
================================
测试VLAN10内
R3#wr
Building configuration...
[OK]
R3#ping 10.0.0.12
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.12, timeout is 2 seconds:
..!!!
Success rate is 60 percent (3/5), round-trip min/avg/max = 20/26/32 ms
R3#
R3#
R3#
R4#ping 10.0.0.11
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.11, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/20/20 ms
R4#
测试VLAN10到VLAN100
R3#
R3#ping 10.0.0.101
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.101, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
R3#ping 10.0.0.102
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.0.102, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
R3#
=================================
3、 组建服务器拓扑
VM02网卡配置
VM02:/etc/sysconfig/network # cat ifcfg-bond1
BONDING_MASTER='yes'
BONDING_MODULE_OPTS='mode=active-backup miimon=100'
BONDING_SLAVE0='eth2'
BONDING_SLAVE1='eth1'
BOOTPROTO='static'
BROADCAST=''
ETHTOOL_OPTIONS=''
IPADDR='1.1.1.1/24'
MTU=''
NAME=''
NETMASK='255.255.255.0'
NETWORK=''
REMOTE_IPADDR=''
STARTMODE='auto'
USERCONTROL='no'
VM02:/etc/sysconfig/network # cat ifcfg-br0
BOOTPROTO='static'
BRIDGE='yes'
BRIDGE_FORWARDDELAY='0'
BRIDGE_PORTS='eth0'
BRIDGE_STP='off'
BROADCAST=''
ETHTOOL_OPTIONS=''
IPADDR='192.168.123.135/24'
MTU=''
NETMASK=''
NETWORK=''
REMOTE_IPADDR=''
STARTMODE='auto'
USERCONTROL='no'
NAME=''
VM02:/etc/sysconfig/network #
VM02:/opt # ifconfig
bond1 Link encap:Ethernet HWaddr 00:0C:29:A4:5C:15
inet addr:1.1.1.1 Bcast:1.1.1.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fea4:5c15/64 Scope:Link
UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1
RX packets:16486 errors:0 dropped:7787 overruns:0 frame:0
TX packets:314 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1143515 (1.0 Mb) TX bytes:22029 (21.5 Kb)
br0 Link encap:Ethernet HWaddr 00:0C:29:A4:5C:01
inet addr:192.168.123.135 Bcast:192.168.123.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:fea4:5c01/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:23793 errors:0 dropped:0 overruns:0 frame:0
TX packets:35744 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:103748375 (98.9 Mb) TX bytes:1022934837 (975.5 Mb)
br10 Link encap:Ethernet HWaddr FA:16:3E:16:61:4F
inet addr:10.0.0.2 Bcast:10.0.0.7 Mask:255.255.255.248
inet6 addr: fe80::6815:c4ff:fe71:a714/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:379 errors:0 dropped:0 overruns:0 frame:0
TX packets:154 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:20128 (19.6 Kb) TX bytes:8416 (8.2 Kb)
eth0 Link encap:Ethernet HWaddr 00:0C:29:A4:5C:01
inet6 addr: fe80::20c:29ff:fea4:5c01/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:279529 errors:0 dropped:0 overruns:0 frame:0
TX packets:718716 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:301787235 (287.8 Mb) TX bytes:1068010581 (1018.5 Mb)
eth1 Link encap:Ethernet HWaddr 00:0C:29:A4:5C:15
UP BROADCAST RUNNING PROMISC SLAVE MULTICAST MTU:1500 Metric:1
RX packets:8983 errors:0 dropped:7775 overruns:0 frame:0
TX packets:30 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:623923 (609.2 Kb) TX bytes:2280 (2.2 Kb)
eth2 Link encap:Ethernet HWaddr 00:0C:29:A4:5C:15
UP BROADCAST RUNNING PROMISC SLAVE MULTICAST MTU:1500 Metric:1
RX packets:7503 errors:0 dropped:0 overruns:0 frame:0
TX packets:284 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:519592 (507.4 Kb) TX bytes:19749 (19.2 Kb)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:85071 errors:0 dropped:0 overruns:0 frame:0
TX packets:85071 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1040975041 (992.7 Mb) TX bytes:1040975041 (992.7 Mb)
vlan10 Link encap:Ethernet HWaddr FA:16:3E:16:61:4F
inet6 addr: fe80::f816:3eff:fe16:614f/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:379 errors:0 dropped:0 overruns:0 frame:0
TX packets:161 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:20188 (19.7 Kb) TX bytes:8926 (8.7 Kb)
VM02:/opt #
VM01网卡配置
VM01:~ #
VM01:/etc/sysconfig/network # cat ifcfg-bond1
BONDING_MASTER='yes'
BONDING_MODULE_OPTS='mode=active-backup miimon=100'
BOOTPROTO='static'
BROADCAST=''
ETHTOOL_OPTIONS=''
IPADDR='0.0.0.0/32'
MTU=''
NAME=''
NETWORK=''
REMOTE_IPADDR=''
STARTMODE='auto'
USERCONTROL='no'
BONDING_SLAVE0='eth2'
BONDING_SLAVE1='eth1'
PREFIXLEN='24'
VM01:/etc/sysconfig/network # cat ifcfg-br0
BOOTPROTO='static'
BRIDGE='yes'
BRIDGE_FORWARDDELAY='0'
BRIDGE_PORTS='eth0'
BRIDGE_STP='off'
BROADCAST=''
ETHTOOL_OPTIONS=''
IPADDR='192.168.123.134/24'
MTU=''
NAME=''
NETWORK=''
REMOTE_IPADDR=''
STARTMODE='auto'
USERCONTROL='no'
VM01:/etc/sysconfig/network # cat ifcfg-br1
BOOTPROTO='static'
BRIDGE='yes'
BRIDGE_FORWARDDELAY='0'
BRIDGE_PORTS='bond1'
BRIDGE_STP='off'
BROADCAST=''
ETHTOOL_OPTIONS=''
IPADDR='1.1.1.2/24'
MTU=''
NAME=''
NETWORK=''
REMOTE_IPADDR=''
STARTMODE='auto'
USERCONTROL='no'
VM01:/etc/sysconfig/network #
VM01:~ #
VM01:~ # ifconfig
bond1 Link encap:Ethernet HWaddr 00:0C:29:EF:4A:87
inet6 addr: fe80::20c:29ff:feef:4a87/64 Scope:Link
UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1
RX packets:17611 errors:0 dropped:8738 overruns:0 frame:0
TX packets:385 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1219031 (1.1 Mb) TX bytes:31887 (31.1 Kb)
br0 Link encap:Ethernet HWaddr 00:0C:29:EF:4A:73
inet addr:192.168.123.134 Bcast:192.168.123.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:feef:4a73/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:64882 errors:0 dropped:0 overruns:0 frame:0
TX packets:42066 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1023886971 (976.4 Mb) TX bytes:90926852 (86.7 Mb)
br1 Link encap:Ethernet HWaddr 00:0C:29:EF:4A:87
inet addr:1.1.1.2 Bcast:1.1.1.255 Mask:255.255.255.0
inet6 addr: fe80::20c:29ff:feef:4a87/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2538 errors:0 dropped:4 overruns:0 frame:0
TX packets:15 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:134670 (131.5 Kb) TX bytes:1090 (1.0 Kb)
br10 Link encap:Ethernet HWaddr 00:0C:29:EF:4A:87
inet6 addr: fe80::7448:f9ff:fefd:98cd/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:580 errors:0 dropped:0 overruns:0 frame:0
TX packets:13 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:28274 (27.6 Kb) TX bytes:1070 (1.0 Kb)
eth0 Link encap:Ethernet HWaddr 00:0C:29:EF:4A:73
inet6 addr: fe80::20c:29ff:feef:4a73/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:913518 errors:0 dropped:0 overruns:0 frame:0
TX packets:98558 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1282953116 (1223.5 Mb) TX bytes:95065527 (90.6 Mb)
eth1 Link encap:Ethernet HWaddr 00:0C:29:EF:4A:87
UP BROADCAST RUNNING PROMISC SLAVE MULTICAST MTU:1500 Metric:1
RX packets:9890 errors:0 dropped:8738 overruns:0 frame:0
TX packets:46 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:687484 (671.3 Kb) TX bytes:3752 (3.6 Kb)
eth2 Link encap:Ethernet HWaddr 00:0C:29:EF:4A:87
UP BROADCAST RUNNING PROMISC SLAVE MULTICAST MTU:1500 Metric:1
RX packets:7721 errors:0 dropped:0 overruns:0 frame:0
TX packets:339 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:531547 (519.0 Kb) TX bytes:28135 (27.4 Kb)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:53246 errors:0 dropped:0 overruns:0 frame:0
TX packets:53246 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:113615810 (108.3 Mb) TX bytes:113615810 (108.3 Mb)
vif1.0 Link encap:Ethernet HWaddr FE:FF:FF:FF:FF:FF
inet6 addr: fe80::fcff:ffff:feff:ffff/64 Scope:Link
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:90 errors:0 dropped:0 overruns:0 frame:0
TX packets:337 errors:0 dropped:303 overruns:0 carrier:0
collisions:0 txqueuelen:32
RX bytes:6932 (6.7 Kb) TX bytes:24002 (23.4 Kb)
vlan10 Link encap:Ethernet HWaddr 00:0C:29:EF:4A:87
inet6 addr: fe80::20c:29ff:feef:4a87/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:658 errors:0 dropped:0 overruns:0 frame:0
TX packets:111 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:34512 (33.7 Kb) TX bytes:9578 (9.3 Kb)
VM01:~ #
4、 搭建OpenStackVLAN模式
VM02:/opt # nova-manage service list
2013-04-27 00:50:17 DEBUG nova.utils [req-9c2d2f16-51d1-4734-b876-636835ec5829 None None] backend <module 'nova.db.sqlalchemy.api' from '/usr/lib64/python2.6/site-packages/nova/db/sqlalchemy/api.pyc'> from (pid=18904) __get_backend /usr/lib64/python2.6/site-packages/nova/utils.py:738
2013-04-27 00:50:18 WARNING nova.utils [req-9c2d2f16-51d1-4734-b876-636835ec5829 None None] /usr/lib64/python2.6/site-packages/sqlalchemy/pool.py:639: SADeprecationWarning: The 'listeners' argument to Pool (and create_engine()) is deprecated. Use event.listen().
Pool.__init__(self, creator, **kw)
2013-04-27 00:50:18 WARNING nova.utils [req-9c2d2f16-51d1-4734-b876-636835ec5829 None None] /usr/lib64/python2.6/site-packages/sqlalchemy/pool.py:145: SADeprecationWarning: Pool.add_listener is deprecated. Use event.listen()
self.add_listener(l)
Binary Host Zone Status State ComputeHAStatus Updated_At
nova-cert VM02 upcloud01 enabled :-) None 2013-04-26 16:50:16
nova-compute VM02 upcloud01 enabled :-) None 2013-04-26 16:50:16
nova-network VM02 upcloud01 enabled :-) None 2013-04-26 16:50:14
nova-scheduler VM02 upcloud01 enabled :-) None 2013-04-26 16:50:15
nova-console VM02 upcloud01 enabled :-) None 2013-04-26 16:50:16
nova-compute VM01 upcloud01 enabled :-) None 2013-04-26 16:51:00
VM02:/opt # nova-manage network list
id IPv4 IPv6 start address DNS1 DNS2 VlanID project uuid
2013-04-27 00:50:23 DEBUG nova.utils [req-f2e92465-9bb9-435b-88e9-0d6b2c0a1188 None None] backend <module 'nova.db.sqlalchemy.api' from '/usr/lib64/python2.6/site-packages/nova/db/sqlalchemy/api.pyc'> from (pid=18917) __get_backend /usr/lib64/python2.6/site-packages/nova/utils.py:738
2013-04-27 00:50:23 WARNING nova.utils [req-f2e92465-9bb9-435b-88e9-0d6b2c0a1188 None None] /usr/lib64/python2.6/site-packages/sqlalchemy/pool.py:639: SADeprecationWarning: The 'listeners' argument to Pool (and create_engine()) is deprecated. Use event.listen().
Pool.__init__(self, creator, **kw)
2013-04-27 00:50:23 WARNING nova.utils [req-f2e92465-9bb9-435b-88e9-0d6b2c0a1188 None None] /usr/lib64/python2.6/site-packages/sqlalchemy/pool.py:145: SADeprecationWarning: Pool.add_listener is deprecated. Use event.listen()
self.add_listener(l)
1 10.0.0.0/29 None 10.0.0.3 None None 10 None e3c9cdd6-c5d6-44ea-b175-0bec082367d6
2 10.0.0.8/29 None 10.0.0.11 None None 100 None 162e6876-2803-4a28-b65a-8f9a6bcc9234
5、 创建虚拟机
VM02:/opt # nova list
+--------------------------------------+-------------+--------+-----------------+
| ID | Name | Status | Networks |
+--------------------------------------+-------------+--------+-----------------+
| 6f5aa2d6-74b5-480d-a0cc-2da59aa1761d | testVLAN10A | ACTIVE | test01=10.0.0.3 |
+--------------------------------------+-------------+--------+-----------------+
VM02:/opt # nova show testVLAN10A
+-------------------------------------+----------------------------------------------------------+
| Property | Value |
+-------------------------------------+----------------------------------------------------------+
| OS-DCF:diskConfig | MANUAL |
| OS-EXT-SRV-ATTR:host | VM01 |
| OS-EXT-SRV-ATTR:hypervisor_hostname | None |
| OS-EXT-SRV-ATTR:instance_name | instance-00000001 |
| OS-EXT-STS:power_state | 1 |
| OS-EXT-STS:task_state | None |
| OS-EXT-STS:vm_state | active |
| accessIPv4 | |
| accessIPv6 | |
| config_drive | |
| created | 2013-04-26T16:39:43Z |
| flavor | m1.tiny (1) |
| hostId | 6089f74bf1d8ddb3c1cadf2c62c006e0a87986a5c360d7c51874223f |
| id | 6f5aa2d6-74b5-480d-a0cc-2da59aa1761d |
| image | suse (aaac9037-1b15-4665-9f23-3f1a247a3def) |
| key_name | |
| metadata | {} |
| name | testVLAN10A |
| progress | 0 |
| status | ACTIVE |
| tenant_id | 819bed96bd2b41e9a517c2b8039b6eec |
| test01 network | 10.0.0.3 |
| updated | 2013-04-26T16:42:33Z |
| user_id | 69c3804e9f5e4fa182ce0d80552b3e83 |
+-------------------------------------+----------------------------------------------------------+
VM02:/opt #
6、 测试管理节点与虚拟机通信,并抓包。
VM02:/opt # ping 10.0.0.3
PING 10.0.0.3 (10.0.0.3) 56(84) bytes of data.
64 bytes from 10.0.0.3: icmp_seq=1 ttl=64 time=3.93 ms
64 bytes from 10.0.0.3: icmp_seq=2 ttl=64 time=2.21 ms
^C
--- 10.0.0.3 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1002ms
rtt min/avg/max/mdev = 2.215/3.072/3.930/0.859 ms
VM02:/opt #
附件10.0.0.2-10.0.0.3VLAN10.pcap为所抓包,可见ICMP包中打了VLAN10的tag