一、pc1给pc3发包的时候,怎么知道pc3的mac地址是?
通过arp,地址解析协议,pc1通过广播的形式,发出一个arp询问,1.1.1.3广播包所有电脑都能收到,pc3收到,我就是1.1.1.3,给pc1回消息
二、交换机,怎么知道mac地址对应哪个接口?
当交换机的某个接口,收到一个数据包,这个数据包有mac地址把数据包的源mac,和接收端口,做对应,更新mac地址表。
三、电脑多的时候,有大量的广播包,导致网络卡顿
用vlan技术,虚拟局域网,分割广播域。
pc1 IP:192.168.1.1 分配到vlan10
pc2 IP:192.168.1.2 分配到vlan10
pc3 IP:192.168.1.3 分配到vlan20
pc4 IP:192.168.1.4 分配到vlan20
让pc1和pc2在vlan10,pc3和pc4在vlan20
双击交换机,创建两个vlan
[Huawei]vlan 10
[Huawei-vlan10]vlan 20
接口access和trunk类型
access:只需要连接一个vlan的时候使用
trunk:连接多个vlan时使用
配置交换机接口0/0/1和0/0/2接口为vlan 10
配置交换机接口0/0/3和0/0/4接口为vlan 20
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type access //设置接口类型
[Huawei-GigabitEthernet0/0/1]port default vlan 10 //分配到vlan10接口
[Huawei-GigabitEthernet0/0/1]dis this //查询接口信息
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 10
#
同理0/0/2接口一样
[Huawei]int g0/0/2
[Huawei-GigabitEthernet0/0/2]port link-type access
[Huawei-GigabitEthernet0/0/2]port default vlan 10
[Huawei-GigabitEthernet0/0/2]dis this
0/0/3接口和0/0/4接口也一样
[Huawei]int g0/0/3
[Huawei-GigabitEthernet0/0/3]port link-type access
[Huawei-GigabitEthernet0/0/3]port default vlan 20
[Huawei-GigabitEthernet0/0/3]dis this
#
interface GigabitEthernet0/0/3
port link-type access
port default vlan 20
#
return
在配置华为的交换机路由器防火墙等时不时弹出日志同步信息来打断现在的操作,如
Sep 20 2023 16:15:08-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5
.25.191.3.1 configurations have been changed. The current change number is 8, th
e change loop count is 0, and the maximum number of records is 4095.
在系统视图上输入命令undo info-center enable就可以关闭日志同步,不会打断现在的操作,解决命令
[Huawei]undo info-center enable
查看vlan
[Huawei]dis vlan
The total number of vlans is : 3
--------------------------------------------------------------------------------
U: Up; D: Down; TG: Tagged; UT: Untagged;
MP: Vlan-mapping; ST: Vlan-stacking;
#: ProtocolTransparent-vlan; *: Management-vlan;
--------------------------------------------------------------------------------
VID Type Ports
--------------------------------------------------------------------------------
1 common UT:GE0/0/5(U) GE0/0/6(D) GE0/0/7(D) GE0/0/8(D)
GE0/0/9(D) GE0/0/10(D) GE0/0/11(D) GE0/0/12(D)
GE0/0/13(D) GE0/0/14(D) GE0/0/15(D) GE0/0/16(D)
GE0/0/17(D) GE0/0/18(D) GE0/0/19(D) GE0/0/20(D)
GE0/0/21(D) GE0/0/22(D) GE0/0/23(D) GE0/0/24(D)
10 common UT:GE0/0/1(U) GE0/0/2(U)
20 common UT:GE0/0/3(U) GE0/0/4(U)
VID Status Property MAC-LRN Statistics Description
--------------------------------------------------------------------------------
1 enable default enable disable VLAN 0001
10 enable default enable disable VLAN 0010
20 enable default enable disable VLAN 0020
查看pc1与pc2与pc1与pc3是否能通信
打开pc1的命令行
PC>ping 192.168.1.2
Ping 192.168.1.2: 32 data bytes, Press Ctrl_C to break
From 192.168.1.2: bytes=32 seq=1 ttl=128 time=46 ms
From 192.168.1.2: bytes=32 seq=2 ttl=128 time=31 ms
From 192.168.1.2: bytes=32 seq=3 ttl=128 time=31 ms
From 192.168.1.2: bytes=32 seq=4 ttl=128 time=31 ms
From 192.168.1.2: bytes=32 seq=5 ttl=128 time=32 ms
--- 192.168.1.2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 31/34/46 ms
PC>ping 192.168.1.3
Ping 192.168.1.3: 32 data bytes, Press Ctrl_C to break
From 192.168.1.1: Destination host unreachable
From 192.168.1.1: Destination host unreachable
From 192.168.1.1: Destination host unreachable
From 192.168.1.1: Destination host unreachable
From 192.168.1.1: Destination host unreachable
--- 192.168.1.3 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
上述来看,pc1与pc2正常通信,pc1与pc3不能正常通信(vlan实现了隔离,pc1和pc2在同一个vlan,pc1和pc3不在同一个vlan)
trunk接口的演示(还是上述的配置)
在交换机上面再加入一个交换机LSW2
LSW1交换机设置0/0/5接口为trunk和允许通过的vlan
[Huawei]int g0/0/5
[Huawei-GigabitEthernet0/0/5]port link-type trunk //设置接口类型为trunk
[Huawei-GigabitEthernet0/0/5]port trunk allow-pass vlan 10 20 //允许通过的vlan
[Huawei-GigabitEthernet0/0/5]dis this
#
interface GigabitEthernet0/0/5
port link-type trunk
port trunk allow-pass vlan 10 20
#
return
LSW2交换机0/0/1接口为trunk和允许通过的vlan
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]port link-type trunk //设置接口类型为trunk
[Huawei-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20 //允许通过的vlan
[Huawei-GigabitEthernet0/0/1]dis this
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10 20
#
return
在此基础上,连入两台电脑
pc5 IP:192.168.1.5 分配到vlan10
pc6 IP:192.168.1.6 分配到vlan20
同理设置LSW2交换机的0/0/2和0/0/3接口
[Huawei]int g0/0/2
[Huawei-GigabitEthernet0/0/2]port link-type access
[Huawei-GigabitEthernet0/0/2]port default vlan 10
[Huawei]int g0/0/3
[Huawei-GigabitEthernet0/0/2]port link-type access
[Huawei-GigabitEthernet0/0/2]port default vlan 20
测试pc5与pc2和pc5与pc3和pc5与pc6的网络连通性
PC>ping 192.168.1.2
Ping 192.168.1.2: 32 data bytes, Press Ctrl_C to break
From 192.168.1.2: bytes=32 seq=1 ttl=128 time=63 ms
From 192.168.1.2: bytes=32 seq=2 ttl=128 time=63 ms
From 192.168.1.2: bytes=32 seq=3 ttl=128 time=47 ms
From 192.168.1.2: bytes=32 seq=4 ttl=128 time=47 ms
From 192.168.1.2: bytes=32 seq=5 ttl=128 time=46 ms
--- 192.168.1.2 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 46/53/63 ms
PC>ping 192.168.1.3
Ping 192.168.1.3: 32 data bytes, Press Ctrl_C to break
From 192.168.1.5: Destination host unreachable
From 192.168.1.5: Destination host unreachable
From 192.168.1.5: Destination host unreachable
From 192.168.1.5: Destination host unreachable
From 192.168.1.5: Destination host unreachable
--- 192.168.1.3 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
PC>ping 192.168.1.6
Ping 192.168.1.6: 32 data bytes, Press Ctrl_C to break
From 192.168.1.5: Destination host unreachable
From 192.168.1.5: Destination host unreachable
From 192.168.1.5: Destination host unreachable
From 192.168.1.5: Destination host unreachable
From 192.168.1.5: Destination host unreachable
--- 192.168.1.6 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss
上述来看,pc5与pc2正常通信,pc5与pc3不能正常通信,pc5与pc6不能正常通信(vlan实现了隔离,pc1和pc2在同一个vlan,pc1和pc3不在同一个vlan,pc5和pc6不在同一个vlan)
pc5怎么知道pc1和pc2发的是vlan10还是vlan20
涉及到一个概念vlan标签(vlan tag),当pc5数据包经过trunk线路时,是携带vlan标签的,并能告诉其他交换机是什么vlan的
(s) received
100.00% packet loss
**上述来看,pc5与pc2正常通信,pc5与pc3不能正常通信,pc5与pc6不能正常通信(vlan实现了隔离,pc1和pc2在同一个vlan,pc1和pc3不在同一个vlan,pc5和pc6不在同一个vlan)**
### pc5怎么知道pc1和pc2发的是vlan10还是vlan20
涉及到一个概念vlan标签(vlan tag),当pc5数据包经过trunk线路时,是携带vlan标签的,并能告诉其他交换机是什么vlan的