Понимаю, что тема заезженная, по поиску нашел на форуме все подобное, но ... не фурычит млин...
Итак задача проста:
Схема: Cisco 3750 -> DES 3828 -> access (3016, 3052 и др.) Про Aceess пока забудем... Думаю, настрою позже аналогично...
Сначала пробуем создать транк и в нем два VLAN: управляющий (VLAN100) и магистральный (VLAN101). Сразу объясню в чем проблема: по магистральному VLAN101 трафик ходит, а вот по управляющему VLAN100 3828 не пингуется. Основная функция обоих свичей - маршрутизация. Cisco в ядре, 3828 в мкрайоне.
Конфиги:
Код:
C3750#sh run int vlan100
Building configuration...
Current configuration : 62 bytes
!
interface Vlan100
ip address 10.0.161.1 255.255.255.0
end
C3750#sh run int vlan101
Building configuration...
Current configuration : 65 bytes
!
interface Vlan101
ip address 172.16.1.13 255.255.255.252
end
C3750#sh int vlan 100
Vlan100 is down, line protocol is down
Hardware is EtherSVI, address is 001d.4579.e47e (bia 001d.4579.e47e)
Internet address is 10.0.161.1/24
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 0/255
Encapsulation ARPA, loopback not set
Keepalive not supported
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 packets output, 0 bytes, 0 underruns
0 output errors, 1 interface resets
0 output buffer failures, 0 output buffers swapped out
C3750#sh int vlan 101
Vlan101 is up, line protocol is up
Hardware is EtherSVI, address is 001d.4579.e47c (bia 001d.4579.e47c)
Internet address is 172.16.1.13/30
MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 0/255
Encapsulation ARPA, loopback not set
Keepalive not supported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:25, output 00:00:10, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
1969 packets input, 238393 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
84714 packets output, 46085504 bytes, 0 underruns
0 output errors, 1 interface resets
0 output buffer failures, 0 output buffers swapped out
C3750#sh int gi3/0/24 sw
Name: Gi3/0/24
Switchport: Enabled
Administrative Mode: trunk
Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Negotiation of Trunking: Off
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
Administrative Native VLAN tagging: enabled
Voice VLAN: none
Administrative private-vlan host-association: none
Administrative private-vlan mapping: none
Administrative private-vlan trunk native VLAN: none
Administrative private-vlan trunk Native VLAN tagging: enabled
Administrative private-vlan trunk encapsulation: dot1q
Administrative private-vlan trunk normal VLANs: none
Administrative private-vlan trunk associations: none
Administrative private-vlan trunk mappings: none
Operational private-vlan: none
Trunking VLANs Enabled: 100-102
Pruning VLANs Enabled: 2-1001
Capture Mode Disabled
Capture VLANs Allowed: ALL
Protected: false
Unknown unicast blocked: disabled
Unknown multicast blocked: disabled
Appliance trust: none
C3750#sh run int gi3/0/24
Building configuration...
Current configuration : 178 bytes
!
interface GigabitEthernet3/0/24
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 100-102
switchport mode trunk
switchport nonegotiate
no cdp enable
end
Теперь 3828:
Код:
Firmware: Build 4.50.B37
Copyright(c) 2008 D-Link Corporation. All rights reserved.
UserName:
PassWord:
DES-3800:admin#sh vlan
Command: show vlan
VID : 1 VLAN Name : default
VLAN TYPE : static Advertisement : Enabled
Member ports :
Static ports :
Current Tagged ports :
Current Untagged ports :
Static Tagged ports :
Static Untagged ports :
Forbidden ports :
VID : 100 VLAN Name : Men
VLAN TYPE : static Advertisement : Disabled
Member ports : 27
Static ports : 27
Current Tagged ports : 27
Current Untagged ports :
Static Tagged ports : 27
Static Untagged ports :
Forbidden ports :
VID : 101 VLAN Name : uplink
VLAN TYPE : static Advertisement : Disabled
Member ports : 27
Static ports : 27
Current Tagged ports : 27
Current Untagged ports :
Static Tagged ports : 27
Static Untagged ports :
Forbidden ports :
VID : 102 VLAN Name : in102
VLAN TYPE : static Advertisement : Disabled
Member ports : 1,27
Static ports : 1,27
Current Tagged ports : 1,27
Current Untagged ports :
Static Tagged ports : 1,27
Static Untagged ports :
Forbidden ports :
DES-3800:admin#sh ipif
IP Interface Settings
Interface Name : Men
IP Address : 10.0.161.2 (MANUAL)
Secondary : FALSE
Subnet Mask : 255.255.255.0
VLAN Name : Men
Admin. State : Enabled
Proxy ARP : Disabled
Link Status : Link UP
Member Ports : 27
Interface Name : System
IP Address : 10.90.90.90 (MANUAL)
Secondary : FALSE
Subnet Mask : 255.255.255.0
VLAN Name : default
Admin. State : Enabled
Proxy ARP : Disabled
Link Status : Link DOWN
Member Ports :
Interface Name : uplink
IP Address : 172.16.1.14 (MANUAL)
Secondary : FALSE
Subnet Mask : 255.255.255.252
VLAN Name : uplink
Admin. State : Enabled
Proxy ARP : Disabled
Link Status : Link UP
Member Ports : 27
Total Entries : 3
В такой конфигурации по VLAN101 пинги проходят, апдейты протоколов маршрутизации и тд приходят. Все ок.
А вот управление по VLAN100 недоступно. Почему то:
Код:
C3750#sh int vlan 100
Vlan100 is down, line protocol is down
Подскажите плиз...
PS Пробовал командой
Код:
switchport trunk native vlan 101
делать нативным магистральный VLAN101, но в этом случае вообще пропадает связь
