calledvlan官网
vlan官网 时间:2021-05-07 阅读:(
)
VLANinMikroTikByMohammedKhomeiniBinABUMUMIndonesia,2013AboutPresentationTohelpyouunderstandfundamentalofVirtualLocalAreaNetwork(VLAN)andimplementationinMikroTikrouterToexplainafewexampleofimplementationinsiteToshowexamplerunningVLANinseveralMikroTikrouters2AboutMe.
.
MohammedKhomeiniBinAbuMikroTikCertifiedEngineer(MTCINE,MTCRE,MTCWE,MTCTCE,MTCUME)MikroTikCertifiedTrainer(TR0204)MikroTikCertifiedAcademyTrainer(ACTR0062)NetworkConsultant3ContentIntroductionVLANImplementationConclusion4INTRODUCTIONTOVLAN5VirtualLANs–WHAT(1)MostcommonlyusedprotocolforVLANonanethernetnetworkis802.
1QItinsert4bytetagintoastandardethernetframeWorkingatDataLinkLayer(OSILayer2)MaximumnumberofVLANinoneinterfaceis40956VirtualLANs–WHAT(2)EachVLANsistreatedasseparatesubnet/broadcastdomain.
DevicesonaVLANarerestrictedtoonlycommunicatingwithdevicesthatareontheirownVLANMikroTikalsosupportVlanoverVlan/802.
1QinQ/802.
1ad7VirtualLANs–WHY(1)Providesegmentation8VirtualLANs–WHY(2)MultipleLANinasinglephysicalinterfaceMakethelocalnetworkmoresimpleMultiplebroadcastdomaininasinglephysicalinterfaceVLANscanincreasesecurityandmanagementofdifferentnetworkinonesingleinterfacePriority9VirtualLANs-ParameterEdgeports:(Untagged,inCisco:calledAccessPort)SwitchportthatconfigureasapartofthevlanThisportnotsend4bytevlantag.
UsedfordevicethatnotpasstheVLAN,likecomputer,printer,server,etc.
Coreport:(Tagged,inCisco:TrunkPort)Switchportconfiguredtosend4byteormoreVLANtag.
UsedfordevicethatsupportVLANtechnologieslikeswitches,manageableswitch,routers,etc.
1011VirtualLANsinMikroTik(1)InRouterOS,VLANcanbeimplementedinswitchenvironmentandinrouterenvironmentsimultaneously.
AlsopossibletorunVLANinwirelessorbridgeinterfaceItisnotpossibletohaveVLANputonawirelessinterfaceinastationmodeFILOVLANtaggedisusedfor802.
1QinQimplementation12VirtualLANsinMikroTik(2)TocreatevlaninMikroTik,youshouldhavetheinterfacefirst(ifyouwanttoimplementinbridgeinterface)VLANID=uniqueInterfacefortrunk/access13802.
1QFlowChartinRouterOSStartAccept802.
1QCreatetrunkbridgeAddport(interface)totrunkbridgeCreatevlanontrunkinterfaceCreateaccessport11CreateaccessbridgeAddport(interface)andvlantoaccessbridgeCreateIPaddressandDHCPsetupatVlaninterfaceCreateDHCP-serverCreateDHCP-serverCreatevlanontrunkinterfaceFinish222YESYESYESYESNONONONOCreatedByMohammedKhomeiniAbu14VIRTUALLANSIMPLEMENTATION15HowVirtualLANsimplementedin:Smallnetwork(SOHO)Mediumnetwork(SME)WirelessnetworkTunneling16VirtualLANs–SoHo(1)Haveonlysinglerouterandsingle/multimanagedswitchCreate2VLANinMikroTikrouterVlan-100=officeVlan-200=wifi17VirtualLANs–SoHo(2)PublicInterface18VirtualLANs–SoHo(3)R1ConfigurationIPAddress,SubnetMask,DefaultGatewayandmasqueradeisconfiguredatether1Tobeabletoforwardtaggedpacket,weneedtocreatetrunkbridgeAddport(interface)thatyouwanttoforwardtheVLANinthetrunkbridge(atleast1port)AddVLANontrunkinterface(bridge-trunk)[admin@R1]>interfacevlanaddname=vlan-100interface=bridge-trunkvlan-id=100[admin@R1]>interfacevlanaddname=vlan-200interface=bridge-trunkvlan-id=200[admin@R1]>interfacebridgeaddname=bridge-trunkprotocol-mode=rstp[admin@R1]>interfacebridgeportaddinterface=ether5bridge=bridge-trunk19VirtualLANs–SoHo(4)CreateIPAddressforVLANCreateDHCPsetupforinterfacevlan-100andvlan-200withpublicDNS(8.
8.
8.
8and8.
8.
4.
4)Connectmanagedswitchintointerface=ether5Configuremanagedswitchasdesired[admin@R1]>ipaddressaddaddress=192.
168.
100.
1/24interface=vlan-100[admin@R1]>ipaddressaddaddress=192.
168.
200.
1/24interface=vlan-20020QUIZFrom21VirtualLANs–SME(1)YouhavemorethanonerouterCreate3VLANinMikroTikrouterVlan-100=officeVlan-200=wifiVlan-230=voip22VirtualLANs–SME(2)PublicInterface23VirtualLANs–SME(3)R1ConfigurationIPAddress,SubnetMask,DefaultGatewayandmasqueradeisconfiguredatether1Tobeabletoforwardtaggedpacket,weneedtocreatetrunkbridgeAddport(interface)thatyouwanttoforwardtheVLANinthetrunkbridge[admin@R1]>interfacebridgeaddname=bridge-trunkprotocol-mode=rstp[admin@R1]>interfacebridgeportaddinterface=ether2bridge=bridge-trunk[admin@R1]>interfacebridgeportaddinterface=ether5bridge=bridge-trunk24VirtualLANs–SME(4)AddVLANontrunkinterface(bridge-trunk)Tocreateaccessport,createaccessbridgeinterfacefirst.
ThenaddaccessportinterfaceandVLANintotheaccessbridge[admin@R1]>interfacevlanaddname=vlan-100interface=bridge-trunkvlan-id=100[admin@R1]>interfacevlanaddname=vlan-200interface=bridge-trunkvlan-id=200[admin@R1]>interfacevlanaddname=vlan-230interface=bridge-trunkvlan-id=230[admin@R1]>interfacebridgeportaddinterface=ether4bridge=bridge-vlan-230[admin@R1]>interfacebridgeportaddinterface=vlan-230bridge=bridge-vlan-230[admin@R1]>interfacebridgeaddname=bridge-vlan-23025VirtualLANs–SME(5)CreateIPAddressCreateDHCPsetupforinterfacevlan-100,vlan-200,andvlan-230withpublicdns(8.
8.
8.
8and8.
8.
4.
4)Connectmanagedswitchintointerface=ether2Configuremanagedswitchasdesired[admin@R1]>ipaddressaddaddress=192.
168.
100.
1/24interface=vlan-100[admin@R1]>ipaddressaddaddress=192.
168.
200.
1/24interface=vlan-200[admin@R1]>ipaddressaddaddress=192.
168.
230.
1/24interface=vlan-23026VirtualLANs–SME(6)R2ConfigurationCreatebridgeinterfaceAddinterfacethatwewanttoforwardtagged(trunk)packettobridge-trunkinterfaceConnectmanagedswitchintointerface=ether2Configuremanagedswitchasdesired[admin@R2]>interfacebridgeaddname=bridge-trunk[admin@R2]>interfacebridgeportaddinterface=ether2bridge=bridge-trunk[admin@R2]>interfacebridgeportaddinterface=ether5bridge=bridge-trunk27VirtualLANs–Wireless(1)PublicInterface28VirtualLANs–Wireless(2)R1ConfigurationIPAddress,SubnetMask,DefaultGatewayandmasqueradeisconfiguredatether1Tobeabletoforwardtaggedpacket,weneedtocreatetrunkbridgeAddport(interface)thatyouwanttoforwardtheVLANinthetrunkbridge(atleast1port)[admin@R1]>interfacebridgeaddname=bridge-trunkprotocol-mode=rstp[admin@R1]>interfacebridgeportaddinterface=ether5bridge=bridge-trunk29VirtualLANs–Wireless(3)AddVLANontrunkinterface(bridge-trunk)CreateIPAddressCreateDHCPsetupforinterfacevlan-100andvlan-200withpublicdns(8.
8.
8.
8and8.
8.
4.
4)[admin@R1]>ipaddressaddaddress=192.
168.
100.
1/24interface=vlan-100[admin@R1]>ipaddressaddaddress=192.
168.
200.
1/24interface=vlan-200[admin@R1]>interfacevlanaddname=vlan-100interface=bridge-trunkvlan-id=100[admin@R1]>interfacevlanaddname=vlan-200interface=bridge-trunkvlan-id=20030VirtualLANs–Wireless(4)R2andR3ConfigurationCreatebridgeinterfaceAddinterfacethatwewanttoforwardtagged(trunk)packettobridge-trunkinterfaceConfigureWirelessinterfaceasap-bridge(forR3,wirelessinterfaceisconfiguredasmode=station-bridge)InR3,connectmanagedswitchintointerface=ether1andconfiguremanagedswitchasdesired[admin@R1]>interfacewirelesssetwlan1mode=ap-bridgedisabled=no[admin@R2]>interfacebridgeaddname=bridge-trunk[admin@R2]>interfacebridgeportaddinterface=ether1bridge=bridge-trunk[admin@R2]>interfacebridgeportaddinterface=wlan1bridge=bridge-trunk31VirtualLANsoverPPTP(1)RouterOSsupportedbridgethroughPointtoPointTunnelProtocol(PPTP)usingBCP(BridgeControlProtocol).
BCPallowstobridgeethernetpacketthroughPPPlinkToimplementVLANoverPPTPtunnel,weshoulduseBCPandMLPPPfeaturetoforwardpacketbetweensegment/subnet.
32VirtualLANs–PPTP(2)R1willbecomedhcp-serverforvlan-100andvlan-200R4willforwarduntaggedpackettoether5forclientCreatePPTPServer(R1)andclient(R4)33VirtualLANsoverPPTP(3)MakesurethereisaroutingbetweenR1toR4R1ConfigurationIPAddress,SubnetMask,DefaultGatewayandmasqueradeisconfiguredatether2CreatebridgeinterfaceAddport(interface)thatyouwanttoforwardtheVLANinthetrunkbridge(atleast1port)[admin@R1]>interfacebridgeaddprotocol-mode=rstpname=bridge-pptp[admin@R1]>interfacebridgeportaddinterface=ether5bridge=bridge-pptp34VirtualLANsoverPPTP(4)AddVLANontrunkinterface(bridge-pptp)CreateIPAddressCreateDHCPsetupforinterfacevlan-100andvlan-200withpublicDNS(8.
8.
8.
8and8.
8.
4.
4)[admin@R1]>interfacevlanaddname=vlan-100interface=bridge-pptpvlan-id=100[admin@R1]>interfacevlanaddname=vlan-200interface=bridge-pptpvlan-id=200[admin@R1]>ipaddressaddaddress=192.
168.
100.
1/24interface=vlan-100[admin@R1]>ipaddressaddaddress=192.
168.
200.
1/24interface=vlan-20035VirtualLANsoverPPTP(5)CreatePPTP-ServerwithBCPandMLPPPenabledR4ConfigurationCreatebridgeinterfaceAddinterfacethatwewanttoforwardtagged(trunk)packettobridge-trunkinterface[admin@R1]>pppprofileaddbridge=bridge1name=pptp-bridge[admin@R1]>interfacepptp-serverserversetenabled=yesdefault-profile=pptp-bridge\[admin@R1]>mrru=5000[admin@R1]>pppsecretaddname=pptp-userpassword=1234profile=pptp-bridge\[admin@R1]>local-address=1.
1.
1.
1remote-address=2.
2.
2.
2[admin@R4]>interfacebridgeaddprotocol-mode=rstpname=bridge-pptp[admin@R4]>interfacebridgeportaddinterface=ether5bridge=bridge-pptp36VirtualLANsoverPPTP(6)CreatePPTP-ServerwithBCPandMLPPPenabledConnectmanagedswitchintointerface=ether5Configuremanagedswitchasdesired[admin@R4]>pppprofileaddbridge=bridge-pptpname=pptp-bridge[admin@R4]>interfacepptp-clientaddconnect=192.
168.
12.
1user=pptp-user\[admin@R4]>password=1234profile=pptp-bridgemrru=5000disabled=no[admin@R4]>37CONCLUSION38ConclusionAllVLANshouldbeputinbridgeinterfaceasitiseasytomanipulatewhetheritisatrunkportoranaccessport.
ThedisadvantageiswecreatemoreheaderondatalinklayerWhenyoudon'tenableMLPPPinPPPtunnel,youstillcanuseinternetbutslow,causethepackethasbeenfragmented.
Inwirelessmode,shoulduseotherthanmode=stationRememberflowchart39References1.
wiki.
mikrotik.
com2.
CiscoCCNAmodules3.
Vlanworkshop,www.
roamingnet.
com4.
id-networkers.
com5.
www.
mikrotik.
co.
id40CredittoMr.
RofiqFauziMr.
PujoDewobrotoMr.
GatotWibowoHamisenoMr.
HerryDarmawanMr.
MatDawamAbasMikroTikTeam41MohammedKhomeiniBinAbukhomeini1980@gmail.
com+6013-7221134(whatsapp)42
搬瓦工vps(bandwagonhost)现在面向中国大陆有3条顶级线路:美国 cn2 gia,香港 cn2 gia,日本软银(softbank)。详细带宽是:美国cn2 gia、日本软银,都是2.5Gbps~10Gbps带宽,香港 cn2 gia为1Gbps带宽,搬瓦工是目前为止,全球所有提供这三种带宽的VPS(云服务器)商家里面带宽最大的,成本最高的,没有第二家了! 官方网站:https...
六一云 成立于2018年,归属于西安六一网络科技有限公司,是一家国内正规持有IDC ISP CDN IRCS电信经营许可证书的老牌商家。大陆持证公司受大陆各部门监管不好用支持退款退现,再也不怕被割韭菜了!主要业务有:国内高防云,美国高防云,美国cera大带宽,香港CTG,香港沙田CN2,海外站群服务,物理机,宿母鸡等,另外也诚招代理欢迎咨询。官网www.61cloud.net最新直销劲爆...
Megalayer 商家主营业务是以独立服务器和站群服务器的,后来也陆续的有新增香港、菲律宾数据中心的VPS主机产品。由于其线路的丰富,还是深受一些用户喜欢的,有CN2优化直连线路,有全向国际线路,以及针对欧美的国际线路。这次有看到商家也有新增美国机房的VPS主机,也有包括15M带宽CN2优化带宽以及30M带宽的全向线路。Megalayer 商家提供的美国机房VPS产品,提供的配置方案也是比较多,...
vlan官网为你推荐
支持ipaddangersbitasp.net什么叫ASP.NET?波音737起飞爆胎飞机会爆胎的吗?河南省全民健康信息平台建设指引(试行)正大天地网二三线城市适合做生鲜b2b电商吗zhuo爱timi什么意思青岛网通测速中国联通宽带,青岛地区咋样,与网通有啥区别免费代理加盟哪有免费的代理可以做的?灌水机谁知道哪个好点的灌水机的地址?
免费云主机 域名注册查询 中文域名 查询域名 t牌 韩国空间 godaddy续费优惠码 68.168.16.150 国外空间 12306抢票助手 ibrs 腾讯实名认证中心 国外代理服务器软件 服务器合租 空间合租 百度云1t 电信托管 联通网站 国外在线代理服务器 免费蓝钻 更多