Ero sivun ”VLAN-silta” versioiden välillä
Siirry navigaatioon
Siirry hakuun
(Ak: Uusi sivu: (TODO) /etc/network/interfaces: auto lo iface lo inet loopback # The primary network interface allow-hotplug eth0 allow-hotplug eth1 iface eth0 inet static iface...) |
Ei muokkausyhteenvetoa |
||
| Rivi 1: | Rivi 1: | ||
(TODO) | (TODO) | ||
== Esimerkki VLAN-siltauksesta == | |||
* VLAN 111 - LAN 192.168.0.0/24 | |||
* VLAN 222 - WLAN 192.168.1.0/24 | |||
* VLAN 333 - Pelkkä ADSL-modeemi kytkimessä | |||
* VLAN 444 - Koneet, jotka pääsevät suoraan nettiin VLAN:in 333 kautta | |||
Kytkinasetukset | |||
Procurve #1 | |||
{| | |||
|- | |||
! Port | |||
! Frame Type | |||
! PVID | |||
! Kommentti | |||
|- | |||
| 1 | |||
| All | |||
| 111 | |||
| Jokin LAN-kone | |||
|- | |||
| 2 | |||
| All | |||
| 111 | |||
| Jokin LAN-kone | |||
|- | |||
| 3 | |||
| All | |||
| 111 | |||
| Jokin LAN-kone | |||
|- | |||
| 4 | |||
| All | |||
| 111 | |||
| Jokin LAN-kone | |||
|- | |||
| 5 | |||
| Tagged | |||
| None | |||
| Linux-reititin eth0 | |||
|- | |||
| 6 | |||
| Tagged | |||
| None | |||
| Linux-reititin eth1 | |||
|- | |||
| 7 | |||
| All | |||
| 333 | |||
| ADSL Modem | |||
|- | |||
| 8 | |||
| Tagged | |||
| None | |||
| Procurve #2 | |||
|} | |||
{| | |||
! VLAN ID | |||
! VLAN Members | |||
|- | |||
|1 | |||
|None | |||
|- | |||
|10 | |||
|8 | |||
|- | |||
|111 | |||
|1,2,3,4,5,8 | |||
|- | |||
|222 | |||
|5,8 | |||
|- | |||
|333 | |||
|6,7 | |||
|- | |||
|444 | |||
|5,8 | |||
|} | |||
Procurve #2 | |||
{| | |||
|- | |||
! Port | |||
! Frame Type | |||
! PVID | |||
! Kommentti | |||
|- | |||
| 1 | |||
| Tagged | |||
| None | |||
| Procurve #1 | |||
|- | |||
| 2 | |||
| All | |||
| 222 | |||
| WLAN-reititin | |||
|- | |||
| 3 | |||
| All | |||
| 444 | |||
| Kone, mikä on suorassa nettiyhteydessä | |||
|- | |||
| 4 | |||
| All | |||
| 111 | |||
| Jokin LAN-kone | |||
|- | |||
| 5 | |||
| All | |||
| 111 | |||
| Jokin LAN-kone | |||
|- | |||
| 6 | |||
| All | |||
| 111 | |||
| Jokin LAN-kone | |||
|- | |||
| 7 | |||
| All | |||
| 111 | |||
| Jokin LAN-kone | |||
|- | |||
| 8 | |||
| All | |||
| 111 | |||
| Jokin LAN-kone | |||
|} | |||
{| | |||
! VLAN ID | |||
! VLAN Members | |||
|- | |||
|1 | |||
|None | |||
|- | |||
|10 | |||
|1 | |||
|- | |||
|111 | |||
|1,4,5,6,7,8 | |||
|- | |||
|222 | |||
|1,2 | |||
|- | |||
|333 | |||
|1,3 | |||
|} | |||
Linux-reitittimen asetukset: | |||
/etc/network/interfaces: | /etc/network/interfaces: | ||
| Rivi 60: | Rivi 217: | ||
bridge_ports eth0.222 | bridge_ports eth0.222 | ||
bridge_stp on | bridge_stp on | ||
/etc/sysctl.conf | |||
Lisää tai muokkaa rivi muotoon | |||
net.ipv4.conf.default.forwarding=1 | |||
Versio 5. heinäkuuta 2008 kello 03.13
(TODO)
Esimerkki VLAN-siltauksesta
- VLAN 111 - LAN 192.168.0.0/24
- VLAN 222 - WLAN 192.168.1.0/24
- VLAN 333 - Pelkkä ADSL-modeemi kytkimessä
- VLAN 444 - Koneet, jotka pääsevät suoraan nettiin VLAN:in 333 kautta
Kytkinasetukset
Procurve #1
| Port | Frame Type | PVID | Kommentti |
|---|---|---|---|
| 1 | All | 111 | Jokin LAN-kone |
| 2 | All | 111 | Jokin LAN-kone |
| 3 | All | 111 | Jokin LAN-kone |
| 4 | All | 111 | Jokin LAN-kone |
| 5 | Tagged | None | Linux-reititin eth0 |
| 6 | Tagged | None | Linux-reititin eth1 |
| 7 | All | 333 | ADSL Modem |
| 8 | Tagged | None | Procurve #2 |
| VLAN ID | VLAN Members |
|---|---|
| 1 | None |
| 10 | 8 |
| 111 | 1,2,3,4,5,8 |
| 222 | 5,8 |
| 333 | 6,7 |
| 444 | 5,8 |
Procurve #2
| Port | Frame Type | PVID | Kommentti |
|---|---|---|---|
| 1 | Tagged | None | Procurve #1 |
| 2 | All | 222 | WLAN-reititin |
| 3 | All | 444 | Kone, mikä on suorassa nettiyhteydessä |
| 4 | All | 111 | Jokin LAN-kone |
| 5 | All | 111 | Jokin LAN-kone |
| 6 | All | 111 | Jokin LAN-kone |
| 7 | All | 111 | Jokin LAN-kone |
| 8 | All | 111 | Jokin LAN-kone |
| VLAN ID | VLAN Members |
|---|---|
| 1 | None |
| 10 | 1 |
| 111 | 1,4,5,6,7,8 |
| 222 | 1,2 |
| 333 | 1,3 |
Linux-reitittimen asetukset:
/etc/network/interfaces:
auto lo
iface lo inet loopback
# The primary network interface
allow-hotplug eth0
allow-hotplug eth1
iface eth0 inet static
iface eth1 inet static
auto vlan111
auto vlan222
auto vlan333
auto vlan444
auto br0
auto br1
auto br2
# LAN
iface vlan111 inet static
vlan_raw_device eth0
# WLAN
iface vlan222 inet static
vlan_raw_device eth0
# ADSL Modem
iface vlan333 inet static
vlan_raw_device eth1
# Internet
iface vlan444 inet static
vlan_raw_device eth0
# LAN bridge
iface br0 inet static
address 192.168.0.1
netmask 255.255.255.0
bridge_ports eth0.111
bridge_stp on
# Internet bridge
iface br1 inet static
address x.x.x.x
netmask x.x.x.x
gateway x.x.x.x
bridge_ports eth1.333 eth0.444
bridge_stp on
post-up iptables -t nat -A POSTROUTING -o br1 -j MASQUERADE
pre-down iptables -t nat -D POSTROUTING -o br1 -j MASQUERADE
# WLAN bridge
iface br2 inet static
address 192.168.1.1
netmask 255.255.255.0
bridge_ports eth0.222
bridge_stp on
/etc/sysctl.conf Lisää tai muokkaa rivi muotoon
net.ipv4.conf.default.forwarding=1