Inter-VLAN Configuration(Cisco IOL)

1. Inter-VLAN Configuration 구성도

1) Inter-VLAN Configuration 구성도

 

2) 테스트 장비

• Emulator : EVE-NG
• OS : Cisco IOL I86BI_LINUXL2-ADVENTERPRISEK9-M, Version 15.1c

 

 

2. Inter-VLAN Configuration

1) Inter-VLAN Configuration

< R1 : Routed Interface 설정 >
R1(config)#interface e0/0     
R1(config-if)#no switchport 

< R1 : Sub-Interface 설정 >
R1(config)#interface e0/0.10
R1(config-subif)#encapsulation dot1Q 10
R1(config-subif)#ip address 10.0.0.1 255.255.255.0
R1(config)#interface e0/0.20
R1(config-subif)#encapsulation dot1Q 20
R1(config-subif)#ip address 20.0.0.1 255.255.255.0

< SW1 : VLAN 10 생성 >
SW1(config)#vlan 10
SW1(config-vlan)#name VLAN10

< SW1 : VLAN 20 생성 >
SW1(config)#vlan 20
SW1(config-vlan)#name VLAN20

< SW1 : e0/0 Trunk Mode 설정 >
SW1(config)#interface e0/0
SW1(config-if)#switchport trunk encapsulation dot1q 
SW1(config-if)#switchport mode trunk 
SW1(config-if)#switchport trunk allowed vlan 10,20

< SW1 : e0/1 Access Mode 설정 >
SW1(config)#interface e0/1
SW1(config-if)#switchport mode access 
SW1(config-if)#switchport access vlan 10

< SW1 : e0/2 Access Mode 설정 >
SW1(config)#interface e0/2
SW1(config-if)#switchport mode access 
SW1(config-if)#switchport access vlan 20

R1#show ip route | begin Gateway
Gateway of last resort is not set

      10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        10.0.0.0/24 is directly connected, Ethernet0/0.10
L        10.0.0.1/32 is directly connected, Ethernet0/0.10
      20.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        20.0.0.0/24 is directly connected, Ethernet0/0.20
L        20.0.0.1/32 is directly connected, Ethernet0/0.20

SW1#show vlan

VLAN Name                             Status    Ports
---- -------------------------------- --------- -------------------------------
1    default                          active    Et0/3
10   VLAN10                           active    Et0/1
20   VLAN20                           active    Et0/2

SW1#show interfaces trunk 

Port        Mode             Encapsulation  Status        Native vlan
Et0/0       on               802.1q         trunking      1

Port        Vlans allowed on trunk
Et0/0       10,20

Port        Vlans allowed and active in management domain
Et0/0       10,20

Port        Vlans in spanning tree forwarding state and not pruned
Et0/0       10,20

• VLAN Tag 인식 및 게이트웨이 분리를 위해 Sub-Interface를 설정

 

2) Inter-VLAN 통신 확인

• SW1의 Access Mode인 포트로 Import할 때, 포트에 설정한 10번 Tag를 Frame에 추가
• SW1의 Trunk Mode인 포트로 Export할 때, 포트에 설정한 10번 Tag가 Frame에 존재하므로 Tag 유지
• R1은 Frame에 존재하는 10번 Tag가 설정된 Sub-Interface가 있는지 확인하고 D-IP가 본인 Sub-Interface가 아님을 확인하고 라우팅 테이블에서 Longest Match Rule에 의해 매칭되는 Next-Hop(OIF)으로 Sub-Interface에 설정된 VLAN 20번 Tag를 붙이고 전송
• SW1의 Trunk Mode인 포트로 Import할 때, 포트에 설정한 20번 Tag가 Frame에 존재하므로 Tag 유지
• SW1의 Access Mode인 포트로 Export할 때, 포트에 설정한 20번 Tag를 Frame에서 제거

 

• SW2의 Access Mode인 포트로 Import할 때, 포트에 설정한 20번 Tag를 Frame에 추가
• SW2의 Trunk Mode인 포트로 Export할 때, 포트에 설정한 20번 Tag가 Frame에 존재하므로 Tag 유지
• R1은 Frame에 존재하는 20번 Tag가 설정된 Sub-Interface가 있는지 확인하고 D-IP가 본인 Sub-Interface가 아님을 확인하고 라우팅 테이블에서 Longest Match Rule에 의해 매칭되는 Next-Hop(OIF)으로 Sub-Interface에 설정된 VLAN 10번 Tag를 붙이고 전송
• SW1의 Trunk Mode인 포트로 Import할 때, 포트에 설정한 10번 Tag가 Frame에 존재하므로 Tag 유지
• SW1의 Access Mode인 포트로 Export할 때, 포트에 설정한 10번 Tag를 Frame에서 제거