《分析VLAN技术概念及划分方法》由会员分享，可在线阅读，更多相关《分析VLAN技术概念及划分方法（12页珍藏版）》请在金锄头文库上搜索。
1、 分析VLAN技术概念及划分方法一、VLAN技能概述A, VLAN skills summaryVLAN(Virtual Local Area Network)也就是虚拟局域网，是一种建立在交流技能根底之上的，经过将局域网内的机器设备逻辑地而不是物理地区分红一个个不一样的网段，以软件办法完成逻辑作业组的区分与办理的技能。VLAN的作用是使得同一VLAN中的成员间能够彼此通讯，而不一样VLAN之间则是彼此阻隔的，不一样的VLAN间的若是要通讯就要经过必要的路由设备。VLAN ( Virtual Local Area Network ) is a virtual local area networ
2、k, is a kind of built on the foundation of communication skills, after the equipment will be LAN logical rather than physical area into a different network segment, complete the distinction between logical operations group in software way and management skills. The role of VLAN is to make the member
3、s in the same VLAN can communicate with each other, and not the same between VLAN is another barrier, not the same between VLAN if communication is about to pass routing equipment necessary.二、 VLAN的长处Two, the strengths of VLAN（一）能够操控网络播送( a ) to be able to control the network broadcast在没有运用VLAN技能的局域
4、网内的整个网络都是播送域，这样就使得网内的一台设备宣布网络播送时，在局域网内的任何一台设备的接口都能接收到播送，因而当网络内的设备越来越多时，网络上的播送也就越来越多，占用的时刻和资源也就越来越多，当播送多到必定的数量时，就会影响到正常的信息的传送。这样就能致使信息推迟，严峻的能够形成网络的瘫痪、阻塞，严峻的影响了正常的网络运用，这就是所谓的网络风暴。In the absence of the use of VLAN skills LAN the entire network are broadcast domain, which makes a device within the netwo
5、rk announced that the network broadcast, any equipment in the LAN interface can receive the broadcast, so when the equipment more and more within the network, the network is more and more. Take time and resources, also more and more, when the broadcast to certain quantity, delivery will affect the n
6、ormal information. This can cause information delay, serious can block paralysis, forming network, serious influence the network using the normal, it is called the network storm.在运用了VLAN技能的局域网中，缩小了播送的播送域，在一个VLAN中的播送风暴也不会影响到其他的VLAN，然后有效地削减了播送风暴对局域网网络的影响。In the use of the VLAN technology in LAN, reduc
7、e the broadcast broadcast domain, in a VLAN broadcast storm will not affect the other VLAN, and effectively reduce the influence of LAN network broadcast storm.（二）增强了网络的安全性( two ) and improve the security of the network在局域网中运用VLAN技能能够把彼此通讯比拟频频的用户区分到同一个VLAN中，这样在同一个作业组中的信息传输只在同一个组内播送，然后也减轻了因播送包被截获而致使的
8、信息走漏，增强了网络的安全性。The use of VLAN skills to communicate with each other more frequently users distinguish to the same VLAN in the LAN, so that in the same working group in the transmission of information is sent only in the same group, and also reduce the leakage causes for broadcast packets intercepte
9、d information, enhance network security.（三）简化网络办理员的办理作业( three ) operation for simplified network administrator.在运用VLAN技能后网络办理员就能够轻松的办理网络，灵敏构建虚拟作业组。用VLAN能够区分不一样的用户到不一样的作业组，同一作业组的用户也不用局限于某一固定的物理规划，网络构建和保护更便利灵敏。Network management can easily in the use of VLAN technology network administrator, sensitiv
10、e to construct virtual working group. To distinguish between different users to the working group is not the same with VLAN, the same work group of users is not limited to a fixed physical planning, network construction and protection is more convenient and sensitive.三、 VLAN的区分办法Three, the VLAN divi
11、sion way（一）依据端口来区分VLAN( a ) to distinguish between VLAN based on port许多VLAN厂商都运用交流机的端口来区分VLAN成员。被设定的端口都在同一个播送域中。例如，一个交流机的1，2，3，4，5端口被界说为虚拟网AAA，同一交流机的6，7，8端口组成虚拟网BBB。这样做答应各端口之间的通讯，并答应同享型网络的晋级。可是，这种区分形式将虚拟网约束在了一台交流机上。Many VLAN vendors are using AC machine port to distinguish VLAN members. Is a set of
12、ports that are in the same broadcast domain. For example, an AC machine 1, 2, 3, 4, 5 port is defined as a virtual network of AAA, the same exchange 6, 7, 8 port virtual network BBB. It promised to communication between the various ports, and promised to share the network promotion. However, the for
13、m of virtual network constraints in an AC machine.第二代端口VLAN技能答应跨过多个交流机的多个不一样端口区分VLAN，不一样交流机上的若干个端口能够组成同一个虚拟网。The second generation port VLAN skills promised across multiple AC machine multiple different ports to distinguish the VLAN, not the same number of ports communication machine can form a virt
14、ual network.以交流机端口来区分网络成员，其装备进程简单明了。因而，从当前来看，这种依据端口来区分VLAN的办法仍然是最常用的一种办法。不足之处是不行灵敏，当一台机器设备需求从一个端口移动到另一个新的端口，可是新端口与旧端口不在同一个VLAN之中时，要修正端口的VLAN设置，或在用户核算机上重新装备网络地址，这样才能使这台设备加入到新的VLAN。In AC machine port to distinguish between members of the network equipment, the process is simple and clear. Therefore, f
15、rom the current point of view, according to the port to distinguish VLAN still is a kind of the most widely used method. The deficiency is not sensitive, when a machine equipment needs to move from one port to another new port, but the new port and the old port is not in the same VLAN, amendments to
16、 the port VLAN settings, or in the user accounting machine to equipment network address, so that we can make it equipment is added to the new VLAN.（二）依据MAC地址区分VLAN( two ) based on the MAC address to distinguish VLAN这种区分VLAN办法的最大长处就是当用户物理方位移动时，即从一个交流机换到其他的交流机时，就无需对它进行重新装备，主动把它添加到相应的VLAN中。所以，能够以为这种依据MAC地址的区分办法是依据用户的VLAN。这种办法的缺陷是不行快捷，初始化时，一切的用户都必须进行装备，若是有几百个乃至上千个用户的话，装备作业就显得适当的繁琐，并且由于需求盯梢设备内的MAC
