Tarmoq xavfsizligi

VLAN lar o‘rtasida marshrutizatsiyani sozlash
Lokal tarmoqda yaratilgan VLAN lar o‘rtasida marshrutizatsiyani sozlashning 3 xil usuli mavjud:

• Demonstrating the legacy inter-VLAN routing.

  
  

• Router-on-a-Stick

  
  

• Switch Based Inter Vlan Routing

  
  

Bu Laboratoriya ishida VLAN lar o‘rtasida marshrutizatsiyani Router-on-a-stick (ROS) usulidan foydalanamiz.

6.3-rasm. VLAN o‘rtasida marshrutizatsiyalashning ROS usuli


Sw1(config)#interface fastEthernet 0/8
Sw1(config-if)#switchport mode trunk


Router>enable
Router#conf t
Router(config)#interface fastEthernet 0/1
Router(config-if)#no shutdown
Router(config)#interface fastEthernet 0/1.10
Router(config-subif)#encapsulation dot1Q 10
Router(config-subif)#ip address 192.168.10.254 255.255.255.0
Router(config-subif)#exit
Router(config)#interface fastEthernet 0/1.20
Router(config-subif)#encapsulation dot1Q 20
Router(config-subif)#ip address 192.168.20.254 255.255.255.0
Router(config-subif)#exit
Router(config)#interface fastEthernet 0/1.30
Router(config-subif)#encapsulation dot1Q 30

Router(config-subif)#ip address 192.168.30.254 255.255.255.0
Router(config-subif)#exit

2 - topshiriq bo`yicha qisqacha nazariy ma’lumot
VTP (ingliz. VLAN Trunking Protocol) - lokal hisoblash tarmog`i protokoli bo`lib, tanlangan trank portda VLAN haqida axborot almashish uchun xizmat qiladi. VTP – vlan larni dinamik tarzda sinxronizatsiyalash uchun ishlatiladi;

3 xil rejimi mavjud:

1.Client – VLAN larni o`zgartirish, o`chirish, yaratish mumkin emas;
2.Transparent – bunda, switch da sinxronizatsiya amalga oshirilmaydi, switch faqat o`tkazuvchi vazifasini bajaradi;
3. Server – VLAN bilan istalgan funktsiyalarni bajarish mumkin;
Vtp serverda vlan yaratiladi Clientlar avtomatik serverda yaratilgan VLAN larni qabul qiladi. Xavfsizlik ta ‘minlash maqsadida bu protokolda Client switch vlan yarata olmaydi, faqat foydalanuvchilarni o`zlariga biriktira oladi. Tarmoqda qandaydir o’zgarish yuz bersa (masalan yangi vlan qo`shilishi yoki olib tashlash) faqat VTP server orqali amalga oshiriladi.
VTP-da uchta xabar turi mavjud:
1. Advertisement requests
Summary Advertisement Alert uchun mijozdan serverga so'rov taqdim etadi
2. Summary advertisements
Ushbu standart xabar server har 5 daqiqada yoki konfiguratsiyani o'zgartirgandan so'ng darhol yuboradi.
3. Subset advertisements
VLAN konfiguratsiyasini o'zgartirgandan so'ng, shuningdek, ogohlantirish so'rovidan keyin darhol yuboriladi.
VLAN ma'lumotlar bazasining yangi versiyasi serverdan olgan mijoz uni boshqa barcha trank portlarga uzatadi, agar uning orqasida yana VTP Client lari va VTP Transparent lari bo`lsa, ular ham ushbu yangilanishlarni oladi.
VTP protokolining bazaviy sozlamasi
switch(config)#vtp mode - bu yerda kerakli rejim tanlanadi: server, client, transparent yoki off.
Protokol versiyasi tanlanadi:
Switch(config)# vtp version 2
Domen va parol kiritiladi:
Switch(config)# vtp domain - domen nomi
Switch(config)# vtp password parol [hidden | secret]
Kerakli rejimga o‘tiladi:
Switch(config)# vtp mode server | client | transparent | off
Yuqoridagi buyruqlardan so‘ng VTP yoqiladi, biroq, zarur vaqtda uni ma’lum bir interfeyslarda o‘chirib qo‘yish ham mumkin:
Switch(config-if) # no vtp
Protokol sozlamalarini ko‘rish uchun quyidagi buyruqlarni kiritish kerak:
Switch# show vtp status
Switch# show vtp devices
Switch# show vtp interface