Switch>enable
Switch#configure terminal
Switch(config)#hostname S1
S1(config)#vlan 30
S1(config-vlan)#name Bugalteriya
S1(config-vlan)#vlan 20
S1(config-vlan)#name IT
S1(config-vlan)#vlan 10
S1(config-vlan)#name Sales
S1(config-vlan)#exit
S1(config)#interface range fa0/1-2
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 30
S1(config-if-range)#interface range fa0/3-4
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 10
S1(config-if-range)#interface range fa0/5-6
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 20
S1(config)#interface g0/1
S1(config-if)#switchport mode trunk
S1(config-if)#switchport trunk allowed vlan 10,20,30
Bu faqat birinchi switchni nastroykasi. Ikkinchi Switchni ham o'zingiz nastroyka qilib shu tarmoqni Qurib @ciscoucell ga tashasangiz tekshirib beramiz.
Kanalga obuna bo'lishni unitmang @cisco_server
Switch#configure terminal
Switch(config)#hostname S1
S1(config)#vlan 30
S1(config-vlan)#name Bugalteriya
S1(config-vlan)#vlan 20
S1(config-vlan)#name IT
S1(config-vlan)#vlan 10
S1(config-vlan)#name Sales
S1(config-vlan)#exit
S1(config)#interface range fa0/1-2
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 30
S1(config-if-range)#interface range fa0/3-4
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 10
S1(config-if-range)#interface range fa0/5-6
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 20
S1(config)#interface g0/1
S1(config-if)#switchport mode trunk
S1(config-if)#switchport trunk allowed vlan 10,20,30
Bu faqat birinchi switchni nastroykasi. Ikkinchi Switchni ham o'zingiz nastroyka qilib shu tarmoqni Qurib @ciscoucell ga tashasangiz tekshirib beramiz.
Kanalga obuna bo'lishni unitmang @cisco_server
Topologiyamizda 3 ta oiladagi ip addresslar mavjud. Endi o'ylab ko'ring 3ta oiladagi ip addresslarni har biriga alohida default-gateway berishimiz kerak. Topologiyamizdagi routerni bitta portiga butun tarmoq ulangan. Hosh bu paytio'sha portga qaysi ip addressni beramiz? Shunaqa vaziyatlarda routerda SUBINTERFACE (1ta portni logic qismlarga bo'lish)hosil qilishimiz kerak.
Switch>enable
Switch#configure terminal
Switch(config)#hostname S1
S1(config)#vlan 30
S1(config-vlan)#name Bugalteriya
S1(config-vlan)#vlan 20
S1(config-vlan)#name IT
S1(config-vlan)#vlan 10
S1(config-vlan)#name Sales
S1(config-vlan)#exit
S1(config)#interface range fa0/1-2
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 30
S1(config-if-range)#interface range fa0/3-4
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 10
S1(config-if-range)#interface range fa0/5-6
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 20
S1(config)#interface g0/1
S1(config-if)#switchport mode trunk
S1(config-if)#switchport trunk allowed vlan 10,20,30
Bu faqat birinchi switchni nastroykasi. Ikkinchi Switchni ham o'zingiz shu kabi nastroyka qilasiz.
Router>enable
Router#configure terminal
Router(config)#interface g0/0
Router(config-if)#no shutdown
Router(config-if)#exit
Router(config)#interface g0/0.10
Router(config-subif)#encapsulation dot1Q 10
Router(config-subif)#ip address 192.168.1.254 255.255.255.0
Router(config-if)#exit
Router(config)#interface gigabitEthernet 0/0.20
Router(config-subif)#encapsulation dot1Q 20
Router(config-subif)#ip address 192.168.3.254 255.255.255.0
Router(config-subif)#interface gigabitEthernet 0/0.30
Router(config-subif)#encapsulation dot1Q 30
Router(config-subif)#ip address 192.168.2.254 255.255.255.0
Router(config-subif)#exit
Tarmog'imiz tayyor eng bu holatda hamma VLANlar orasida paket o'tadi. Ikkinchi switch hamda router ulangan portni trunk qilish esingizdan chiqmasin.
Kanalga obuna bo'lishni unitmang-> @cisco_server
Switch>enable
Switch#configure terminal
Switch(config)#hostname S1
S1(config)#vlan 30
S1(config-vlan)#name Bugalteriya
S1(config-vlan)#vlan 20
S1(config-vlan)#name IT
S1(config-vlan)#vlan 10
S1(config-vlan)#name Sales
S1(config-vlan)#exit
S1(config)#interface range fa0/1-2
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 30
S1(config-if-range)#interface range fa0/3-4
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 10
S1(config-if-range)#interface range fa0/5-6
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 20
S1(config)#interface g0/1
S1(config-if)#switchport mode trunk
S1(config-if)#switchport trunk allowed vlan 10,20,30
Bu faqat birinchi switchni nastroykasi. Ikkinchi Switchni ham o'zingiz shu kabi nastroyka qilasiz.
Router>enable
Router#configure terminal
Router(config)#interface g0/0
Router(config-if)#no shutdown
Router(config-if)#exit
Router(config)#interface g0/0.10
Router(config-subif)#encapsulation dot1Q 10
Router(config-subif)#ip address 192.168.1.254 255.255.255.0
Router(config-if)#exit
Router(config)#interface gigabitEthernet 0/0.20
Router(config-subif)#encapsulation dot1Q 20
Router(config-subif)#ip address 192.168.3.254 255.255.255.0
Router(config-subif)#interface gigabitEthernet 0/0.30
Router(config-subif)#encapsulation dot1Q 30
Router(config-subif)#ip address 192.168.2.254 255.255.255.0
Router(config-subif)#exit
Tarmog'imiz tayyor eng bu holatda hamma VLANlar orasida paket o'tadi. Ikkinchi switch hamda router ulangan portni trunk qilish esingizdan chiqmasin.
Kanalga obuna bo'lishni unitmang-> @cisco_server
👍1
Topologiyamizda 3 ta oiladagi ip addresslar mavjud. Endi o'ylab ko'ring 3ta oiladagi ip addresslarni har biriga alohida default-gateway berishimiz kerak. Topologiyamizdagi routerni bitta portiga butun tarmoq ulangan. Hosh bu paytio'sha portga qaysi ip addressni beramiz? Shunaqa vaziyatlarda routerda SUBINTERFACE (1ta portni logic qismlarga bo'lish)hosil qilishimiz kerak.
Switch>enable
Switch#configure terminal
Switch(config)#hostname S1
S1(config)#vlan 30
S1(config-vlan)#name Bugalteriya
S1(config-vlan)#vlan 20
S1(config-vlan)#name IT
S1(config-vlan)#vlan 10
S1(config-vlan)#name Sales
S1(config-vlan)#exit
S1(config)#interface range fa0/1-2
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 30
S1(config-if-range)#interface range fa0/3-4
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 10
S1(config-if-range)#interface range fa0/5-6
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 20
S1(config)#interface g0/1
S1(config-if)#switchport mode trunk
S1(config-if)#switchport trunk allowed vlan 10,20,30
Bu faqat birinchi switchni nastroykasi. Ikkinchi Switchni ham o'zingiz shu kabi nastroyka qilasiz.
Router>enable
Router#configure terminal
Router(config)#interface g0/0
Router(config-if)#no shutdown
Router(config-if)#exit
Router(config)#interface g0/0.10
Router(config-subif)#encapsulation dot1Q 10
Router(config-subif)#ip address 192.168.1.254 255.255.255.0
Router(config-if)#exit
Router(config)#interface gigabitEthernet 0/0.20
Router(config-subif)#encapsulation dot1Q 20
Router(config-subif)#ip address 192.168.3.254 255.255.255.0
Router(config-subif)#interface gigabitEthernet 0/0.30
Router(config-subif)#encapsulation dot1Q 30
Router(config-subif)#ip address 192.168.2.254 255.255.255.0
Router(config-subif)#exit
Tarmog'imiz tayyor eng bu holatda hamma VLANlar orasida paket o'tadi. Ikkinchi switch hamda router ulangan portni trunk qilish esingizdan chiqmasin.
Kanalga obuna bo'lishni unitmang-> @cisco_server
Switch>enable
Switch#configure terminal
Switch(config)#hostname S1
S1(config)#vlan 30
S1(config-vlan)#name Bugalteriya
S1(config-vlan)#vlan 20
S1(config-vlan)#name IT
S1(config-vlan)#vlan 10
S1(config-vlan)#name Sales
S1(config-vlan)#exit
S1(config)#interface range fa0/1-2
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 30
S1(config-if-range)#interface range fa0/3-4
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 10
S1(config-if-range)#interface range fa0/5-6
S1(config-if-range)#switchport mode access
S1(config-if-range)#switchport access vlan 20
S1(config)#interface g0/1
S1(config-if)#switchport mode trunk
S1(config-if)#switchport trunk allowed vlan 10,20,30
Bu faqat birinchi switchni nastroykasi. Ikkinchi Switchni ham o'zingiz shu kabi nastroyka qilasiz.
Router>enable
Router#configure terminal
Router(config)#interface g0/0
Router(config-if)#no shutdown
Router(config-if)#exit
Router(config)#interface g0/0.10
Router(config-subif)#encapsulation dot1Q 10
Router(config-subif)#ip address 192.168.1.254 255.255.255.0
Router(config-if)#exit
Router(config)#interface gigabitEthernet 0/0.20
Router(config-subif)#encapsulation dot1Q 20
Router(config-subif)#ip address 192.168.3.254 255.255.255.0
Router(config-subif)#interface gigabitEthernet 0/0.30
Router(config-subif)#encapsulation dot1Q 30
Router(config-subif)#ip address 192.168.2.254 255.255.255.0
Router(config-subif)#exit
Tarmog'imiz tayyor eng bu holatda hamma VLANlar orasida paket o'tadi. Ikkinchi switch hamda router ulangan portni trunk qilish esingizdan chiqmasin.
Kanalga obuna bo'lishni unitmang-> @cisco_server
🎯VLAN Tag va Untag nima?
Tag nima?
Bu Ethernet framega qo'shiladigan 4 baytlik VLAN ma'lumoti (802.1Q header).
Oddiy frame: [MAC][MAC][Type][Data]
Tagged frame: [MAC][MAC][802.1Q][Type][Data]
━━━━━━━━━━━━━━━━━━━━
ACCESS PORT 🔌
Xususiyatlari:
▫️ Faqat bitta VLAN
▫️ Tagsiz paketlar
▫️ Kompyuter, printer uchun
Ishlash prinsipi:
→ Kiruvchi paketdan tagni olib tashlaydi
→ Chiquvchi paketni tagsiz yuboradi
━━━━━━━━━━━━━━━━━━━━
TRUNK PORT 🚀
Xususiyatlari:
▫️ Bir nechta VLAN
▫️ Tagli paketlar
▫️ Switch-switch uchun
Ishlash prinsipi:
→ Kiruvchi: Tag borini saqlaydi
→ Chiquvchi: Kopchilik VLAN tag bilan
━━━━━━━━━━━━━━━━━━━━
Paket oqimi misoli 📊
[PC-VLAN10] —Fa0/1— [SW1] —Gi0/1— [SW2]
1️⃣ PC tagsiz paket yuboradi
2️⃣ Access port VLAN 10 tag qoshadi
3️⃣ Trunk port tag bilan uzatadi
4️⃣ SW2 tagged paketni qabul qiladi
#CCIE #VLAN #Networking #Cisco
Davomi keyingi postda 👇
@cisco_server
Tag nima?
Bu Ethernet framega qo'shiladigan 4 baytlik VLAN ma'lumoti (802.1Q header).
Oddiy frame: [MAC][MAC][Type][Data]
Tagged frame: [MAC][MAC][802.1Q][Type][Data]
━━━━━━━━━━━━━━━━━━━━
ACCESS PORT 🔌
Xususiyatlari:
▫️ Faqat bitta VLAN
▫️ Tagsiz paketlar
▫️ Kompyuter, printer uchun
Ishlash prinsipi:
→ Kiruvchi paketdan tagni olib tashlaydi
→ Chiquvchi paketni tagsiz yuboradi
interface Fa0/1
switchport mode access
switchport access vlan 10
━━━━━━━━━━━━━━━━━━━━
TRUNK PORT 🚀
Xususiyatlari:
▫️ Bir nechta VLAN
▫️ Tagli paketlar
▫️ Switch-switch uchun
Ishlash prinsipi:
→ Kiruvchi: Tag borini saqlaydi
→ Chiquvchi: Kopchilik VLAN tag bilan
interface Gi0/1
switchport mode trunk
switchport trunk allowed vlan 10,20,30
━━━━━━━━━━━━━━━━━━━━
Paket oqimi misoli 📊
[PC-VLAN10] —Fa0/1— [SW1] —Gi0/1— [SW2]
1️⃣ PC tagsiz paket yuboradi
2️⃣ Access port VLAN 10 tag qoshadi
3️⃣ Trunk port tag bilan uzatadi
4️⃣ SW2 tagged paketni qabul qiladi
#CCIE #VLAN #Networking #Cisco
Davomi keyingi postda 👇
@cisco_server
👍6❤1🔥1
Kompyuterda VLAN ID o'rnatilsa nima bo'ladi? 💻
Ko'p tarmoq adapterlari VLAN taggingni qo'llab-quvvatlaydi. Lekin bu har doim kerakmi? 🤔
━━━━━━━━━━━━━━━━━━━
ACCESS PORT bilan ❌
[PC VLAN tag 10] → [Fa0/1 Access VLAN 10]
❌ Paket DROP!
Sabab: Access port faqat untagged paket kutadi, lekin tagged paket keldi!
━━━━━━━━━━━━━━━━━━━
TRUNK PORT bilan ✅
[PC VLAN tag 10] → [Gi0/1 Trunk allowed 10]
✅ VLAN 10ga yo'naladi
Shart: Trunk portda allowed vlan 10 bolishi kerak!
━━━━━━━━━━━━━━━━━━━
Xulosa 🎓
Kompyuter | Switch Port | Natija
Tag yoq | Access | ✅ Normal
Tag bor | Access | ❌ Drop
Tag bor | Trunk | ✅ Ishlaydi
━━━━━━━━━━━━━━━━━━━
Amaliy maslahat 💡
Oddiy foydalanuvchilar:
❌ VLAN tag o'rnatmang
✅ Oddiy Access portga ulang
Server/VM uchun:
✅ VLAN tagging ishlatish mumkin
✅ Trunk portga ulang
🎯 Masalan: VMware ESXi, Linux
━━━━━━━━━━━━━━━━━━━
Esda tuting! ⚠️
Kompyuterda VLAN ID yoqsangiz:
▫️ Switch TRUNK bolishi shart
▫️ Aks holda aloqa ishlamaydi
▫️ Maxsus holatlarda kerak
#CCIE #VLAN #Networking #Cisco #SwitchConfig
💬 Savollaringiz bo'lsa, komentariyada kutamiz...
@cisco_server
Ko'p tarmoq adapterlari VLAN taggingni qo'llab-quvvatlaydi. Lekin bu har doim kerakmi? 🤔
━━━━━━━━━━━━━━━━━━━
ACCESS PORT bilan ❌
[PC VLAN tag 10] → [Fa0/1 Access VLAN 10]
❌ Paket DROP!
Sabab: Access port faqat untagged paket kutadi, lekin tagged paket keldi!
━━━━━━━━━━━━━━━━━━━
TRUNK PORT bilan ✅
[PC VLAN tag 10] → [Gi0/1 Trunk allowed 10]
✅ VLAN 10ga yo'naladi
Shart: Trunk portda allowed vlan 10 bolishi kerak!
━━━━━━━━━━━━━━━━━━━
Xulosa 🎓
Kompyuter | Switch Port | Natija
Tag yoq | Access | ✅ Normal
Tag bor | Access | ❌ Drop
Tag bor | Trunk | ✅ Ishlaydi
━━━━━━━━━━━━━━━━━━━
Amaliy maslahat 💡
Oddiy foydalanuvchilar:
❌ VLAN tag o'rnatmang
✅ Oddiy Access portga ulang
Server/VM uchun:
✅ VLAN tagging ishlatish mumkin
✅ Trunk portga ulang
🎯 Masalan: VMware ESXi, Linux
━━━━━━━━━━━━━━━━━━━
Esda tuting! ⚠️
Kompyuterda VLAN ID yoqsangiz:
▫️ Switch TRUNK bolishi shart
▫️ Aks holda aloqa ishlamaydi
▫️ Maxsus holatlarda kerak
#CCIE #VLAN #Networking #Cisco #SwitchConfig
💬 Savollaringiz bo'lsa, komentariyada kutamiz...
@cisco_server
👍4