合勤ZyXEL GS-2024 Port-Based VLAN 問題

最近買了兩台GS-2024想要做Port-Based VLAN隔離
1~16 PORT互不相通
17~23 連接NAS、DVR、SERVER
24 連接ROUTER
網路速度為300M/100M
設定Port-Based VLAN 指令後
測試速率會降到10M/96M
SWITCH PORT狀態都是有1000M Gigabit
重新啟動SWITCH後正常隔沒兩三分鐘速度還是降下來了
將SWITCH恢復出廠預設值就都沒問題
不知是哪邊設定錯誤?求高手解答

下列為CONSOLE指令
config
vlan 1
ip address inband-default 192.168.10.244 255.255.255.0
ip address default-gateway 192.168.10.254
exit

vlan 401
fixed 1,17-24
untagged 1-24
exit
vlan 402
fixed 2,17-24
untagged 1-24
exit
vlan 403
fixed 3,17-24
untagged 1-24
exit
vlan 404
fixed 4,17-24
untagged 1-24
exit
vlan 405
fixed 5,17-24
untagged 1-24
exit
vlan 406
fixed 6,17-24
untagged 1-24
exit
vlan 407
fixed 7,17-24
untagged 1-24
exit
vlan 408
fixed 8,17-24
untagged 1-24
exit
vlan 409
fixed 9,17-24
untagged 1-24
exit
vlan 410
fixed 10,17-24
untagged 1-24
exit
vlan 411
fixed 11,17-24
untagged 1-24
exit
vlan 412
fixed 12,17-24
untagged 1-24
exit
vlan 413
fixed 13,17-24
untagged 1-24
exit
vlan 414
fixed 14,17-24
untagged 1-24
exit
vlan 415
fixed 15,17-24
untagged 1-24
exit
vlan 416
fixed 16,17-24
untagged 1-24
exit

interface port-channel 1-24
no gvrp
no ingress-check
exit
interface port-channel 1
pvid 401
frame-type untagged
exit
interface port-channel 2
pvid 402
frame-type untagged
exit
interface port-channel 3
pvid 403
frame-type untagged
exit
interface port-channel 4
pvid 404
frame-type untagged
exit
interface port-channel 5
pvid 405
frame-type untagged
exit
interface port-channel 6
pvid 406
frame-type untagged
exit
interface port-channel 7
pvid 407
frame-type untagged
exit
interface port-channel 8
pvid 408
frame-type untagged
exit
interface port-channel 9
pvid 409
frame-type untagged
exit
interface port-channel 10
pvid 410
frame-type untagged
exit
interface port-channel 11
pvid 411
frame-type untagged
exit
interface port-channel 12
pvid 412
frame-type untagged
exit
interface port-channel 13
pvid 413
frame-type untagged
exit
interface port-channel 14
pvid 414
frame-type untagged
exit
interface port-channel 15
pvid 415
frame-type untagged
exit
interface port-channel 16
pvid 416
frame-type untagged
exit

exit
write memory
2015-01-08 14:27 發佈
a78810 wrote:
最近買了兩台GS-2...(恕刪)


推測可能是跨VLAN的封包中形成loop了,所以重啟後隔幾分鐘就會開始降速(廣播風暴),請看下圖紅字部份指令。

vlan 401
fixed 1,17-24
untagged 1-24
exit
vlan 402
fixed 2,17-24

exit
vlan 403
fixed 3,17-24
untagged 1-24
exit

我只擷取VLAN 401-403部份,其他的VLAN看來也是一樣。
若沒記錯的話,依你的指令設定出來的結果應該是:
17-24 port"都"屬於VLAN 401及403,而且是untagged。
也就是說你接在17-24 port的設備,所有發出的封包都會被你在Switch上的"所有"VLAN接收。而且VLAN 401跟403之間的設備,也會經由17-24 port互通,若所有的VLAN都是配置同樣的IP網段,最後應該會形成廣播風暴。

不是很了解你原先要設定的目的是什麼,1-16 port互相不能連通,這個能理解,但17-24上接的設備反而要跟這些port能互通,是這樣嗎?建議研究一下port isolation功能,不要用VLAN來搞。
不然你的Router必須要支援802.1q,由port 24帶所有vlan(且所有vlan要配置不同IP網段)的tag到router上,再由Router的ACL進行控管。

VLAN與VLAN間必須要透過L3 Switch或是Router的路由表來互通,不應該用port-based vlan的方式來互通,這樣只會很容易形成廣播風暴。

而且你說買了兩台,但我沒看到兩台怎麼互相連接,還是你的router有多個LAN port,每台的Port 24都接上Router LAN port??
非必取而不出眾,非全勝而不交兵,緣是萬舉萬當,一戰而定!
太棒了!終於解決問題了
我把完整CONSOLE分享給大家
指令相容其他機種 ES-2024 ES-2108 ES-3100 ES-3124 ES-3500 GS-3012 GS-3024 GS-4024 等等其他系列



config
vlan 1
ip address inband-default 192.168.10.244 255.255.255.0
ip address default-gateway 192.168.10.254
exit

vlan-type port-based

interface port-channel 1
no egress set 2-16
exit
interface port-channel 2
no egress set 1,3-16
exit
interface port-channel 3
no egress set 1-2,4-16
exit
interface port-channel 4
no egress set 1-3,5-16
exit
interface port-channel 5
no egress set 1-4,6-16
exit
interface port-channel 6
no egress set 1-5,7-16
exit
interface port-channel 7
no egress set 1-6,8-16
exit
interface port-channel 8
no egress set 1-7,9-16
exit
interface port-channel 9
no egress set 1-8,10-16
exit
interface port-channel 10
no egress set 1-9,11-16
exit
interface port-channel 11
no egress set 1-10,12-16
exit
interface port-channel 12
no egress set 1-11,13-16
exit
interface port-channel 13
no egress set 1-12,14-16
exit
interface port-channel 14
no egress set 1-13,15-16
exit
interface port-channel 15
no egress set 1-14,16
exit
interface port-channel 16
no egress set 1-15
exit

exit
write memory


網頁WEB設定方式
http://wenku.baidu.com/view/492e9c0f6c85ec3a87c2c524.html
內文搜尋
X
評分
評分
複製連結
Mobile01提醒您
您目前瀏覽的是行動版網頁
是否切換到電腦版網頁呢?