实验二十五：Hybrid端口

实验二十五：Hybrid端口

一、 理论基础

Hybrid端口是介于Access端口和Trunk端口之间的一种端口属性，通过Hybrid端口的设置，可以配置部分VLAN的帧可以打上标记，另一部分VLAN在通过交换机之间的链接的时候，不达VLAN标记，从而实现对部分VLAN的隔离的目的。

二、 实验案例

Hybrid的配置

1、实验的拓扑结构图：

2、配置说明：

交换机A的配置：（VLAN2不打TAG，VLAN3打TAG） 交换机B的配置：（VLAN2不打TAG，VLAN3打TAG）

3、具体的配置：

交换机A的配置：（VLAN2不打TAG，VLAN3打TAG） [SwitchA]vlan 2

[SwitchA-vlan2]port e0/2 [SwitchA-vlan2]vlan 3 [SwitchA-vlan3]port e0/3 [SwitchA-vlan3]int e0/8

[SwitchA-Ethernet0/8]port link-type hybrid [SwitchA-Ethernet0/8]port hybrid vlan 3 tagged [SwitchA-Ethernet0/8]port hybrid vlan 2 untagged [SwitchA]dis int e0/8

Ethernet0/8 current state : UP IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 000f-e206-f643 The Maximum Transmit Unit is 1500

Media type is twisted pair, loopback not set

Port hardware type is 100_BASE_TX 100Mbps-speed mode, full-duplex mode

Link speed type is autonegotiation, link duplex type is autonegotiation Flow-control is not enabled

Port-flow-constrain has not been configured completely The Maximum Frame Length is 1518 Broadcast MAX-ratio: 100% PVID: 1

Mdi type: normal

Port link-type: hybrid Tagged VLAN ID : 3 Untagged VLAN ID : 1-2

Last 300 seconds input: 0 packets/sec 40 bytes/sec Last 300 seconds output: 0 packets/sec 6 bytes/sec Input(total): 504 packets, 48482 bytes 108 broadcasts, 345 multicasts Input(normal): 504 packets, - bytes 108 broadcasts, 345 multicasts

Input: 0 input errors, 0 runts, 0 giants, - throttles, 0 CRC 0 frame, - overruns, 0 aborts, 0 ignored, - parity errors Output(total): 190 packets, 21870 bytes

87 broadcasts, 46 multicasts, 0 pauses Output(normal): 190 packets, - bytes

87 broadcasts, 46 multicasts, - pauses

Output: 0 output errors, - underruns, - buffer failures

0 aborts, 0 deferred, 0 collisions, 0 late collisions - lost carrier, - no carrier dis vlan 2 VLAN ID: 2

VLAN Type: static

Route Interface: not configured Description: VLAN 0002 Tagged Ports: none Untagged Ports:

Ethernet0/2 Ethernet0/8

交换机B的配置：（VLAN2不打TAG，VLAN3打TAG） [Quidway]vlan 2

[Quidway-vlan2]port e0/2 [Quidway-vlan2]vlan 3 [Quidway-vlan3]port e0/3 [Quidway-vlan3]int e0/8

[Quidway-Ethernet0/8]port link-type hybrid

[Quidway-Ethernet0/8]port hybrid vlan 2 untagged

[Quidway-Ethernet0/8]port hybrid vlan 3 tagged dis int e0/8

Ethernet0/8 current state : UP IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 000f-e201-07c7 The Maximum Transmit Unit is 1500

Media type is twisted pair, loopback not set Port hardware type is 100_BASE_TX 100Mbps-speed mode, full-duplex mode

Link speed type is autonegotiation, link duplex type is autonegotiation Flow-control is not enabled

The Maximum Frame Length is 1518 Broadcast MAX-ratio: 100% PVID: 1

Mdi type: normal

Port link-type: hybrid Tagged VLAN ID : 3 Untagged VLAN ID : 1-2

Last 300 seconds input: 0 packets/sec 16 bytes/sec Last 300 seconds output: 0 packets/sec 47 bytes/sec Input(total): 198 packets, 23596 bytes 94 broadcasts, 47 multicasts Input(normal): - packets, - bytes - broadcasts, - multicasts

Input: 0 input errors, - runts, 0 giants, - throttles, 0 CRC 0 frame, - overruns, 0 aborts, 0 ignored, - parity errors Output(total): 651 packets, 60342 bytes

131 broadcasts, 469 multicasts, 0 pauses Output(normal): - packets, - bytes

- broadcasts, - multicasts, - pauses

Output: 0 output errors, - underruns, - buffer failures

- aborts, 0 deferred, 0 collisions, 0 late collisions - lost carrier, - no carrier dis vlan 3 VLAN ID: 3

VLAN Type: static

Route Interface: not configured Description: VLAN 0003 Tagged Ports:

Ethernet0/8 Untagged Ports:

Ethernet0/3

实际上对于一个以太网的帧来说，从主机到交换机接入端口这一段是没有VLAN的TAG的，因为一般计算机不能识别VLAN的TAG。而当以太网帧在通过hybrid的端口发往另一交换机之前，就已经打上了相应VLAN TAG作为区别，对于来自不同的VALN的帧，hybrid端

口会根据配置作不同的处理。以上配置为例：当一个从VALN3来的帧从交换机A的hybrid端口E0/8发往对端交换机B的hybrid端口E0/8时，交换机A的E0/8端口不会对它进行任何处理，而当这个帧到达这端时，（对端也是一样的配置）交换机B的E0/8会检查它VLAN TAG，发现VLAN3是TAGGED vlan ID，于是交换机B的E0/8端口不会改变以太网帧的TAG，并向相应正确的端口进行转发。当一个VLAN2来的帧从交换机A的hybrid端口E0/8发往对端交换机B的E0/8时，则会被去掉VLAN2的TAG，而当这个帧到达这端时，（对端也是一样的配置）交换机B的E0/8会检查它VLAN TAG，发现是没有VLAN TAG的，则认为该帧属于VLAN1（PVID为1），不会向VLAN2的端口转发。

三、 实验总结

实验结果：VLAN3之间的PC可以相互ping通，但是VLAN2之间的PC不能相互ping通（见下图所示）

但是此时，如果我们设置Hybrid端口的PVID为2，那么没有VLAN TAG的帧被认为属于VALN2，VLAN2内的主机又可以通信了。（如下图所示）

具体的配置：

[SwitchA-Ethernet0/8]port hybrid pvid vlan 2 [SwitchB-Ethernet0/8]port hybrid pvid vlan 2 dis int e0/8

Ethernet0/8 current state : UP IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 000f-e206-f643 The Maximum Transmit Unit is 1500

Media type is twisted pair, loopback not set Port hardware type is 100_BASE_TX 100Mbps-speed mode, full-duplex mode

Link speed type is autonegotiation, link duplex type is autonegotiation Flow-control is not enabled

Port-flow-constrain has not been configured completely The Maximum Frame Length is 1518 Broadcast MAX-ratio: 100% PVID: 2

Mdi type: normal

Port link-type: hybrid Tagged VLAN ID : 3 Untagged VLAN ID : 1-2

Last 300 seconds input: 0 packets/sec 64 bytes/sec Last 300 seconds output: 0 packets/sec 4 bytes/sec Input(total): 2448 packets, 193273 bytes 492 broadcasts, 1901 multicasts Input(normal): 2448 packets, - bytes 492 broadcasts, 1901 multicasts

Input: 0 input errors, 0 runts, 0 giants, - throttles, 0 CRC 0 frame, - overruns, 0 aborts, 0 ignored, - parity errors Output(total): 792 packets, 85414 bytes

597 broadcasts, 133 multicasts, 0 pauses Output(normal): 792 packets, - bytes

597 broadcasts, 133 multicasts, - pauses

Output: 0 output errors, - underruns, - buffer failures

0 aborts, 0 deferred, 0 collisions, 0 late collisions - lost carrier, - no carrier

Input: 0 input errors, 0 runts, 0 giants, - throttles, 0 CRC 0 frame, - overruns, 0 aborts, 0 ignored, - parity errors Output(total): 792 packets, 85414 bytes

597 broadcasts, 133 multicasts, 0 pauses Output(normal): 792 packets, - bytes

597 broadcasts, 133 multicasts, - pauses

Output: 0 output errors, - underruns, - buffer failures

0 aborts, 0 deferred, 0 collisions, 0 late collisions - lost carrier, - no carrier

本文来源：https://www.bwwdw.com/article/zlw.html