19 · Implementing VLANs and Trunks實作 VLAN 與中繼

Implementing VLANs and Trunks實作 VLAN 與中繼

Introduction

簡介

Imagine that you work on the IT helpdesk at a large financial company. Your colleagues Jon and Nicole have recently submitted tickets to the helpdesk. Jon is finding that internet access to Salesforce is slow, while Nicole is complaining of poor Cisco Webex video quality when she hosts a meeting.

假設你在一家大型金融公司的 IT 服務台工作。你的同事 Jon 和 Nicole 最近向服務台提交了工單。Jon 發現連線到 Salesforce 的網際網路速度很慢,而 Nicole 則抱怨她主持會議時 Cisco Webex 的視訊品質很差。

You realize that:

你發現:

  • Your company's network is sluggish during peak hours.你公司的網路在尖峰時段反應遲緩。
  • Devices in all departments are connected to the same network, creating a large broadcast domain.所有部門的裝置都連接到同一個網路,形成一個龐大的廣播網域。
  • Broadcasts that are sent by one device are received by all others, causing unnecessary data processing and network clogs.某一裝置發出的廣播訊息會被所有其他裝置接收,造成不必要的資料處理與網路壅塞。
  • Sensitive information from one department could be at risk due to the lack of network segmentation, which is a significant security concern.由於缺乏網路區隔,某一部門的機密資訊可能會有外洩風險,這是一項重大的安全隱憂。

Because multiple messages are being sent throughout the entire network, the amount of traffic leads to network congestion.

由於整個網路中同時傳送大量訊息,流量因此導致網路壅塞。

How can you segment this network to improve performance and increase security?
你要如何區隔這個網路,以提升效能並強化安全性?

Network engineers need to identify common issues in poorly designed networks, familiarize themselves with the operation of VLANs, and implement and verify VLANs and trunks.

網路工程師需要辨識設計不良網路中的常見問題,熟悉 VLAN 的運作方式,並實作與驗證 VLAN 與中繼。

In this course, you will learn how:

在本課程中,你將學到如何:

  • VLANs divide a single physical network into multiple virtual networks.VLAN 將單一實體網路劃分為多個虛擬網路。
  • VLANs limit the size of broadcast domains.VLAN 限制廣播網域的大小。
  • VLANs enhance security by isolating sensitive departments traffic.VLAN 藉由隔離敏感部門的流量來強化安全性。
  • Trunks come into play by enabling VLANs to spread across multiple switches.中繼可讓 VLAN 跨越多台交換器擴展,發揮其作用。
  • Trunks can carry traffic from multiple VLANs.中繼可承載多個 VLAN 的流量。

By introducing VLANs and trunks to the network, the logical segmentation enables more efficient traffic management, solving the issues caused by excessive messages within the same network.

藉由在網路中導入 VLAN 與中繼,邏輯區隔能實現更有效率的流量管理,解決同一網路中訊息過多所造成的問題。