20 · Routing Between VLANsVLAN 間路由

Routing Between VLANsVLAN 間路由

Introduction

簡介

Picture a large factory with different facilities: raw materials, production, drying, and packaging. You want to have these facilities separated for different reasons, such as safety, cleanliness, and temperature control. However, you do need to move products, tools, and machinery between these facilities. This scenario is very similar to VLANs and communication between VLANs in a network.

想像一座大型工廠,內部有不同的設施:原料區、生產區、乾燥區與包裝區。基於安全、清潔與溫度控制等各種理由,你希望將這些設施彼此分開。然而,你仍需要在這些設施之間移動產品、工具與機械。這個情境與 VLAN 以及 VLAN 之間的通訊非常相似。

These different facilities in the factory can be compared to VLANs. How would you move materials, products, and tools between the facilities of the factory?

工廠中這些不同的設施可以比擬為 VLAN。你要如何在工廠各設施之間搬運材料、產品與工具呢?

Obviously, you could use forklifts to move items around. For example, raw materials are transported to production, tools and machinery will need to be moved back and forth between production and maintenance, and products need to go to drying rooms. This continuous movement in the factory is analogous to inter-VLAN routing, where data flows between different VLANs. Without the forklifts (inter-VLAN routing), materials, tools, and machines would remain stuck in one section, halting production.

顯然,你可以使用堆高機來搬運物品。例如,原料會被運送到生產區,工具與機械需要在生產區與維護區之間來回搬運,產品則需要送到乾燥室。這種在工廠中持續不斷的搬運,就類似於 VLAN 間路由,資料會在不同的 VLAN 之間流動。若沒有堆高機(VLAN 間路由),材料、工具與機器就會卡在某一個區域中,導致生產停擺。

In this scenario, you are the factory manager that directs forklifts to move things around as needed. Just as you ensure a smooth production flow, a network router ensures that data moves between VLANs.

在這個情境中,你就是指揮堆高機依需求搬運物品的工廠經理。就如同你確保生產流程順暢一樣,網路路由器也確保資料能在 VLAN 之間流動。

Inter-VLAN routing is a technology that is used when different departments within an organization need to communicate while maintaining separate networks for security. For example, in an enterprise company, the finance, HR, and IT departments might each have their own VLAN to enforce security policies. However, there still needs to be connectivity between these departments. Inter-VLAN routing allows data to flow between VLANs.

當組織內不同部門需要通訊,同時又要維持各自獨立的網路以確保安全時,就會用到 VLAN 間路由這項技術。例如,在一家企業中,財務、人力資源與資訊部門可能各自擁有自己的 VLAN,以落實安全政策。然而,這些部門之間仍需要具備連線能力。VLAN 間路由讓資料能夠在各個 VLAN 之間流通。

In this course, you will learn to:

在本課程中,你將學會:

  • Describe inter-VLAN routing and VLAN characteristics.說明 VLAN 間路由與 VLAN 的特性。
  • Explain and compare different inter-VLAN routing solutions.說明並比較不同的 VLAN 間路由解決方案。
  • Configure inter-VLAN routing.設定 VLAN 間路由。
  • Assign and manage IP subnets and VLANs, including creating VLANs, assigning switch ports, and configuring trunk links.指派並管理 IP 子網路與 VLAN,包括建立 VLAN、指派交換器連接埠,以及設定中繼鏈路。
  • Implement inter-VLAN communication by configuring default gateways, physical and logical interfaces, and verifying connectivity between devices.透過設定預設閘道、實體與邏輯介面,並驗證裝置之間的連線能力,實作 VLAN 間通訊。