RSS

Lab 3.3.2 Configuring, Verifying, and Troubleshooting VLANs

9:55 AM | Labels:

Step 1: Connect the equipment 
a. Connect the router Fa0/0 interface with a straight-through cable to Switch 1 Fa0/8 interface.
b. Connect the Host 1a Ethernet interface with a straight-through cable to Switch 1 Fa0/2 interface.
c. Connect the Host 1b Ethernet interface with a straight-through cable to Switch 1 Fa0/3 interface.
d. Connect a PC with a console cable to perform configurations on the router and switches.
e. Configure IP addresses on the hosts as shown in the chart.

Step 2: Perform basic configuration on the router
a. Connect a PC to the console port of the router to perform configurations using a terminal emulation program.
b. Configure Router 1 with a hostname and console, Telnet, and privileged passwords according to the table diagram.

Step 3: Configure Switch 1
a. Configure S1 hostname and passwords.
b. Configure Switch 1 with a hostname and console, Telnet, and privileged passwords according to the
addressing table.
c. Configure S1 with an IP address and default gateway.
S1(config)#interface vlan1
S1(config-if)#ip address 172.16.1.2 255.255.255.0
S1(config-if)#no shutdown
S1(config-if)#exit
S1(config)#ip default-gateway 172.16.1.1
S1(config)#end

Step 4: Verify connectivity and default VLAN configuration
a. Verify LAN connectivity by pinging from the router to the switch and the hosts. Also verify that you can ping from host to host.
b. Verify default VLAN configuration with the show vlan command on S1.
S1#show vlan
Are all switch ports assigned to VLAN 1? Ya, VLAN 1 port switchnya memang pada S1

Step 5: Configure VLANs on S1
a. Create and name two additional VLANs on S1.
S1(config)#vlan 20
S1(config-vlan)#name fred
S1(config-vlan)#exit
S1(config)#vlan 30
S1(config-vlan)#name wilma
S1(config-vlan)#exit
b. Verify the creation of the new VLANs with the show vlan command.
S1#show vlan
Do the new VLANs appear in the output? ya
What interfaces belong to the new VLANs? R1 yaitu FA0/0
c. Assign interfaces to VLANs. Assign S1 port Fa0/2 to VLAN 20 and ports Fa0/3 – Fa0/8 to VLAN 30.
S1(config)#int Fa0/2
S1(config-if)#switchport access vlan 20
S1(config-if)#exit
S1(config-)#interface range Fa0/3 – 8
S1(config-if-range)#switchport access vlan 30
S1(config-if-range)#end
S1#show running-config
Observe that the switchport access command was applied to ports Fa0/2 – Fa0/8.
d. Verify the port assignments of the new VLANs with the show vlan command.
S1#show vlan
Which interfaces now belong to VLAN 1? R1
Which interfaces belong to VLAN 20? S1
Which interfaces belong to VLAN 30? 1b
e. Other commands can be used to show different amounts of information or specific pieces of
information. Enter the following commands on S1 and observe the output:
S1#show vlan brief
Is all of the basic VLAN membership information shown?
Jawaban : Tidak semuanya ditampilkan pada command show VLAN brief
S1#show vlan id 30
What information is shown?
Jawaban : hanya IP address
S1#show vlan name fred
What information is shown?
Jawaban : Nama – nama port yang terhubung.

Step 6: Verify VLAN segmentation
In the previous step, the ports connected to R1 and Host 1b were placed in one VLAN and Host 1a was
placed in another. Even though these hosts are connected to one switch, it appears as if there are two
separate switches. Connectivity tests will prove this.
a. Ping from Host 1b to R1.
Were the pings successful?
Jawaban : Ya berhasil
b. Ping from Host 1b to Host 1a.
Were the pings successful?
Jawaban : berhasil
c.  Ping from Host 1b to R1.
Were the pings successful?
Jawaban : tidak
Why were some pings successful and others not?
Jawaban : Karena beberapa ada yang perlu dilakukan VLAN agar dapat berkomunikasi sedangkan yang lain hanya perlu switch agar dapat berkomunikasi.
How could Host 1b communicate with Host 1a in different VLAN?
Jawaban : Menggunakan interface dari R1

Step 7: Change and delete VLAN configurations
a.  Reassign S1 port Fa0/3 to VLAN 20.
S1(config)#interface Fa0/3
S1(config-if)#switchport access vlan 20
S1(config)#end
S1#show vlan
Does the output reflect the VLAN membership change?
Jawaban : Ya
b. Remove VLAN 30.
Which two commands would be used to delete all VLAN configuration and return to the default
configuration?

Step 8: Reflection
a.  Why would VLANs be configured in a network?
Jawaban : vlan dapat digunakan untuk menghubungkan dan membatasi dan juga bias memferivikasi ports ports yagn bisa terkoneksi.
b.  What must be set up to communicate between VLANS?
Jawaban : Yang harus diatur ialah menentukan VLAN 1 berserta IP address dan Gateway
c.  With no configuration, what VLAN are all ports a member of?
Jawaban : VLAN1

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Posted by Monica Fransisca

Lab 3.2.4 Verifying STP with Show Commands

9:53 AM | Labels:

Step 1: Cable the network 
What is the advantage of providing redundant links in a network like this one?

Step 2: Configure the switches

Step 3: Configure the hosts

Step 4: Verify connectivity
To verify that the network is set up successfully, ping from Host 1 to Host 2. Was the ping successful?

Step 5: Examine interface VLAN 1 information
a. On SwitchA, enter the command show interface vlan1 at the privileged EXEC mode prompt. What is the MAC address of SwitchA?
b. On SwitchB, enter the command show interface vlan1 at the privileged EXEC mode prompt. What is the MAC address of SwitchB? Which switch should be the root of the spanning tree for this network?

Step 6: Determine the roles of ports participating in the spanning tree on each switch
On SwitchB, enter the command show spanning-tree at the privileged EXEC mode prompt. Which switch is the root bridge? The spanning tree is using three ports on each switch. Complete this chart indicating the port state and role for each port.

Step 7: Create a change in the network topology
a. Remove the crossover cable from the forwarding port on the non-root bridge.
b. Wait a few seconds, and then enter the show spanning-tree command again on the non-root bridge. What changes do you see in the spanning tree?
c. Check the spanning tree on the root bridge.
What changes have occurred there?
d. Continue to check the spanning tree on both switches until a new tree has been calculated and all ports are either forwarding or blocking. How long does it take for this to happen?
e. Replace the cable that was removed in Step 7a.
f. Wait again until both switches have recalculated their tables. How much time has passed since you first removed the crossover cable?
g. What effect did these topology changes have on network uptime?

Step 8: Examine the spanning tree on each switch
a. On each switch, enter the command show spanning-tree detail.
b. Examine the information for port Fa0/1. The output shows the interface, role, and state for each switch. It also provides details about port activity and characteristics.
How might the following information help you to verify the status of the network and troubleshoot network problems?
1)      Number of transitions to forwarding state:
2)      Number of BPDUs that have been sent and received:
c. On each switch, enter the following commands. Determine the type of information that each command provides: show spanning-tree bridge jawab: show spanning-tree summary

Step 9: Reflection
Your networking team is deciding whether to disable Spanning Tree Protocol on the switches in your corporate network. Explain how you would feel about this decision. What are the advantages and disadvantages? How would this decision affect your network design?

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Posted by Monica Fransisca

Lab 3.2.3 Building a Switched Network with Redundant Links

9:52 AM | Labels:

Step 1: Cable the network
a. Connect Host 1 to Switch 1 Fast Ethernet port Fa0/7, using a straight-through Ethernet cable.
b. Connect Host 2 to Switch 2 Fast Ethernet port Fa0/8, using a straight-through Ethernet cable.
c. Connect Switch 1 Fast Ethernet port Fa0/1 to Switch 2 Fast Ethernet port Fa0/1, using a crossover Ethernet cable.
d. Create a redundant link between the switches by connecting Switch 1 Fast Ethernet port Fa0/4 to Switch 2 Fast Ethernet port Fa0/4, using a crossover Ethernet cable. What typically undesirable traffic pattern have you created by using the two crossover cables between the two switches?
Predict: What do you think the switches will do to keep this from becoming a problem?

Step 2: Configure the switches

Step 3: Configure the hosts
a. Configure each host to use an IP address in the same network as the switches.
b. Configure each host to use the same subnet mask as the switches. Why is no default gateway specified for this network?

Step 4: Verify connectivity
a. To verify that the network is set up successfully, ping from Host 1 to Host 2. Was the ping successful?
b. If the ping is not successful, verify the connections and configurations again. Check to ensure that all cables are correct and that connections are seated. If the ping is not successful, what utility could you use to determine where the connection is failing?

Step 5: Examine interface VLAN 1 information
a. From the terminal emulation session on either switch, enter the command show interface vlan1 ? at the privileged EXEC mode prompt.
SwitchA#show interface vlan1 ?
List some of the options that are available
b. On SwitchA, enter the command show interface vlan1 at the privileged EXEC mode prompt. SwitchA#show interface vlan1
What is the MAC address of the switch?
What other term for MAC address is used?
c. On SwitchB, enter the command show interface vlan1 at the privileged EXEC mode prompt. What is the MAC address of the switch?
Which switch should be the root of the spanning tree for this network?

Step 6: Examine the spanning-tree tables on each switch
a. On SwitchA, enter the command show spanning-tree at the privileged EXEC mode prompt.
b. On SwitchB, enter the command show spanning-tree at the privileged EXEC mode prompt.
c.  Examine the outputs and answer the following questions:
Which switch is the root bridge?
What is the priority of the root bridge?
What is the bridge ID of the root bridge?
Which ports are forwarding on the root bridge?
Which ports are blocking on the root bridge?
What is the priority of the non-root bridge?
What is the bridge ID of the non-root bridge?
Which ports are forwarding on the non-root bridge?
Which ports are blocking on the non-root bridge?
d. Examine the link lights on both switches.
Can you tell which port is in blocking state?
Why is there no change in the link lights?

Step 7: Reassign the root bridge
What would you do if you wanted a different switch to be the root bridge for this network?
Why might you want to do this?
For the purposes of this lab, assume that the switch that is currently the root bridge is undesirable. The example assumes that SwitchB is preferred as the root switch. To “force” SwitchB to become the new root bridge, you need to configure a new priority for it.
a. Go to the console and enter configuration mode on SwitchB.
b. Determine the options that can be configured for the Spanning Tree Protocol by issuing this command: SwitchB(config)#spanning-tree ?
c. List the options that are available: _____________________
d. Set the priority of the switch to 4096.
SwitchB(config)#spanning-tree vlan 1 priority 4096
SwitchB(config)#exit

Step 8: Look at the spanning-tree table
a. On SwitchA, enter show spanning-tree at the privileged EXEC mode prompt.
b. On SwitchB, enter show spanning-tree at the privileged EXEC mode prompt.
c. Examine the outputs and answer the following questions:
Which switch is the root bridge?
What is the priority of the root bridge?
What is the bridge ID of the root bridge?
Which ports are forwarding on the root bridge?
Which ports are blocking on the root bridge?
What is the priority of the non-root bridge?
What is the bridge ID of the non-root bridge?
Which ports are forwarding on the non-root bridge?
Which ports are blocking on the non-root bridge?

Step 9: Verify the running configuration file on the root bridge
a. On the switch that was changed to be the root bridge, enter the show running-configcommand at the privileged EXEC mode prompt.
b. Locate the spanning-tree priority information for this switch.
c. How can you tell from the information given that this switch is the root bridge?

Step 10: Reflection
Suppose that you are adding new switches to a company’s network. Why should you plan the physical design carefully? Why should you be prepared to make adjustments to factory default settings?

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Posted by Monica Fransisca

Lab 3.1.4 Applying Basic Switch Security

9:49 AM | Labels:

Step 1: Connect PC1 to the switch
a. Connect PC1 to Fast Ethernet switch port Fa0/1. Configure PC1 to use the IP address, mask, and gateway shown in the table. 
b. Establish a terminal emulation session to the switch from PC1.

Step 2: Connect PC2 to the switch
a. Connect PC2 to Fast Ethernet switch port Fa0/4.
b. Configure PC2 to use the IP address, mask, and gateway shown in the table.

Step 3: Configure PC3 but do not connect
A third host is needed for this lab. 
a. Configure PC3 using IP address 192.168.1.5. The subnet mask is 255.255.255.0, and the default gateway is 192.168.1.1.
b. Do not connect this PC to the switch yet. It will be used for testing security.

Step 4: Perform an initial configuration on the switch
a. Configure the hostname of the switch as Switch1
b. Set the privileged EXEC mode password to cisco.
c. Set the privileged EXEC mode secret password to class.
d. Configure the console and virtual terminal lines to use a password and require it at login.
e. Exit from the console session and log in again.
Which password was required to enter privileged EXEC mode?
Why?

Step 5: Configure the switch management interface on VLAN 1
a. Enter the interface configuration mode for VLAN 1.
b. Set the IP address, subnet mask, and default gateway for the management interface.
Why does interface VLAN 1 require an IP address in this LAN?
What is the purpose of the default gateway?

Step 6: Verify the management LANs settings
a. Verify that the IP address of the management interface on the switch VLAN 1 and the IP address of PC1 and PC2 are on the same local network. Use the show running-config command to check the IP address configuration of the switch.
b. Verify the interface settings on VLAN 1.
What is the bandwidth on this interface?
What are the VLAN states?
VLAN 1 is   and line protocol is        .

Step 7: Disable the switch from being an http server
Turn off the feature of the switch being used as an http server. 
Switch1(config)#no ip http server
 
Step 8: Verify connectivity
a. To verify that hosts and switch are correctly configured, ping the switch IP address from the hosts. Were the pings successful?
If the ping is not successful, verify the connections and configurations again. Check to ensure that all cables are correct and that connections are seated. Check the host and switch configurations.
b. Save the configuration.

Step 9: Record the host MAC addresses
Determine and record the Layer 2 addresses of the PC network interface cards. From the command prompt of each PC, enter ipconfig /all.
PC1
PC2
PC3


Step 10: Determine what MAC addresses the switch has learned
Determine what MAC addresses the switch has learned by using the show mac-address-table command at the privileged EXEC mode prompt.
How many dynamic addresses are there?
How many total MAC addresses are there?
Do the MAC addresses match the host MAC addresses?

Step 11: View the show mac-address-table options
View the options that the show mac-address-table command has available.
Switch1(config)#show mac-address-table ?
What options are available?

Step 12: Set up a static MAC address

Step 13: Verify the results
a. Verify the MAC address table entries.
Switch1#show mac-address-table
How many dynamic MAC addresses are there now?
How many static MAC addresses are there now?
b. Remove the static entry from the MAC Address Table.

Step 14: List port security options
a. Determine the options for setting port security on interface FastEthernet 0/4.
What are some available options?
b. To allow the switch port FastEthernet 0/4 to accept only one device, configure port security.
c. Exit configuration mode and check the port security settings.
If a host other than PC2 attempts to connect to Fa0/4, what will happen?

Step 15: Limit the number of hosts per port
a. On interface FastEthernet 0/4, set the port security maximum MAC count to 1.
b. Disconnect the PC attached to FastEthernet 0/4. Connect PC3 to FastEthernet 0/4. PC3 has been given the IP address of 192.168.1.5 and has not yet been attached to the switch. It may be necessary to ping the switch address 192.168.1.2 to generate some traffic. Record any observations.


Step 16: Configure the port to shut down if there is a security violation
a. In the event of a security violation, the interface should be shut down. To make the port security shut down, enter the following command: Switch1(config-if)#switchport port-security violation shutdown
What other action options are available with port security?
b. If necessary, ping the switch address 192.168.1.2 from the PC3 192.168.1.5. This PC is now connected to interface FastEthernet 0/4. This ensures that there is traffic from the PC to the switch.
c. Record any observations.
d. Check the port security settings

Step 17: Show port 0/4 configuration information
FastEthernet0/4 is     and line protocol is             .

Step 18: Reactivate the port

Step 19: Disable unused ports

Step 20: Reflection 
a. Why would port security be enabled on a switch?
b. Why should unused ports on a switch be disabled?

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Posted by Monica Fransisca
Subscribe to: Posts (Atom)