2.2.2.5 Lab - Troubleshooting Inter VLAN Routing

hi friends welcome to all today in this video we are going to see the lab activity troubleshooting inter VLAN routing well here we can see the topology also we can see a trussing table and the suitport assignment specifications we will go through the objectives in part 1 built the network and loaded device configurations in party to troubleshoot the inter VLAN routing configuration in part 3 verify VLAN configuration Portus Ament and its ranking and in pata for a tester layer 3 connectivity also we will go through the background the network has been designed and configured to support three VLANs inter VLAN routing is provided by an external router using an eighth-note to point to one cute trunk also known as router honestok routing to a remote web server which is simulated by Lubeck 0 is also provided by r1 however it is not working as designed and user complains how not given much insight into the source of the problems so in this lab we must first define what is not working as expected and then analyze the existing configurations to determine and correct the source of the problems this lab is complete when you can demonstrate IP connectivity between each of the user VLANs and the external web server network and between the switch management VLAN and the web server network so this is what we are going to do in this lab activity here we can see the requital resources so one router 1 & 4 1 2 switches a 2 pcs so then the rack here the cables coming to part 1 a built the network and the loaded device configurations in part 1 we will a set up the network topology and to configure basic settings on the PC host switches and rotor so coming to step 1 cable the network as shown in the topology so we will build and cable the network as shown here in this a topology here we record one router one nine four one also two switches 206 row sutures and two pcs we will connect to these devices connections copper straight through so we are going to use a GC rosin r02 fasterthan or 0/5 then from the switch fasterthan or 0/6 to this PC is zero this is we have to rename it as a PC a we will do that then from this switch faster third 0 / 18 to this PC also we have to connect these two switches are using copper crossover faster than 0 / 1 - faster turns your / - 1 we will rename this display name here this is r1 this is yes one here we have a yes - this is PC - a and here we have PC - B also we will label the interface details this is a G 0 / 1 and here we have a faster thereare 0 / 5 this is a F 0 / 1 here also you have 0 / 1 here we have EF 0 / 6 and this interface is faster than 0 / it in also we will highlight this VLAN trunk eight note to 4 into 1 Q VLAN trunk coming to step to configure PC house refer to the être sink table for PC host address information coming to a trusting table here we can see the IP address of PCA and the PCB will copy this address and we will give it to this PCA here we can see the subnet mask also the default gateway coming to PC a desktop IP configuration here is the IP address subnet to mask then the default gateway is 10.1 now we will get the IP address of PCB here we can see that will cope it is a truss also we can see the subnet mask and the default gateway coming to PCB a desktop IP configuration submit a mask and the default gateway is a 2002 one coming to step three loader rotor and switch configurations load the following configurations into the appropriate router or switch all devices how the same passwords the enable password is class and the line password is Cisco so we are going to give these configurations on router or sutures here we can see the configuration of our one also we can see switch is one configuration and the sutures to configuration so first of all we will do on router r1 coming to the router r1 no enable configure terminal we will set the hostname r1 enable secret as class no IP domain lookup or so we will go to line console 0 and we will set the password a Cisco logging also we will give logging synchronous he will go to line vty 0 to 15 password a Cisco login also we will go to the interface loopback 0 and we will set the IP address to not nine dot the 165 dot 232 to five and the something to mask 255.255.255.0 interface Gigabit Ethernet 0 / 1 and here we are going to give a no IP address or so we will go to the interface a Gigabit Ethernet 0 / 1 go to 1 encapsulation dot1q 1 1 also we will set the IP a trousseau 192 dot 168 to draw to 100 to 1 and this subnet mask 255.255.255.0 coming to the next to serve interface a gigabit ethernet su ro / a 1.10 encapsulation dot1q 10 IP a trousseau one ninety two dot one sixty eight dot 11.2 1 and this subnet mask 255.255.255.0 now we will go to the interface a Gigabit Ethernet 0 / 1 to 20 encapsulation toward to 1q 24 so the IP atrás one ninety two dot one sixty eight dot a 20 door to one and decided to mask 255.255.255.0 now we will do it ah yes one enable configure terminal hostname us yes one enable secret class no IP domain lookup line console 0 password a Cisco login logging synchronous also will go to line vty 0 to 15 password as a cisco loking and you will create two VLAN 10 and to name us our and edy and we look at the interface fastethernet 0/1 so cheap or the modest access will go to the interface fastethernet 0/0 tomate as a trunk now we will go to interface vlan1 and we will set the IP address 192 go to one sixty eight dot one dot 11 and decide to mask 255.255.255.0 now we will set the IEP default gateway 192 dot 168 or to 100 to 1 now we will do it one is to enable configure terminal hostname as s to enable secret class no IP domain lookup line console 0 password a Cisco login also logging synchronous and we will go to line vty 0 to 15 password as a cisco login so we'll create a VLAN 20 the name us engineering I will go to the interface fastethernet 0/1 support the more does a trunk interface fastethernet 0/0 to access a VLAN 10 such a port mode as access i will go to the interface VLAN 1 and the IP address 192 dot one sixty eight dot one dot tool and decide to mask 255.255.255.0 also we will set the IP default gateway 192 dot 168 tor to 100 to one right so here we can forget all the devices so this R 1 is 1 and s 2 as per the configurations are given in this a lab activity coming to step 4 save the running configuration to the startup configuration right so we will do on all the devices coming to r1 password is cisco enable password is class copy running-config startup-config coming to yes one CLI copy running-config startup config and coming to yes to copy running-config startup config coming to party to troubleshoot to the inter VLAN routing configuration in party 2 we will verify the inter VLAN routing configuration on our one enter the show IP route command to view the routing table so which networks are listed we will verify that coming to the router r1 CLI first what is cisco enable password is class sir we are going to give a show IP route and here we can see only one connected network is directly connected to loopback 0 next ISA Arthur any networks missing in the routing table in so witchy networks obviously here we have seen only one connected networks that is Lubeck 0 coming to our addressing table here we can see the interfaces of all these device r1 here given G 0 slash 1.1 1.1 1.20 and it loopback so here we we have seen only this a loopback 0 & 2 or other sub interfaces are not listed in this connection it works I mean in this IP route what is one possible reason that a route would be been sing from the routing table coming to a topology here itself we can see this interface G 0 / 1 which is connecting to this s 1 the link is down so that's why it is not listed in the routing table coming to be on our one issue the show IEP face brief command based on the output are there any interface issues on the router if so what commands would resolve the issues so we will see that coming to r1 here we are going to give that command show IP interface brief and we will verify that here we can see those interfaces Gigabit Ethernet 0/1 here we can see IP address and assigned and it's administratively down also we can see protocol is down so all is sub interface here we can see that 1.21 IP address there Gigabit Ethernet - here we can see the IP address but we can see the status is administratively down so we have to bring this interface up so here we are going to give a no-shit command on this interface Gigabit Ethernet 0/1 on the router r1 configure terminal interface Gigabit Ethernet 0/1 and we are going to give no shut command so once we give this no shut command here we can see all the sub interfaces also changed it stayed to up here we can see the messages once more we will give the command to show IP interface brief and - here now we can see the details here we can see Gigabit Ethernet the status is up but here we can see protocol is down no here we can see the link between this r1 and the s1 is up so here what I have done is just already connected this link on r1 to this interface a gigabit returns 0 / 1 so it become up now again we will verify the details using show IP interface brief and to here we can see the details now we can see the status is up and protocol is also up coming to see on our one array issue the show IP route command verify that all networks are available in the routing table if not continue to troubleshoot until all networks are present so we will give that show command again on this router r1 show IP route will give connected and here we can see the details now we can see all the networks connected networks total four connected networks same thing can be of so in our trussing table here we can see those of four networks coming to pattern 3 a verify VLAN configuration Portus Ament and trunking in part 3 we will verify that to the corrective VLANs exist on both es 1 and es 2 and that trunking is configured correctly step 1 verify a VLAN configurations and the port assignments that coming to a on s1 enter the show VLAN brief command to view the VLAN database bicha VLANs are listed ignore VLANs 1 0 0 2 2 1 0 0 5 right so we will give this a chauvelin brief command on yes 1 coming to our suci s1 CLI enable password is class show VLAN brief and to here we can see the VLAN details here we can see the default VLAN also we can see the VLAN number 10 and to name our Andy so here we got only one villain are there any violence numbers or names missing in the output if so list them obviously because we have seen we have to create it to VLAN VLAN 20 and VLAN 10 but here we can see only one bill and that is so VLAN 10 so we have to create this VLAN 20 with the name engineering also next ISA are the access ports are saying to the character VLANs if not le to the missing or incorrect assignments coming to a topology here we can see these two ports that is fasterthan 0 / 5 and if faster than 0 / 1 should be trunking and coming to these faster turrets 0 / 6 here we can see which is connecting to this anti device should be an access port also we can see in our suit support assignment specifications here we can see on s1 faster throught 0 star 6 we must assign to VLAN 10 coming to our previous show command to any s1 here we will let check that faster third 0 star 6 but it is not assigned to VLAN 10 here we can see that there is no port si into this VLAN and here we can see faster there are 0 / 6 which is in the default - VLAN 1 so it's going incorrect next easy for accurate of what commands would resolve the VLAN issues yes we are going to give that command so on this Suchi s1 coming to the suture yes one password is cisco enable password is class configure terminal we have to go to that interface fastethernet co-star 6 switch reporter mode as access such a port access VLAN 10 also we will create the missing the land on this Succi s1 here we can see that we learned 20 engineering so we will create that VLAN or newest one VLAN 20 nameís engineering coming to be on s1 reissue the show VLAN brief command to verify a configuration right we will do that chauvelin brief and here we can see the details now no we can see the VLAN 20 engineering also we can see the port of fasterthan or 0/6 is assigned to the VLAN 10 no it's correct coming to see on his to enters the show VLAN brief commanded to view the VLAN database so which evidence are listed ignore real answer 1 0 0 2 2 1 0 0 5 so we will give this command on is to now Cisco enable password is class chauvelin brief and here we can see the details here we can see the villains are default VLAN 1 also we can see VLAN 10 and VLAN 20 VLAN 10 is so here we can see the name is a default VLAN name and this is engineering right so we go to VLAN but here we can see the Vidan name is the default to villain name next is are there any VLANs numbers or names missing in the output he is so list them we have seen that actually VLANs are not missing but here we can see this a VLAN name is missing here we can see the default VLAN name so we have to change this a VLAN name as per our lab activity next reefs are the access ports are sent to the correct VLANs if not that leads to the missing or incorrect assignments coming to our topology here we can see the interface fastethernet 0/1 there should be trunking and here we can see the interface fastethernet 0/1 which is connecting to this entity vise so this port should be an access port also here we can see this port should be a saint to a VLAN 20 that is engineering so we will verify that coming back to is 2 and here we can see the port faster Turner 2-0 / 18 and we can see which is a saint to VLAN 10 actually according to our lab activity this fashion error 0 / 18 should be a saint - this VLAN 20 so it's incorrect next is C for accurate of what commands would resolve the VLAN issues so we will implement that on this is - first of all we will give a revealer rename this VLAN 10 configure terminal we will go to VLAN 10 and we will name us our anti D and now we will assign faster theorem 0 / 18 to reveal and 20 so we have to go to the interface fastethernet 0/1 support mod as access switch port access VLAN 20 one is to reissue the show VLAN brief command to verify any configuration changes so we will already shoot the show command here chauvelin brief and you know here we can see the changes now we learn 10 name is R and G also we can see the port faster third 0 / 18 is assigned to that are equivalent now we will come to stupid to verify trunking interfaces coming to a on s1 enter the show interface Tran command to view dirt ranking interfaces which reports are in tracking mode so we have to see that coming - yes one and we will give that specified a show command enable password is class sure interfaces a chunk and here we can see the details port faster third 0/5 you Maurice own and status is trunking and in a TV land one yes so in this output we can see only one thought is trunking are there any ports missing in the output if so list them so coming to our table here we can see on s when these two ports faster third 0 / 1 and the 0 / 5 should be trunking so coming to a topology we can see that to vertically early of fast return 0 / 5 it's already trunking but this interface the F 0 / 1 is not not ranking if requred what commands would resolve with the port chunking issues so we will implement that on s1 we have to give this faster than 0 / 1 as trunking coming to the configuration so we have to go to that interface that is faster third 0 / 1 and here we have to give a support mode as a chunk on s1 or reissue the show interface the trunk command to verify any configuration changes we will check that show interfaces trunk and you know we can see here the output ports are faster parent 0 / 1 & 0 / 5 both are chunking coming to see on is to enter the show interface trunk command to view the ranking interfaces which reports are in tracking mode coming to a topology here we can see on s to the interface fastethernet 0/1 should be tracking right so are there any ports missing in the output if so list them so we have to check that coming - yes - here we are going to give the command show interfaces chunk and here we can see the result yes this interface fastethernet 0/1 is a trunking native VLAN 1 it's correct so if required what commands would resolve the poor chunking issues there is no issue now we are coming to part 2 for test a layer 3 connectivity coming to a know that you have a corrected multiple configuration issues let us just connectivity right so from pca is it possible to ping the default gateway for VLAN 10 you will try that first of all we will get the IP address of VLAN 10 on this r1 here we can see that IP address 10 to 1 we will copy this atras and coming to pc a desktop command prompt and we will ping to the default gateway we are waiting for the replay or it was timed out no we are not getting the replay next is from pca is it possible to ping to PCB so we will try from this pca to PCB first of all we will get the IP address of PCB here we can see that coming back to pc a command prompt and tapping to PCB and to be are waiting for the play Rico's timed out no we are not getting the replay next Issa from PCA is it possible to ping to loop back zero we will get the IP address off loop back zero here we can see that do the copy disatrous and coming to PCM command prompt ping to loop back zero we are waiting for the replay riggo's timed out no we are not getting the replay if the answer is no to any of these questions troubleshoot to the configurations and to correct the error so everywhere we got no so we will have trouble shoot now we will refer our addressing table here is that and pc a IP configuration everything is correct we have to cross-check on our one CLI Cisco enable password is class and here we are going to give a show running config and we are going to verify each interfaces here we can see the interface Gigabit Ethernet 0 /a 1.1 here is that IP address 192.168.1.1 so we have to change that then here we can see interface the sub-interface Gigabit Ethernet 0 / 1 dot 10 encapsulation dot1q 10 it's correct and here we can see the IP address 192.168.1.1 so it should be 10 to 1 so here are the IP addresses are saint-ouen correctly summer to mask is correct and coming to the next sub-interface g0 slash 1.20 encapsulation is correct i Pietrus it's correct submit to mask also correct we will reconfigure these two image or changes here configure terminal we will go to the interface if you got with the third 0 /a 1.21 and here we are going to give encapsulation dot1q 1 and you know we will verify that to show running config and to here we can see that interface G 0 / 1 dot 2 1 encapsulation dot1q 1 native and also we can see the IP address and separate to mask now we will change the IP address of the sub-interface G 0 / 1 dot 10 from this 11 to 1 to 10 to 1 configure terminal we have to go to that sub interface G 0 / 1 dot 10 IP address of one ninety two dot one sixty eight dot 10.2 one and it's aptly to mask 255.255.255.0 now we will verify that show running config and to here we can see that it's correct also we will verify the IP address or for the interface loopback 0 here we can see that on the addressing table to not 9.16 5.20 0.225 and here we can see the submit to mask your thing correct now we will try to ping from this PC a to the other devices coming to PC a command prompt first of all we will ping to the default gateway here is that here we can see we are getting the replay now we will ping to PC 2 here is the IP address we are getting the replay also we will ping to a loopback we are getting the replay next is from PCA is it possible to ping - yes one also from PCA is it possible to ping two years - we will try that first of all we will lap in two years one we will get the IP address of s1 here is that coming to PC a command prompt ping to the switch s1 rigo's timed out no we aren't able to ping now we will try to a pin to peel yes - here is the IP address coming to PC a command prompt ping - years - we are waiting for the replay request timed out no we are not getting the replay next Lisa listed some of the issues that could still be preventing successful pings - the sutures maybe these switches configured with the incorrect IP address or maybe the interface interface where we configured the IP address is down so we have to check that coming to be one way to help or resolve where the error is occurring is to do a tracer from pca to s1 here we can see that command and its output this output shows that the requester from pca is reaching the default gateway on our 1g0 slash 1.10 but the packet stops at the router we can also verify that using this extra set command on this PC a trace it and here is the IP address of s1 oops we have to get a space here and you know we will try so we can see it reaches to the router r1 tantrikas timed out Rico's timed out no we are not reaching to this sushi s1 coming to see you have already verified the routing table entries for r1 now execute the show running configuration command to verify VLAN configuration list any configuration errors right we will do that first of all we will come to yes one Cisco enable password is class show running config and we will verify that to VLAN here we can see that interface vlan1 here we can see the IP address 1.11 and discipline to mask and here we can see it's shut down we can see the status our show IP interface brief and here we can see that it's administratively down also we will verify on s2 password is cisco enable show running config and to here we can see a VLAN 1 IP HS submit to mask everything is correct but we can see this interface is down show IP interface brief it's administratively down so we have to give in or shut command on this interface vlan1 on both switches first of all we will do it on s1 configure terminal we have to go to ensure that interface vlan1 and we have to give in your shut command now we can see VLAN 1 changed state to up we can verify that show IP interface brief and here we can see the status and the protocol both are up now we will come to us to configure terminal interface vlan1 no shut we n1 changed state to up show IP interface brief and here we can see that status and protocol both are up what commands server to resolve any issues found so we given given nor shut command on both successor for the interface vlan1 coming to DV verify that to the pings from pca now reach about s1 and ds2 from pca is it possible to ping s1 from pca is it possible to ping is - we will let's try that coming to pc a command prompt and we will give you the IP ping - yes one here is that you're waiting for the replay request timed out because timed out yes we are getting the replay once more we will give that here we can see we are getting the replay now we will try - yes - here is that and sometime we may get two or one or two request timed out request timed out yes be able to ping - as - also here we can see that and coming to a reflection question what are the advantages of viewing the routing table for troubleshooting purposes obviously this routing table is having a huge role in troubleshooting we can see all the connected networks as well as the remote networks whatever we configured we can find those networks also we can check the IP addresses also we can check the missing networks well so in this lab activity we configured our packet tracer as per the instructions given first then in that there was some errors and it suited all the problems that was the lab activity troubleshooting inter VLAN routing front city how in the doubt in this lab activity please comment below also if you like my video give it thumb and share to your friends also if you like to get my future uploading video info intro Gmail you can subscribe this channel thank you

Channel: Tech Acad

Views: 14,893

Keywords:

Id: FFFkfB7hAO0

Length: 43min 13sec (2593 seconds)

Published: Mon May 14 2018