3.4.6 Packet Tracer - Configure VLANs and Trunking - Physical Mode

vlans can also be used as a security measure by controlling which hosts can communicate in general billings make it easier to design a network to support the goals of an organization bill and trunks are used to expand vlans across multiple devices trunks allow the traffic from multiple belongs to travel over a single link while keeping the vlan identification and segmentation intact you will create belongs on what switches in the topology assign belongs to switch access ports and verify that vlans are working as expected you will then create a villain trunk between the two switches to allow hosts in the same vlan to communicate through the trunk regardless of which switch to which the host is attached build the network and configure basic device settings build the network as shown in the topology click and drag but switch s1 minus 2 to the rack okay this is switch s1 s2 29 2960 switches okay drag as one and drag s2 click and drag about pca and pcb to the table okay you need pcb and pca and drop to the table this is pca and pcb provide network connectivity by connecting copper straight through cables as shown in the topology a between s1 and s2 fasten another one and further the net one use this cable copper straight through for set them as one preset another one to connect pca from switch 1 faster turn on 6 from switch 1 for 7.6 to pca and from faucet 18 on switch 2 to pcb and from faster download 18 on switch 2 to pcb okay very good connect console cable from device pca to s1 okay use this [Music] blue cable from pca to s1 is the console cable so the console cable is this light blue cable console to connect from rs to 3d2 on pca to console on s1 but the console longest one is right click inspect rear and this is the console now you have this connection from pci rs2302 to s1 console using the console cable or roll over cable and from pcb to s2 use the another console this and connect the rs232 on pcb right click inspect grid to console and now you have this connection pcb rs232 s2 console configure basic settings for each switch from desktop tab on each pc use terminal to console into each switch and enable privilege excel mode okay and from pca access the console of this one click on turn on the pc turn on pcb switches switches are power wrong because they are connected to the power distribution device and this connection is enough and click on pca desktop terminal to access the console of the device okay now you are on the console of s1 enter you are this is the prompt for s1 enable privilege exec mode enable enter enter configuration mode field terminal assign device name okay in this case the name is as one like addressing table shows the name or topology as one host name as one class is the privilege encrypted password enable secret class cisco is the console password and enable login okay line console 0 password cisco and enable login ok enable login login exit assign cisco as the bty password and enable logging okay line bty virtual lines from 0 to 15 all the virtual lines from 0 to 15 you have 16 lines password cisco and enable login then exit you are on global configuration mode encrypt the plain text passwords your service password dash encryption create a banner that warns anyone accessing the device that when authorized access is prohibited by message of the day and authorized access is prohibited you know the reserve access is prohibited configure ip address listed in the addressing table for billing one on the switch okay this is bill and one the switch s1 ip address not the full gateway interface billing one shut down shut down all interfaces that will not be in use okay using interfaces on s1 are [Music] faster than that one and further six for that another one and further than six inches so okay exit from milan one and interface range from fast internet two to five comma and fast internet seven to 24 and gigabit one and two okay one is in use so select the range from two to five 6 is in use so select from 7 to 24 and don't forget gigabit 1.2 01.02 enter shutdown okay exit set the clock on each switch exit do this on privileged access modes clock set question mark the current time question mark the date of the month the month september and the year 2021 okay very good save the running configuration to the startup configuration copy running dash config to start up dash config enter enter okay and don't forget to configure switch to start from step two switch to is connected to pcb so click on pcb desktop terminal okay enter and all this process okay privilege action mode enable configuration modes configure terminal device name hostname s2 class privilege exec encrypted password enabled secret class c is called console password line console ceo password login and this is called vty password 9bty0215 password cisco login exit encrypt the plain text password service password encryption the banner message of the day now to rise access is prohibited ip address use the addressing table for switch s2b log one okay interface one ip others 19168 112 okay now shut down exit shut down all interfaces not in use okay here on last two interfaces in use are faster than that one and 18. so use the following range interface range one in use so select from 2 to 17 18 and use so select from 19 to 24 and don't forget gigabit zero one and zero two shutdown exit okay very nice set the clock on each switch okay and so you do this on privileged access mode clocks hour minute and second however day 20 29 september 2021 enter very good save the running configuration copy running config to startup config enter enter ok very nice configure pc hosts from desktop tab on each pc click ip configuration enter the address information as displayed in the addressing table okay look at the configuration of pca ip address netmask and default gateway this is for pca click on pca and close terminal ipconfiguration 180 168 and 3 subnet mask and default gateway tank 1 and click on pcb close the terminal ip configuration 182.168.10.4 and when i do 168.101 okay this is for pcb 180 168 m4 subnet mask and default 180 168 101 okay this it's very good test connectivity okay pci ping pcb okay go to pca command prompt pcb what is the ap address of pcb 192.168.4 success so the answer is yes pca pink s1 okay from pc ap s1 this is the ipl surface one 180 168 111 okay the answer is no ping fails can pcb ping has to go to pcb command prompt ping ss2 this ap others 182 168 112 okay the answer is no ping fails and can s1 pin s2 okay go to s1 so access the console remember pca is connected to the console of s1 click on pca and go to terminal to access the console of s1 enter privilege access mode pinf s2 this is the ip address of s2 only 2168 112 okay success repeat all success the answer is yes if you answered no to any of the above questions why were the pings unsuccessful things were unsuccessful when trying to pin a device on a different subnet for those pings to be successful but the full gateway must exist to road traffic from one subnet to another okay look at this according the the ip address and subnet mask switches are on different subnet of pieces okay create vlans and assign switch ports you will create management operations parking lot and native belongs on both switches you will then assign the balance to the appropriate interface the show belong command is used to verify your configuration settings create blocks on the switches okay organize one create the vlans okay s1 is connected on pci okay this is the console configure your terminal bill and 10 name operations case sensitive be careful bill and 20 name parking lot underscore lot okay parking underscore lot case sensitive vlan 99 name management and billing thousand name native and create the same belongs on s2 so go to pcb click on pcb and go to terminal okay enter remember the password for the console was cisco enter enabled the password for enable is class configure terminal plan time milan tank name operations elan 20 name are king underscore not enter belong 99 name management milan 1000 name native and so will unbrief to view the list of vlans on s1 okay click on pca this is the console of s1 s1 and show belong brief now you can see 10 20 99 1000 the four billions created what is the default belong the default belong is belong number one what ports are assigned to the default belong all ports are assigned to the default vlan from 1 to 24 and from gigabit 01 to gigabit co2 assign belongs to the correct switch interfaces assignments to erasers as one okay to option b use these commands bill and cheng foster note 6 look at the topology pca connected to facet106 on s1 and will be on vlan 10. go to pci this is the console for the switch enter the password for for the switch the console password is cisco enabled and this password is class configure terminal interface for settling six switchboard mode access switchboard access vlan 10 operations from belong 1 remove the management ip address and configure it on p99 okay access belong one the virtual interface vlang1 remove the ip address and from interface belong 99 assign the ip address interface belong one ip address shut down if you want interface belong 99 ip holders 182 1681 11 285 385 0 no shutdown command is not necessary because vlan 99 automatically change it state to up and if you have this message translating the main server and ctrl shift six control shift six okay and show you brief command and verify the vlans are assigned to the correct interfaces shall we land brief first alternatives to operations bill and chang show ip interface brief actually interface brief okay then for first alternate six status are protocol up first another one status of protocol b language down below 99 ip address status up protocol down what is the status of vlan 99 explain the status of illinois 99 the status of vlan 99 is up and protocol is down the status is up because the belong exists in the database but the protocol is down because the vlan has not been assigned to an active port yet assign pcb to operations belong on s2 okay pcb is connected to facetime 18 and add to vlan 10 operations belong okay and click on pcb to configure switch s2 enter cisco is the console password enable class the enable password configure terminal interface for setting up 18 switch for axis switch 4 axis bilante okay and from bilangua remove the management ip address and configure it on below 99 okay now for us to change the management below from one to ninety nine interface vlan one no ip address shutdown interface vlan 99 ip address according the address in table 182 168 112 so that mask okay no shutdown is not necessary because interface belong 99 automatically changes state to up and should we brief show billion brief 18 to billan tank is s1 able to pin s2 okay go to pca to access s1 console and from s1 try to ping s2 182 168 112 is s1 able to be invest 2 no the ip addresses for the switches now reside in vlan vlad99 vlan 99 traffic will not be sent over interface facility 1. this is facade 1 the connection between s1 and s2 is pca able to pinch pcb okay go to pca close terminal command prompt and try to ping pcb is 10.4 10.4 okay thing failed okay is pca able to pick pcb no interfere faster one is not assigned to bill and tech so bill antenna traffic will not be sent over it maintain will import assignments and the bill and database you will change for billing assignments and remove billings from the vlan database assign vlan to multiple interfaces on s1 assign interfaces 11 to 24 to belong 99 okay go to pci clock close chrome command prompt open terminal okay configure thermia interface range facility 11 to 24 switchboard mode access switchboard axis milan 99 and remember these ports are not in use and show vegan brief show bill and brief now you can see belong 99 you have from 11 to 24. reassign fasternet 11 and 21 to vlan 10 configure terminal for the tournament 11. interface range internet 11 is not arranged they are only two interfaces comma for the net 21 okay for for the range use the dash in this case is not range is these are only two interfaces eleven and twenty one okay switchboard access vilante and verify show vlan brief okay 11 and 21 on vlan 10 operations remove a billing assignment from an interface now switch for access billing command to remove the vlan 99 assignment to first internet 24 use these commands on s1 so access to pci s1 configure terminal interface for sentiment 24 and and verify show will i'm brief okay and before to apply the command fossa turner 24 was on vlan 99 management and after applying this commands 24 will go to bill and one the default villain which belong is 424 now associated with milan wang the default villain remove a vlan id from the vlan database add vlan 3d to the interface 24 without using the global plan command and remember vlan theory does not exist interface was internet24 switch port switchboard access belong 3d enter accessbilan does not exist curating bill and theory the current switch technology no longer requires that the bill and command be issued to add ambiland to the database by assigning an unknown belong to a port the billing will be created and added to the billing database verify that the new vlan is displayed in the vlan table okay and show william brief now bill and theory and uses this default name and what is the default name of bill and theory vlan zero zero theory use the nobile theory command to remove villain theory from the vlan database okay global configuration mode configure terminal i'll be like 3d enter and schwabel and brief shall be language and no villain theory faceternet24 was assigned to bilan 30. deleting bill and thirdly from the villain database why is 424 no longer displayed in the output of the shelby land brief command what belong is for faster 24 now assigned to what happens to the traffic destinated to the host that is attached to facadera 24 okay no fasternet24 when you delete a vlan any ports assigned to that belong become inactive port faster than not 24 is still associated to vlan 30 but it's not longer shown in the output vlan theory is now inactive because it does not exist in the vlan database any board associated with vlan 30 will not transfer any traffic on interface 24 issue no switchboard access vlan command okay and configure terminal interface for 724 no switch for access belong enter and verify show billion brief and now 24 is in bilangua show will on brief and to which villain is faster than that 24 assign it default belong belong one before removing abilene from the database it is recommended that you reassign all the ports assigned to that villa why should you reassign a port to another vlan before removing the vlan from the vlan database the interfaces assigned to a vlan that is removed from the vlan database become inactive and are unavailable for use until they are reassigned to another villa this can be a tricky thing to triple shoot stronger interfaces do not show up in the port list as well configure an ao2.1q trunk between the switches you will configure interface 101 to use dynamic trunking protocol dtp to allow it to negotiate the trunk mode after this has been accomplished and verified you will disable dtp on interface fastener one and manually configure it as a trunk use dtp to initiate trunking on fasteners one the default ddp mode of a 2960 switch port is dynamic auto this allows the interface to convert the link to a trunk if the networking interface is set to trunk or dynamic desirable modes on s1 set faster.1 to negotiate trunk modes on s1 interface asset another one and use switchboard mode dynamic desire on s1 configure terminal fasten the node 1 interface for settlement 1 ok on this side of the trunk on the side of s1 enter switchboardmo dynamic design okay line protocol interface belong 99 change it state to up you should also receive link status messages on s2 okay go to s2 click on pcb now you can see my protocol of interface belong 99 change it state what on s1 and s2 issued a show will brief command interface for 7.1 is no longer assigned to vlan 1. trunked interfaces are not listed in the vlan table we click on pca and show will and brief now fast at another one before first internet one is on b long one and now facilitate one is strong and he's not here the same way the same way on s2 show interface is trunk showing interface strong now you can see more fast at another one notice that the mode long as one is set to desirable okay the mode is desirable because you configure this with switchboard mode dynamic desirable consider that one and the mode is designed and go to s2 enter cisco console password enable class the enable password and show interface strong in this case first internet one the mode is auto okay the mode is outdoor because the the phone configuration on facebook.1 is dynamic auto by default all vlans are allowed on a trunk the switchboard run command allows you to control what vlans have access to the trunk for this activity keep the default settings this allows all belongs to traverse facet another one verify that billing traffic is traveling our trunk interface faster at one okay s1 pin s2 okay go to pca go to console of s1 pin 182 168 112 remember 112 is s2 and success repeat success pca pcb close terminal open command prompt ping pcb pcb is 10 4 then for enter success can pca ping s1 q ping s1 s1 is 1.11. okay and can pc ap has one no okay pcb pin s2 click on pcb then close the terminal open common prompt and try to pinch s2 remember s2 is 1 12. okay okay pcb has two no if you answer it now to any of the above questions explained below the switches are in milan 99 and the pcs are in billion time therefore the pings between vlans were unsuccessful manually configure trunk interface faster than one the switchboard mode run command is used to manually configure a port as a trunk this command should be issued on both ends of the link on the interface faster than that one change the switchboard mode to force trunking make sure to do this on both switches okay this command on both switches go to terminal okay configure terminal interface for the number one switch port mode trunk enter exit and go to pcb close command prompt open terminal okay you are on s2 configure terminal interface at the new one [Music] switchboard trunk enter exit show interfaces trunk to verify notice that the mode changes from desirable to on okay go to pca and show interface is trunk the mode is on manually configured to trunk go to pcb and show interfaces trunk mode on manually configure it to trunk modify the trunk configuration on both switches by changing the native belong from bilanguan to belong one thousand okay by the phone this this this trunk is using belong native one okay the same way on the other side on s2 on s2 then the tb long is one and change change this to one thousand go to pca configure terminal interface facilities one switchboard trunk space not deep tip 1000 okay and go to the another site and you can see this message inconsistent local belong okay the native language on facetime at one minus one is one thousand and the native language faster than that one on s2 is one so change to okay configure terminal first another one switchboard trunk tip belong 1000 okay and now you can see this message port consistency restored show interface is strong enter show interface strong native language the another side enter and show interface strong nativi nativilang one thousand why may you want to manually configure an interface to shrunk mode instead of using dtp dynamic trunking protocol not all equipment uses dtp dynamic running protocol gtp is cisco proprietary and using the switchboard mode strong command ensures that the port will become a trunk no matter what type of equipment is connected to the other end of the link why may you want to change the nativilang on a trunk using bilangua the default belong because the nativian is a security risk all the different control protocols that are exchanged between switches are exchanged via the nativi language and that information could be exposed if default seedings are used on ports that users connect to what is needed to allow costs on billing 10 to communicate to host on billing 99 to allow intermittent routing requires a layer 3 device like a layer 3 switch or a router and this is necessary to rule traffic between villans what are some primary benefits that an organization can receive through effective use of villains billiard benefits include better security cost savings efficient use of bandwidth and uplinks higher performance smaller broadcast domains broadcast store mitigation improved id staff efficiency simpler project and application management completion 100 thank you very much you

Channel: Christian Augusto Romero Goyzueta

Views: 3,158

Keywords: switching, essentials, srwe, v702, packet tracer, physical mode, trunk, trunking, native vlan, vlan table, vlan, vlans, access port, trunk port

Id: jXZ-NGSLl30

Length: 50min 21sec (3021 seconds)

Published: Thu Oct 07 2021