LAB: 6 VLAN AND VLAN TRUNKING VLANs are created to provide the segmentation services traditionally provided by routers in LAN configurations. A VLAN is a switched network that is logically segmented by functions, project teams, or applications without regard to the physical location of users. Each switch port can be assigned to a VLAN. Ports in a VLAN share broadcasts. Ports that do not belong to that VLAN do not share these broadcasts. This improves the overall performance of the network. Communication between VLANs is provided by layer 3 routing. http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/sw_ntman/vlandir/vdir1gsg/ov ervw.pdf LAB: 6 Switching : Object: Demonstrate and create a virtual LAN environment by logically segmenting LAN traffice. Equipment: 2 cisco 2950 switch Console cable. Hyperterminal for communicating with the switches. Category 5 ethernet cables straight thru for connecting switch to PC Category 5 ethernet cable cross-over for connecting switch to switch. SW2 Paris SW1 Toronto trunk Vlans 10,20,30 1 2 3 1 Van10 Van10 Van20 Van20 Van30 Van30 HR HR Sales 3 2 Sales Warehouse Warehouse 1 Procedure: Configure Switch as shown below. 1. Switch# show vlan What vlans do you see? 2. Do the following configuration on both switches. Switch#conf gure terminal Switch(config)#int fa0/1 Switch(config-if)#switchport mode access Switch(config-if)#switchport access vlan 10 Switch(config-if)# no shut Switch(config-if)#end Switch#configure terminal Switch(config)#int fa0/2 Switch(config-if)#switchport mode access Switch(config-if)#switchport access vlan 20 Switch(config-if)# no shut Switch(config-if)#end Switch#configure terminal Switch(config)#int fa0/3 Switch(config-if)#switchport mode access Switch(config-if)#switchport access vlan 30 Switch(config-if)# no shut Switch(config-if)#end 3. do show run to check your configurations 4. do show interface fa0/1 is the interface up? to configure trunk between switches do the following command Switch#configure terminal Switch(config)#int fa0/3 Switch(config-if)#interface fa0/24 Switch(config-if)#switchport mode trunk Switch(config-if)#switchport trunk allowed vlan 10,20,30 2 5. connect the PCs to switch ports. And configure PCs interfaces as shown below. Control panet -> network connections ->local area connection-> properties>TCP/IP PC Name PC1 PC2 PC3 PC4 PC5 PC6 IP Address 10.10.10.1 10.10.10.2 30.30.30.3 30.30.30.4 50.50.50.5 50.50.50.6 Maks 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 Gateway 10.10.10.2 10.10.10.1 30.30.30.4 30.30.30.3 50.50.50.6 50.50.50.5 Ping PC2, PC3, PC4 and PC5 by using PC command prompt Where you able to ping all PCs? Which pings were successful and why.? Explain why vlan is good for network security. Explain why trunk is being used in this lab 3