Đang tải... (xem toàn văn)
Quản trị mạng LAB 3 - LAN switching
CCNA LAB No. 3 : LAN Switching Lab time: 1 session Students are recommended to read the entire lab requirement before starting. The TIP session should only be used for troubleshooting. For any problem concerns hardware or losing connectivity, please contact instructor.Topology:Two switches are connected by two physical lines as shown above.1. Task 11. Access in the switches through console lines.2. Configure the name of switches: Switch_A and Switch_B Switch(config)#hostname Switch_A Switch_A(config)#3. Configure IP management address. This IP address in the subnet, which includes IP address of PC. Switch_A(config)#interface vlan 1 Switch_A(config-if)#ip address 10.2.0.15 255.255.255.0 Switch_A(config-if)#no shutNote : No shut command is used to change state of vlan to up . However ; Switch 2950 series has only one interface vlan is up .When you issue no shut command to another vlan , the current vlan will change state to down . 4. Configure password so that PC1 can telnet in to Switch_A.- To PC1 can telnet into Switch_A , Switch have to IP management address- A password must be set on one or more of the vty lines for users to gain remote access to a Switch through Telnet (Virtual Terminal Password) Switch_A(config)#line vty 0 4 Switch_A(config-line)#login Switch_A(config-line)#password <password >-5. Configure Switch_A so that after telnet to Switch_A, PC1 can go to global config modewww.ipmac.com.vn10.2.0.15x/24 - To PC1 can go to global config mode , Switch_A have to has enable password or secret password. The enable password is only used if the enable secret has not been set .- The following commands are used to set the passwords : Switch_A(config)#enable password <password > Switch_A(config)#enable secret <password > 6. Be sure that all passwords, which has been configured on Switch , be encrypted when seen by show commands- Issue Show run command to view 7. Configure default gateway of switch to point to the last IP of present using subnet. Some network devices can provide a web-based interface for configuration and management purposes . Once a switch is configured with an IP address and gateway, it can be accessed in this way. Switch_A(config)#ip default-gateway 10.2.0.10 8. PC, which plugs in port 0/5 of switch_A, cant not operate in full duplex and 100Mbps. Configure port 0/5 to synchronously operate with PC. Switch_A(config)#interface f0/5 Switch_A(config-if)#speed 100 Switch_A(config-if)#duplex full Note : If the port in auto speed mode , we must set speed mode before seting duplex mode. www.ipmac.com.vn 9. Which MAC address has been learned by switch on port 0/5. Switch_A#show mac-address-table interface f0/5 10. Configure Switch_A to does not accept more than 10 MAC address through port 0/5. If there are more than 10 MAC address through port 0/5, the Switch will shutdown this port. Switch_A(config)#interface f0/5 Switch_A(config-if)#switchport port-security maximum 10 Switch_A(config-if)#switchport port-security violation shutdown 11. Configure similarly for Switch_B.2. Task 21. Configure vlan on Switch A and Switch B by using the following table: Vlan Vlan Name Portwww.ipmac.com.vn 2 Vlan 2 Fa0/23 Vlan 3 Fa0/34 Vlan 4 Fa0/4 The command vlan database can be used in the Privileged EXEC mode to enter into VLAN configuration mode. A VLAN name may also be configured, if necessary: Switch_A#vlan database Switch_A(vlan)#vlan vlan_number Switch_A(vlan)#exit Issue Show vlan to view configuration : Upon exiting, the VLAN is applied to the switch. The next step is to assign the VLAN to one or more interfaces : Switch_A(config)#interface f0/2 Switch_A(config-if)#switchport mode access Switch_A(config-if)#switchport access vlan 22. Configure trunking encapsulation on switches to make frames of all vlans, transmitting through the trunk link, are encapsulated, except vlan1. Switch_A(config)#interface f0/20 Switch_A(config-if)#switchport mode trunk Switch_A(config-if)#switchport trunk native vlan 1Note : Switch 2950 series support only 802.1q on the trunk . If you use another Switch as 3550 series you need to verify encapsulation type via command : Switch_A(config-if)# switchport trunk encapsulation <encapsulation type>3. Because of security purpose, please configure switch to allow only the frames of vlan 2 and 4 can be transmitted through trunk link. Switch_A(config-if)#switchport trunk allowed vlan 2,43. Task 31. Configure vtp on Switch A and B, domain IPMAC The following command can be used to enter VLAN database mode and configure the VTP version number. Switch_A#vlan database www.ipmac.com.vn Switch_A(vlan)#vtp v2-mode The following command can be used to create the management domain. Switch_A(vlan)#vtp domain IPMAC2. Configure Switch B to accept only information of vlan database from switch A. We will configure Switch_A into server mode and Switch_B into client mode The following command can be used to set the correct mode of the switch: Switch(vlan)#vtp {client | server | transparent} Switch_A(vlan)#vtp server Switch_B(vlan)#vtp client3. Create vlan 5 on Switch A, be sure that information about vlan 5 is updated in vlan database of Switch B. Switch_A(vlan)#vlan 5 Issue Show vlan to view vlan database www.ipmac.com.vn Bonus Tasks:1. Try to access to your switch through Web interface (using Internet Explorer or Firefox)2. Create a basic config-file (basic.txt) and save to the flash of your switch to recover it in case of corruption.End of LAB No3www.ipmac.com.vn . Configure vlan on Switch A and Switch B by using the following table: Vlan Vlan Name Portwww.ipmac.com.vn 2 Vlan 2 Fa0/ 23 Vlan 3 Fa0 /34 Vlan 4 Fa0/4. CCNA LAB No. 3 : LAN Switching Lab time: 1 session Students