Universitaria de Colombia

Ing. Leonel Lugo M. 00000

SUBREDES
Mascara de RED 11111111 . 11111111 . 11111111 . 00000000
255 . 255 . 255 . 0

256-2
254

Mascara de SubRed 11111111 . 11111111 . 11111111 . 10000000

255 . 255 . 255 . 128

128
256 128

Rango de IP 192.168.20.(0-127) Rango de IP 192.168.20.(128-255)

Dirección de RED 192.168.20.0 Dirección de RED 192.168.20.128
Primera IP Disp 192.168.20.1 Primera IP Disp 192.168.20.129
IP del broadcast 192.168.20.127 IP del broadcast 192.168.20.255
Ultima IP Disp 192.168.20.126 Ultima IP Disp 192.168.20.254

DISEÑO DE RED
Puertos
Inicio Fin
VLAN 5 (Sistemas) 5 8
VLAN 15 (Programación) 15 18
VLAN 300 (Parqueo >>> Apagamos)
1-2-3-4-9-10-11-12-13-14-19-20-21-22-23-24

VLANS NOMBRE PC DIR IP PC FASTETHERNET PC FASTETHERNET PC

Witch1 Fa0/24 Gig0/0/0 (Giga Router)
VLAN5 PC1 192.168.20.20/25 Fa0 Fa0/5
VLAN5 PC2 192. 168.20.21/25 Fa0 Fa0/6
VLAN5 PC3 192. 168.20.22/25 Fa0 Fa0/7
VLAN5 PC4 192. 168.20.23/25 Fa0 Fa0/8
VLAN15 PC5 192. 168.20.140/25 Fa0 Fa0/15
VLAN15 PC6 192. 168.20.141/25 Fa0 Fa0/16
VLAN15 PC7 192. 168.20.142/25 Fa0 Fa0/17
VLAN15 PC8 192. 168.20.143/25 Fa0 Fa0/18
 Universitaria de Colombia
Ing. Leonel Lugo M. 00000

Diseño de la RED

Configuración de los PC(s)

CONFIGURACIÓN DEL SWITCH

 Entramos al modo privilegio
Switch>enable

Universitaria de Colombia
Ing. Leonel Lugo M. 00000

Validamos que no existan Vlans

Switch#show vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4
Fa0/5, Fa0/6, Fa0/7, Fa0/8
Fa0/9, Fa0/10, Fa0/11, Fa0/12
Fa0/13, Fa0/14, Fa0/15, Fa0/16
Fa0/17, Fa0/18, Fa0/19, Fa0/20
Fa0/21, Fa0/22, Fa0/23, Fa0/24
1002 fddi-default active
1003 token-ring-default active
1004 fddinet-default active
1005 trnet-default active

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 tr 101003 1500 - - - - - 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0
1005 trnet 101005 1500 - - - ibm - 0 0

Entramos al modo de configuración

Switch#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.

Creamos las Vlan(s)

Switch(config)#vlan 5
Switch(config-vlan)#name Sistemas
Switch(config-vlan)#exit
Switch(config)#vlan 15
Switch(config-vlan)#name Programacion
Switch(config-vlan)#exit
Switch(config)#

Validamos que las Vlan estén Creada. Lo podemos realizar desde el el

modo configutacion agregándole la palabra do
Switch(config)#do show vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4
Fa0/5, Fa0/6, Fa0/7, Fa0/8
Fa0/9, Fa0/10, Fa0/11, Fa0/12
Fa0/13, Fa0/14, Fa0/15, Fa0/16
Fa0/17, Fa0/18, Fa0/19, Fa0/20
Fa0/21, Fa0/22, Fa0/23, Fa0/24
5 Sistemas active
15 Programacion active
1002 fddi-default active
1003 token-ring-default active
1004 fddinet-default active
 1005 trnet-default active

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
5 enet 100005 1500 - - - - - 0 0
15 enet 100015 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0

Universitaria de Colombia
Ing. Leonel Lugo M. 00000

Asignamos los rangos a las Vlan(s)

Switch(config)#interface range fa 0/5-8
Switch(config-if-range)#sw mode access
Switch(config-if-range)#sw access vlan 5

Ojo >>> lo ideal es salir y entrar al modo interfaz nuevamente, pero lo podemos hacer
desde aca también, esto se considera una mala práctica.

Switch(config-if-range)#interface range fa 0/15-18

Switch(config-if-range)#sw mode access
Switch(config-if-range)#sw access vlan 15
Switch(config-if-range)#do show vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4
Fa0/9, Fa0/10, Fa0/11, Fa0/12
Fa0/13, Fa0/14, Fa0/19, Fa0/20
Fa0/21, Fa0/22, Fa0/23, Fa0/24

5 Sistemas active Fa0/5, Fa0/6, Fa0/7, Fa0/8

15 Programacion active Fa0/15, Fa0/16, Fa0/17, Fa0/18
1002 fddi-default active
1003 token-ring-default active
1004 fddinet-default active
1005 trnet-default active

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
5 enet 100005 1500 - - - - - 0 0
15 enet 100015 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 tr 101003 1500 - - - - - 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0

Desactivamos los puertos que no se van a utilizar y lo colocamos en

una Vlan cualquiera llamada, en este caso la vamos a llamar Parqueo.
(shutdown apaga los puerto)
(ojo apagamos el puerto 24 para encenderlo después)
Switch(config-if-range)#vlan 300
Switch(config-vlan)#name Parqueo
Switch(config-vlan)#interface range fa 0/1-4, fa 0/9-14, fa 0/19-24
Switch(config-if-range)#sw mode access
Switch(config-if-range)#sw access vlan 300
 Universitaria de Colombia
Ing. Leonel Lugo M. 00000

Switch(config-if-range)#shutdown
%LINK-5-CHANGED: Interface FastEthernet0/1, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/2, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/3, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/4, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/9, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/10, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/11, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/12, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/13, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/14, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/19, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/20, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/21, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/22, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/23, changed state to administratively down
%LINK-5-CHANGED: Interface FastEthernet0/24, changed state to administratively down

Encendemos el puerto 24 y lo activamos

Switch(config-if-range)#interface fa 0/24
Switch(config-if)#sw mode trunk
Switch(config-if)#no shutdown
%LINK-5-CHANGED: Interface FastEthernet0/24, changed state to down
Switch(config-if)#
%LINK-5-CHANGED: Interface FastEthernet0/24, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/24, changed state to up
Switch con0 is now available
Press RETURN to get started.
Guardamos
witch#copy running-config startup-config
Destination filename [startup-config]?
Building configuration...
[OK]
Switch#

CONFIGURACIÓN DE ROUTER
Entramos a modo de configuración
Router>enable
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.

Configuramos la subinterface de la Vlan 5

 Router(config)#interface g0/0/0.5
Router(config-subif)#encapsulation dot1Q 5
Router(config-subif)#ip address 192.168.20.1 255.255.255.128
Router(config-subif)#exit

Universitaria de Colombia
Ing. Leonel Lugo M. 00000

Configuramos la subinterface de la Vlan 15

Router(config)#interface g0/0/0.15
Router(config-subif)#encapsulation dot1Q 15
Router(config-subif)#ip address 192.168.20.129 255.255.255.128
Router(config-subif)#exit
Router(config)#interface g0/0/0
Router(config-if)#no shutdown
Router(config-if)#
%LINK-5-CHANGED: Interface GigabitEthernet0/0/0, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/0, changed state to up
%LINK-5-CHANGED: Interface GigabitEthernet0/0/0.5, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/0.5, changed state to up
%LINK-5-CHANGED: Interface GigabitEthernet0/0/0.15, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/0.15, changed state to up
Router(config-if)#exit
Router#copy running-config startup-config
Destination filename [startup-config]?
Building configuration...
[OK]
Router#

1. Realizar pruebas de ping entre los diferentes host.

2. Agregue una maquina atacante y conéctala en cualquier puerto disponible y valide si existe
conexión.

EJERCICIO EN CLASE
A. Realizar pruebas de ping entre los diferentes host.
B. Agregue una maquina atacante y conéctala en cualquier puerto disponible. Valide si
existe conexión.
C. Realice las siguientes configuraciones
Puertos
Inicio Fin
VLAN 3 () 3 5
VLAN 6 () 6 9
VLAN 200 (Parqueo-Apagamos)

VLANS NOMBRE PC DIR IP PC FASTETHERNET PC FASTETHERNET SWITCH

VLAN3 PC1 192.168.1.X/25 Fa0 Fa0/3
VLAN3 PC2 192. 168.1.X/25 Fa0 Fa0/4
VLAN3 PC3 192. 168.1X./25 Fa0 Fa0/5
VLAN6 PC4 192. 168.1.X/25 Fa0 Fa0/10
VLAN6 PC5 192. 168.1.X/25 Fa0 Fa0/11
VLAN6 PC6 192. 168.1.X/25 Fa0 Fa0/12
VLAN6 PC7 192. 168.1.X/25 Fa0 Fa0/13
Witch1 Fa0/24 Gig0/0/0 (Router)

Nota: Apague los puertos que no se utilizaran.