Lab 4-1 Configuring Expanded Switched Networks
Lab 4-1 Configuring Expanded Switched Networks
Lab 4-1 Configuring Expanded Switched Networks
Step 1:
Enter this sequence of commands on SW1:
SW2#configure terminal
SW2(config)#interface vlan 1
SW2(config-if)#ip address 10.1.1.12 255.255.255.0
SW2(config-if)#no shutdown
Step 2:
SW1#configure terminal
SW1(config)#interface Ethernet 1/1
SW1(config-if)#no shutdown
Step 3:
The ping should be successful, because ports on both PCs are access ports belonging to VLAN1.
PC1#ping 10.1.1.101
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.101, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 1/1/4 ms
Step 4:
SW1#configure terminal
SW1(config)#vlan 10
SW1(config)-vlan)#vlan 20
Enter this sequence of commands on SW2:
SW2#configure terminal
SW2(config)#vlan 10
SW2(config)-vlan)#vlan 20
Step 5:
Enter this sequence of commands on SW1:
SW1(config)#interface Ethernet0/1
SW1(config-if)#switchport access vlan 10
SW1(config-if)#exit
SW1(config)#ip route 0.0.0.0 0.0.0.0 10.1.1.1
Enter this sequence of commands on SW2:
SW2(config)#interface Ethernet0/1
SW2(config-if)#switchport access vlan 20
SW2(config-if)#exit
SW2(config)#ip route 0.0.0.0 0.0.0.0 10.1.1.1
Step 6:
Step 7:
This step provides PC1 addressing in accordance with its VLAN assignment.
PC1(config)#interface Ethernet0/0
PC1(config-if)#ip address 10.1.10.100 255.255.255.0
PC1(config-if)#exit
PC1(config)#ip default-gateway 10.1.10.1
Step 8:
This step provides PC2 addressing in accordance with its VLAN assignment.
PC2(config)#interface Ethernet0/0
PC2(config-if)#ip address 10.1.20.100 255.255.255.0
PC2(config-if)#exit
PC2(config)#ip default-gateway 10.1.20.1
Step 9:
SW1 should have Ethernet0/1 belonging to VLAN10, and SW2 should have Ethernet0/1 belonging to VLAN20.
SW1#show vlan
VLAN Name
Status
Ports
default
active
10
VLAN0010
active
20
VLAN0020
active
1002 fddi-default
act/unsup
1003 token-ring-default
act/unsup
1004 fddinet-default
act/unsup
Et0/1
1005 trnet-default
act/unsup
<output omitted>
SW2#show vlan
VLAN Name
Status
Ports
default
active
10
VLAN0010
active
20
VLAN0020
active
1002 fddi-default
act/unsup
1003 token-ring-default
act/unsup
1004 fddinet-default
act/unsup
1005 trnet-default
act/unsup
<output omitted>
Et0/1
Step 10:
The connectivity test should not be successful. You first need to configure a trunk between switches that will
carry traffic from both VLANs and then configure a Layer 3 device that will route between those two VLANs.
PC1#ping 10.1.20.100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.20.100, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Task 2: Configure the Link Between Switches as a Trunk
Step 1:
Enter this sequence of commands on the SW1 switch:
Step 2:
Step 3:
Mode
Encapsulation
Status
Native vlan
Et1/1
on
802.1q
trunking
Port
Et1/1
1,10,20
<output omitted>
On switch SW2, verify that the link toward SW1 is trunking and that VLANs 1,10, and 20 are the only VLANs
that are allowed.
Mode
Encapsulation
Status
Native vlan
Et1/0
on
802.1q
trunking
Port
Et1/0
1,10,20
<output omitted>
Step 4:
The connectivity test will not be successful. You need to configure a Layer 3 device that will route between
those two VLANs.
From PC1, ping PC2 (10.1.20.100).
PC1#ping 10.1.20.100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.20.100, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
Task 3: Configure Trunk Link on the Router
Step 1:
Enter this sequence of commands on the SW1 switch:
Step 2:
Enter the following commands on the SW1 switch.
Step 3:
Enter the following commands on the Branch router.
Branch#configure terminal
Branch(config)#interface Ethernet0/0
Branch(config-if)#no ip address
Step 4:
Enter the following commands on the Branch router.
Branch(config-if)#encapsulation dot1q 1
Branch(config-if)#ip address 10.1.1.1 255.255.255.0
Branch(config-if)#exit
Branch(config)#interface Ethernet 0/0.10
Branch(config-if)#encapsulation dot1q 10
Branch(config-if)#ip address 10.1.10.1 255.255.255.0
Branch(config-if)#exit
Branch(config)#interface Ethernet 0/0.20
Branch(config-if)#encapsulation dot1q 20
Branch(config-if)#ip address 10.1.20.1 255.255.255.0
Step 5:
Enter the following commands on the Branch router.
Step 6:
Branch#show vlans
Virtual LAN ID:
Ethernet0/0.1
Address:
IP
10.1.1.1
Received:
0
0
Other
4
119 packets, 7992 bytes input
4 packets, 1170 bytes output
Virtual LAN ID:
Ethernet0/0.10
Protocols Configured:
Transmitted:
Address:
IP
10.1.10.1
Received:
0
0
Other
1
56 packets, 3808 bytes input
1 packets, 46 bytes output
Virtual LAN ID:
Ethernet0/0.20
Protocols Configured:
Transmitted:
Address:
IP
10.1.20.1
Received:
0
0
Other
1
42 packets, 2856 bytes input
1 packets, 46 bytes output
Step 7:
The attempt should be successful. The first ping or first few pings might fail due to the ARP resolution process.
PC1>ping 10.1.20.100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.20.100, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/3/12 ms
Step 8:
Notice that the traffic goes through the Branch router.
PC1>traceroute 10.1.20.100
Type escape sequence to abort.
Tracing the route to 10.1.20.100
VRF info: (vrf in name/id, vrf out name/id)
1 10.1.10.1 4 msec 0 msec 0 msec
2 10.1.20.100 0 msec *
4 msec