Scribd
Upload
175 views4 pages

Cisc.'Dilt (Odr D WWW - Vndro.Vn/Supdort Switcii Final Lab: Nhu Hinh

This document provides instructions for configuring a network lab scenario involving switches, routers and VLANs. It includes steps for: 1. Configuring trunk links between switches and enabling VLANs on ports and trunks. 2. Configuring routing protocols, VLANs, IP addresses, DHCP, STP, security features, and remote access. 3. Testing layer 2 and layer 3 connectivity between devices as well as IP address assignment via DHCP. The goal is to set up a fully functional network with routing, switching, VLAN segmentation, and management services based on the provided design. Comprehensive tests are described to verify and validate the end-to-end network configuration.

Uploaded by

Nguyen Athas
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
175 views4 pages

Cisc.'Dilt (Odr D WWW - Vndro.Vn/Supdort Switcii Final Lab: Nhu Hinh

This document provides instructions for configuring a network lab scenario involving switches, routers and VLANs. It includes steps for: 1. Configuring trunk links between switches and enabling VLANs on ports and trunks. 2. Configuring routing protocols, VLANs, IP addresses, DHCP, STP, security features, and remote access. 3. Testing layer 2 and layer 3 connectivity between devices as well as IP address assignment via DHCP. The goal is to set up a fully functional network with routing, switching, VLAN segmentation, and management services based on the provided design. Comprehensive tests are described to verify and validate the end-to-end network configuration.

Uploaded by

Nguyen Athas
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 4

TRUNG TAM TIN HQC VNPRO

149/lD Ung Vin Khi6m, Phudng 25, Qufn Binh Thanh, Tp.HCM

cisc.'dilt[odrd

Tel:08 35124257

Fax: 08 35124314

Website: www.vnpro.vn

Forum: http:/iwww.vnpro.org

Livechat:

www.vnDro.vn/supDort

Email: [email protected]

SWITCII FINAL LAB

A. DAu c6p nhu hinh v6:


VhB

t7? \

Ylan 10

:'+i!:+::-- _*

{-";;;;-'-F*23
ilorils{ $Errys

8|EPEelvr ,r

//

B. YOu ciu cdu hinh nhu sau:

l.

C6u hinh dudrng trunk gifra c5c switch (SiI):

o
.

Dirng giao thr?c trunk sft dqng co ch6 tag 4byte, c6c dudng trunk sr} dpng giao thric
thuong lugng <luong trunk DTP.
Ki6m tra kiSt qui c6u hinh tluong trunk dring theo y6u cAu.

2. Cdu hinh Etherchannel (5d):

Dtng giao

thr?c Etherchannel cria IEEE, c6u hinh duong Etherchannel ldm trunk

dotlq,

khOng thuong lugng DTP.

Final Lab 2

rAvr rrx Hec vNPRo


l4g/lDUng VIn Khi6m, Phuong 25, QuQn Binh Th'4rrh, Tp.HCM
Fax 08 35124314
Tel:08 35124257
TRr.rNG

Website:
ciscdA.thorisedr*kriirsr Livechat:

www.vnpro,vn

Foruin: http://www.vnpro.org
Email: vnual@[email protected]

rlnuu,vaptqJn/'suppqr

3. C6u hinh VTP (5d):

o
o
c
o
o

Domain name: vnpro


Password: vnpro

DSI

vi

DS2 : vtp server

ASW: vtp client


SSW, GSW: vtp transparent

4. C6u hinh VLAITI

.
o
.

C6u hinh c6c

VLAN theo y6u cAu

VLAN dinh cho ngudi

sau:

sir dpng dAu cudi:

VLAN ddnh cho khu v.uc qudn

l1i:

VLAN 2 vd VLAN

VLAN l0

VLAN dinh cho khu v.uc gateway: VLAN

VIAN dinh

cho

khuwc

VLAN cd l4p: VLAN

server

:VLAN

172

192

100

86 sung c6u hinh trOn tluong trunk cho ph6p c6c VLAN tuong img ch4y qua, native
VLAN ld 100 vd cirn VLAN 100 ch4y qua c6c itudng trunk dE c6u hinh

ilinh ilia chi IP (10tI):

VLAN 2: subnet 2.2.2.0124


DSI interface VLAN 2:2.2.2.1124
DS2 interface VLAN 2:2.2.2.2124

Virtual IP HSRP cria VLAN 2:2.2.2.254

VLAN 3: subnet 3.3.3.0124

o
o
o
o

vio VLAN tuong img

Ki6m tra sg lan truy6n th6ng tin VLAN tr6n c6c thi6t bi cdn l4i

o
o
o
o

nlng VLAN (5d)

G6n nhirng port theo hinh vE

5. Ilo4ch

chrfrc

Chi c6u hinh VLAN tr6n DSl, SSW, GSW.

o
o
o
g
o
o
.

vi

DSI interface VLAN 3:3.3.3.1124


DS2 interface

VLAN 3:3.3.3.2124

Virtual IP HSRP cria VLAN 3:3.3.3.254

VLAN 172: subnet 172.16.1.0124

DSI interface VLAN 172:172.16.1.1124


Final Lab 2

TRUNG TAM TIN HQC VNPRO


149llD Ung VEti'Khim, Phudng 25, Qu{n Binh Thph, Tp.HCM
Fax 08 35124314
Tel:08 35124257
Forum: http://www.vnpro.org
Website: www.vnpro.vn
ciso'&dhortuad

r"'ir,i*

o
o
o

VLAN

o
o
o
o
o
o

v lyJnplq,vn/'sgppqx[

DS2 interface

VLAN 172:

Email: vnplq(@vnplg.oIg

172.16.1.2124

GW Fastethernet0/0: 172.16.1.253124
192: subnet 192.168.l.Ol24

DSI interface VLAN 192 192.168.1.1124


DS2 interface VLAN 192:192.168.1.2124

Virtual [P Address: 192.168.1.254


Monitor server: 192.168. I .100
DHCP server: 192.168.1.101

VLAN l0: subnet 10.10.10.0124

o
o
o
o
o
o
6.

Livechat:

DSI: interface vlan l0: 10.10.10.1


DS2: interfacevlan

l0:

10.10.10.2

ASW: interface vlan l0: 10.10.10.1I


GWS: interface vlan

l0:

SSW: interface vlan 10:

10.10.10.172

10.t0:1"0.192

:i. .

Radius Server: 10.10.10.254

Cfu hinh STP(S):

.
.
o

C6u hinh STP trn;t6t cd chc switch srl dpng giao

DSI: root switch cho t6t ch

cdc

thfc rapid-pvst.

VLAN.

DS2: secondary root switch cho t6t ch chc VLAN.

7. Cflu hinh ilinh tuy6n (lOd):

8.

BOt

KirSm tra k6t nOi ttr PC d6u cu6i di5n router GW.

khi ndng illnh tuyi5n cho DSI vd DS2 sri dqng giao thric EIGRP AS
b! DSl, DS2 vi GW.

100 cho 3 thiiSt

Ciu hinh tinh nlng HSRP (10d)

C6u hinh

DSI ld active cho t6t chcirc VLAN 2,3,]92DS2 le standby cho ciic VLAN

tuong img
thi Active

Khi c6ng Fa}l2l bic6

Khi c6ng Fa}l2l hOi pnpc thi DSI l6y lai quyAn Active sau 30 gi0y.

sU cO Aut c6p

sE chuyr5n

cho DS2.

Final Lab 2

/.
i

TRUNG TAM TIN HQC VNPRO


149/lD Ung VIn Khi6m, Phuotrg 25, Qudn Binh Th4nh, Tp.HCM
Fax 08 35124314
Tel:08 35124257
Forum: http:/i www.vnpro.org
Website: wlvw.vnpro.vn
ctsdAuthorissdrraining Livechat:

www.vnpro.vnlsupport

knail: Iqry@glqlg4lg

9. CAu hinh dlch vr; DHCP (5d):

C6u hinh DHCP server c6p ilia chi ttQng dirng dlch vu DHCP. C6c kh6ng gian c6p ip co 2
kh6ng gian:

o
o
o
10.

2.2.2.0/24,default gateway 2.2.2.254


3.3.3.0124, default gateway 3.3.3.254
Kir5m tra c6p <tia chi IP thdnh c6ng cho PC

gin vdo c6c VLAN 2 vi VLAN

Ciiu hinh tinh 6n tlinh cho STP (10iI):

tinh n[ng Edge Port trong Rapid STP cho i6t ce citc port d6u trgc titip v6i PC,
router, server tr6n tdt ch citc switch.
CAu hinh

C6u hinh tinh ndng b6o vQ t6t ch cfucport niy (Edge Port) tir viQc ngudi dirng gln th6m
cisco switch vio. N6u vi pham sE error disable port tuong fing.

C6u hinh tinh ning b6o vQ DSI vd DS2 tir viQc ASW trd thanh root switch.

11. CAu hinh

tinh ning bflo m$t (10iI):

T6t citcitcportkh6ngsrldpngtr6nASWsEchovioVLAN
VIAN100 tr6n t6t cachc dudng trunk tr6n c6c switch.

C6u hinh ASW sao cho tdt ch chc port d6u v6i PC chi cho ph6p I PC tuong img gin vio.
Ni5u ngudi dirng gfn th6m switch/hub vd cho PC gin vdo dfr liQu cria PC ti6p theo sE bl

l00,c6runafficcria

drop.

.
o
o

C6u hinh ASW sao bho c5c user trong cirng vlan 3 kh6ng thi5 truy cflp l6n nhau
C6u hinh DS2 c6ngF0l22 sao cho niSu Radius Server tU

D6m b6o chi c6 DHCP server ld

12. Cdu hinh

.
o
.
o

d0i IP

sE shutdown

port

c c6'p IP address.

quin $ truy c$p thiiit bivir gi6m

srit

traffic

(1011):

Cdu Radius vd tao account "vnpro" vd password ld "vnpro"


C6u hinh khi telnet/console vio c6c thiiSt biphei dirng account trOn Radius, backup dirng
account local ("cisco" password ld "cisco").

Kiiim tra telnet/console thdnh c6ng.


Mgi traffic gti nhfn tr6n c6ng F0/24-SSW

13. C6u

du-o.

<Iu

phni gui vC server monitor (cdi wireshark)

hinh ra Internet (10tI):

86 sung c6u hinh default route tinh tr0n cric thitit b!tuong ung tl6 PC cria ngudi dirng
cu6i c6 th ra Internet (ping th5y 100.100.100.1).

Final Lab2

-'i

You might also like