Quản trị mạng LAB 3 - LAN switching

CCNA LAB No. 3 : LAN Switching Lab time: 1 session
 Students are recommended to read the entire lab requirement before starting. The TIP session should
only be used for troubleshooting. For any problem concerns hardware or losing connectivity, please contact
instructor.
Topology:
Two switches are connected by two physical lines as shown above.
1. Task 1
1. Access in the switches through console lines.
2. Configure the name of switches: Switch_A and Switch_B
Switch(config)#hostname Switch_A
Switch_A(config)#
3. Configure IP management address. This IP address in the subnet, which includes IP
address of PC.
Switch_A(config)#interface vlan 1
Switch_A(config-if)#ip address 10.2.0.15 255.255.255.0
Switch_A(config-if)#no shut
Note : No shut command is used to change state of vlan to up . However ; Switch 2950 series
has only one interface vlan is up .When you issue no shut command to another vlan , the
current vlan will change state to down .
4. Configure password so that PC1 can telnet in to Switch_A.
- To PC1 can telnet into Switch_A , Switch have to IP management address
- A password must be set on one or more of the vty lines for users to gain remote
access to a Switch through Telnet (Virtual Terminal Password)
Switch_A(config)#line vty 0 4
Switch_A(config-line)#login
Switch_A(config-line)#password <password >
-
5. Configure Switch_A so that after telnet to Switch_A, PC1 can go to global config mode
www.ipmac.com.vn
10.2.0.15x/24
- To PC1 can go to global config mode , Switch_A have to has enable password

or secret password. The enable password is only used if the enable secret
has not been set .
- The following commands are used to set the passwords :
Switch_A(config)#enable password <password >
Switch_A(config)#enable secret <password >
6. Be sure that all passwords, which has been configured on Switch , be encrypted when
seen by show commands
- Issue Show run command to view



7. Configure default gateway of switch to point to the last IP of present using subnet.
Some network devices can provide a web-based interface for configuration and
management purposes . Once a switch is configured with an IP address and gateway, it can
be accessed in this way.
Switch_A(config)#ip default-gateway 10.2.0.10
8. PC, which plugs in port 0/5 of switch_A, cant not operate in full duplex and 100Mbps.
Configure port 0/5 to synchronously operate with PC.
Switch_A(config)#interface f0/5
Switch_A(config-if)#speed 100
Switch_A(config-if)#duplex full
Note : If the port in auto speed mode , we must set speed mode before seting duplex mode.
www.ipmac.com.vn
9. Which MAC address has been learned by switch on port 0/5.
Switch_A#show mac-address-table interface f0/5

10. Configure Switch_A to does not accept more than 10 MAC address through port 0/5. If
there are more than 10 MAC address through port 0/5, the Switch will shutdown this port.
Switch_A(config)#interface f0/5
Switch_A(config-if)#switchport port-security maximum 10

Switch_A(config-if)#switchport port-security violation shutdown


11. Configure similarly for Switch_B.
2. Task 2
1. Configure vlan on Switch A and Switch B by using the following table:

Vlan Vlan Name Port
www.ipmac.com.vn
2 Vlan 2 Fa0/2
3 Vlan 3 Fa0/3
4 Vlan 4 Fa0/4
The command vlan database can be used in the Privileged EXEC mode to enter into
VLAN configuration mode. A VLAN name may also be configured, if necessary:
Switch_A#vlan database
Switch_A(vlan)#vlan vlan_number
Switch_A(vlan)#exit
Issue Show vlan to view configuration :
Upon exiting, the VLAN is applied to the switch. The next step is to assign the VLAN to
one or more interfaces :
Switch_A(config)#interface f0/2
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 2
2. Configure trunking encapsulation on switches to make frames of all vlans, transmitting
through the trunk link, are encapsulated, except vlan1.
Switch_A(config)#interface f0/20
Switch_A(config-if)#switchport mode trunk
Switch_A(config-if)#switchport trunk native vlan 1
Note : Switch 2950 series support only 802.1q on the trunk . If you use another Switch
as 3550 series you need to verify encapsulation type via command :

Switch_A(config-if)# switchport trunk encapsulation <encapsulation type>
3. Because of security purpose, please configure switch to allow only the frames of vlan 2
and 4 can be transmitted through trunk link.
Switch_A(config-if)#switchport trunk allowed vlan 2,4
3. Task 3
1. Configure vtp on Switch A and B, domain IPMAC
The following command can be used to enter VLAN database mode and configure the VTP
version number.
Switch_A#vlan database
www.ipmac.com.vn
Switch_A(vlan)#vtp v2-mode
The following command can be used to create the management domain.
Switch_A(vlan)#vtp domain IPMAC
2. Configure Switch B to accept only information of vlan database from switch A.
We will configure Switch_A into server mode and Switch_B into client mode
The following command can be used to set the correct mode of the switch:
Switch(vlan)#vtp {client | server | transparent}

Switch_A(vlan)#vtp server
Switch_B(vlan)#vtp client
3. Create vlan 5 on Switch A, be sure that information about vlan 5 is updated in vlan
database of Switch B.
Switch_A(vlan)#vlan 5
Issue Show vlan to view vlan database

www.ipmac.com.vn