Fall 2011-2012 CPIS - 370
Lab Manual :
Dr. Hussain Sindi
KING ABDULAZIZ UNIVERSITY
Faculty of Computing and Information
Technology
Lab CPIS-370
P a g e | 2
LAB 1
Objectives:
Describe the purpose Cabling
Explain difference type of Communication Media
Application of Communication Media
Different Cabling Connection
Activity Outcomes:
The student should know how to make a UTP cable ( Straight and Cross Cable)
The student should know how to connect a PC with a Router/Switch.
The students should know to identify different type of connectors,
cables and Network Devices.
Lab CPIS-370
P a g e | 3
Network Cabling:
Unshielded Twisted Pair: (UTP) is a cable that has four pairs of wires twisted inside it to eliminate electrical interference. UTP cables are connected using RJ- 45 connectors that have eight connector pins. UTP cables are used in many configurations and for different purposes, to form an internetwork including:
Straight-through
Crossover
Rollover
Through Cable:
- Straight
A straight-through cable is the standard network cable connection and is used to connect the source and destination computers through an internetworking
device. Specifically, you can use it to connect a host to a hub or switch
Crossover Cable:
In a crossover cable, the standard RJ-45 cable between the source and destination computers is cross-connected. A crossover cable can be used to connect:
Two computers
Two hubs
A hub to a switch
A cable modem to a router
Two router interfaces
Lab CPIS-370
P a g e | 4
Rollover Cable:
These Cisco proprietary cables used to connect to a router or switch console port. In a rollover cable (8 pins), RJ-45 connectors are usually present at each ends and are used to connect router and computer ports. Pin 1 on one end of cable connects to Pin 8 at the other end of the cable; similarly, Pin 2 connects Pin 7, and so on.
Serial Transmission:
All WANs use serial transmission, which can pass one bit at a time over a single channel. Cisco provides a 60-pin serial connector for one end of the cable while other end of the cable may be EIA/TIA-232, V.35, EIA/TIA-449, X.21 or
others.
Lab CPIS-370
P a g e | 5
Console Connections:
A console is a type of DTE through which commands are entered into the host device. Most Cisco devices support the RJ-45 console connection. A rollover cable with an RJ-45 connector is used to connect the PC or terminal to the console port of the Cisco device.
: Connect cabling components
Connect the console or rollover cable to the router console port, an RJ-45 connector. Next, connect the other end of the console or rollover cable to the RJ-45 to DB-9 or RJ-45 to DB-25 adapter depending on the available PC serial port. Finally attach the adapter to a PC serial port, either DB-9 or DB-25,
depending on the computer.
Lab CPIS-370
P a g e | 6
Observation:
Write the configuration of straight and cross Ethernet cables.
_____________________________________________________________________
_____________________________________________________________________
______________________
_____________________________________________________________________
___________
Step 1 Identify connectors and components
Examine the router and locate the RJ-45 connector labeled Console
interface (COM 1 or 2) Step 2 Identify the computer serial
Examine the computer and locate a 9-pin or 25-pin male connector labeled serial.
Lab CPIS-370
P a g e | 7
: Communication Media
Network connections can be wired or wireless. In wired connections, the
medium is either copper, which carries electrical signals, or optical fiber, which carries light signals. In wireless connections, the medium is the Earth's
atmosphere, or space, and the signals are microwaves. Copper medium includes cables, such as twisted pair telephone wire, coaxial cable, or most commonly, what is known as Category 5 Unshielded Twisted Pair (UTP) cable. Optical fibers, thin strands of glass or plastic that carry light signals, are another form of networking media. Wireless media may include the home wireless connection between a wireless router and a computer with a wireless network card, the terrestrial wireless connection between two ground stations, or the
communication between devices on earth and satellites. In a typical journey
across the Internet, a message may travel across a variety of media
Lab CPIS-370
P a g e | 8
Grading Lab 1
Total Marks Obtained Marks Lab Performance
Knowledge about the Lab
Values obtained (Accurate/Precise) Lab participation
Behavior in the Lab Viva
Total
Lab CPIS-370
P a g e | 9
Lab 2
Introduction to Networking Devices
Objectives:
Describe the Network Devices
Explain how devices use in the internetwork
Application of Network Devices Media
Internet in detail Activity Outcomes:
The student should know the network devices in detail with their applications
The student should know the Infrastructure of Internet
The students should know to how networks helping us in daily life
Lab CPIS-370
P a g e | 10 Computer networking devices are units that mediate data in a computer network. Computer networking devices are also called network equipment, Intermediate Systems (IS) or
Interworking Unit (IWU).
Common basic networking devices
Router: a specialized network device that determines the next network point to which it can forward a data packet towards the destination of the packet. Unlike a gateway, it cannot interface different protocols, Works on OSI layer 3.
Bridge: a device that connects multiple network segments along the data link layer, Works on OSI layer 2.
Switch: a device that allocates traffic from one network segment to certain lines (intended destination(s)) which connect the segment to another network segment. So unlike a hub a switch splits the network traffic and sends it to different destinations rather than to all systems on the network, Works on OSI layer 2.
Hub: connects multiple Ethernet segments together making them act as a single segment.
When using a hub, every attached all the objects, compared to switches, which provide a dedicated connection between individual nodes,Works on OSI layer 1
Lab CPIS-370
P a g e | 11 Repeater: device to amplify or regenerate digital signals received while sending them from one part of a network into another. Works on OSI layer 1
Some hybrid network devices:
Multilayer Switch: a switch which, in addition to switching on OSI layer 2, provides functionality at higher protocol layers.
Protocol Converter: a hardware device that converts between two different types of transmissions, such as asynchronous and synchronous transmissions.
Bridge Router (B router): Combines router and bridge functionality and are therefore working on OSI layers 2 and 3.Hardware or software components that typically sit on the connection point of different networks, e.g. between an internal network and an external network:
Proxy: computer network service which allows clients to make indirect network connections to other network services
Firewall: a piece of hardware or software put on the network to prevent some communications forbidden by the network policy
Network Address Translator: network service provide as hardware or software that converts internal to external network addresses and vice versa
The network devices enable to connect people through network devices across Globe.
Lab CPIS-370
P a g e | 12 Early data networks were limited to exchanging character-based information between
connected computer systems. Current networks have evolved to carry voice, video streams, text, and graphics between many different types of devices. Previously separate and distinct communication forms have converged onto a common platform. This platform provides access to a wide range of alternative and new communication methods that enable people to interact directly with each other almost instantaneously.
Data networks that were once the transport of information from business to business have been repurposed to improve the quality of life for people everywhere. In the course of a day, resources available through the Internet can help in Banking, NEWS, Traffic Conditions and we can say every daily life applications.
Lab CPIS-370
P a g e | 13 Internet: A Network of Networks
The Internet which is actually a collection of interconnected private and public networks, has a hierarchical layered structure for addressing, for naming and for connectivity services.
At each level or layer of the hierarchy, individual network operators maintain peering relationships with other operators at the same level. As a result, network traffic that is destined for local or regional services does not need to traverse to a central point for distribution. Common services can be duplicated in different regions, thereby keeping traffic off the higher level backbone networks.
Although there is no single organization that regulates the Internet, the operators of the many individual networks that provide Internet connectivity cooperate to follow accepted standards and protocols.
Lab CPIS-370
P a g e | 14
Lab CPIS-370
P a g e | 15
Grading Lab 2
Total Marks Obtained Marks Lab Performance
Knowledge about the Lab
Values obtained (Accurate/Precise) Lab participation
Behavior in the Lab Viva
Total
Lab CPIS-370
P a g e | 16
Lab 3
OSI Model and TCP/IP Practical Visual Simulation In Packet Tracer
Objectives:
Describe the OSI Model and TCP/IP
Explain how Layer Model use in the internetwork
Simulate Client-Server Model
Layer Protocol in detail Activity Outcomes:
The student should know the OSI Model and TCP/IP in detail with their applications
The student should know the how Data transfer across Internetwork
The students should know Application Layer and Transport Layer
Protocol
Lab CPIS-370
P a g e | 17
Data Communication Protocol
Information will be exchanged. Often, many of the protocols that comprise a protocol suite reference other widely utilized protocols or industry standards. A standard is a process or protocol that has been endorsed by the networking industry and ratified by a standards organization, such as the Institute of Electrical and Electronics Engineers (IEEE) or the Internet Engineering Task Force (IETF).
The use of standards in developing and implementing protocols ensures that products from different manufacturers can work together for efficient communications. If a protocol is not rigidly observed by a particular manufacturer, their equipment or software may not be able to successfully communicate with products made by other manufacturers.
In data communications, for example, if one end of a conversation is using a protocol to govern one-way communication and the other end is assuming a protocol
describing two-way communication, in all probability
Interaction of Protocols
An example of the use of a protocol suite in network communications is the
interaction between a web server and a web browser. This interaction uses a number of protocols and standards in the process of exchanging information between them.
The different protocols work together to ensure that the messages are received and understood by both parties. Examples of these protocols are:
Lab CPIS-370
P a g e | 18 Application Protocol:
Hypertext Transfer Protocol (HTTP) is a common protocol that governs the way that a web server and a web client interact. HTTP defines the content and formatting of the requests and responses exchanged between the client and server. Both the client and the web server software implement HTTP as part of the application. The HTTP
protocol relies on other protocols to govern how the messages are transported between client and server
Transport Protocol:
Transmission Control Protocol (TCP) is the transport protocol that manages the individual conversations between web servers and web clients. TCP divides the HTTP messages into smaller pieces, called segments, to be sent to the destination client. It is also responsible for controlling the size and rate at which messages are exchanged between the server and the client.
Internetwork Protocol:
The most common internetwork protocol is Internet Protocol (IP). IP is responsible for taking the formatted segments from TCP, encapsulating them into packets,
assigning the appropriate addresses, and selecting the best path to the destination host.
Network Access Protocols:
Network access protocols describe two primary functions, data link management and the physical transmission of data on the media. Data-link management protocols take the packets from IP and format them to be transmitted over the media. The standards and protocols for the physical media govern how the signals are sent over the media and how they are interpreted by the receiving clients. Transceivers on the network interface cards implement the appropriate standards for the media that is being used
Lab CPIS-370
P a g e | 19 Benefits of Using Layer Model
To visualize the interaction between various protocols, it is common to use a layered model. A layered model depicts the operation of the protocols occurring within each layer, as well as the interaction with the layers above and below it.
There are benefits to using a layered model to describe network protocols and operations. Using a layered model:
Assists in protocol design, because protocols that operate at a specific layer have defined information that they act upon and a defined interface to the layers above and below.
Fosters competition because products from different vendors can work together.
Prevents technology or capability changes in one layer from affecting other layers above and below.
Provides a common language to describe networking functions and capabilities.
Lab CPIS-370
P a g e | 20 Reference models
A protocol model provides a model that closely matches the structure of a particular protocol suite. The hierarchical set of related protocols in a suite typically represents all the functionality required to interface the human network with the data network.
The TCP/IP model is a protocol model because it describes the functions that occur at each layer of protocols within the TCP/IP suite.
A reference model provides a common reference for maintaining consistency within all types of network protocols and services. A reference model is not intended to be an implementation specification or to provide a sufficient level of detail to define precisely the services of the network architecture. The primary purpose of a reference model is to aid in clearer understanding of the functions and process involved.
The Open Systems Interconnection (OSI) model is the most widely known internetwork reference model. It is used for data network design, operation specifications, and troubleshooting.
Although the TCP/IP and OSI models are the primary models used when discussing network functionality, designers of network protocols, services, or devices can create their own models to represent their products. Ultimately, designers are required to communicate to the industry by relating their product or service to either the OSI model or the TCP/IP model, or to both.
Lab CPIS-370
P a g e | 21 Data Processing Across Internetwork
As application data is passed down the protocol stack on its way to be transmitted across the network media, various protocols add information to it at each level. This is commonly known as the encapsulation process.
The form that a piece of data takes at any layer is called a Protocol Data Unit (PDU).
During encapsulation, each succeeding layer encapsulates the PDU that it receives from the layer above in accordance with the protocol being used. At each stage of the process, a PDU has a different name to reflect its new appearance. Although there is no universal naming convention for PDUs, in this course, the PDUs are named according to the protocols of the TCP/IP suite.
Data - The general term for the PDU used at the Application layer
Segment - Transport Layer PDU
Packet - Internetwork Layer PDU
Frame - Network Access Layer PDU
Bits - A PDU used when physically transmitting data over the medium
The Sending and Receiving Process
When sending messages on a network, the protocol stack on a host operates from top to bottom. In the web server example, we can use the TCP/IP model to illustrate the process of sending an HTML web page to a client.
The Application layer protocol, HTTP, begins the process by delivering the HTML formatted web page data to the Transport layer. There the application data is broken into TCP segments. Each TCP segment is given a label, called a header, containing information about which process running on the destination computer should receive the message. It also contains the information to enable the destination process to reassemble the data back to its original format.
The Transport layer encapsulates the web page HTML data within the segment and
Lab CPIS-370
P a g e | 22 sends it to the Internet layer, where the IP protocol is implemented. Here the entire TCP segment is encapsulated within an IP packet, which adds another label, called the IP header. The IP header contains source and destination host IP addresses, as well as information necessary to deliver the packet to its corresponding destination process.
Next, the IP packet is sent to the Network Access layer Ethernet protocol where it is encapsulated within a frame header and trailer. Each frame header contains a source and destination physical address. The physical address uniquely identifies the devices on the local network. The trailer contains error checking information. Finally the bits are encoded onto the Ethernet media by the server NIC.
Server to client communication
Lab CPIS-370
P a g e | 23 Lab Demonstration
Introduction:
In Packet Tracer simulation mode, detailed information about packets and how they are processed by networking devices may be viewed. Common TCP/IP Protocols are modeled in Packet Tracer, including DNS, HTTP, TFTP, DHCP, Telnet, TCP, UDP, ICMP, and IP. How these protocols are used by networking devices in creating and processing packets is
displayed, in Packet Tracer, using a representation of the OSI Model. The term protocol data unit, or PDU, is a generic description of what are known as segments at the transport layer, packets at the network layer, and frames at the data link layer.
Task 1: Explore the PT interface
Step 1. Examine the Help Files and Tutorials
From the pull down menu, choose Help->Contents. A web page will open. From the left frame, choose Operating Modes->Simulation Mode. If not already familiar, read about simulation mode.
Step 2. Switching from Realtime to Simulation Mode
Lab CPIS-370
P a g e | 24 In the far lower right of the PT interface is the toggle between Real time and Simulation mode. PT always starts in Real time mode, in which networking protocols operate with realistic timings. However, a powerful feature of Packet Tracer allows the user to "stop time"
by switching to Simulation mode. In Simulation mode, packets are displayed as animated envelopes, time is event driven, and the user can step through networking events. Click the Simulation mode icon to switch from Real time mode to Simulation mode.
Task 2: Examine Packet Contents and Processing
Step 1. Creating a Packet and Accessing the PDU Information Window
Click the Web Client PC. Choose the Desktop tab. Open the Web Browser. Enter the IP address of the Web Server into the browser, 192.168.1.254. Clicking Go will initiate a web server request. Minimize the Web Client configuration window. Since time in simulation is event driven, you must use the Capture/Forward button to display network events. Two packets appear in the event list, one of which has an eye next to it. An eye next to a packet means it is displayed as an envelope on the logical topology. Find the first packet in the Event List, and click the colored square in the Info column.
Step 2. Investigating device algorithms in the OSI Model view
When you click the Info square for a packet in the event list, or if you click a packet envelope displayed on the logical topology, the PDU Information window opens. The OSI model organizes this window. In the case of the first packet we are viewing, notice the HTTP request (at Layer 7) is then encapsulated, successively, at Layers 4, 3, 2, and 1. If you click through these layers, the algorithm used by the device (in this case, the PC) is displayed.
View what is going on at each layer--this will be the subject of much of the rest of the course.
Step 3. Inbound and Outbound PDUs
When opening the PDU Information window, the default is the OSI Model view. Now click the Outbound PDU Details tab. Scroll down to the bottom of this window. There you will see that HTTP (the web page request that started this series of events) is encapsulated as data in a TCP segment, which in turn is encapsulated in an IP packet, which in turn is
encapsulated in an Ethernet frame, which in turn is transmitted as bits on the medium. If a device is the first device involved in a series of events, packets at that device will only have an Outbound PDU Details tab; if a device is the last device in a series of events, packets at
Lab CPIS-370
P a g e | 25 that device will have only an Inbound PDU Details tab. In general, you will see both
Outbound and Inbound PDU details, which give details about how Packet Tracer is modeling that device.
Step 4. Packet tracing: animations of packet flow
The first time through a packet animation, you are actually capturing the packets, as in a protocol sniffer. Hence, the Capture/Forward button means "Capture" one set of events at a time. Step through the web page request. Note that you are only displaying HTTP-related packets; but other protocols like TCP and ARP also have packets that are not being displayed.
At any time in your packet capture, you can open the PDU Information window. Run through the entire animation until the "No More Events" message is reached. Experiment with this packet tracing process -- running the animation again, examining packets, predicting what will happen next, and investigating your predictions.
Lab CPIS-370
P a g e | 26
4
BAL
sciswBign LcSiwS
Objectives:
Describe the Switching in detail
Explain how Switch Forward Frames
Configure Basic Switch Operations
Secure Switch Activity Outcomes:
The student should know the Frame Forwarding Process
The student should know the basic configuration of the switch
The students should know the basic security of the switch
Lab CPIS-370
P a g e | 27
Switch
Network device that filters, forward and floods frames based on destination address of each frame. The switch operates at Data-link layer of the OSI.
Introduction:
Basic switch management is the foundation for configuring switches. This activity focuses on navigating command-line interface modes, using help functions, accessing the command history, configuring boot sequence parameters, setting speed and duplex settings, as well as managing the MAC address table and switch configuration file.
Task 1: Connect to the Switch
Step 1. Connect S1 and PC1.
Using a console cable, connect the RS 232 interface on PC1 to the console interface on switch S1.
Click PC1 and then click the Desktop tab. Select Terminal in the Desktop tab.
Keep these default settings for Terminal Configuration and then click OK:
o Bits Per Second = 9600
o Data Bits = 8
o Parity = None
o Stop Bits = 1
o Flow Control = None
You are now consoled into S1. Press Enter to get the Switch prompt.
Lab CPIS-370
P a g e | 28
Step 2. In user EXEC mode, type?. Note the list of available commands.
While in user EXEC mode, the available commands are limited to basic monitoring commands.
Step 2. Use the enable command to go to privileged EXEC mode.
Switch>enable Switch#
The prompt changes from > to #.
Step 3. In privileged EXEC mode, type?. Note the list of available commands.
There are now more available commands compared to user EXEC mode. In addition to the basic monitoring commands, configuration and management commands can now be accessed.
Step 4. Change to global configuration mode.
Switch#configure terminal Switch(config)#
Step 5. Configure S1 as the hostname.
Switch(config)#hostname S1 S1(config)#
Step 6. Change to interface configuration mode for Fa0/18.
S1(config-if)#interface fa0/18 S1(config-if)#
Step 7. Set the port mode to access.
To allow for frames to be sent and received from the interface, change the switching mode to access using the switchport mode access command.
S1(config-if)#switchport mode access
Step 8. Exit interface configuration mode.
Issue the exit command to leave interface configuration mode and enter global configuration mode.
Lab CPIS-370
P a g e | 29
Step 9. Enter configuration mode for the console line.
S1(config)#line console 0 S1(config-line)#
Step 10. Enter cisco as the password
S1(config-line)#password FCIT S1(config-line)#login
Step 11. Return to privileged EXEC mode using the end command.
S1(config-line)#end S1#
Task 2: Use Help Facility to Configure the Clock
Step 1. At the privileged EXEC command prompt, type clock?
S1#clock ? The only option is set.
Step 2. Use Help to assist setting the clock to the current time.
S1#clock ?
set Set the time and date S1#clock set ?
hh:mm:ss Current Time S1#clock set 12:12:12 ? <1-31> Day of the month MONTH Month of the year
Continue issuing the ? command until you have completed configuring the clock. You are warned with a
% Incomplete command message if the clock command is not fully entered with all the required arguments.
Step 3. Verify that the clock is set.
To verify that the clock is set, issue the show clock command.
Task 3: Access and Configure Command History
Step 1. View the most recent commands entered.
Issue the show history command. Remember how many commands are listed.
S1#show history
Lab CPIS-370
P a g e | 30
Step 2. Change the number of commands stored in the history buffer.
Enter line configuration mode for both the console and Telnet lines. Set the number of commands held in the history buffer to 35.
S1(config)#line console 0
S1(config-line)#history size 35 S1(config-line)#line vty 0 4 S1(config-line)#history size 35
Step 3. Verify that the size of the history buffer has changed.
Return to privileged EXEC mode and issue the show history command again. There should be more commands displayed than previously
Task 4: Configure the Boot Sequence
Step 1. Check which Cisco IOS software version is currently loaded.
S1#show version
Cisco IOS Software, C2960 Software (C2960-LANBASE-M), Version 12.2(25)FX, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Wed 12-Oct-05 22:05 by pt_team
<output omitted>
The version is listed in the first line.
Step 2. Check which Cisco IOS images are loaded in flash memory.
S1#show flash
Directory of flash:/
3 -rw- 4414921 c2960-lanbase-mz.122-25.FX.bin 2 -rw- 4670455 c2960-lanbase-mz.122-25.SEE1.bin 6 -rw- 616 vlan.dat
32514048 bytes total (23428056 bytes free)
Note that there are two versions in flash memory. The version that is currently loaded is c2960-lanbase- mz.122-25.FX.bin.
Task 5: Manage the MAC Address Table
Step 1. Check the MAC address of the server.
Click the Server, then the Config tab, and then FastEthernet. The MAC Address is 0060.3EDD.19A3.
Step 2. Configure static MAC for the TFTP server.
By configuring a static MAC for the TFTP server, the switch always knows which port to use to send out traffic destined for the server. In global configuration mode on S1, add the MAC address to the
Lab CPIS-370
P a g e | 31 addressing table of the switch:
S1(config)#mac-address-table static 0060.3EDD.19A3 vlan 99 int fa0/24
Step 3. Verify that the static MAC address is now in the MAC address table.
S1#show mac-address-table Mac Address Table
--- Vlan Mac Address Type Ports ---- --- --- --- 99 0060.3edd.19a3 STATIC Fa0/24 99 0060.5c5b.cd23 DYNAMIC Fa0/18
S1#
Notice how the MAC address from PC1 was added dynamically. This entry may or may not be in your table depending on how long it has been since you pinged from PC1 to S1.
Lab CPIS-370
P a g e | 32
Lab CPIS-370
P a g e | 33
Grading Lab 4
Total Marks Obtained Marks Lab Performance
Knowledge about the Lab
Values obtained (Accurate/Precise) Lab participation
Behavior in the Lab Viva
Total
Lab CPIS-370
P a g e | 34
5 BcL
VLANs
Objectives:
Describe the VLAN
Explain the benefits of VLANs
Configure VLANs and Trunks Activity Outcomes:
The student should know the VLANs in detail with their applications
The student should know the VLANs configurations
The students should know the role of trunk in VLANs
Lab CPIS-370
P a g e | 35 VLAN Overview
A VLAN allows a network administrator to create groups of logically networked devices that act as if they are on their own independent network, even if they share a common
infrastructure with other VLANs. When you configure a VLAN, you can name it to describe the primary role of the users for that VLAN. As another example, all of the student computers in a school can be configured in the "Student" VLAN. Using VLANs, you can logically segment switched networks based on functions, departments, or project teams. You can also use a VLAN to geographically structure your network to support the growing reliance of companies on home-based workers.
A VLAN is a logically separate IP subnetwork. VLANs allow multiple IP networks and subnets to exist on the same switched network. The figure shows a network with three
computers. For computers to communicate on the same VLAN, each must have an IP address and a subnet mask that is consistent for that VLAN. The switch has to be configured with the VLAN and each port in the VLAN must be assigned to the VLAN. A switch port with a singular VLAN configured on it is called an access port. Remember, just because two computers are physically connected to the same switch does not mean that they can
communicate. Devices on two separate networks and subnets must communicate via a router (Layer 3), whether or not VLANs are used. You do not need VLANs to have multiple networks and subnets on a switched network, but there are definite advantages to using VLANs.
Lab CPIS-370
P a g e | 36 Benefits of a VLAN
User productivity and network adaptability are key drivers for business growth and success.
Implementing VLAN technology enables a network to more flexibly support business goals.
The primary benefits of using VLANs are as follows:
Security - Groups that have sensitive data are separated from the rest of the network, decreasing the chances of confidential information breaches. Faculty computers are on VLAN 10 and completely separated from student and guest data traffic.
Cost reduction - Cost savings result from less need for expensive network upgrades and more efficient use of existing bandwidth and uplinks.
Higher performance - Dividing flat Layer 2 networks into multiple logical workgroups (broadcast domains) reduces unnecessary traffic on the network and boosts performance.
Broadcast storm mitigation - Dividing a network into VLANs reduces the number of devices that may participate in a broadcast storm. As discussed in the "Configure a Switch" chapter, LAN segmentation prevents a broadcast storm from propagating to the whole network. In the figure you can see that although there are six computers on this network, there are only three broadcast domains: Faculty, Student, and Guest.
Improve IT staff efficiency- VLANs make it easier to manage the network because users with similar network requirements share the same VLAN. When you provision a new switch, all the policies and procedures already configured for the particular VLAN are implemented when the ports are assigned. It is also easy for the IT staff to identify the function of a VLAN
Lab CPIS-370
P a g e | 37 by giving it an appropriate name. In the figure, for easy identification VLAN 20 has been named "Student", VLAN 10 could be named "Faculty", and VLAN 30 "Guest."
Simpler project or application management - VLANs aggregate users and network devices to support business or geographic requirements. Having separate functions makes managing a project or working with a specialized application easier, for example, an e-learning
development platform for faculty. It is also easier to determine the scope of the effects of upgrading network services.
sBALS skngrS
A trunk is a point-to-point link between two network devices that carries more than one VLAN. A VLAN trunk allows you to extend the VLANs across an entire network. Cisco supports IEEE 802.1Q for coordinating trunks on Fast Ethernet and Gigabit Ethernet interfaces.
A VLAN trunk does not belong to a specific VLAN, rather it is a conduit for VLANs between switches and routers.
Lab CPIS-370
P a g e | 38
sknurTfin sNAC nr gifnoC
Sk cs sBALs
ASSing sciswB L oks so sBALS sscsiwcssA s kiAA sBAL wogAinnkcsiog
Inter-Switched Connection go kngrigns ngcLs
Lab CPIS-370
P a g e | 39 Assign a Switch Port
After you have created a VLAN, assign one or more ports to the VLAN. When you manually assign a switch port to a VLAN, it is known as a static access port. A static access port can belong to only one VLAN at a time.
Lab CPIS-370
P a g e | 40 Verify VLANs and Port Memberships
After you configure the VLAN, you can validate the VLAN configurations using Cisco IOS show commands.
Configure an 802.1Q Trunk
To configure a trunk on a switch port, use the switchport mode trunk command. When you enter trunk mode, the interface changes to permanent trunking mode
Lab CPIS-370
P a g e | 41 Introduction
VLANs are helpful in the administration of logical groups, allowing members of a group to be easily moved, changed, or added. This activity focuses on creating and naming VLANs, assigning access ports to specific VLANs, changing the native VLAN, and configure configuring trunk links.
Task 1: View the Default VLAN Configuration
Ste
p 1. Verify the current running configuration on the switches.On all three switches, enter user EXEC mode with the password cisco. Then enter privileged EXEC mode with the password class.
From privileged EXEC mode on all three switches, issue the show running-config command to verify the current running configuration. The basic configurations are already set, but there are no VLAN assignments.
Step 2. Display the current VLANs.
On S1, issue the show vlan command. The only VLANs present are the default ones. By default, all interfaces are assigned to VLAN 1.
Step 3. Verify connectivity between PCs on the same network.
Notice that each PC can ping the other PC that shares the same network:
PC1 can ping PC4
PC2 can ping PC5
PC3 can ping PC6
Pings to PCs in other networks fail.
What benefit will configuring VLANs provide to the current configuration?
Task 2: Configure VLANs Step 1. Create VLANs on S1.
The command vlan vlan-id creates a VLAN. Use the name vlan-name command to name a VLAN.
Lab CPIS-370
P a g e | 42 On S1, create four VLANs using the vlan-ids and the names shown below:
S1(config)#vlan 10
S1(config-vlan)#name Faculty/Staff S1(config-vlan)#vlan 20
S1(config-vlan)#name Students S1(config-vlan)#vlan 30
S1(config-vlan)#name Guest(Default) S1(config-vlan)#vlan 99
S1(config-vlan)#name Management&Native Step 2. Verify the VLAN configuration.
After creating the VLANs, return to privileged EXEC and issue the show vlan brief command to verify the creation of the new VLANs.
S1#show vlan brief
VLAN Name Status Ports
---- --- --- --- 1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4 Fa0/5, Fa0/6, Fa0/7, Fa0/8
Fa0/9, Fa0/10, Fa0/11, Fa0/12 Fa0/13, Fa0/14, Fa0/15, Fa0/16 Fa0/17, Fa0/18, Fa0/19, Fa0/20 Fa0/21, Fa0/22, Fa0/23, Fa0/24 Gig1/1, Gig1/2
10 Faculty/Staff active 20 Students active 30 Guest(Default) active 99 Management&Native active 1002 fddi-default active 1003 token-ring-default active 1004 fddinet-default active 1005 trnet-default active S1#
Step 3. Create the VLANs on S2 and S3.
On S2 and S3, use the same commands you used on S1 to create and name the VLANs.
Step 4. Verify the VLAN configuration.
Use the show vlan brief command to verify all VLANs are configured and named.
Lab CPIS-370
P a g e | 43 Task 3: Assign VLANs to Ports
The range command greatly reduces the amount of repetitive commands you must enter when configuring the same commands on multiple ports. However, Packet Tracer does not support the range command. So only the active interfaces are graded for the switchport mode access command.
Step 1. Assign VLANs to the active ports on S2.
The switchport mode access command configures the interface as an access port.
The switchport access vlan vlan-id command assigns a VLAN to the port. An access port can only be assigned one access VLAN. Enter the following commands on S2.
S2(config)#interface fastEthernet 0/6 S2(config-if)#switchport mode access S2(config-if)#switchport access vlan 30 S2(config-if)#interface fastEthernet 0/11 S2(config-if)#switchport mode access S2(config-if)#switchport access vlan 10 S2(config-if)#interface fastEthernet 0/18 S2(config-if)#switchport mode access S2(config-if)#switchport access vlan 20
Step 2. Assign VLANs to the active ports on S3.
Assign VLANs to the active ports on S3. S3 uses the same VLAN access port assignments that you configured on S2.
Step 3. Verify loss of connectivity.
Previously, PCs that shared the same network could ping each other successfully. Try pinging between PC1 and PC4. Although the access ports are assigned to the appropriate VLANs, the ping fails. Why?
Task 4: Configure Trunking
Step 1. Configure S1 Fa0/1 and Fa0/3 for trunking and to use VLAN 99 as the native VLAN.
S1(config)#interface FastEthernet 0/1 S1(config-if)#switchport mode trunk
S1(config-if)#switchport trunk native vlan 99 S1(config-if)#interface FastEthernet 0/3 S1(config-if)#switchport mode trunk
S1(config-if)#switchport trunk native vlan 99
Lab CPIS-370
P a g e | 44 Step 3. Verify trunking is enabled on S2 and configure VLAN 99 as the native VLAN.
Dynamic Trunking Protocol (DTP) has automatically enabled the Fast Ethernet 0/1 port on S2 for trunking. Once you configured the mode to trunking on S1, DTP messages sent from S1 to S2 automatically informed S1 to move the state of Fa0/1 to trunking. This can be verified with the following command on S1:
S2#show interface fastEthernet 0/1 switchport Name: Fa0/1
Switchport: Enabled
Administrative Mode: dynamic auto Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: dot1q Negotiation of Trunking: On
Access Mode VLAN: 1 (default)
Trunking Native Mode VLAN: 1 (default)
<output omitted>
S2#
Notice that the administrative mode is set to dynamic auto. This is the default state of all ports on a Cisco IOS switch. However, DTP has negotiated trunking, so the operation mode is trunk, resulting in a native VLAN mismatch.
As a best practice, configure the administrative mode of the trunking interface to be in trunk mode. This ensures that the interface is statically configured as a trunk port and never negotiates a different mode.
S2(config)#interface FastEthernet 0/1 S2(config-if)#switchport mode trunk
To correct the native VLAN mismatch, configure the trunking port with the switchport trunk native vlan 99 command.
S2(config-if)#switchport trunk native vlan 99
Step 4. Verify trunking is enabled on S3 and configure VLAN 99 as the native VLAN.
DTP has also successfully negotiated a trunk between S1 and S3.
S3#show interfaces fastEthernet 0/3 switchport Name: Fa0/3
Switchport: Enabled
Administrative Mode: dynamic auto Operational Mode: trunk
Administrative Trunking Encapsulation: dot1q Operational Trunking Encapsulation: dot1q
Lab CPIS-370
P a g e | 45
Grading Lab 5
Total Marks Obtained Marks Lab Performance
Knowledge about the Lab
Values obtained (Accurate/Precise) Lab participation
Behavior in the Lab Viva
Total
