Skip to content

Network Ninja

The Long Road to Cisco

  • Home
  • About
  • Legal Disclaimer
  • Archives

Less
More
Trim
Untrim
« Older
Home
Loading
Newer »

Tag Archive for 'VLANs'

Open Shortest Path First – OSPF Fundamentals – Configuring Options On an Internal Router

Published
by
Deon Botha
on June 5, 2009
in BSCI, BSCI Notes, Certification, Cisco Systems, Concepts and Constructs, Cost and Priority
. 4 Comments

To allow you to tune OSPF on an Internal Router you have the following options available at your disposal:

  • Router ID
  • Loopback interface
  • cost command
  • priority command

Defining the Router ID and Loopback interface

The Router ID (when thinking about OSPF Domains) is used to identify any given Router in the Link State Advertisements (LSAs) in an OSPF Database. A given Router on a network requires an ID (Router ID) to participate in an OSPF Domain.  The Router ID can be assigned/set in one of two fashions:

  • By the administrator (manually assigned)
  • Left to the discretion of the router (automatically assigned by the automatic election process)

In most configurations the Router ID is set by the administrator as this makes it easier to track events, internal documentation, and system-administration remotely or even on the router itself.

Setting the Router ID

The Router ID as discussed previously must be present for a Router to participate in an OSPF Domain. This Router ID can be set in one of two methods:

Setting the Router ID – Method One (Less Preferred)

The OSPF Router ID can be defined using the router-id (background link) command found in IOS.

Using the Router-ID command isn’t always the best idea when combining BGP and OSPF as both technologies employ the same method in electing a Router ID. So manually setting a Router ID (using the Router-id command) for OSPF could cause BGPs Router ID to differ from BGP which causes administration problems as well as could cause other problems at a later stage when combining the two technologies.

Should you still want to change the Router ID using this method anyway the command is:

Router(config)#router ospf
Router(config-if)#router-id ip-address

Dissecting the above when the Router ID has been chosen/assigned using the router-id command, the Router ID is kind of stable and may possibly change (barring a power cycle or a OSPF process reset). This is an important factor because changing the Router ID post (after) configuration could possibly break some OSPF configurations, such as virtual links (which as the name implies don’t exist, and could take some thinking to logically get working again).

Setting the Router ID – Method Two (Preferred)

Should the router-id command not be present/available on the router IOS you are using, and you want a more reliable method (sticky) that spans, the Router ID is automatically elected via:

  • The highest IP Address of a manually created loopback interface.
  • If there is no configured Loopback interface then the Router ID will be the highest IP Address of the first active (on boot-up) physical interface.

I inherently look for the easier easier solution to a problem that will work long term, more work once off doesn’t matter (first off config) the solution must stick and continue working through power outages, reboots and the CEO trying his hand at “setting up” his own hardware, voice being a good example i.e. putting each end point into it’s own vlan thus ensuring QoS while the organization grows (there are limitations in the number of vlans, but I have yet to reach them).

Looking at the top the better method to control the Router ID (using automatic means) is through the use of the Loopback interface IP address. A loopback interface is a virtual interface (duh) that will always be active (cannot flap) and will be the first active interface (*shrug* logic dictates as it becomes the Router-ID, comments as I haven’t tested this out?).

The command to use a loopback is as follows (CCNA topic):

Router(config)#interface loopback inerface-number
Router(config-if)#ip address ip-address subnet-mask

Consider assigning loopbacks a /32 mask 255.255.255.255  (1 end point) to minimize the ip space usage of the virtual interface(s) on the network (use it dont use it). I have come across some places that say that loopbacks wont work with the /32 mask (cant find source again), I will verify once I setup my kit again. In that case use the smallest (/31 or /30).

What I want to take away from this is should the Router ID be chosen/assigned using the loopback interface, the Router ID is stable and wont change. What’s important here is that a Loopback interfaces is NOT a physical interface thus cannot go up and down (flap) and therefore is not as unstable element in the network (i.e. loopback is stable) and thus is more desirable. Even in the event of a power cycle the loopback will once again be the Router ID.

Think about including the Loopback interface in the general network commands even if you aren’t configuring OSPF. This gives you an easy point to ping to should there be a need to troubleshoot (can I reach point A from point B) this should tell you alot about Layer 1 if the interface is un-shut and it has an ip-address.

Changing the COST

The COST metric on a Cisco is calculated as 100,000,000 bps divided by the bandwidth of the interface in bits per seconds. Sometimes when using a fast interface type (FE and GE) or when dealing with inter-vendor situations (Cisco / 3COM / HP) changing the default cost metric becomes a requirement (this is due to  (1) faster link speeds not calculating correctly (2) or the metric equations being different between inter-vendor kit).

The command to change default cost:

Router(config-if)#ip ospf cost cost

The cost variable  is a 16-bit value (0 to 65,535). The lower values being the more preferred costs while higher being less preferred (shown below).

Default Cost in OSPF

As you can see in the above table Fast Ethernet is the “drop off point” (where all things being 1) for the “fast” links (Fast Ethernet and Gigabit Ethernet both equal 1). In this case it would be better to manipulate the default cost so that the Gigabit Ethernet link is preferred over the Fast Ethernet Link. This would mean changing the cost per interface.

Another way to deal with high-bandwidth paths is to change the way a Cisco calculates cost (mess with the equation). We adjust the numerator in the automatic calculation (the Cisco automatic formula) to make some things happen in this case. To do this use the ospf auto-cost reference-bandwidth command on IOS, the default is 100 (Fast Ethernet) adjust it to 1000 (Gigabit Ethernet) and you will “fix” the equation.

Router(config-router)#ospf auto-cost reference-bandwidth reference bandwidth

Two very important NOTES (1) ospf auto-cost reference-bandwidth should be applied to all routers in an area if it is applied at all and the command (2) ip ospf cost overrides the calculated cost calculated by auto-cost reference-bandwidth

Determining the DR with the Priority Command

The hello field includes a priority field (if you can still remember) thus providing a mechanism by which designated router (DR) and backup designated Router (BDR) gets elected.

To be eligible for election, the priority must be a positive integer between 1 and 255 (if the priority is 0 (zero) the router cannot participate in the election process).

The highest priority wins (Cisco Router Default is 1) the election process.

Because the default is 1, to break all ties the Cisco Router ID is used as the deciding factor in the election process (ergo why hard coding the Router ID is a bad idea). The command to adjust priority (interface-by-interface mind you):

Router(config-if)#ip ospf priority number

Notes and Notices: This is a part of my personal BSCI notes and research to assist myself in learning and understanding the concepts and theory for the BSCI exam. I learn by making notes reading and writing things down and wish to file them where I cannot lose them. These notes are not to be seen, judged or mistaken for replacements to Cisco recognized and authorized training which I personally support and attend and suggest you undertake if you are going for the BSCI Certification.

If I added some value to your Cisco Experience with this post please add some value to my studies and leave a comment, question, suggestion, note of thanks or encouragement for me to hurry up and complete my certifications. My reasoning for wanting some interaction is that the last Recruiter said I need CCNP, Juniper and a Specialization track. The LOOOOONG Road to Cisco Indeed. Thanks Deon

CCIE Command Memorizer

Published
by
Deon Botha
on September 12, 2008
in Asides, Off-Topic, Support and Vine
. 2 Comments

About a two weeks ago David Bombal from Configure Terminal contacted me about doing a write up for  CCIE Command Memorizer. As a current CCNP student there is obviously some of the CCIE content that still goes over my head but most of the stuff I am fairly okay with. David didn’t seem to mind that I wasn’t a CCIE as yet and I sure didn’t mind giving CCIE Command Memorizer a spin so below are my thoughts and feelings.

During my initial research on the CCIE Command Memorizer I found that CCIE Command Memorizer was geared towards the CCIE Routing and Switching (R&S) Lab. When I received the application Monday two weeks ago my initial impression was that it covers without many frills and spills in an effective and efficient manner the commands in a Do-It-Yourself fill in the blanks task to objective orientated format. There is no round-about, search for things “what now” moments; everything is straight and to the point. Another bonus is that the download isn’t enormous either.

The CCIE Command Memorizer application itself is written in an e-book format, which works for the content and in that format. If like myself you like using the keyboard when you get going on command line (IOW dislike moving between the mouse+keyboard) some of the shortcuts might feel “off” and take a bit to get use to. Take heart that once you get going it all starts flowing like second nature.

My feelings on how the CCIE Command Memorizer would fit into my studies it that as a study tool / study aid as it helps you practice commands anywhere at any time as long as you have your notebook handy (face it as a CCNP I realize I am a Geeks and my notebook goes on holiday with me so this pretty much means anywhere). My current situation with a LAB is that I am busy getting racks, cabling, and other kit together to put a LAB up, the actual LAB is non-existent. In my situation the CCIE Command Memorizer is my stop-gap for actual “command” time practice as I don’t really have kit and at times no block time to zero in on a specific Technology Area and do some quick revision work with a specific focus only on that technology. This is different from the LAB where you need to setup and configure peripheral services and technologies to get to the meat close to the bone, CCIE Command Memorizer lets you focus ONLY on those parts to give you practice on those parts.

In my opinion students that would find the CCIE Command Memorizer useful would be individuals who have problems with instant recall of information when under stress or duress (people with classic test condition issues that forget as they walk through the door when in normal day-to-day they are Uber networkers) and students who need to drill things to remember (repetition, repetition, repetition) information to get it to pass from short term into long term memory (this one would be me). Most other students may also find it handy to bridge the book theory and lab practical (where you just went through the theory to quickly go over the practical again to cement the knowledge just a bit more).

From my perspective as a CCNP student the CCIE Command Memorizer shares most (if not all) of the content material with the CCNP that I cared to check up on. In the two weeks I have been working through EIGRP and OSPF (notes to follow shortly) for the BSCI. Everything I covered in theory the CCIE Command Memorizer covered + some more.

To close off for those who want a one-size-fits-all study solution don’t mistake the CCIE Command Memorizer for something it wasn’t built to be. The CCIE Command Memorizer is a STUDY TOOL / STUDY AID and not a “Complete Blended Solution” or All-In-One (aio) Product like the guys from IP Expert offer. This will mean that you will probably either attend classes from a Cisco Learning Partner and/or do labs at home or through a Rack Rental Company and/or also have Cisco Press books that will ADD TO THE VALUE the CCIE Command Memorizer.

In summation I suggest taking a serious look at the CCIE Command Memorizer and how to integrate it into your study plans. Taking all things into consideration I would seriously recommend the CCIE Command Memorizer even to current CCNP level students. The value add is easy to find and it helps to have something that you can take along as you travel that does command line study effectively without the need to spend hours on “setting up other things” before you get to play with advanced topics.

Difference between VLAN Access-map and ACL

Published
by
Deon Botha
on July 10, 2008
in ACL, BCMSN, Certification, Cisco Systems, Concepts and Constructs and VACL
. 0 Comments

Looking over some things before I go write the BCMSN exam this is something I wanted to waffle on about again because the reason for both aren’t so clear to me and why to use what when.

So short and sweet an Access Control List (ACL) is something that comes from the CCNA course and is something one can use to manage and control traffic that passes through a switch (mind passes through and doesn’t originate on) either in an inbound or outbound direction. Cisco Catalyst Switches filter traffic through the use of a TCAM (mentioned on this post). The reason for VLAN Access Control List (VACL) is that only traffic that passes between VLANs can be filtered using ACLs.

So this means logicaly that traffic that stays in the same VLAN doesn’t necessarily have a direction (inbound or outbound) in relation to the interface and also isn’t crossing any interface boundries. There is also the fact that the packets may also be non-IP, non-IPX, or completely bridged. VACLs are mechanisms that can directly affect packets inside a VLAN. VACLs are configured using access-maps

Clearing a connected switch

Published
by
Deon Botha
on July 3, 2008
in BCMSN, Certification, Cisco Systems, Concepts and Constructs and VLAN
. 0 Comments

This is a useful thing to know in lab situations you probably won’t get this one very often in real world scenarios often (I say this because how often do you have to delete vlans and start from scratch? When the network is setup it’s just a case of small adjustments unless wholesale change is happening).

This lab assumes you have a setup like the one below and you are busy clearing settings to be able to start another lab exercise.

LAB_2

This is linked to the the previous post that dealt with how to clear an isolated switch where this post is clearing a switch connected to a larger network (if you have everything setup nicely and aren’t going to change wiring and disconnect and reconnect things because that leads to layer-1 issues).

Step 1: Telnet to the desired switch, whether that be the DSW or ASW switches of either POD 1 or POD 2. Once you have the console window open and you have privelaged level access you are ready to go.

Step 2: Delete the vlan.dat file from the switch

ASW1#delete vlan.dat
Delete filename [vlan.dat]?
Delete flash:vlan.dat? [confirm]
ASW1#

Step 3: After deleting the vlan.dat file you can delete the startup-config file

ASW1#erase startup-config
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]? [OK]
Erase of nvram: complete
ASW1#

Step 4: The problem with clearing a switch that is networked is that it has a tendency to relearn things (VTP) from the network. This is both a boon and a bane depending on what you want to do at the time. In this case its a bane because you want it not to do this because it makes life difficult. Issue the reload command.

ASW1(config)#reload
System configuration has been modified. Save? [yes/no] no
Proceed with reload?

After the reload has completed you check that the switch hasn’t learnt things from the network.

Switch#show vlan

If the switch shows any vlans other than VLAN 1 (default), 1002 (fddi), 1003 (token ring), 1004 (fddinet), and 1005 (trnet) then it has learnt things from the network and you have more work ahead.

If the switch only shows the VLANs above then it has been cleared and you don’t have to do anything else.

Step 5: To eliminating the vlans that the switch learnt again is simple. The switch is learning VLAN information from the network because one or more of it’s interfaces connect to an upstream VTP server. To fix this problem

Switch#conf term
Switch(config)#interface range fastethernet 0/1 - 24
Switch(config-if-range)#shutdown
Switch(config-if-range)#exit
Switch(config)#no vlan 2-xxxx
Switch(config)#exit
Switch#show vlan

The interface range command can be either fastethernet or gigabitethernet depending on the switch (you probably knew that already) and should include from port 0/1 to the last port whatever that is 8 on upwards depending on the switch chassis you have in your lab/network.

The show vlan command should output the desired vlan information and not the extra vlans at this point.

Step 6: Set the VTP mode to transparent to stop the switch from learning things again

Switch#conf term
Switch(config)#vtp mode transparent

Notes and Notices:

This is a part of my personal BCMSN notes and research to assist myself in learning and understanding the concepts and theory for the BCMSN exam. I learn by making notes reading and writing things down and wish to file them where I can’t lose them. These notes are not to be seen, judged or mistaken for replacements to Cisco recognized and authorized training which I personally support and attend and suggest you undertake if you are going for the BCMSN Certification.

BCMSN VLAN-ACL Lab 8

Published
by
Deon Botha
on June 23, 2008
in ACL, BCMSN, Certification, Cisco Systems, VACL and VLAN
. 0 Comments

LAB_2

Virtual Local Area Network (VLAN) Access Control Lists (ACL) (VACL or VLAN-ACL)

The CCNA taught ACLs standard, extended and named (standard and extended) the VACL is a standard or extended access list (no surprise) that is supported on Cisco IOS Software on Multilayer Switches (this is important) that can be mapped as the name suggests to a specific VLAN (take note).

This means that instead of an ACL filtering all traffic ingressing or egressing a particular port the ACL will filter all traffic ingressing and egressing a particular VLAN (cool huh).

The below config uses a named ACL in conjunction with the other particulars to make the VACL work. If you are rusty on the Access Lists the previous lab used an extended access list you can then also go on to try your hand at standard access lists on your own.

The aim of this lab is to block telnet, ftp, www and allow all other traffic to PC1 and PC2.

PC1 is in VLAN 10 with IP address 192.168.10.200 255.255.255.0 Default Gateway (DG) 192.168.10.1

PC2 is in VLAN 20 with IP Address 192.168.20.250 255.255.255.0 DG 192.168.10.50

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname DSW1
Enable secret and password
DSW1(config)#enable password cisco
DSW1(config)#enable secret cisco
Setup the console port password
DSW1(config)#line con 0
DSW1(config-line)#password cisco
DSW1(config-line)#login
DSW1(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
DSW1(config)#line vty 0 4
DSW1(config-line)#password cisco
DSW1(config-line)#login
DSW1(config-line)#exit
Setup the default VLAN
DSW1(config)#interface vlan 1
DSW1(config-if)#ip address 192.168.1.1 255.255.255.0
DSW1(config-if)#no shut
DSW1(config-if)#exit
Setup VLAN 10
DSW1(config)#interface vlan 10
DSW1(config-if)#ip address 192.168.10.1 255.255.255.0
DSW1(config-if)#no shut
DSW1(config-if)#exit
Setup VLAN 20
DSW1(config)#interface vlan 20
DSW1(config-if)#ip address 192.168.20.1 255.255.255.0
DSW1(config-if)#no shut
DSW1(config-if)#exit
Setup Fastethernet Interfaces
DSW1(config)#interface fastethernet 0/1
DSW1(config-if)#description DSW1 - ASW1
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/2
DSW1(config-if)#description DSW1 - ASW1
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/3
DSW1(config-if)#description DSW1 - ASW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/4
DSW1(config-if)#description DSW1 - ASW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/11
DSW1(config-if)#description DSW1 - DSW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/12
DSW1(config-if)#description DSW1 - DSW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
Enable QoS Globally
DSW1(config)#mls qos
Create Access Lists
DSW1(config)#access-list 150 permit udp any any eq tftp
DSW1(config)#access-list 150 permit tcp any any eq ftp
DSW1(config)#access-list 150 permit tcp any any eq ftp-data
DSW1(config)#access-list 151 permit udp any any eq echo
DSW1(config)#access-list 151 permit udp any any eq echo-reply
DSW1(config)#access-list 151 permit udp any any eq echo
Create a class map
DSW1(config)#class-map File-Transfer
DSW1(config-cmap)#match access-group 150
DSW1(config-cmap)#exit
DSW1(config)#class-map Echo
DSW1(config-cmap)#match access-group 151
DSW1(config-cmap)#exit
Create a policy map
DSW1(config)#policy-map Precedence
DSW1(config-pmap)#class file-transfer
DSW1(config-pmap-c)#set ip precedence 5
DSW1(config-pmap-c)#exit
DSW1(config-pmap)#class echo
DSW1(config-pmap-c)#set ip precedence 1
DSW1(config-pmap-c)#exit
DSW1(config-pmap)#exit
Create a VLAN access map
DSW1(config)#vlan access-map vlan_map_10 10
DSW1(config-access-map)#match ip address blocked_protocols
DSW1(config-access-map)#action drop
DSW1(config-access-map)#exit
DSW1(config)#vlan access-map vlan_map_10 20
DSW1(config-access-map)#match ip address allowed_protocols
DSW1(config-access-map)#action forward
DSW1(config-access-map)#exit
Create an Named Extended Access List
DSW1(config)#ip access-list extended blocked_protocols
DSW1(config-ext-ipacl)#permit tcp any any eq telnet
DSW1(config-ext-ipacl)#permit tcp any any eq ftp
DSW1(config-ext-ipacl)#permit tcp any any eq ftp-data
DSW1(config-ext-ipacl)#permit tcp any any eq www
DSW1(config-ext-ipacl)#exit
DSW1(config)#ip access-list extended allowed_protocols
DSW1(config-ext-ipacl)#permit ip any any
DSW1(config-ext-ipacl)#exit
Apply the VLAN ACL to Filter a VLAN
DSW1(config)#vlan filter vlan_map_10 vlan-list 10
Associate VLANs with Fe 1 to 4
DSW1(config)#interface range fastethernet 0/1 - 4
DSW1(config-if-range)#speed 100
DSW1(config-if-range)#duplex auto
DSW1(config-if-range)#switchport
DSW1(config-if-range)#switchport trunk encapsulation dot1q
DSW1(config-if-range)#switchport trunk native vlan 1
DSW1(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW1(config-if-range)#switchport mode trunk
Apply QoS Policy
DSW1(config-if-range)#service-policy input precedence
DSW1(config-if-range)#exit
Associate VLANs with Fe 11 and 12
DSW1(config)#interface range fastethernet 0/11 - 12
DSW1(config-if-range)#speed 100
DSW1(config-if-range)#duplex auto
DSW1(config-if-range)#switchport
DSW1(config-if-range)#switchport trunk encapsulation dot1q
DSW1(config-if-range)#switchport trunk native vlan 1
DSW1(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW1(config-if-range)#switchport mode trunk
DSW1(config-if-range)#exit
Aministratively shutdown all ports not connected
DSW1(config)#interface range fastethernet 0/5 - 10
DSW1(config-if-range)#shut
DSW1(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
DSW1(config)#spanning-tree vlan 1 root primary
DSW1(config)#spanning-tree vlan 10 root primary
DSW1(config)#spanning-tree vlan 20 root secondary
Enable Routing and a Protocol
DSW1(config)#ip routing
DSW1(config)#router eigrp 100
DSW1(config-router)#network 192.168.0.0
DSW1(config-router)#exit
Exit Global Configuration Mode
DSW1(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
DSW1#show interfaces status
Check that you configured STP
DSW1#show spanning-tree
Check routing is correct
DSW1#show ip route
Check QoS is enabled
DSW1#show mls qos
Check Access Lists
DSW1#show access-lists
Check class maps
DSW1#show class-map
Check policy map
DSW1#show policy-map
Check that QoS is applied to the interfaces
DSW1#show run | begin interface FastEthernet 0/1
Check VLAN Access-Map
DSW1#show vlan access-map
Confirm Named Access lists
DSW1#show access-lists blocked_protocols
DSW1#show access-lists allowed_protocols
DSW1#show access-lists
Confirm VLAN filter
DSW1#show vlan filter
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
DSW1#copy run start

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname DSW2
Enable secret and password
DSW2(config)#enable password cisco
DSW2(config)#enable secret cisco
Setup the console port password
DSW2(config)#line con 0
DSW2(config-line)#password cisco
DSW2(config-line)#login
DSW2(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
DSW2(config)#line vty 0 4
DSW2(config-line)#password cisco
DSW2(config-line)#login
DSW2(config-line)#exit
Setup the default VLAN
DSW2(config)#interface vlan 1
DSW2(config-if)#ip address 192.168.1.50 255.255.255.0
DSW2(config-if)#no shut
DSW2(config-if)#exit
Setup VLAN 10
DSW2(config)#interface vlan 10
DSW2(config-if)#ip address 192.168.10.50 255.255.255.0
DSW2(config-if)#no shut
DSW2(config-if)#exit
Setup VLAN 20
DSW2(config)#interface vlan 20
DSW2(config-if)#ip address 192.168.20.50 255.255.255.0
DSW2(config-if)#no shut
DSW2(config-if)#exit
Setup Fastethernet Interfaces
DSW2(config)#interface fastethernet 0/1
DSW2(config-if)#description DSW2 - ASW2
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/2
DSW2(config-if)#description DSW2 - ASW2
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/3
DSW2(config-if)#description DSW2 - ASW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/4
DSW2(config-if)#description DSW2 - ASW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/11
DSW2(config-if)#description DSW2 - DSW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/12
DSW2(config-if)#description DSW2 - DSW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
Enable QoS Globally
DSW2(config)#mls qos
Create Access Lists
DSW2(config)#access-list 150 permit udp any any eq tftp
DSW2(config)#access-list 150 permit tcp any any eq ftp
DSW2(config)#access-list 150 permit tcp any any eq ftp-data
DSW2(config)#access-list 151 permit udp any any eq echo
DSW2(config)#access-list 151 permit udp any any eq echo-reply
DSW2(config)#access-list 151 permit udp any any eq echo
Create a class map
DSW2(config)#class-map File-Transfer
DSW2(config-cmap)#match access-group 150
DSW2(config-cmap)#exit
DSW2(config)#class-map Echo
DSW2(config-cmap)#match access-group 151
DSW2(config-cmap)#exit
Create a policy map
DSW2(config)#policy-map Precedence
DSW2(config-pmap)#class file-transfer
DSW2(config-pmap-c)#set ip precedence 5
DSW2(config-pmap-c)#exit
DSW2(config-pmap)#class echo
DSW2(config-pmap-c)#set ip precedence 1
DSW2(config-pmap-c)#exit
DSW2(config-pmap)#exit
Create a VLAN access map
DSW2(config)#vlan access-map vlan_map_20 10
DSW2(config-access-map)#match ip address blocked_protocols
DSW2(config-access-map)#action drop
DSW2(config-access-map)#exit
DSW2(config)#vlan access-map vlan_map_20 20
DSW2(config-access-map)#match ip address allowed_protocols
DSW2(config-access-map)#action forward
DSW2(config-access-map)#exit
Create an Named Extended Access List
DSW2(config)#ip access-list extended blocked_protocols
DSW2(config-ext-ipacl)#permit tcp any any eq telnet
DSW2(config-ext-ipacl)#permit tcp any any eq ftp
DSW2(config-ext-ipacl)#permit tcp any any eq ftp-data
DSW2(config-ext-ipacl)#permit tcp any any eq www
DSW2(config-ext-ipacl)#exit
DSW2(config)#ip access-list extended allowed_protocols
DSW2(config-ext-ipacl)#permit ip any any
DSW2(config-ext-ipacl)#exit
Apply the VLAN ACL to Filter a VLAN
DSW2(config)#vlan filter vlan_map_20 vlan-list 20
Associate VLANs with Fe 1 to 4
DSW2(config)#interface range fastethernet 0/1 - 4
DSW2(config-if-range)#speed 100
DSW2(config-if-range)#duplex auto
DSW2(config-if-range)#switchport
DSW2(config-if-range)#switchport trunk encapsulation dot1q
DSW2(config-if-range)#switchport trunk native vlan 1
DSW2(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW2(config-if-range)#switchport mode trunk
Apply QoS Policy
DSW2(config-if-range)#service-policy input precedence
DSW2(config-if-range)#exit
Associate VLANs with Fe 11 and 12
DSW2(config)#interface range fastethernet 0/11 - 12
DSW2(config-if-range)#speed 100
DSW2(config-if-range)#duplex auto
DSW2(config-if-range)#switchport
DSW2(config-if-range)#switchport trunk encapsulation dot1q
DSW2(config-if-range)#switchport trunk native vlan 1
DSW2(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW2(config-if-range)#switchport mode trunk
DSW2(config-if-range)#exit
Aministratively shutdown all ports not connected
DSW2(config)#interface range fastethernet 0/5 - 10
DSW2(config-if-range)#shut
DSW2(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
DSW2(config)#spanning-tree vlan 1 root secondary
DSW2(config)#spanning-tree vlan 10 root secondary
DSW2(config)#spanning-tree vlan 20 root primary
Enable Routing and a Protocol
DSW2(config)#ip routing
DSW2(config)#router eigrp 100
DSW2(config-router)#network 192.168.0.0
DSW2(config-router)#exit
Exit Global Configuration Mode
DSW2(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
DSW2#show interfaces status
Check that you configured STP
DSW2#show spanning-tree
Check routing is correct
DSW2#show ip route
Check QoS is enabled
DSW2#show mls qos
Check Access Lists
DSW2#show access-lists
Check class maps
DSW2#show class-map
Check policy map
DSW2#show policy-map
Check that QoS is applied to the interfaces
DSW2#show run | begin interface FastEthernet 0/1
Check VLAN Access-Map
DSW2#show vlan access-map
Confirm Named Access lists
DSW2#show access-lists blocked_protocols
DSW2#show access-lists allowed_protocols
DSW2#show access-lists
Confirm VLAN filter
DSW2#show vlan filter
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
DSW2#copy run start

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname ASW1
Enable secret and password
ASW1(config)#enable password cisco
ASW1(config)#enable secret cisco
Setup the console port password
ASW1(config)#line con 0
ASW1(config-line)#password cisco
ASW1(config-line)#login
ASW1(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
ASW1(config)#line vty 0 4
ASW1(config-line)#password cisco
ASW1(config-line)#login
ASW1(config-line)#exit
Default Gateway
ASW1(config-line)#ip default-gateway 192.168.1.1
Setup the default VLAN
ASW1(config)#interface vlan 1
ASW1(config-if)#ip address 192.168.1.100 255.255.255.0
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup VLAN 10
ASW1(config)#interface vlan 10
ASW1(config-if)#ip address 192.168.10.100 255.255.255.0
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup VLAN 20
ASW1(config)#interface vlan 20
ASW1(config-if)#ip address 192.168.20.100 255.255.255.0
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup Fastethernet Interfaces
ASW1(config)#interface fastethernet 0/1
ASW1(config-if)#description ASW1 - DSW1
ASW1(config-if)#no shut
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/2
ASW1(config-if)#description ASW1 - DSW1
ASW1(config-if)#no shut
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/3
ASW1(config-if)#description ASW1 - DSW2
ASW1(config-if)#no shut
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/4
ASW1(config-if)#description ASW1 - DSW2
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup Fastethernet 0/12 for 10mbs half duplex as an access level end-point interface
ASW1(config)#interface fastethernet 0/12
ASW1(config-if)#description ASW1 - PC1
ASW1(config-if)#speed 10
ASW1(config-if)#duplex half
ASW1(config-if)#switchport
Make the port as an access port
ASW1(config-if)#switchport mode access
Make the port an access port for VLAN 10
ASW1(config-if)#switchport access vlan 10
Enable PortFast on end-points
ASW1(config-if)#spanning-tree portfast
ASW1(config-if)#no shut
ASW1(config-if)#exit
Associate VLANs with Fe 1 to 4
ASW1(config)#interface range fastethernet 0/1 - 4
ASW1(config-if-range)#speed 100
ASW1(config-if-range)#duplex auto
ASW1(config-if-range)#switchport
ASW1(config-if-range)#switchport trunk encapsulation dot1q
ASW1(config-if-range)#switchport trunk native vlan 1
ASW1(config-if-range)#switchport trunk allowed vlan 1,20,10
ASW1(config-if-range)#switchport mode trunk
Configure UplinkFast
ASW1(config-if-range)#spanning-tree uplinkfast
ASW1(config-if-range)#exit
Aministratively shutdown all ports not connected
ASW1(config)#interface range fastethernet 0/5 - 11
ASW1(config-if-range)#shut
ASW1(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
ASW1(config)#spanning-tree vlan 1
ASW1(config)#spanning-tree vlan 10
ASW1(config)#spanning-tree vlan 20
Exit Global Configuration Mode
ASW1(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
ASW1#show interfaces status
Check that you configured STP
DSW1#show spanning-tree
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
ASW1#copy run start

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname ASW2
Enable secret and password
ASW2(config)#enable password cisco
ASW2(config)#enable secret cisco
Setup the console port password
ASW2(config)#line con 0
ASW2(config-line)#password cisco
ASW2(config-line)#login
ASW2(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
ASW2(config)#line vty 0 4
ASW2(config-line)#password cisco
ASW2(config-line)#login
ASW2(config-line)#exit
Default Gateway
ASW2(config-line)#ip default-gateway 192.168.1.50
Setup the default VLAN
ASW2(config)#interface vlan 1
ASW2(config-if)#ip address 192.168.1.150 255.255.255.0
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup VLAN 10
ASW2(config)#interface vlan 10
ASW2(config-if)#ip address 192.168.10.150 255.255.255.0
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup VLAN 20
ASW2(config)#interface vlan 20
ASW2(config-if)#ip address 192.168.20.150 255.255.255.0
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup Fastethernet Interfaces
ASW2(config)#interface fastethernet 0/1
ASW2(config-if)#description ASW2 - DSW2
ASW2(config-if)#no shut
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/2
ASW2(config-if)#description ASW2 - DSW2
ASW2(config-if)#no shut
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/3
ASW2(config-if)#description ASW2 - DSW1
ASW2(config-if)#no shut
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/4
ASW2(config-if)#description ASW2 - DSW1
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup Fastethernet 0/12 for 10mbs half duplex as an access level end-point interface
ASW2(config)#interface fastethernet 0/12
ASW2(config-if)#description ASW2 - PC2
ASW2(config-if)#speed 10
ASW2(config-if)#duplex half
ASW2(config-if)#switchport
Make the port as an access port
ASW2(config-if)#switchport mode access
Make the port an access port for VLAN 20
ASW2(config-if)#switchport access vlan 20
Enable PortFast on end-points
ASW2(config-if)#spanning-tree portfast
ASW2(config-if)#no shut
ASW2(config-if)#exit
Associate VLANs with Fe 1 to 4
ASW2(config)#interface range fastethernet 0/1 - 4
ASW2(config-if-range)#speed 100
ASW2(config-if-range)#duplex auto
ASW2(config-if-range)#switchport
ASW2(config-if-range)#switchport trunk encapsulation dot1q
ASW2(config-if-range)#switchport trunk native vlan 1
ASW2(config-if-range)#switchport trunk allowed vlan 1,20,10
ASW2(config-if-range)#switchport mode trunk
Configure UplinkFast
ASW2(config-if-range)#spanning-tree uplinkfast
ASW2(config-if-range)#exit
Aministratively shutdown all ports not connected
ASW2(config)#interface range fastethernet 0/5 - 10
ASW2(config-if-range)#shut
ASW2(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
ASW2(config)#spanning-tree vlan 1
ASW2(config)#spanning-tree vlan 10
ASW2(config)#spanning-tree vlan 20
Exit Global Configuration Mode
ASW2(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
ASW2#show interfaces status
Check that you configured STP
ASW2#show spanning-tree
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
ASW2#copy run start

The end result of this will be if you attempt to for example telnet from one of the ASW switches to the PCs (1 or 2) you should get the following:

ASW1#telnet 192.168.10.200
Trying 192.168.10.200 ...
% Connection timed out; remote host not responding

Still trying to sort out LAB time so will test this out and update as needed.

Notes and Notices:

This is a part of my personal BCMSN notes and research to assist myself in learning and understanding the concepts and theory for the BCMSN exam. I learn by making notes reading and writing things down and wish to file them where I can’t lose them. These notes are not to be seen, judged or mistaken for replacements to Cisco recognized and authorized training which I personally support and attend and suggest you undertake if you are going for the BCMSN Certification.

BCMSN QoS Routing Lab 7

Published
by
Deon Botha
on June 19, 2008
in BCMSN, Certification, Cisco Systems, Concepts and Constructs and QoS
. 0 Comments

LAB_2

QoS

The idea behind this config is to enable Quality of Service (QoS) create access-lists that apply to certain traffic/data (TFTP, FTP and icmp (echo) in this case), define a class, create a policy define precedence and apply those settings to downstream switches. If you remember from previous QoS posts the higher the precedence (voice) the more important and delay sensitive the lower the precedence (www) the less delay sensitive and easier it can handle dropped packets without end-user issues.

PC1 is in VLAN 10 with IP address 192.168.10.200 255.255.255.0 Default Gateway (DG) 192.168.10.1

PC2 is in VLAN 20 with IP Address 192.168.20.250 255.255.255.0 DG 192.168.10.50

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname DSW1
Enable secret and password
DSW1(config)#enable password cisco
DSW1(config)#enable secret cisco
Setup the console port password
DSW1(config)#line con 0
DSW1(config-line)#password cisco
DSW1(config-line)#login
DSW1(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
DSW1(config)#line vty 0 4
DSW1(config-line)#password cisco
DSW1(config-line)#login
DSW1(config-line)#exit
Setup the default VLAN
DSW1(config)#interface vlan 1
DSW1(config-if)#ip address 192.168.1.1 255.255.255.0
DSW1(config-if)#no shut
DSW1(config-if)#exit
Setup VLAN 10
DSW1(config)#interface vlan 10
DSW1(config-if)#ip address 192.168.10.1 255.255.255.0
DSW1(config-if)#no shut
DSW1(config-if)#exit
Setup VLAN 20
DSW1(config)#interface vlan 20
DSW1(config-if)#ip address 192.168.20.1 255.255.255.0
DSW1(config-if)#no shut
DSW1(config-if)#exit
Setup Fastethernet Interfaces
DSW1(config)#interface fastethernet 0/1
DSW1(config-if)#description DSW1 - ASW1
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/2
DSW1(config-if)#description DSW1 - ASW1
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/3
DSW1(config-if)#description DSW1 - ASW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/4
DSW1(config-if)#description DSW1 - ASW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/11
DSW1(config-if)#description DSW1 - DSW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/12
DSW1(config-if)#description DSW1 - DSW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
Enable QoS Globally
DSW1(config)#mls qos
Create Access Lists
DSW1(config)#access-list 150 permit udp any any eq tftp
DSW1(config)#access-list 150 permit tcp any any eq ftp
DSW1(config)#access-list 150 permit tcp any any eq ftp-data
DSW1(config)#access-list 151 permit udp any any eq echo
DSW1(config)#access-list 151 permit udp any any eq echo-reply
DSW1(config)#access-list 151 permit udp any any eq echo
Create a class map
DSW1(config)#class-map File-Transfer
DSW1(config-cmap)#match access-group 150
DSW1(config-cmap)#exit
DSW1(config)#class-map Echo
DSW1(config-cmap)#match access-group 151
DSW1(config-cmap)#exit
Create a policy map
DSW1(config)#policy-map Precedence
DSW1(config-pmap)#class file-transfer
DSW1(config-pmap-c)#set ip precedence 5
DSW1(config-pmap-c)#exit
DSW1(config-pmap)#class echo
DSW1(config-pmap-c)#set ip precedence 1
DSW1(config-pmap-c)#exit
DSW1(config-pmap)#exit
Associate VLANs with Fe 1 to 4
DSW1(config)#interface range fastethernet 0/1 - 4
DSW1(config-if-range)#speed 100
DSW1(config-if-range)#duplex auto
DSW1(config-if-range)#switchport
DSW1(config-if-range)#switchport trunk encapsulation dot1q
DSW1(config-if-range)#switchport trunk native vlan 1
DSW1(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW1(config-if-range)#switchport mode trunk
Apply QoS Policy
DSW1(config-if-range)#service-policy input precedence
DSW1(config-if-range)#exit
Associate VLANs with Fe 11 and 12
DSW1(config)#interface range fastethernet 0/11 - 12
DSW1(config-if-range)#speed 100
DSW1(config-if-range)#duplex auto
DSW1(config-if-range)#switchport
DSW1(config-if-range)#switchport trunk encapsulation dot1q
DSW1(config-if-range)#switchport trunk native vlan 1
DSW1(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW1(config-if-range)#switchport mode trunk
DSW1(config-if-range)#exit
Aministratively shutdown all ports not connected
DSW1(config)#interface range fastethernet 0/5 - 10
DSW1(config-if-range)#shut
DSW1(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
DSW1(config)#spanning-tree vlan 1 root primary
DSW1(config)#spanning-tree vlan 10 root primary
DSW1(config)#spanning-tree vlan 20 root secondary
Enable Routing and a Protocol
DSW1(config)#ip routing
DSW1(config)#router eigrp 100
DSW1(config-router)#network 192.168.0.0
DSW1(config-router)#exit
Exit Global Configuration Mode
DSW1(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
DSW1#show interfaces status
Check that you configured STP
DSW1#show spanning-tree
Check routing is correct
DSW1#show ip route
Check QoS is enabled
DSW1#show mls qos
Check Access Lists
DSW1#show access-lists
Check class maps
DSW1#show class-map
Check policy map
DSW1#show policy-map
Check that QoS is applied to the interfaces
DSW1#show run | begin interface FastEthernet 0/1
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
DSW1#copy run start

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname DSW2
Enable secret and password
DSW2(config)#enable password cisco
DSW2(config)#enable secret cisco
Setup the console port password
DSW2(config)#line con 0
DSW2(config-line)#password cisco
DSW2(config-line)#login
DSW2(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
DSW2(config)#line vty 0 4
DSW2(config-line)#password cisco
DSW2(config-line)#login
DSW2(config-line)#exit
Setup the default VLAN
DSW2(config)#interface vlan 1
DSW2(config-if)#ip address 192.168.1.50 255.255.255.0
DSW2(config-if)#no shut
DSW2(config-if)#exit
Setup VLAN 10
DSW2(config)#interface vlan 10
DSW2(config-if)#ip address 192.168.10.50 255.255.255.0
DSW2(config-if)#no shut
DSW2(config-if)#exit
Setup VLAN 20
DSW2(config)#interface vlan 20
DSW2(config-if)#ip address 192.168.20.50 255.255.255.0
DSW2(config-if)#no shut
DSW2(config-if)#exit
Setup Fastethernet Interfaces
DSW2(config)#interface fastethernet 0/1
DSW2(config-if)#description DSW2 - ASW2
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/2
DSW2(config-if)#description DSW2 - ASW2
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/3
DSW2(config-if)#description DSW2 - ASW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/4
DSW2(config-if)#description DSW2 - ASW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/11
DSW2(config-if)#description DSW2 - DSW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/12
DSW2(config-if)#description DSW2 - DSW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
Enable QoS Globally
DSW2(config)#mls qos
Create Access Lists
DSW2(config)#access-list 150 permit udp any any eq tftp
DSW2(config)#access-list 150 permit tcp any any eq ftp
DSW2(config)#access-list 150 permit tcp any any eq ftp-data
DSW2(config)#access-list 151 permit udp any any eq echo
DSW2(config)#access-list 151 permit udp any any eq echo-reply
DSW2(config)#access-list 151 permit udp any any eq echo
Create a class map
DSW2(config)#class-map File-Transfer
DSW2(config-cmap)#match access-group 150
DSW2(config-cmap)#exit
DSW2(config)#class-map Echo
DSW2(config-cmap)#match access-group 151
DSW2(config-cmap)#exit
Create a policy map
DSW2(config)#policy-map Precedence
DSW2(config-pmap)#class file-transfer
DSW2(config-pmap-c)#set ip precedence 5
DSW2(config-pmap-c)#exit
DSW2(config-pmap)#class echo
DSW2(config-pmap-c)#set ip precedence 1
DSW2(config-pmap-c)#exit
DSW2(config-pmap)#exit
Associate VLANs with Fe 1 to 4
DSW2(config)#interface range fastethernet 0/1 - 4
DSW2(config-if-range)#speed 100
DSW2(config-if-range)#duplex auto
DSW2(config-if-range)#switchport
DSW2(config-if-range)#switchport trunk encapsulation dot1q
DSW2(config-if-range)#switchport trunk native vlan 1
DSW2(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW2(config-if-range)#switchport mode trunk
Apply QoS Policy
DSW2(config-if-range)#service-policy input precedence
DSW2(config-if-range)#exit
Associate VLANs with Fe 11 and 12
DSW2(config)#interface range fastethernet 0/11 - 12
DSW2(config-if-range)#speed 100
DSW2(config-if-range)#duplex auto
DSW2(config-if-range)#switchport
DSW2(config-if-range)#switchport trunk encapsulation dot1q
DSW2(config-if-range)#switchport trunk native vlan 1
DSW2(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW2(config-if-range)#switchport mode trunk
DSW2(config-if-range)#exit
Aministratively shutdown all ports not connected
DSW2(config)#interface range fastethernet 0/5 - 10
DSW2(config-if-range)#shut
DSW2(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
DSW2(config)#spanning-tree vlan 1 root secondary
DSW2(config)#spanning-tree vlan 10 root secondary
DSW2(config)#spanning-tree vlan 20 root primary
Enable Routing and a Protocol
DSW2(config)#ip routing
DSW2(config)#router eigrp 100
DSW2(config-router)#network 192.168.0.0
DSW2(config-router)#exit
Exit Global Configuration Mode
DSW2(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
DSW2#show interfaces status
Check that you configured STP
DSW2#show spanning-tree
Check routing is correct
DSW2#show ip route
Check QoS is enabled
DSW2#show mls qos
Check Access Lists
DSW2#show access-lists
Check class maps
DSW2#show class-map
Check policy map
DSW2#show policy-map
Check that QoS is applied to the interfaces
DSW2#show run | begin interface FastEthernet 0/1
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
DSW2#copy run start

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname ASW1
Enable secret and password
ASW1(config)#enable password cisco
ASW1(config)#enable secret cisco
Setup the console port password
ASW1(config)#line con 0
ASW1(config-line)#password cisco
ASW1(config-line)#login
ASW1(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
ASW1(config)#line vty 0 4
ASW1(config-line)#password cisco
ASW1(config-line)#login
ASW1(config-line)#exit
Default Gateway
ASW1(config-line)#ip default-gateway 192.168.1.1
Setup the default VLAN
ASW1(config)#interface vlan 1
ASW1(config-if)#ip address 192.168.1.100 255.255.255.0
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup VLAN 10
ASW1(config)#interface vlan 10
ASW1(config-if)#ip address 192.168.10.100 255.255.255.0
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup VLAN 20
ASW1(config)#interface vlan 20
ASW1(config-if)#ip address 192.168.20.100 255.255.255.0
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup Fastethernet Interfaces
ASW1(config)#interface fastethernet 0/1
ASW1(config-if)#description ASW1 - DSW1
ASW1(config-if)#no shut
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/2
ASW1(config-if)#description ASW1 - DSW1
ASW1(config-if)#no shut
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/3
ASW1(config-if)#description ASW1 - DSW2
ASW1(config-if)#no shut
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/4
ASW1(config-if)#description ASW1 - DSW2
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup Fastethernet 0/12 for 10mbs half duplex as an access level end-point interface
ASW1(config)#interface fastethernet 0/12
ASW1(config-if)#description ASW1 - PC1
ASW1(config-if)#speed 10
ASW1(config-if)#duplex half
ASW1(config-if)#switchport
Make the port as an access port
ASW1(config-if)#switchport mode access
Make the port an access port for VLAN 10
ASW1(config-if)#switchport access vlan 10
Enable PortFast on end-points
ASW1(config-if)#spanning-tree portfast
ASW1(config-if)#no shut
ASW1(config-if)#exit
Associate VLANs with Fe 1 to 4
ASW1(config)#interface range fastethernet 0/1 - 4
ASW1(config-if-range)#speed 100
ASW1(config-if-range)#duplex auto
ASW1(config-if-range)#switchport
ASW1(config-if-range)#switchport trunk encapsulation dot1q
ASW1(config-if-range)#switchport trunk native vlan 1
ASW1(config-if-range)#switchport trunk allowed vlan 1,20,10
ASW1(config-if-range)#switchport mode trunk
Configure UplinkFast
ASW1(config-if-range)#spanning-tree uplinkfast
ASW1(config-if-range)#exit
Aministratively shutdown all ports not connected
ASW1(config)#interface range fastethernet 0/5 - 11
ASW1(config-if-range)#shut
ASW1(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
ASW1(config)#spanning-tree vlan 1
ASW1(config)#spanning-tree vlan 10
ASW1(config)#spanning-tree vlan 20
Exit Global Configuration Mode
ASW1(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
ASW1#show interfaces status
Check that you configured STP
DSW1#show spanning-tree
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
ASW1#copy run start

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname ASW2
Enable secret and password
ASW2(config)#enable password cisco
ASW2(config)#enable secret cisco
Setup the console port password
ASW2(config)#line con 0
ASW2(config-line)#password cisco
ASW2(config-line)#login
ASW2(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
ASW2(config)#line vty 0 4
ASW2(config-line)#password cisco
ASW2(config-line)#login
ASW2(config-line)#exit
Default Gateway
ASW2(config-line)#ip default-gateway 192.168.1.50
Setup the default VLAN
ASW2(config)#interface vlan 1
ASW2(config-if)#ip address 192.168.1.150 255.255.255.0
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup VLAN 10
ASW2(config)#interface vlan 10
ASW2(config-if)#ip address 192.168.10.150 255.255.255.0
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup VLAN 20
ASW2(config)#interface vlan 20
ASW2(config-if)#ip address 192.168.20.150 255.255.255.0
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup Fastethernet Interfaces
ASW2(config)#interface fastethernet 0/1
ASW2(config-if)#description ASW2 - DSW2
ASW2(config-if)#no shut
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/2
ASW2(config-if)#description ASW2 - DSW2
ASW2(config-if)#no shut
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/3
ASW2(config-if)#description ASW2 - DSW1
ASW2(config-if)#no shut
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/4
ASW2(config-if)#description ASW2 - DSW1
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup Fastethernet 0/12 for 10mbs half duplex as an access level end-point interface
ASW2(config)#interface fastethernet 0/12
ASW2(config-if)#description ASW2 - PC2
ASW2(config-if)#speed 10
ASW2(config-if)#duplex half
ASW1(config-if)#switchport
Make the port as an access port
ASW2(config-if)#switchport mode access
Make the port an access port for VLAN 20
ASW2(config-if)#switchport access vlan 20
Enable PortFast on end-points
ASW2(config-if)#spanning-tree portfast
ASW2(config-if)#no shut
ASW2(config-if)#exit
Associate VLANs with Fe 1 to 4
ASW2(config)#interface range fastethernet 0/1 - 4
ASW2(config-if-range)#speed 100
ASW2(config-if-range)#duplex auto
ASW2(config-if-range)#switchport
ASW2(config-if-range)#switchport trunk encapsulation dot1q
ASW2(config-if-range)#switchport trunk native vlan 1
ASW2(config-if-range)#switchport trunk allowed vlan 1,20,10
ASW2(config-if-range)#switchport mode trunk
Configure UplinkFast
ASW2(config-if-range)#spanning-tree uplinkfast
ASW2(config-if-range)#exit
Aministratively shutdown all ports not connected
ASW2(config)#interface range fastethernet 0/5 - 10
ASW2(config-if-range)#shut
ASW2(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
ASW2(config)#spanning-tree vlan 1
ASW2(config)#spanning-tree vlan 10
ASW2(config)#spanning-tree vlan 20
Exit Global Configuration Mode
ASW2(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
ASW2#show interfaces status
Check that you configured STP
DSW1#show spanning-tree
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
ASW2#copy run start

Notes and Notices:

This is a part of my personal BCMSN notes and research to assist myself in learning and understanding the concepts and theory for the BCMSN exam. I learn by making notes reading and writing things down and wish to file them where I can’t lose them. These notes are not to be seen, judged or mistaken for replacements to Cisco recognized and authorized training which I personally support and attend and suggest you undertake if you are going for the BCMSN Certification.

BCMSN Layer 3 Routing Lab 6

Published
by
Deon Botha
on June 19, 2008
in BCMSN, Certification and Cisco Systems
. 0 Comments

LAB_2

Layer 3 Switching

PC1 is in VLAN 10 with IP address 192.168.10.200 255.255.255.0 Default Gateway (DG) 192.168.10.1

PC2 is in VLAN 20 with IP Address 192.168.20.250 255.255.255.0 DG 192.168.10.50

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname DSW1
Enable secret and password
DSW1(config)#enable password cisco
DSW1(config)#enable secret cisco
Setup the console port password
DSW1(config)#line con 0
DSW1(config-line)#password cisco
DSW1(config-line)#login
DSW1(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
DSW1(config)#line vty 0 4
DSW1(config-line)#password cisco
DSW1(config-line)#login
DSW1(config-line)#exit
Setup the default VLAN
DSW1(config)#interface vlan 1
DSW1(config-if)#ip address 192.168.1.1 255.255.255.0
DSW1(config-if)#no shut
DSW1(config-if)#exit
Setup VLAN 10
DSW1(config)#interface vlan 10
DSW1(config-if)#ip address 192.168.10.1 255.255.255.0
DSW1(config-if)#no shut
DSW1(config-if)#exit
Setup VLAN 20
DSW1(config)#interface vlan 20
DSW1(config-if)#ip address 192.168.20.1 255.255.255.0
DSW1(config-if)#no shut
DSW1(config-if)#exit
Setup Fastethernet Interfaces
DSW1(config)#interface fastethernet 0/1
DSW1(config-if)#description DSW1 - ASW1
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/2
DSW1(config-if)#description DSW1 - ASW1
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/3
DSW1(config-if)#description DSW1 - ASW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/4
DSW1(config-if)#description DSW1 - ASW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/11
DSW1(config-if)#description DSW1 - DSW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/12
DSW1(config-if)#description DSW1 - DSW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
Associate VLANs with Fe 1 to 4
DSW1(config)#interface range fastethernet 0/1 - 4
DSW1(config-if-range)#speed 100
DSW1(config-if-range)#duplex auto
DSW1(config-if-range)#switchport
DSW1(config-if-range)#switchport trunk encapsulation dot1q
DSW1(config-if-range)#switchport trunk native vlan 1
DSW1(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW1(config-if-range)#switchport mode trunk
DSW1(config-if-range)#exit
Associate VLANs with Fe 11 and 12
DSW1(config)#interface range fastethernet 0/11 - 12
DSW1(config-if-range)#speed 100
DSW1(config-if-range)#duplex auto
DSW1(config-if-range)#switchport
DSW1(config-if-range)#switchport trunk encapsulation dot1q
DSW1(config-if-range)#switchport trunk native vlan 1
DSW1(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW1(config-if-range)#switchport mode trunk
DSW1(config-if-range)#exit
Aministratively shutdown all ports not connected
DSW1(config)#interface range fastethernet 0/5 - 10
DSW1(config-if-range)#shut
DSW1(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
DSW1(config)#spanning-tree vlan 1 root primary
DSW1(config)#spanning-tree vlan 10 root primary
DSW1(config)#spanning-tree vlan 20 root secondary
Enable Routing and a Protocol
DSW1(config)#ip routing
DSW1(config)#router eigrp 100
DSW1(config-router)#network 192.168.0.0
DSW1(config-router)#exit
Exit Global Configuration Mode
DSW1(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
DSW1#show interfaces status
Check that you configured STP
DSW1#show spanning-tree
Check routing is correct
DSW1#show ip route
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
DSW1#copy run start

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname DSW2
Enable secret and password
DSW2(config)#enable password cisco
DSW2(config)#enable secret cisco
Setup the console port password
DSW2(config)#line con 0
DSW2(config-line)#password cisco
DSW2(config-line)#login
DSW2(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
DSW2(config)#line vty 0 4
DSW2(config-line)#password cisco
DSW2(config-line)#login
DSW2(config-line)#exit
Setup the default VLAN
DSW2(config)#interface vlan 1
DSW2(config-if)#ip address 192.168.1.50 255.255.255.0
DSW2(config-if)#no shut
DSW2(config-if)#exit
Setup VLAN 10
DSW2(config)#interface vlan 10
DSW2(config-if)#ip address 192.168.10.50 255.255.255.0
DSW2(config-if)#no shut
DSW2(config-if)#exit
Setup VLAN 20
DSW2(config)#interface vlan 20
DSW2(config-if)#ip address 192.168.20.50 255.255.255.0
DSW2(config-if)#no shut
DSW2(config-if)#exit
Setup Fastethernet Interfaces
DSW2(config)#interface fastethernet 0/1
DSW2(config-if)#description DSW2 - ASW2
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/2
DSW2(config-if)#description DSW2 - ASW2
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/3
DSW2(config-if)#description DSW2 - ASW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/4
DSW2(config-if)#description DSW2 - ASW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/11
DSW2(config-if)#description DSW2 - DSW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/12
DSW2(config-if)#description DSW2 - DSW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
Associate VLANs with Fe 1 to 4
DSW2(config)#interface range fastethernet 0/1 - 4
DSW2(config-if-range)#speed 100
DSW2(config-if-range)#duplex auto
DSW2(config-if-range)#switchport
DSW2(config-if-range)#switchport trunk encapsulation dot1q
DSW2(config-if-range)#switchport trunk native vlan 1
DSW2(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW2(config-if-range)#switchport mode trunk
DSW2(config-if-range)#exit
Associate VLANs with Fe 11 and 12
DSW2(config)#interface range fastethernet 0/11 - 12
DSW2(config-if-range)#speed 100
DSW2(config-if-range)#duplex auto
DSW2(config-if-range)#switchport
DSW2(config-if-range)#switchport trunk encapsulation dot1q
DSW2(config-if-range)#switchport trunk native vlan 1
DSW2(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW2(config-if-range)#switchport mode trunk
DSW2(config-if-range)#exit
Aministratively shutdown all ports not connected
DSW2(config)#interface range fastethernet 0/5 - 10
DSW2(config-if-range)#shut
DSW2(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
DSW2(config)#spanning-tree vlan 1 root secondary
DSW2(config)#spanning-tree vlan 10 root secondary
DSW2(config)#spanning-tree vlan 20 root primary
Enable Routing and a Protocol
DSW2(config)#ip routing
DSW2(config)#router eigrp 100
DSW2(config-router)#network 192.168.0.0
DSW2(config-router)#exit
Exit Global Configuration Mode
DSW2(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
DSW2#show interfaces status
Check that you configured STP
DSW2#show spanning-tree
Check routing is correct
DSW2#show ip route
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
DSW2#copy run start

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname ASW1
Enable secret and password
ASW1(config)#enable password cisco
ASW1(config)#enable secret cisco
Setup the console port password
ASW1(config)#line con 0
ASW1(config-line)#password cisco
ASW1(config-line)#login
ASW1(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
ASW1(config)#line vty 0 4
ASW1(config-line)#password cisco
ASW1(config-line)#login
ASW1(config-line)#exit
Default Gateway
ASW1(config-line)#ip default-gateway 192.168.1.1
Setup the default VLAN
ASW1(config)#interface vlan 1
ASW1(config-if)#ip address 192.168.1.100 255.255.255.0
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup VLAN 10
ASW1(config)#interface vlan 10
ASW1(config-if)#ip address 192.168.10.100 255.255.255.0
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup VLAN 20
ASW1(config)#interface vlan 20
ASW1(config-if)#ip address 192.168.20.100 255.255.255.0
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup Fastethernet Interfaces
ASW1(config)#interface fastethernet 0/1
ASW1(config-if)#description ASW1 - DSW1
ASW1(config-if)#no shut
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/2
ASW1(config-if)#description ASW1 - DSW1
ASW1(config-if)#no shut
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/3
ASW1(config-if)#description ASW1 - DSW2
ASW1(config-if)#no shut
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/4
ASW1(config-if)#description ASW1 - DSW2
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup Fastethernet 0/12 for 10mbs half duplex as an access level end-point interface
ASW1(config)#interface fastethernet 0/12
ASW1(config-if)#description ASW1 - PC1
ASW1(config-if)#speed 10
ASW1(config-if)#duplex half
ASW1(config-if)#switchport
Make the port as an access port
ASW1(config-if)#switchport mode access
Make the port an access port for VLAN 10
ASW1(config-if)#switchport access vlan 10
Enable PortFast on end-points
ASW1(config-if)#spanning-tree portfast
ASW1(config-if)#no shut
ASW1(config-if)#exit
Associate VLANs with Fe 1 to 4
ASW1(config)#interface range fastethernet 0/1 - 4
ASW1(config-if-range)#speed 100
ASW1(config-if-range)#duplex auto
ASW1(config-if-range)#switchport
ASW1(config-if-range)#switchport trunk encapsulation dot1q
ASW1(config-if-range)#switchport trunk native vlan 1
ASW1(config-if-range)#switchport trunk allowed vlan 1,20,10
ASW1(config-if-range)#switchport mode trunk
Configure UplinkFast
ASW1(config-if-range)#spanning-tree uplinkfast
ASW1(config-if-range)#exit
Aministratively shutdown all ports not connected
ASW1(config)#interface range fastethernet 0/5 - 11
ASW1(config-if-range)#shut
ASW1(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
ASW1(config)#spanning-tree vlan 1
ASW1(config)#spanning-tree vlan 10
ASW1(config)#spanning-tree vlan 20
Exit Global Configuration Mode
ASW1(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
ASW1#show interfaces status
Check that you configured STP
DSW1#show spanning-tree
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
ASW1#copy run start

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname ASW2
Enable secret and password
ASW2(config)#enable password cisco
ASW2(config)#enable secret cisco
Setup the console port password
ASW2(config)#line con 0
ASW2(config-line)#password cisco
ASW2(config-line)#login
ASW2(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
ASW2(config)#line vty 0 4
ASW2(config-line)#password cisco
ASW2(config-line)#login
ASW2(config-line)#exit
Default Gateway
ASW2(config-line)#ip default-gateway 192.168.1.50
Setup the default VLAN
ASW2(config)#interface vlan 1
ASW2(config-if)#ip address 192.168.1.150 255.255.255.0
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup VLAN 10
ASW2(config)#interface vlan 10
ASW2(config-if)#ip address 192.168.10.150 255.255.255.0
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup VLAN 20
ASW2(config)#interface vlan 20
ASW2(config-if)#ip address 192.168.20.150 255.255.255.0
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup Fastethernet Interfaces
ASW2(config)#interface fastethernet 0/1
ASW2(config-if)#description ASW2 - DSW2
ASW2(config-if)#no shut
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/2
ASW2(config-if)#description ASW2 - DSW2
ASW2(config-if)#no shut
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/3
ASW2(config-if)#description ASW2 - DSW1
ASW2(config-if)#no shut
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/4
ASW2(config-if)#description ASW2 - DSW1
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup Fastethernet 0/12 for 10mbs half duplex as an access level end-point interface
ASW2(config)#interface fastethernet 0/12
ASW2(config-if)#description ASW2 - PC2
ASW2(config-if)#speed 10
ASW2(config-if)#duplex half
ASW1(config-if)#switchport
Make the port as an access port
ASW2(config-if)#switchport mode access
Make the port an access port for VLAN 20
ASW2(config-if)#switchport access vlan 20
Enable PortFast on end-points
ASW2(config-if)#spanning-tree portfast
ASW2(config-if)#no shut
ASW2(config-if)#exit
Associate VLANs with Fe 1 to 4
ASW2(config)#interface range fastethernet 0/1 - 4
ASW2(config-if-range)#speed 100
ASW2(config-if-range)#duplex auto
ASW2(config-if-range)#switchport
ASW2(config-if-range)#switchport trunk encapsulation dot1q
ASW2(config-if-range)#switchport trunk native vlan 1
ASW2(config-if-range)#switchport trunk allowed vlan 1,20,10
ASW2(config-if-range)#switchport mode trunk
Configure UplinkFast
ASW2(config-if-range)#spanning-tree uplinkfast
ASW2(config-if-range)#exit
Aministratively shutdown all ports not connected
ASW2(config)#interface range fastethernet 0/5 - 10
ASW2(config-if-range)#shut
ASW2(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
ASW2(config)#spanning-tree vlan 1
ASW2(config)#spanning-tree vlan 10
ASW2(config)#spanning-tree vlan 20
Exit Global Configuration Mode
ASW2(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
ASW2#show interfaces status
Check that you configured STP
DSW1#show spanning-tree
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
ASW2#copy run start

The point of this exercise is is to get a dynamic routing protocol in this case EIGRP working.

Notes and Notices:

This is a part of my personal BCMSN notes and research to assist myself in learning and understanding the concepts and theory for the BCMSN exam. I learn by making notes reading and writing things down and wish to file them where I can’t lose them. These notes are not to be seen, judged or mistaken for replacements to Cisco recognized and authorized training which I personally support and attend and suggest you undertake if you are going for the BCMSN Certification.

BCMSN STP Lab 5

Published
by
Deon Botha
on June 10, 2008
in BCMSN, Certification, Cisco Systems, Concepts and Constructs and STP
. 0 Comments

LAB_2

Spanning Tree Protocol
As a base config use the config of LAB 3 because this enables trunking between all the switches. The reason for this is because you want VLAN 1, 10, and 20 are going to be passed between ASW and DSW switches.

For reference look at this document it contains STP, PortFast and UplinkFast information and configuration information.

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname DSW1
Enable secret and password
DSW1(config)#enable password cisco
DSW1(config)#enable secret cisco
Setup the console port password
DSW1(config)#line con 0
DSW1(config-line)#password cisco
DSW1(config-line)#login
DSW1(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
DSW1(config)#line vty 0 4
DSW1(config-line)#password cisco
DSW1(config-line)#login
DSW1(config-line)#exit
Setup the default VLAN
DSW1(config)#interface vlan 1
DSW1(config-if)#ip address 192.168.1.1 255.255.255.0
DSW1(config-if)#no shut
DSW1(config-if)#exit
Setup VLAN 10
DSW1(config)#interface vlan 10
DSW1(config-if)#ip address 192.168.10.1 255.255.255.0
DSW1(config-if)#no shut
DSW1(config-if)#exit
Setup VLAN 20
DSW1(config)#interface vlan 20
DSW1(config-if)#ip address 192.168.20.1 255.255.255.0
DSW1(config-if)#no shut
DSW1(config-if)#exit
Setup Fastethernet Interfaces
DSW1(config)#interface fastethernet 0/1
DSW1(config-if)#description DSW1 - ASW1
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/2
DSW1(config-if)#description DSW1 - ASW1
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/3
DSW1(config-if)#description DSW1 - ASW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/4
DSW1(config-if)#description DSW1 - ASW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/11
DSW1(config-if)#description DSW1 - DSW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/12
DSW1(config-if)#description DSW1 - DSW2
DSW1(config-if)#no shut
DSW1(config-if)#exit
Associate VLANs with Fe 1 to 4
DSW1(config)#interface range fastethernet 0/1 - 4
DSW1(config-if-range)#speed 100
DSW1(config-if-range)#duplex auto
DSW1(config-if-range)#switchport
DSW1(config-if-range)#switchport trunk encapsulation dot1q
DSW1(config-if-range)#switchport trunk native vlan 1
DSW1(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW1(config-if-range)#switchport mode trunk
DSW1(config-if-range)#exit
Associate VLANs with Fe 11 and 12
DSW1(config)#interface range fastethernet 0/11 - 12
DSW1(config-if-range)#speed 100
DSW1(config-if-range)#duplex auto
DSW1(config-if-range)#switchport
DSW1(config-if-range)#switchport trunk encapsulation dot1q
DSW1(config-if-range)#switchport trunk native vlan 1
DSW1(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW1(config-if-range)#switchport mode trunk
DSW1(config-if-range)#exit
Aministratively shutdown all ports not connected
DSW1(config)#interface range fastethernet 0/5 - 10
DSW1(config-if-range)#shut
DSW1(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
DSW1(config)#spanning-tree vlan 1 root primary
DSW1(config)#spanning-tree vlan 10 root primary
DSW1(config)#spanning-tree vlan 20 root secondary
Exit Global Configuration Mode
DSW1(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
DSW1#show interfaces status
Check that you configured STP
DSW1#show spanning-tree
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
DSW1#copy run start

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname DSW2
Enable secret and password
DSW2(config)#enable password cisco
DSW2(config)#enable secret cisco
Setup the console port password
DSW2(config)#line con 0
DSW2(config-line)#password cisco
DSW2(config-line)#login
DSW2(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
DSW2(config)#line vty 0 4
DSW2(config-line)#password cisco
DSW2(config-line)#login
DSW2(config-line)#exit
Setup the default VLAN
DSW2(config)#interface vlan 1
DSW2(config-if)#ip address 192.168.1.50 255.255.255.0
DSW2(config-if)#no shut
DSW2(config-if)#exit
Setup VLAN 10
DSW2(config)#interface vlan 10
DSW2(config-if)#ip address 192.168.10.50 255.255.255.0
DSW2(config-if)#no shut
DSW2(config-if)#exit
Setup VLAN 20
DSW2(config)#interface vlan 20
DSW2(config-if)#ip address 192.168.20.50 255.255.255.0
DSW2(config-if)#no shut
DSW2(config-if)#exit
Setup Fastethernet Interfaces
DSW2(config)#interface fastethernet 0/1
DSW2(config-if)#description DSW2 - ASW2
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/2
DSW2(config-if)#description DSW2 - ASW2
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/3
DSW2(config-if)#description DSW2 - ASW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/4
DSW2(config-if)#description DSW2 - ASW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/11
DSW2(config-if)#description DSW2 - DSW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/12
DSW2(config-if)#description DSW2 - DSW1
DSW2(config-if)#no shut
DSW2(config-if)#exit
Associate VLANs with Fe 1 to 4
DSW2(config)#interface range fastethernet 0/1 - 4
DSW2(config-if-range)#speed 100
DSW2(config-if-range)#duplex auto
DSW2(config-if-range)#switchport
DSW2(config-if-range)#switchport trunk encapsulation dot1q
DSW2(config-if-range)#switchport trunk native vlan 1
DSW2(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW2(config-if-range)#switchport mode trunk
DSW2(config-if-range)#exit
Associate VLANs with Fe 11 and 12
DSW2(config)#interface range fastethernet 0/11 - 12
DSW2(config-if-range)#speed 100
DSW2(config-if-range)#duplex auto
DSW2(config-if-range)#switchport
DSW2(config-if-range)#switchport trunk encapsulation dot1q
DSW2(config-if-range)#switchport trunk native vlan 1
DSW2(config-if-range)#switchport trunk allowed vlan 1,20,10
DSW2(config-if-range)#switchport mode trunk
DSW2(config-if-range)#exit
Aministratively shutdown all ports not connected
DSW2(config)#interface range fastethernet 0/5 - 10
DSW2(config-if-range)#shut
DSW2(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
DSW2(config)#spanning-tree vlan 1 root secondary
DSW2(config)#spanning-tree vlan 10 root secondary
DSW2(config)#spanning-tree vlan 20 root primary
Exit Global Configuration Mode
DSW2(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
DSW2#show interfaces status
Check that you configured STP
DSW1#show spanning-tree
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
DSW2#copy run start

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname ASW1
Enable secret and password
ASW1(config)#enable password cisco
ASW1(config)#enable secret cisco
Setup the console port password
ASW1(config)#line con 0
ASW1(config-line)#password cisco
ASW1(config-line)#login
ASW1(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
ASW1(config)#line vty 0 4
ASW1(config-line)#password cisco
ASW1(config-line)#login
ASW1(config-line)#exit
Setup the default VLAN
ASW1(config)#interface vlan 1
ASW1(config-if)#ip address 192.168.1.100 255.255.255.0
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup VLAN 10
ASW1(config)#interface vlan 10
ASW1(config-if)#ip address 192.168.10.100 255.255.255.0
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup VLAN 20
ASW1(config)#interface vlan 20
ASW1(config-if)#ip address 192.168.20.100 255.255.255.0
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup Fastethernet Interfaces
ASW1(config)#interface fastethernet 0/1
ASW1(config-if)#description ASW1 - DSW1
ASW1(config-if)#no shut
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/2
ASW1(config-if)#description ASW1 - DSW1
ASW1(config-if)#no shut
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/3
ASW1(config-if)#description ASW1 - DSW2
ASW1(config-if)#no shut
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/4
ASW1(config-if)#description ASW1 - DSW2
ASW1(config-if)#no shut
ASW1(config-if)#exit
Setup Fastethernet 0/12 for 10mbs half duplex as an access level end-point interface
ASW1(config)#interface fastethernet 0/12
ASW1(config-if)#description ASW1 - PC1
ASW1(config-if)#speed 10
ASW1(config-if)#duplex half
ASW1(config-if)#switchport
Make the port as an access port
ASW1(config-if)#switchport mode access
Make the port an access port for VLAN 10
ASW1(config-if)#switchport access vlan 10
Enable PortFast on end-points
ASW1(config-if)#spanning-tree portfast
ASW1(config-if)#no shut
ASW1(config-if)#exit
Associate VLANs with Fe 1 to 4
ASW1(config)#interface range fastethernet 0/1 - 4
ASW1(config-if-range)#speed 100
ASW1(config-if-range)#duplex auto
ASW1(config-if-range)#switchport
ASW1(config-if-range)#switchport trunk encapsulation dot1q
ASW1(config-if-range)#switchport trunk native vlan 1
ASW1(config-if-range)#switchport trunk allowed vlan 1,20,10
ASW1(config-if-range)#switchport mode trunk
Configure UplinkFast
ASW1(config-if-range)#spanning-tree uplinkfast
ASW1(config-if-range)#exit
Aministratively shutdown all ports not connected
ASW1(config)#interface range fastethernet 0/5 - 11
ASW1(config-if-range)#shut
ASW1(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
ASW1(config)#spanning-tree vlan 1
ASW1(config)#spanning-tree vlan 10
ASW1(config)#spanning-tree vlan 20
Exit Global Configuration Mode
ASW1(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
ASW1#show interfaces status
Check that you configured STP
DSW1#show spanning-tree
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
ASW1#copy run start

Enter Privelaged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname ASW2
Enable secret and password
ASW2(config)#enable password cisco
ASW2(config)#enable secret cisco
Setup the console port password
ASW2(config)#line con 0
ASW2(config-line)#password cisco
ASW2(config-line)#login
ASW2(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
ASW2(config)#line vty 0 4
ASW2(config-line)#password cisco
ASW2(config-line)#login
ASW2(config-line)#exit
Setup the default VLAN
ASW2(config)#interface vlan 1
ASW2(config-if)#ip address 192.168.1.150 255.255.255.0
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup VLAN 10
ASW2(config)#interface vlan 10
ASW2(config-if)#ip address 192.168.10.150 255.255.255.0
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup VLAN 20
ASW2(config)#interface vlan 20
ASW2(config-if)#ip address 192.168.20.150 255.255.255.0
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup Fastethernet Interfaces
ASW2(config)#interface fastethernet 0/1
ASW2(config-if)#description ASW2 - DSW2
ASW2(config-if)#no shut
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/2
ASW2(config-if)#description ASW2 - DSW2
ASW2(config-if)#no shut
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/3
ASW2(config-if)#description ASW2 - DSW1
ASW2(config-if)#no shut
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/4
ASW2(config-if)#description ASW2 - DSW1
ASW2(config-if)#no shut
ASW2(config-if)#exit
Setup Fastethernet 0/12 for 10mbs half duplex as an access level end-point interface
ASW2(config)#interface fastethernet 0/12
ASW2(config-if)#description ASW2 - PC2
ASW2(config-if)#speed 10
ASW2(config-if)#duplex half
ASW1(config-if)#switchport
Make the port as an access port
ASW2(config-if)#switchport mode access
Make the port an access port for VLAN 20
ASW2(config-if)#switchport access vlan 20
Enable PortFast on end-points
ASW2(config-if)#spanning-tree portfast
ASW2(config-if)#no shut
ASW2(config-if)#exit
Associate VLANs with Fe 1 to 4
ASW2(config)#interface range fastethernet 0/1 - 4
ASW2(config-if-range)#speed 100
ASW2(config-if-range)#duplex auto
ASW2(config-if-range)#switchport
ASW2(config-if-range)#switchport trunk encapsulation dot1q
ASW2(config-if-range)#switchport trunk native vlan 1
ASW2(config-if-range)#switchport trunk allowed vlan 1,20,10
ASW2(config-if-range)#switchport mode trunk
Configure UplinkFast
ASW2(config-if-range)#spanning-tree uplinkfast
ASW2(config-if-range)#exit
Aministratively shutdown all ports not connected
ASW2(config)#interface range fastethernet 0/5 - 10
ASW2(config-if-range)#shut
ASW2(config-if-range)#exit
Enable Spanning Tree Protocol on VLANs
ASW2(config)#spanning-tree vlan 1
ASW2(config)#spanning-tree vlan 10
ASW2(config)#spanning-tree vlan 20
Exit Global Configuration Mode
ASW2(config)#exit
Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
ASW2#show interfaces status
Check that you configured STP
DSW1#show spanning-tree
Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)… oops copy start run
ASW2#copy run start

PC1 is in VLAN 10 with IP address 192.168.10.200 255.255.255.0
PC2 is in VLAN 20 with IP Address 192.168.20.250 255.255.255.0

Notes and Notices:

This is a part of my personal BCMSN notes and research to assist myself in learning and understanding the concepts and theory for the BCMSN exam. I learn by making notes reading and writing things down and wish to file them where I can’t lose them. These notes are not to be seen, judged or mistaken for replacements to Cisco recognized and authorized training which I personally support and attend and suggest you undertake if you are going for the BCMSN Certification.

BCMSN VTP Lab 4

Published
by
Deon Botha
on June 10, 2008
in BCMSN, Certification, Cisco Systems and VTP
. 0 Comments

LAB 1 BCMSN

VTP

This post I am going to deviate from how I have done things. In the previous posts I wrote out the entire configurations, in this post all I need is a working configuration. Use the initial config and work from here that has trunk links and setup VTP.

Run the following config on the DSW switches (both of them)

DSW1(config)#interface range fastethernet 0/1 - 4
DSW1(config-if-range)#no switchport trunk allowed vlan 1,100
DSW1(config)#interface range fastethernet 0/11 - 12
DSW1(config-if-range)#no switchport trunk allowed vlan 1,100

And this config on the ASW switches (both of them)

ASW1(config)#interface range fastethernet 0/1 - 4
ASW1(config-if-range)#no switchport trunk allowed vlan 1,100

This is because the top commands restrict the vlans to only allow vlan 1 and vlan 100 on the trunk. By default a trunk link will allow all vlans but one can restrict what vlans are allowed over a trunk through the use of the above commands (slipped it in there didn’t I).

Some comment on VTP is that it is a very funny animal to work with (even if it is dead useful. If you do it wrong you lose all VLANs in the VLAN database because of how an update happens from server to client. This makes VTP a very dangerous beast because in large networks there may be 100s of VLANs (you can double that number if you run voice and use separate vlans for each voice end-point) and if you add a new switch to VTP that’s configured wrong…. POOF…..like magic all VLANs gone :-)

To begin a VTP configuration see below and notice how I start with the mode command, this is just something I do because I like knowing it starts in the right mode, its paranoia more than anything and getting it wrong enough that makes me do this. You may do it in another way (at your own risk).

Its an idea to go over the table I have on this page regarding the VTP Modes so that you understand why you use a certain mode at a certain times. If you need to for example add a switch to a network where the switch must NEVER participate in VTP for example you use transparent

Step 1.1: Configure VTP

Enter Global Configuration Mode
ASW1#configure terminal
Set the VTP Mode
ASW1(config)#vtp mode transparent
Set the VTP Version 1/2 and 3 (higher level switch platforms)
ASW1(config)#vtp version 2
Set the password and domain to prevent unauthorized joining to the VTP domain
ASW1(config)#vtp password cisco
ASW1(config)#vtp domain ciscolabnet
Exit Global Configuration Mode
ASW1(config)#exit

Step 1.2: Add VLANs

Enter VLAN Database Mode
ASW1#vlan database
Create a VLAN and assign it a name
ASW1(vlan)#vlan 100 name Marketing
VLAN 100 added:
Name: Marketing
Create another VLAN and assign it a name
ASW1(vlan)#vlan 150 name Sales
VLAN 150 added:
Name: Sales
APPLY your config (it will do this anyway on the next step but just make sure it applies changes)
ASW1(vlan)#apply
Exit VLAN Database Mode
ASW1(vlan)#exit
APPLY completed.
Exiting.......

Repeat the above steps exactly on ASW2. The VTP process is now running on both ASW switches. To check that this is the case:

ASW2#show vtp status

The DSWs I am going to make clients to the ASWs (bottom-up)

Step 2: Configure VTP on the DSW switches

Enter Global Configuration Mode
DSW1#configure terminal
Set the VTP Mode
DSW1(config)#vtp mode client
Set the VTP Version 1/2 and 3 (higher level switch platforms)
DSW1(config)#vtp version 2
Set the password and domain to prevent unauthorized joining to the VTP domain
DSW1(config)#vtp password cisco
DSW1(config)#vtp domain cisco
Exit Global Configuration Mode
DSW1(config)#exit

Step 3: Change the VTP Mode on the ASW switches

Do the same config on DSW2 making sure you configure the mode as client. After this is done go back to the ASWs and change them to servers:

ASW1#configure terminal
ASW1(config)#vtp mode server

ASW2#configure terminal
ASW2(config)#vtp mode server

After you have done this go to all the switches and try the following command

ASW2#show vlan

You should see the Sales and Marketing VLANS propogated on all the switches.

Notes and Notices:

This is a part of my personal BCMSN notes and research to assist myself in learning and understanding the concepts and theory for the BCMSN exam. I learn by making notes reading and writing things down and wish to file them where I can’t lose them. These notes are not to be seen, judged or mistaken for replacements to Cisco recognized and authorized training which I personally support and attend and suggest you undertake if you are going for the BCMSN Certification.

BCMSN Trunking Lab 3

Published
by
Deon Botha
on June 10, 2008
in BCMSN, Certification, Cisco Systems and Trunk
. 2 Comments

LAB 1 BCMSN

Im grafting so quantity over quality… I will go over this sometime this coming weekend for mistakes

Trunking

This lab builds directly onto the previous lab where the default VLAN was shut and a new VLAN was created (basically to give practice for creating a vlan). This lab will now create trunk links between switches to allow more than a single VLANs information to traverse a link. If you are wondering why I am explicitly declaring trunks instead of allowing DTP to do its thing read this, and this.

Distribution Switch 1

Step 1: Setup the basics all of the following is CCNA level stuff and should easy if not second nature. This is to get the security and host name down before going onto the interface configuration.

Enter Privileged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname DSW1
Enable secret and password
DSW1(config)#enable secret ciscosystems
DSW1(config)#enable password cisco
Setup a local user database
DSW1(config)#username admin@mydomain.com privilege 15 password cisco
Setup the console port password
DSW1(config)#line con 0
DSW1(config-line)#login local
DSW1(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
DSW1(config)#line vty 0 4
DSW1(config-line)#password cisco
DSW1(config-line)#login
DSW1(config-line)#exit
Setup the Auxiliary Password
DSW1(config)#line aux 0
DSW1(config-line)#no exec
DSW1(config-line)#exit

Step 2: Setup the management interface

Setup the default VLAN ip address from remote ip admin if there was a GUI and to Telnet to the switch
DSW1(config)#interface vlan 1
DSW1(config-if)#ip address 192.168.1.1 255.255.255.0
NB I am shutting the interface
DSW1(config-if)#shut
DSW1(config-if)#exit

Step 3: Assign an ip address to the new VLAN to ping

Setup VLAN 100 ip address from remote ip admin if there was a GUI and to Telnet to the switch
DSW1(config)#interface vlan 100
DSW1(config-if)#ip address 192.168.100.1 255.255.255.0
DSW1(config-if)#no shut
DSW1(config-if)#exit

Step 4: Setup other interfaces

Setup Fastethernet Interfaces
DSW1(config)#interface fastethernet 0/1
DSW1(config-if)#description DSW1 - ASW1
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/2
DSW1(config-if)#description DSW1 - ASW1
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/3
DSW1(config-if)#description DSW1 - ASW2
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/4
DSW1(config-if)#description DSW1 - ASW2
DSW1(config-if)#exit
Create and Associate VLAN 100 with Fe 1 to 4
DSW1(config)#interface range fastethernet 0/1 - 4
DSW1(config-if-range)#speed 100
DSW1(config-if-range)#duplex auto
DSW1(config-if-range)#switchport
DSW1(config-if-range)#switchport trunk encapsulation dot1q
DSW1(config-if-range)#switchport trunk native vlan 1
DSW1(config-if-range)#switchport trunk allowed vlan 1,100
DSW1(config-if-range)#switchport mode trunk
DSW1(config-if-range)#exit
DSW1(config)#interface fastethernet 0/11
DSW1(config-if)#description DSW1 - DSW2
DSW1(config-if)#exit
DSW1(config)#interface fastethernet 0/12
DSW1(config-if)#description DSW1 - DSW2
DSW1(config-if)#exit
Associate VLAN 100 with Fe 11 and 12
DSW1(config)#interface range fastethernet 0/11 - 12
DSW1(config-if-range)#speed 100
DSW1(config-if-range)#duplex auto
DSW1(config-if-range)#switchport
DSW1(config-if-range)#switchport trunk encapsulation dot1q
DSW1(config-if-range)#switchport trunk native vlan 1
DSW1(config-if-range)#switchport trunk allowed vlan 1,100
DSW1(config-if-range)#switchport mode trunk
DSW1(config-if-range)#exit

Step 5: Shut down non-used interfaces

Administratively shut down all ports not connected
DSW1(config)#interface range fastethernet 0/5 - 10
DSW1(config-if-range)#shut
DSW1(config-if-range)#exit
Exit Global Configuration Mode
DSW1(config)#exit

Step 6: Check your work

Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
DSW1#show interfaces status
show the vlans that are configured
DSW1#show vlan
show switchport you can change the fastethernet 0/4 for any active port for information
DSW1#show interface fasthethernet 0/4 switchport
show which interfaces are trunking
DSW1#show interfaces trunk
show run the running configuration
DSW1#show run

Step 7: Save your work

Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)... oops copy start run
DSW1#copy run start

Distribution Switch 2

Step 1: Setup the basics all of the following is CCNA level stuff and should easy if not second nature. This is to get the security and host name down before going onto the interface configuration.

Enter Privileged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname DSW2
Enable secret and password
DSW2(config)#enable secret cisco
DSW2(config)#enable password cisco
Setup a local user database
DSW2(config)#username admin@mydomain.com privilege 15 password cisco
Setup the console port password
DSW2(config)#line con 0
DSW2(config-line)#login local
DSW2(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
DSW2(config)#line vty 0 4
DSW2(config-line)#password cisco
DSW2(config-line)#login
DSW2(config-line)#exit
Setup the Auxiliary Password
DSW2(config)#line aux 0
DSW2(config-line)#no exec
DSW2(config-line)#exit

Step 2: Setup the management interface

Setup the default VLAN ip address from remote ip admin if there was a GUI and to Telnet to the switch
DSW2(config)#interface vlan 1
DSW2(config-if)#ip address 192.168.1.50 255.255.255.0
NB I am shutting the interface
DSW2(config-if)#shut
DSW2(config-if)#exit

Step 3: Assign an ip address to the new VLAN to ping

Setup the VLAN ip address
DSW2(config)#interface vlan 100
DSW2(config-if)#ip address 192.168.100.50 255.255.255.0
DSW2(config-if)#no shut
DSW2(config-if)#exit

Step 4: Setup other interfaces

Setup Fastethernet Interfaces
DSW2(config)#interface fastethernet 0/1
DSW2(config-if)#description DSW1 - ASW1
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/2
DSW2(config-if)#description DSW1 - ASW1
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/3
DSW2(config-if)#description DSW1 - ASW2
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/4
DSW2(config-if)#description DSW1 - ASW2
DSW2(config-if)#exit
Create and Associate VLAN 100 with Fe 1 to 4
DSW2(config)#interface range fastethernet 0/1 - 4
DSW2(config-if-range)#speed 100
DSW2(config-if-range)#duplex full
DSW2(config-if-range)#switchport
DSW2(config-if-range)#switchport trunk encapsulation dot1q
DSW2(config-if-range)#switchport trunk native vlan 1
DSW2(config-if-range)#switchport trunk allowed vlan 1,100
DSW2(config-if-range)#switchport mode trunk
DSW2(config-if-range)#exit
DSW2(config)#interface fastethernet 0/11
DSW2(config-if)#description DSW1 - DSW2
DSW2(config-if)#exit
DSW2(config)#interface fastethernet 0/12
DSW2(config-if)#description DSW1 - DSW2
DSW2(config-if)#exit
Associate VLAN 100 with Fe 11 and 12
DSW2(config)#interface range fastethernet 0/11 - 12
DSW2(config-if-range)#speed 100
DSW2(config-if-range)#duplex full
DSW2(config-if-range)#switchport
DSW2(config-if-range)#switchport trunk encapsulation dot1q
DSW2(config-if-range)#switchport trunk native vlan 1
DSW2(config-if-range)#switchport trunk allowed vlan 1,100
DSW2(config-if-range)#switchport mode trunk
DSW2(config-if-range)#exit

Step 5: Shut down non-used interfaces

Aministratively shutdown all ports not connected
DSW2(config)#interface range fastethernet 0/5 - 10
DSW2(config-if-range)#shut
DSW2(config-if-range)#exit
Exit Global Configuration Mode
DSW2(config)#exit

Step 6: Check your work

Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
DSW2#show interfaces status
show the vlans that are configured
DSW2#show vlan
show switchport you can change the fastethernet 0/4 for any active port for information
DSW2#show interface fasthethernet 0/4 switchport
show which interfaces are trunking
DSW2#show interfaces trunk
show run the running configuration
DSW2#show run

Step 7: Save your work

Copy the running configuration to the startup configuration. I got in the bad habbit to do this the other way around for a while (did it in an exam)... oops copy start run
DSW2#copy run start

Access Switch 1

Step 1: Setup the basics all of the following is CCNA level stuff and should easy if not second nature. This is to get the security and host name down before going onto the interface configuration.

Enter Privileged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname ASW1
Enable secret and password
ASW1(config)#enable secret cisco
ASW1(config)#enable password cisco
Setup a local user database
ASW1(config)#username admin@mydomain.com privilege 15 password cisco
Setup the console port password
ASW1(config)#line con 0
ASW1(config-line)#login local
ASW1(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
ASW1(config)#line vty 0 4
ASW1(config-line)#password cisco
ASW1(config-line)#login
ASW1(config-line)#exit
Setup the Auxiliary Password
ASW1(config)#line aux 0
ASW1(config-line)#no exec
ASW1(config-line)#exit

Step 2: Setup the management interface

Setup the default VLAN ip address from remote ip admin if there was a GUI and to Telnet to the switch
ASW1(config)#interface vlan 1
ASW1(config-if)#ip address 192.168.1.100 255.255.255.0
NB I am shutting the interface
ASW1(config-if)#shut
ASW1(config-if)#exit

Step 3: Assign an ip address to the new VLAN to ping

Create VLAN 100 and Configure Interface
ASW1(config)#vlan 100 name Marketing
ASW1(config)#interface vlan 100
ASW1(config-if)#ip address 192.168.100.100 255.255.255.0
ASW1(config-if)#no shut
ASW1(config-if)#exit

Step 4: Setup other interfaces

Setup Fastethernet Interfaces
ASW1(config)#interface fastethernet 0/1
ASW1(config-if)#description DSW1 - ASW1
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/2
ASW1(config-if)#description DSW1 - ASW1
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/3
ASW1(config-if)#description DSW1 - ASW2
ASW1(config-if)#exit
ASW1(config)#interface fastethernet 0/4
ASW1(config-if)#description DSW1 - ASW2
ASW1(config-if)#exit
Associate VLAN 100 with Fe 1 to 4
ASW1(config)#interface range fastethernet 0/1 - 4
ASW1(config-if-range)#speed 100
ASW1(config-if-range)#duplex full
ASW1(config-if-range)#switchport
ASW1(config-if-range)#switchport trunk encapsulation dot1q
ASW1(config-if-range)#switchport trunk native vlan 1
ASW1(config-if-range)#switchport trunk allowed vlan 1,100
ASW1(config-if-range)#switchport mode trunk
ASW1(config-if-range)#exit

Step 5: This is where the ASW and the DSW switches differ. This connects to the Workstation end-point where the DSW switches use port 11/12 to provide failover for the distribution

Setup Fastethernet 0/12 for 10mbs half duplex as an access level end-point interface
ASW1(config)#interface fastethernet 0/12
ASW1(config-if)#description ASW1 - PC1
ASW1(config-if)#speed 10
ASW1(config-if)#duplex half
ASW1(config-if)#switchport
Make the port as an access port
ASW1(config-if)#switchport mode access
Make the port an access port for VLAN 100
ASW1(config-if)#switchport access vlan 100
ASW1(config-if)#no shut
ASW1(config-if)#exit

Step 6: Shut down non-used interfaces

Administratively shut down all ports not connected
ASW1(config)#interface range fastethernet 0/5 - 11
ASW1(config-if-range)#shut
ASW1(config-if-range)#exit
Exit Global Configuration Mode
ASW1(config)#exit

Step 7: Check your work

Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
ASW1#show interfaces status
show the vlans that are configured
ASW1#show vlan
show switchport you can change the fastethernet 0/4 for any active port for information
ASW1#show interface fasthethernet 0/4 switchport
show which interfaces are trunking
ASW1#show interfaces trunk
show run the running configuration
ASW1#show run

Step 8: Save your work

Copy the running configuration to the startup configuration. I got in the bad habit to do this the other way around for a while (did it in an exam)... oops copy start run
ASW1#copy run start

Access Switch 2

Step 1: Setup the basics all of the following is CCNA level stuff and should easy if not second nature. This is to get the security and host name down before going onto the interface configuration.

Enter Privileged Mode
switch>enable
Enter Global Configuration Mode
switch#configure terminal
Change the hostname of the switch
switch(config)#hostname ASW2
Enable secret and password
ASW2(config)#enable secret cisco
ASW2(config)#enable password cisco
Setup a local user database
ASW2(config)#username admin@mydomain.com privilege 15 password cisco
Setup the console port password
Setup the console port password
ASW2(config)#line con 0
ASW2(config-line)#login local
ASW2(config-line)#exit
Setup the Auxiliary Password
ASW2(config)#line aux 0
ASW2(config-line)#no exec
ASW2(config-line)#exit
Setup the Virtual Teletype Terminal (VTY) Password
ASW2(config)#line vty 0 4
ASW2(config-line)#password cisco
ASW2(config-line)#login
ASW2(config-line)#exit

Step 2: Setup the management interface

Setup the default VLAN ip address from remote ip admin if there was a GUI and to Telnet to the switch
ASW2(config)#interface vlan 1
ASW2(config-if)#ip address 192.168.1.200 255.255.255.0
NB I am shutting the interface
ASW2(config-if)#shut
ASW2(config-if)#exit

Step 3: Assign an ip address to the new VLAN to ping

Create VLAN 100 and Configure Interface
ASW2(config)#vlan 100 name Marketing
ASW2(config)#interface vlan 100
ASW2(config-if)#ip address 192.168.100.200 255.255.255.0
ASW2(config-if)#no shut
ASW2(config-if)#exit

Step 4: Setup other interfaces

Setup Fastethernet Interfaces
ASW2(config)#interface fastethernet 0/1
ASW2(config-if)#description DSW1 - ASW1
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/2
ASW2(config-if)#description DSW1 - ASW1
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/3
ASW2(config-if)#description DSW1 - ASW2
ASW2(config-if)#exit
ASW2(config)#interface fastethernet 0/4
ASW2(config-if)#description DSW1 - ASW2
ASW2(config-if)#exit
Associate VLAN 100 with Fe 1 to 4
ASW2(config)#interface range fastethernet 0/1 - 4
ASW2(config-if-range)#speed 100
ASW2(config-if-range)#duplex full
ASW2(config-if-range)#switchport
ASW2(config-if-range)#switchport trunk encapsulation dot1q
ASW2(config-if-range)#switchport trunk native vlan 1
ASW2(config-if-range)#switchport trunk allowed vlan 1,100
ASW2(config-if-range)#switchport mode trunk
ASW2(config-if-range)#exit

Step 5: This is where the ASW and the DSW switches differ. This connects to the Workstation end-point where the DSW switches use port 11/12 to provide failover for the distribution

Setup Fastethernet 0/12 for 10mbs half duplex as an access level end-point interface
ASW2(config)#interface fastethernet 0/12
ASW2(config-if)#description ASW2 - PC2
ASW2(config-if)#speed 10
ASW2(config-if)#duplex half
ASW1(config-if)#switchport
Make the port as an access port
ASW2(config-if)#switchport mode access
Make the port an access port for VLAN 100
ASW2(config-if)#switchport access vlan 100
ASW2(config-if)#no shut
ASW2(config-if)#exit

Step 6: Shut down non-used interfaces

Administratively shut down all ports not connected
ASW2(config)#interface range fastethernet 0/5 - 11
ASW2(config-if-range)#shut
ASW2(config-if-range)#exit
Exit Global Configuration Mode
ASW2(config)#exit

Step 7: Check your work

Check that you named the interfaces correctly, havent missed out on a connected interface and that the duplex and speed setting are correct
ASW2#show interfaces status
show the vlans that are configured
ASW2#show vlan
show switchport you can change the fastethernet 0/4 for any active port for information
ASW2#show interface fasthethernet 0/4 switchport
show which interfaces are trunking
ASW2#show interfaces trunk
show run the running configuration
ASW2#show run

Step 8: Save your work

Copy the running configuration to the startup configuration. I got in the bad habit to do this the other way around for a while (did it in an exam)... oops copy start run
ASW2#copy run start

Notes and Notices:

This is a part of my personal BCMSN notes and research to assist myself in learning and understanding the concepts and theory for the BCMSN exam. I learn by making notes reading and writing things down and wish to file them where I can’t lose them. These notes are not to be seen, judged or mistaken for replacements to Cisco recognized and authorized training which I personally support and attend and suggest you undertake if you are going for the BCMSN Certification.


Search

About

You are currently browsing the Network Ninja weblog archives for 'vlans' tag.

Latest

RSS
  • Digital Growth with your Job
  • Open Shortest Path First – OSPF Fundamentals – Scenario
  • Open Shortest Path First – OSPF Fundamentals – Questions and Answers – Question 13
  • Open Shortest Path First – OSPF Fundamentals – Questions and Answers – Question 12
  • Open Shortest Path First – OSPF Fundamentals – Questions and Answers – Question 11
  • Open Shortest Path First – OSPF Fundamentals – Questions and Answers – Question 10
  • Open Shortest Path First – OSPF Fundamentals – Questions and Answers – Question 9
  • Open Shortest Path First – OSPF Fundamentals – Questions and Answers – Question 8
  • Open Shortest Path First – OSPF Fundamentals – Questions and Answers – Question 7
  • Open Shortest Path First – OSPF Fundamentals – Questions and Answers – Question 6

Archives

  • June 2009
  • April 2009
  • March 2009
  • February 2009
  • November 2008
  • October 2008
  • September 2008
  • August 2008
  • July 2008
  • June 2008
  • May 2008
  • April 2008

Categories

  • 802.11 (7)
  • 802.1Q (1)
  • 802.1X (1)
  • AAA (1)
  • Access Point (7)
  • ACL (4)
  • Addressing (3)
  • Asides (31)
  • auto-summary (3)
  • AutoQoS (1)
  • Bandwidth (2)
  • BCMSN (55)
  • BDR (2)
  • BGP (1)
  • BPDU Filtering (1)
  • BPDU Guard (2)
  • BPDU Root Guard (1)
  • BSCI (67)
  • BSCI Notes (18)
  • BSCI Questions (48)
  • Business (1)
  • Cabling and Equiptment (3)
  • CAM (1)
  • CCDA (1)
  • CDP (1)
  • CEF (1)
  • Certification (123)
  • CIDR (2)
  • CIR (2)
  • Cisco Systems (144)
  • Concepts and Constructs (76)
  • CoS (1)
  • Cost (3)
  • DAI (1)
  • DDNS (1)
  • Debug (2)
  • DHCP Snooping (1)
  • DHCP Spoofing (1)
  • DR (3)
  • DUAL (1)
  • Dynamic ARP Inspection (1)
  • ECNM (5)
  • EIGRP (5)
  • Enterprise Architecture (7)
  • EtherChannel (1)
  • GLBP (1)
  • Hello Timer (2)
  • Hold Timer (2)
  • Hot Standby Router Protocol (1)
  • HSRP (1)
  • IGRP (1)
  • IIN (2)
  • Inter-Vlan Routing (1)
  • Interconnection Technologies (2)
  • IP Source Guard (1)
  • IS-IS (1)
  • ISL (1)
  • LACP (1)
  • Link State Advertisements (2)
  • Load Balancing (2)
  • Loop Guard (1)
  • MAC Address Flooding (1)
  • MLS (1)
  • MSTP (1)
  • NBAR (1)
  • NBMA (1)
  • Off-Topic (12)
  • OSPF (18)
  • PAgP (1)
  • passive-interface (1)
  • PoE (1)
  • Port Security (1)
  • Priority (2)
  • Proxy ARP (1)
  • PVC (1)
  • QoS (2)
  • RIP (1)
  • RIPv2 (1)
  • Root Guard (1)
  • RSTP (1)
  • Show (6)
  • Software (1)
  • SONA (2)
  • SSH (2)
  • STP (5)
  • Stub Router (3)
  • summary-address (1)
  • Support (4)
  • Switch Spoofing (1)
  • TCAM (1)
  • Telnet (2)
  • Troubleshooting (1)
  • Trunk (6)
  • Unidirectional Link Detection (1)
  • VACL (3)
  • VC (1)
  • Vine (20)
  • VLAN (11)
  • VLAN Hopping (1)
  • VLSM (1)
  • VoIP (1)
  • VRRP (1)
  • VTP (4)
  • VTY (1)
  • Wireless (7)


Styled with Sawchuk

Powered by WordPressabc and K21.0-RC7

Entries Feed and Comments Feed

56 queries. 4.2400 seconds.