成长值: 63730
|
本帖最后由 小乔 于 2022-11-11 15:25 编辑
Lab Objective:
The objective of this lab exercise is to configure a router to provide inter-VLAN communication. By default, hosts in one VLAN cannot communicate with hosts in another VLAN without a router routing between the two VLANs.
Lab Purpose:
Inter-VLAN routing configuration is a fundamental skill. Most networks typically have more than one VLAN, and the hosts in these VLANs are required to communicate with each other if the need arises. As a Cisco engineer, as well as in the Cisco CCNA exam, you will be expected to know how to configure inter-VLAN routing. In this example, you don’t have a Layer 3 switch so you must use a router to route.
Certification Level:
This lab is suitable for CCNA certification exam preparation.
Lab Difficulty:
This lab has a difficulty rating of 9/10.
Readiness Assessment:
When you are ready for your certification exam, you should complete this lab in no more than 20 minutes.
Please use the following topology to complete this lab exercise:
Task 1:
Configure a hostname on switches 1 and 2 and routers 1 through 4 as illustrated in the topology above.
Task 2:
Configure and verify Sw1 and Sw2 as VTP Transparent switches. Both switches should be in the VTP domain named CISCO. Secure VTP messages with the password CISCO.
Task 3:
Configure and verify FastEthernet0/1 between Sw1 and Sw2 as an 802.1q trunk and configure VLANs as depicted in the topology above. Assign ports to depicted VLANs and configure Sw1 FastEthernet0/2 as a trunk. VLAN20 should have untagged Ethernet frames. Remember that on 802.1q trunks, only the native VLAN is untagged.
Task 4:
Configure IP addresses on R2, R3, and R4 as illustrated in the diagram.
Task 5:
Configure subinterfaces off R1 FastEthernet0/0 in the corresponding VLANs in the diagram. Also, configure interface VLAN10 on Sw2 with the IP address 10.0.10.2/28.
Task 6:
Test network connectivity by pinging from R1 to routers R2, R3, and R4.
Configuration and Verification
Task 1:
For reference information on configuring hostnames, please refer to earlier labs.
Task 2:
For reference information on configuring and verifying VTP, please refer to earlier labs.
Task 3:
Sw1#config t
Enter configuration commands, one per line. End with CTRL/Z.
Sw1(config)#interface fastethernet0/1
Sw1(config-if)#switchport mode trunk
Sw1(config-if)#exit
Sw1(config)#vlan10
Sw1(config-vlan)#name SALES
Sw1(config-vlan)#exit
Sw1(config)#vlan20
Sw1(config-vlan)#name TECH
Sw1(config-vlan)#exit
Sw1(config)#vlan30
Sw1(config-vlan)#name ADMIN
Sw1(config-vlan)#exit
Sw1(config)#vlan40
Sw1(config-vlan)#name TEST
Sw1(config-vlan)#exit
Sw1(config)#interface fastethernet0/2
Sw1(config-if)#switchport mode trunk
Sw1(config-if)#switchport trunk native vlan20
Sw1(config-if)#exit
Sw1(config)#interface fastethernet0/3
Sw1(config-if)#switchport mode access
Sw1(config-if)#switchport access vlan20
Sw1(config-if)#end
Sw1#show interfaces trunk
Port Mode Encapsulation Status Native vlan
Fa0/1 on 802.1q trunking 1
Fa0/2 on 802.1q trunking 20
Port Vlans allowed on trunk
Fa0/1 1-4094
Fa0/2 1-4094
Port Vlans allowed and active in management domain
Fa0/1 1,10,20,30,40
Fa0/2 1,10,20,30,40
Port Vlans in spanning tree forwarding state and not pruned
Fa0/1 1,20,30,40
Fa0/2 1,20,30,40
Sw2#config t
Enter configuration commands, one per line. End with CTRL/Z.
Sw2(config)#interface fastethernet0/1
Sw2(config-if)#switchport mode trunk
Sw2(config-if)#exit
Sw2(config)#vlan10
Sw2(config-vlan)#name SALES
Sw2(config-vlan)#exit
Sw2(config)#vlan20
Sw2(config-vlan)#name TECH
Sw2(config-vlan)#exit
Sw2(config)#vlan30
Sw2(config-vlan)#name ADMIN
Sw2(config-vlan)#exit
Sw2(config)#vlan40
Sw2(config-vlan)#name TEST
Sw2(config-vlan)#exit
Sw2(config)#interface fastethernet0/2
Sw2(config-if)#switchport mode access
Sw2(config-if)#switchport access vlan30
Sw2(config-if)#exit
Sw2(config)#interface fastethernet0/3
Sw2(config-if)#switchport mode access
Sw2(config-if)#switchport access vlan40
Sw2(config-if)#^Z
Sw2#show interfaces trunk
Port Mode Encapsulation Status Native vlan
Fa0/1 on 802.1q trunking 1
Port Vlans allowed on trunk
Fa0/1 1-4094
Port Vlans allowed and active in management domain
Fa0/1 1,10,20,30,40
Port Vlans in spanning tree forwarding state and not pruned
Fa0/1 1,20,30,40
Task 4:
For reference information on configuring IP interfaces, please refer to earlier labs.
Task 5:
R1#config t
Enter configuration commands, one per line. End with CTRL/Z.
R1(config)#interface fastethernet0/0
R1(config-if)#description “Connected To Switch Trunk Fa0/2”
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface fastethernet0/0.10
R1(config-subif)#description Subinterface For VLAN10
R1(config-subif)#encapsulation dot1Q 10
R1(config-subif)#ip address 10.0.10.1 255.255.255.240
R1(config-subif)#exit
R1(config)#interface fastethernet0/0.20
R1(config-subif)#description Subinterface For VLAN20
R1(config-subif)#encapsulation dot1Q 20 native
R1(config-subif)#ip address 10.0.20.1 255.255.255.128
R1(config-subif)#exit
R1(config)#interface fastethernet0/0.30
R1(config-subif)#description Subinterface For VLAN30
R1(config-subif)#ip address 10.0.30.1 255.255.255.248
R1(config-subif)#exit
R1(config)#interface fastethernet0/0.40
R1(config-subif)#description Subinterface For VLAN40
R1(config-subif)#encapsulation dot1Q 40
R1(config-subif)#ip address 10.0.40.1 255.255.255.224
R1(config-subif)#end
R1#show ip interface brief
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 unassigned YES manual up up
FastEthernet0/0.10 10.0.10.1 YES manual up up
FastEthernet0/0.20 10.0.20.1 YES manual up up
FastEthernet0/0.30 10.0.30.1 YES manual up up
FastEthernet0/0.40 10.0.40.1 YES manual up up
Sw2(config)#interface vlan1
Sw2(config-if)#shutdown
Sw2(config)#interface vlan10
Sw2(config-if)#ip address 10.0.10.2 255.255.255.240
Sw2(config-if)#no shutdown
Sw2(config)#^Z
Sw2#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Vlan1 unassigned YES NVRAM administratively down down
Vlan10 10.0.10.2 YES manual up up
Sw2#
Task 6:
R1#ping 10.0.10.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.10.2, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 1/3/4 ms
R1#ping 10.0.20.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.20.2, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 1/3/4 ms
R1#ping 10.0.30.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.30.3, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 1/3/4 ms
R1#ping 10.0.40.4
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.0.40.4, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 1/3/4 ms
NOTE: The first ping packet times out due to ARP resolution. Subsequent packets will be successful.
来源: CCNA LAB 8: 配置 Securing VTP Domains
来源: CCNA LAB 9: 配置 Switch Access Port Security
来源: CCNA LAB10: 配置 Advanced Switch Access Port Security
来源: CCNA LAB11: 配置Advanced Static Switch Access Port Security
来源: CCNA LAB12: 配置Disabling Auto-negotiation of Trunking
来源: CCNA LAB13: 配置Switchports to Dynamic
来源: CCNA LAB14: 配置Default Gateway for Routers and Switches
来源: CCNA LAB15: 配置Cisco Discovery Protocol
来源: CCNA LAB16: 配置Configuring LLDP
来源: CCNA LAB17: 配置Configuring Errdisable Recovery |
|