CCN-Lab No.

09

VLAN routing and VTP configuration

Learning Objectives

Upon completion of this lab, you will be able to:

 Cable a network according to the topology diagram.

 Clear configurations and reload a switch and a router to the default state.
 Perform basic configuration tasks on a switched LAN and router.
 Configure VLANs and VLAN Trunking Protocol (VTP) on all switches.
 Demonstrate and explain the impact of Layer 3 boundaries imposed by creating VLANs.
 Configure a router to support 802.1 trunking on a Fast Ethernet interface.
 Configure a router with sub-interfaces corresponding to the configured VLAN.
 Demonstrate and explain inter-VLAN routing. Part-a

Inter-VLAN routing Configuration

Topology Diagram:

14-EE-10:Ahmed Hameed
Step 1

Prepare the Network

The output shown in this lab is based on 2960 switches and an 1841 router. Note that Ethernet (10Mb)
LAN interfaces on routers do not support trunking, and Cisco IOS software earlier than version 12.3 may
not support trunking on Fast Ethernet router interfaces. Set up console connections to all three switches
and to the router.

14-EE-10:Ahmed Hameed
Step 2

Clear any existing configurations on the switches.

Clear NVRAM, delete the vlan.dat file, and reload the switches. After the reload is complete, use the
show vlan command to confirm that only default VLANs exist and that all ports are assigned to VLAN-1.

Step 3 Disable all ports using the shutdown command.

Ensure that the initial switch port states are inactive by disabling all ports. Use the interface range
command to simplify this task. Repeat these commands on each switch in the topology.

Task 2:

Perform Basic Switch Configurations

14-EE-10:Ahmed Hameed
Step 1

Configure the S1, S2, and S3 switches.

Use the addressing table and the following guidelines:

 Configure the switch hostname.

 Disable DNS lookup.
 Configure an enable secret password of class.
 Configure a password of cisco for console connections.
 Configure a password of cisco for vty connections.
 Configure the default gateway on each switch.

Step 2

14-EE-10:Ahmed Hameed
 Re-enable the active user ports on S2 in access mode.

Task 3

Configure the Ethernet Interfaces on the Host PCs

Configure the Ethernet interfaces of PC1, PC2, PC3 and the remote TFTP/Web Server with the IP
addresses from the addressing table.

Task 4

Configure VTP on the Switches

Step 1

Configure VTP on the three switches using the following table. Remember that VTP domain
names and passwords are case-sensitive

14-EE-10:Ahmed Hameed
Step 2:

Configure trunking ports and designate the native VLAN for the trunks.

Configure Fa0/1 through Fa0/5 as trunking ports, and designate VLAN 99 as the native VLAN for these
trunks. Use the interface range command in global configuration mode to simplify this task.

14-EE-10:Ahmed Hameed
Step 3

Configure VLANs on the VTP server.

Step 4

Verify that the VLANs created on S1 have been distributed to S2 and S3.

Use the show vlan brief command on S2 and S3 to verify that the four VLANs have been distributed to
the client switches.

14-EE-10:Ahmed Hameed
Step 5

Configure the management interface address on all three switches.

Verify that the switches are correctly configured by pinging between them. From S1, ping the
management interface on S2 and S3. From S2, ping the management interface on S3.

Were the pings successful?

Step 6

Assign switch ports to VLANs on S2.

Step 7

14-EE-10:Ahmed Hameed
 Check connectivity between VLANs.

Open command windows on the three hosts connected to S2. Ping from PC1 (172.17.10.21) to PC2
(172.17.20.22). Ping from PC2 to PC3 (172.17.30.23).

Are the pings successful?

Task 5

Configure the Router and the Remote Server LAN

Step 1

Clear the configuration on the router and reload.

Step 2

14-EE-10:Ahmed Hameed
 Create a basic configuration on the router.

 Configure the router with hostname R1.

 Disable DNS lookup.
 Configure an EXEC mode password of cisco.
 Configure a password of cisco for console connections.
 Configure a password of cisco for vty connections.

Step 3

Configure the trunking interface on R1.

There are a couple of options for configuring routing between VLANs.

The first is something of a brute force approach. An L3 device, either a router or a Layer 3 capable
switch, is connected to a LAN switch with multiple connections—a separate connection for each VLAN
that requires inter-VLAN connectivity. Each of the switch ports used by the L3 device is configured in a
different VLAN on the switch. After IP addresses are assigned to the interfaces on the L3 device, the
routing table has directly connected routes for all VLANS, and inter-VLAN routing is enabled. The
limitations to this approach are the lack of sufficient Fast Ethernet ports on routers, under-utilization of
ports on L3 switches and routers, and excessive wiring and manual configuration. The topology used in
this lab does not use this approach.

An alternative approach is to create one or more Fast Ethernet connections between the L3 device (the
router) and the distribution layer switch, and to configure these connections as dot1q trunks. This allows
all inter-VLAN traffic to be carried to and from the routing device on a single trunk. However, it requires
that the L3 interface be configured with multiple IP addresses. This can be done by creating “virtual”
interfaces, called sub interfaces, on one of the router Fast Ethernet ports and configuring them to dot1q
aware.

Using the sub interface configuration approach requires these steps:

 Enter sub interface configuration mode

 Establish trunking encapsulation.
 Associate a VLAN with the subinterface

14-EE-10:Ahmed Hameed
  Assign an IP address from the VLAN to the sub interface

The following points in this configuration:

 The physical interface is enabled using the no shutdown command, because router interfaces are
down by default. The virtual interfaces are up by default.
 The subinterface can use any number that can be described with 32 bits, but it is good practice to
assign the number of the VLAN as the interface number, as has been done here.
 The native VLAN is specified on the L3 device so that it is consistent with the switches.
Otherwise, VLAN 1 would be the native VLAN by default, and there would be no
communication between the router and the management VLAN on the switches.

Confirm creation and status of the subinterfaces with the show ip interface brief command:

Step 4

Configure the server LAN interface on R1.

14-EE-10:Ahmed Hameed
 There are now six networks configured. Verify that you can route packets to all six by checking the
routing table on R1.

Step 5

Verify Inter-VLAN routing.

From PC1, verify that you can ping the remote server (172.17.50.254) and the other two hosts
(172.17.20.22 and 172.17.30.23). It may take a couple of pings before the end-to-end path is
established

Task 6

Reflection

In Task 5, it was recommended that you configure VLAN 99 as the native VLAN in the router
Fa0/0.99 interface configuration. Why would packets from the router or hosts fail when trying to
reach the switch management interfaces if the native VLAN were left in default?

14-EE-10:Ahmed Hameed
Task 7:

Clean Up

Erase the configurations and reload the switches. Disconnect and store the cabling. For PC hosts that
are normally connected to other networks (such as the school LAN or to the Internet), reconnect the
appropriate cabling and restore the TCP/IP settings.

14-EE-10:Ahmed Hameed
 Output of VLAN Routing Configuration:

Part-b

VTP Configuration

Learning Objectives

Upon completion of this lab, you will be able to

 Cable a network according to the topology diagram.

 Erase the startup configuration and reload a switch to the default state.  Perform basic
configuration tasks on a switch.
 Configure VLAN Trunking Protocol (VTP) on all switches.
 Enable trunking on inter-switch connections.
 Verify trunk configuration.
 Modify VTP modes and observe the impact.
 Create VLANs on the VTP server, and distribute this VLAN information to switches in the
network.

14-EE-10:Ahmed Hameed
  Explain the differences in operation between VTP transparent mode, server mode, and client
mode
 Assign switch ports to the VLANs
 Save the VLAN configuration
 Enable VTP pruning on the network 
 Explain how pruning reduces unnecessary broadcast traffic on the LAN

Topology Diagram

14-EE-10:Ahmed Hameed
Task 1

Prepare the Network

Step 1

Cable a network that is similar to the one in the topology diagram.

The output shown in this lab is based on 2960 switches. Other switch types may produce different
output. If you are using older switches, then some commands may be different or unavailable.

You will notice in the Addressing Table that the PCs have been configured with a default gateway
IP address. This would be the IP address of the local router which is not included in this lab scenario.
The default gateway, the router would be needed for PCs in different VLANS to be able to
communicate.

Set up console connections to all three switches

Step 2

Clear any existing configurations on the switches.

Clear the switch configurations and VLANs. Use the show vlan command to confirm that only
default VLANs exist and that all ports are assigned to VLAN 1.

14-EE-10:Ahmed Hameed
Step 3

Disable all ports by using the shutdown command.

Repeat these commands for each switch in topology

Task 2:

Perform Basic Switch Configurations

Step 1:

Complete basic configuration of switches S1, S2, and S3.

Configure the S1, S2, and S3 switches according to the following guidelines and save all your
configurations:

 Configure the switch hostname as indicated on the topology.

 Disable DNS lookup.
 Configure an EXEC mode password of class.
 Configure a password of cisco for console connections
 Configure a password of cisco for vty connections.

14-EE-10:Ahmed Hameed
Step 2

Re-enable the user ports on S2 and S3.

Configure the user ports in access mode. Refer to the topology diagram to determine which ports are
connected to end-user devices

Switch S3:

14-EE-10:Ahmed Hameed
Step 3

Re-enable the trunk ports on S1, S2 and S3

Task 3

Configure the Ethernet Interfaces on the Host PCs

Configure the Ethernet interfaces of PC1, PC2, PC3, PC4, PC5, and PC6 with the IP addresses and
default gateways indicated in the addressing table at the beginning of the lab.

14-EE-10:Ahmed Hameed
Task 4:

Configure VTP on the Switches

VTP allows the network administrator to control the instances of VLANs on the network by creating
VTP domains. Within each VTP domain, one or more switches are configured as VTP servers.
VLANs are then created on the VTP server and pushed to the other switches in the domain. Common
VTP configuration tasks are setting the operating mode, domain, and password. In this lab, you will
be using S1 as the VTP server, with S2 and S3 configured as VTP clients or in VTP transparent
mode.

Step 1:

Check the current VTP settings on the three switches.

14-EE-10:Ahmed Hameed
Step 2:

Configure the operating mode, domain name, and VTP password on all three switches.

14-EE-10:Ahmed Hameed
The VTP domain name can be learned by a client switch from a server switch, but only if the client
switch domain is in the null state. It does not learn a new name if one has been previously set. For
that reason, it is good practice to manually configure the domain name on all switches to ensure that
the domain name is configured correctly. Switches in different VTP domains do not exchange VLAN
information.

Step 3:

Configure trunking and the native VLAN for the trunking ports on all three switches.

Step 4 :Configure port security on the S2 and S3 access layer switches.

Configure ports fa0/6, fa0/11, and fa0/18 so that they allow only a single host and learn the MAC
address of the host dynamically.

14-EE-10:Ahmed Hameed
14-EE-10:Ahmed Hameed
Step 5

Configure VLANs on the VTP server.

There are four additional VLANS required in this lab:

 VLAN 99 (management)
 VLAN 10 (faculty/staff)
 VLAN 20 (students)
 VLAN 30 (guest)

Verify that the VLANs have been created on S1 with the show vlan brief command.

14-EE-10:Ahmed Hameed
Step 6

Check if the VLANs created on S1 have been distributed to S2 and S3.

Use the show vlan brief command on S2 and S3 to determine if the VTP server has pushed its
VLAN configuration to all the switches.

Are the same VLANs configured on all switches?

Explain why S2 and S3 have different VLAN configurations at this point?

Step 7

14-EE-10:Ahmed Hameed
 Create a new VLAN on switch 2 and 3.

Why are you prevented from creating a new VLAN on S2 but not S3?

Step 8 :Manually configure VLANs.

Configure the four VLANs identified in Step 5 on switch S3.

Here you see one of the advantages of VTP. Manual configuration is tedious and error prone, and
any error introduced here could prevent intra-VLAN communication. In addition, these types of
errors can be difficult to troubleshoot.

Step 9

Configure the management interface address on all three switches.

14-EE-10:Ahmed Hameed
14-EE-10:Ahmed Hameed
Verify that the switches are correctly configured by pinging between them. From S1, ping the
management interface on S2 and S3. From S2, pings the management interface on S3.

Were the pings successful?

Step 10

Assign switch ports to VLANs.

Refer to the port assignment table at the beginning of the lab to assign ports to the VLANs. Use
the interface range command to simplify this task. Port assignments are not configured through
VTP. Port assignments must be configured on each switch manually or dynamically using a
VMPS server. The commands are shown for S3 only, but both S2 and S1 switches should be
similarly configured. Save the configuration when you are done.

Task 5

Configure VTP Pruning on the Switches

VTP pruning allows a VTP server to suppress IP broadcast traffic for specific VLANs to switches
that do not have any ports in that VLAN. By default, all unknown unicasts and broadcasts in a
VLAN are flooded over the entire VLAN. All switches in the network receive all broadcasts,
even in situations in which few users are connected in that VLAN. VTP pruning is used to
eliminate or prune this unnecessary traffic. Pruning saves LAN bandwidth because broadcasts do
not have to be sent to switches that do not need them.

Pruning is configured on the server switch with the vtp pruning command in global configuration
mode. The configuration is pushed to client switches.

Confirm VTP pruning configuration on each switch using the show vtp status command. VTP
pruning mode should be enabled on each switch.

14-EE-10:Ahmed Hameed
Task 6

Clean Up

Erase the configurations and reload the switches

Output of VTP configuration:

14-EE-10:Ahmed Hameed