Case Study 1 VLANs, VTP and Inter-VLAN Routing

VLAN 10 20 30 40

Name Red Blue Orange Green

This Subnetting scenario, we will use VLAN 10: 172.16.10.0/24 VLAN 20: 172.16.20.0/24 VLAN 30: 172.16.30.0/24 VLAN 40: 172.16.40.0/24 Fa 0/12 : 172.16.50.0/24 Loopback0: 172.16.60.1/24

Arbab Nazar

1. Disable the links between the access layer switches.

DS1(config)#interface range fa 0/7 - 10 DS1(config-if-range)#sh DS2(config)#interface range fa 0/7 - 10 DS2(config-if-range)#sh AS1(config)#interface range fa 0/7 - 10 AS1(config-if-range)#sh AS2(config)#interface range fa 0/7 - 10 AS2(config-if-range)#sh

2. Place all switches in the VTP domain CISCO. Make DS1 the VTP server and all other switches VTP clients.
DS1(config)#vtp domain CISCO DS1(config)#vtp mode server DS2(config)#vtp domain CISCO DS2(config)#vtp mode client AS1(config)#vtp domain CISCO AS1(config)#vtp mode client AS2(config)#vtp domain CISCO AS2(config)#vtp mode client

3.Create the VLANs shown in the VLAN table and assign the names given. For subnet planning, allocate a subnet for each VLAN.
DS1(config)#vlan 10 DS1(config-vlan)#name Red DS1(config-vlan)#exit DS1(config)#vlan 20 DS1(config-vlan)#name Blue DS1(config-vlan)#exit DS1(config)#vlan 30 DS1(config-vlan)#name Orange DS1(config-vlan)#exit DS1(config)#vlan 40 DS1(config-vlan)#name Green DS1(config-vlan)#exit

Arbab Nazar

4. Make DS1 the primary spanning-tree root for all VLANs. Make DS2 the backup root.
DS1(config)#spanning-tree vlan 1,10,20,30,40,1002,1003,1004,1005 root primary DS2(config)#spanning-tree vlan 1,10,20,30,40,1002,1003,1004,1005 root secondary 5.

Make F0/12 between DS1 and DS2 a layer 3 link and assign a subnet to it.

DS1(config)#interface fa 0/12 DS1(config-if)#no switchport DS1(config-if)#ip address 172.16.50.1 255.255.255.0 DS1(config-if)#no sh DS2(config)#interface fa 0/12 DS2(config-if)#no switchport DS2(config-if)#ip address 172.16.50.2 255.255.255.0 DS2(config-if)#no sh

6. Create a loopback interface on DS1 and assign a subnet to it.

DS1(config)#interface loopback 0 DS1(config-if)#ip address 172.16.60.1 255.255.255.0

7. Make F0/11 between DS1 and DS2 an ISL trunk link

DS1(config)#interface fa 0/11 DS1(config-if)#switchport trunk encapsulation isl DS1(config-if)#switchport mode trunk DS1(config-if)#no sh DS2(config)#interface fa 0/11 DS2(config-if)#switchport trunk encapsulation isl DS2(config-if)#switchport mode trunk DS2(config-if)#no sh

8. Configure all other trunk links using 802.1q. (The default encapsulation is 802.1q) 9. Make sure that all inter-switch links are statically set as trunks (Using SHOW VLAN BRIEF) 10. The links from DS1 to each access switch must be bound together in an EtherChannel.
DS1(config)#interface range fa 0/7 -8 DS1(config-if-range)#channel-group 1 mode on DS1(config-if)#exit DS1(config)#interface port-channel 1 DS1(config-if)#switchport trunk encapsulation dot1q DS1(config-if)#switchport mode trunk

Arbab Nazar

DS1(config)#interface range fa 0/9 -10 DS1(config-if-range)#channel-group 2 mode on DS1(config-if)#exit DS1(config)#interface port-channel 2 DS1(config-if)#switchport trunk encapsulation dot1q DS1(config-if)#switchport mode trunk

AS1(config)#interface range fa 0/7 -8 AS1(config-if-range)#channel-group 1 mode on AS1(config-if)#exit AS1(config)#interface port-channel 1 AS1(config-if)#switchport trunk encapsulation dot1q AS1(config-if)#switchport mode trunk AS2(config)#interface range fa 0/9 -10 AS2(config-if-range)#channel-group 2 mode on AS2(config-if)#exit AS2(config)#interface port-channel 2 AS2(config-if)#switchport trunk encapsulation dot1q AS2(config-if)#switchport mode trunk

11. Enable portfast on all access ports.

AS1(config)#spanning-tree portfast default AS2(config)#spanning-tree portfast default

12. Put F0/15 through F0/17 on AS1 and AS2 in VLAN 10. Place F0/18 and F0/19 on AS1 and AS2 in VLAN 20. Place F0/20 on AS1 and AS2 in VLAN 30.
AS1(config)#interface range fa 0/15 17 AS1(config-if-range)#switchport access vlan 10 AS1(config-if-range)#switchport mode access AS1(config)#interface range fa 0/18 19 AS1(config-if-range)#switchport access vlan 20 AS1(config-if-range)#switchport mode access AS1(config)#interface fa 0/20 AS1(config-if-range)#switchport access vlan 30 AS1(config-if-range)#switchport mode access AS2(config)#interface range fa 0/15 17 AS2(config-if-range)#switchport access vlan 10 AS(config-if-range)#switchport mode access AS2(config)#interface range fa 0/18 19 AS2(config-if-range)#switchport access vlan 20 AS2(config-if-range)#switchport mode access AS2(config)#interface fa 0/20 AS2(config-if-range)#switchport access vlan 30 AS2(config-if-range)#switchport mode access

Arbab Nazar

13. Create an 802.1q trunk link between R1 and AS2. Allow only VLANs 10 and 40 to pass through the trunk.
AS2(config)#interface fa 0/1 AS2(config-if)#switchport trunk encapsulation dot1q AS2(config-if)#switchport mode trunk AS2(config-if)#switchport trunk allowed vlan 10,40 R1(config)#interface fa 0/0 R1(config-if)#no sh R1(config)#interface fa 0/0.10 R1(config-subif)#encapsulation dot1Q 10 R1(config)#interface fa 0/0.40 R1(config-subif)#encapsulation dot1Q 40

14. Give R1 subinterfaces in VLANs 10 and 40.

R1(config)#interface fa 0/0.10 R1(config-subif)#ip address 172.16.10.1 255.255.255.0 R1(config)#interface fa 0/0.40 R1(config-subif)#ip address 172.16.40.1 255.255.255.0

15. Create an SVI interface on DS1 in VLANs 20, 30 and 40. Create an SVI interface on DS2 in VLAN 10, an SVI interface on AS1 in VLAN 30, and an SVI interface on AS2 in VLAN 40.
DS1(config)#interface vlan 20 DS1(config-if)#ip address 172.16.20.1 255.255.255.0 DS1(config-if)#no sh DS1(config)#interface vlan 30 DS1(config-if)#ip address 172.16.30.1 255.255.255.0 DS1(config-if)#no sh DS1(config)#interface vlan 40 DS1(config-if)#ip address 172.16.40.2 255.255.255.0 DS1(config-if)#no sh DS2(config)#interface vlan 10 DS2(config-if)#ip address 172.16.10.2 255.255.255.0 DS2(config-if)#no sh AS1(config)#interface vlan 30 AS1(config-if)#ip address 172.16.30.2 255.255.255.0 AS1(config-if)#no sh AS2(config)#interface vlan 40 AS2(config-if)#ip address 172.16.40.3 255.255.255.0 AS2(config-if)#no sh

Arbab Nazar

16. Enable IP routing on DS1. On R1 and DS1, configure EIGRP for the whole major network (172.16.0.0/16) and disable automatic summarization.
DS1(config)#ip routing DS1(config)#router eigrp 1 DS1(config-router)#no auto-summary DS1(config-router)#network 172.16.0.0 R1(config)#router eigrp 1 R1(config-router)#no auto-summary R1(config-router)#network 172.16.0.0

Arbab Nazar