===================================================================================

===========================
Lab 4.3: Add a Core Switch to the Topology
===================================================================================
===========================

===================
Access-1 and Access-2
===================

1. Disable the link between Access-1 and Access-2

T11-Access-1# configure terminal

T11-Access-1(config)# interface 1/1/28
T11-Access-1(config-if)# shutdown

T11-Access-2# configure terminal

T11-Access-2(config)# interface 1/1/28
T11-Access-2(config-if)# shutdown

===================
Access-1
===================

3. Allow VLAN 711 as a tagged member of port 1/1/21 and enable the interface.

T11-Access-1(config)# interface 1/1/21

T11-Access-1(config-if)# vlan trunk allowed 711
T11-Access-1(config-if)# no shutdown

4. Use the “show lldp neighbor-info” command, to validate the port Access-1 is
connected to.

T11-Access-1(config-if)# show lldp neighbor-info

5. Use the information in the output for drawing the connection and setting the
right ports numbers on figure 4.3-2.
Also set the proper description on port 1/1/21.
T11-Access-1(config-if)# description TO_CORE-1_PORT-10

6. Move back to Access-2 and repeat steps 3 to 5. Do not forget to draw the
connections in figure 4.3-2.

===================
Access-2
===================
T11-Access-2(config)# interface 1/1/21
T11-Access-2(config-if)# vlan trunk allowed 711
T11-Access-2(config-if)# no shutdown

T11-Access-2(config-if)# show lldp neighbor-info

T11-Access-2(config-if)# description TO_CORE-1_PORT-31
T11-Access-2(config-if)# end

===================
PC-1
===================
7. Access the PC-1.
8. Open Putty. You will find saved sessions to Core-1 and other three devices.
9. Double click Core-1 saved session.

===================
Core-1 (via PC-1)
===================

10. Login using cxf7/aruba123

Core-1# page 40
Core-1# show lldp neighbor-info | include T7

13. Create VLAN 711 and name it T7_EMPLOYEES.

******************************************************************
Core-1# configure terminal
Core-1(config)# vlan 711
Core-1(config-vlan-1111)# name T7_EMPLOYEES
Core-1(config-vlan-1111)# exit

14. Access port 1/1/10, then set the TO_T7-ACCESS-1_PORT-21 description and make
the interface switch port and a trunk interface member of VLAN 711.
******************************************************************
Core-1(config)# interface 1/1/Y
Core-1(config-if)# description TO_T7-ACCESS-1_PORT-21
Core-1(config-if)# vlan trunk allowed 711

15. Move to port 1/1/31, then repeat step 11 using TO_T7-ACCESS-2_PORT-21 as

description
******************************************************************

“Z” for the port number of the downlink that connects to Access-1 as recorded on
figure 4.3-2. Also replace the highlighted “7” for your student table number.

Core-1(config)# interface 1/1/31

Core-1(config-if)# description TO_T7-ACCESS-2_PORT-21
Core-1(config-if)# vlan trunk allowed 711
Core-1(config-if)# end

===================
PC-1
===================
16. From PC-1 ping PC-4 (10.7.11.104). Ping should be successful

===================
Core-1 (via PC-1)
===================

17. OPTIONAL - You can display the MAC address table to see what ports Core-1
learned the clients’ MAC addresses from, which are the ports it uses for forwarding
traffic to them at Layer 2.
***********************************************************************************
**

Core-1# show mac-address-table vlan 711

=======================================================
Task 2: Adding a Second VLAN
=======================================================

===================
Access-1
===================
1. Open a console connection to the Access-1. Login using admin and no password.

2. Create VLAN 712 and name it MANAGERS, then apply it on port 1/1/21.
NOTE: Replace the highlighted “7” for your student table number.

T11-Access-1# configure terminal

T11-Access-1(config)# vlan 712
T11-Access-1(config-vlan-1112)# name MANAGERS
T11-Access-1(config-vlan-1112)# exit
T11-Access-1(config)#
T11-Access-1(config)# interface 1/1/21
T11-Access-1(config-if)# vlan trunk allowed 712
T11-Access-1(config-if)# exit

3. Use the “show vlan” command to see the new added VLAN and the port members.
**********************************************************************************
T11-Access-1(config)# show vlan

===================
Access-2
===================
4. Open a console connection to the Access-2. Login using admin and no
password.
5. Repeat step 2.
T11-Access-2# configure terminal
T11-Access-2(config)# vlan 712
T11-Access-2(config-vlan-1112)# name MANAGERS
T11-Access-2(config-vlan-1112)# exit

T11-Access-2(config)# interface 1/1/21

T11-Access-2(config-if)# vlan trunk allowed 712
T11-Access-2(config-if)# exit

===================
Core-1 (via PC-1)
===================

6. Move back to Core-1 SSH session.

7. Create VLAN 712, name it T7_MANAGERS

************************************************************

Core-1# configure terminal

Core-1(config)# vlan 712
Core-1(config-vlan-1112)# name T7_MANAGERS
Core-1(config-vlan-1112)# exit

8. Apply VLAN 712 on port 1/1/10

************************************************************

Core-1(config)# interface 1/1/10

Core-1(config-if)# vlan trunk allowed 712
9. Repeat step 8 on interface 1/1/31
************************************************************
NOTE: Replace highlighted “Z” for the port number of the downlink that connects to
Access-2 as recorded on figure 4.3-2.

Core-1(config)# interface 1/1/31

Core-1(config-if)# vlan trunk allowed 712

10. Move to Access-1.

===================
Access-1
===================

11. Make interface 1/1/1 an access port on VLAN 712.

NOTE: Replace the highlighted “7” for your student table number.

T11-Access-1(config)# interface 1/1/1

T11-Access-1(config-if)# vlan access 712
T11-Access-1(config-if)#

12. Move to Access-2

===================
Access-2
===================

13. Make interface 1/1/4 an access port on VLAN 712.

T11-Access-2(config)# interface 1/1/4

T11-Access-2(config-if)# vlan access 712
T11-Access-2(config-if)#

You will now change the IP segment where PC-1 and PC-4 belong.

===================
PC-1
===================
14. Access PC-1 and change the “Lab NIC” IP address to 10.7.12.101/24

“Lab NIC”

10.7.12.101 255.255.255.0
ipconfig /all
===================
PC-4
===================
16. Access PC-4 and change the “Lab NIC” IP address to 10.7.12.104/24

“Lab NIC” IP 10.7.12.104 255.255.255.0

17. Ping PC-1 (10.7.12.101).

18. Ping PC-3 (10.7.11.103).

Figure 4.3-11: Ping unsuccessful.

ANSWER: Pinging PC-3 will fail because it is now in a different network.

19. Display the ARP Table using the “arp -a” command and look for the 10.7.12.101
entry.
arp -a

===================
Access-1
===================
20. Move to Access-1.

21. Display the MAC address table. You will see one entry associated with VLAN 711
and another with VLAN 712.

T11-Access-1# show mac-address-table

=======================================================
Task 3: Save Your Configurations
=======================================================

===================
Access-1, Access-2 and Core-1 (via PC-1)
===================

1. Save the current Access switches and Core-1 configuration in the startup
checkpoint.

T11-Access-1# write memory

T11-Access-2# write memory
Core-1# write memory

===================
Access-1 and Access-2
===================
2. Backup the current Access switches’ configuration as a custom checkpoint called
Lab4-3_final.

T11-Access-1# copy running-config checkpoint Lab4-3_final

T11-Access-2# copy running-config checkpoint Lab4-3_final

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!
You have completed Lab 4.3!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!