[VTP] Một bài tập nhỏ !!!

[tranmyphuc]

Chào các bạn ,
Những bài tập nhỏ nhằm mục đích phục vụ cho những ai vừa học xong VTP có thể cũng cố kiến thức. Bài Lab chưa ra 2 phần :
A) Background : ôn lại kiến thức về VTP
B) Bài lab: hướng dẫn cách cấu hình và nêu ra các câu hỏi ôn tập

Mặc dù, chỉ là bài Lab đơn giản nhưng mình nghĩ sẽ có nhiều vấn đề cần phải thảo luận chung quanh nó. Các bạn hãy tự làm và post đáp án để mọi người cùng thảo luận sẽ hiểu bài nhanh hơn.
Việc để nguyên tác là nhằm giúp cho các bạn có thể trả lời những câu hỏi phỏng vấn bằng tiếng Anh , liên quan đến vấn đề này !!!

Chúc các bạn vui !!!
================================================== =================
LAB Exercise on

Trunking with 802.1q VTP Client and Server Configurations

Apparatus:


Objective

• Create a basic switch configuration and verify it.
• Create multiple VLANs, name them and assign multiple member ports to them.
• Create an 802.1q trunk line between the two switches to allow communication between paired VLANs.
• Test the VLANs functionality by moving a workstation from one VLAN to another.
• Create a basic switch configuration and verify it.
• Create multiple VLANs, name them and assign multiple member ports to them.
• Configure the VTP protocol to establish Server and client switches.
• Create an 802.1q trunk line between the two switches to allow communication between paired VLANs.
• Then test the VLANs functionality by moving a workstation from one VLAN to another.

Section A: Background

Trunking
A TRUNK is a point-to-point link configured on a single Fast-Ethernet, Gigabit Ethernet, or Fast- or Gigabit EtherChannel bundle and another network device, such as a router or second switch. Trunks transport the packets of multiple VLANs over a single network link.
Trunk links are most beneficial when switches are connected to other switches or switches are connected to routers. As VLANs are added to a network, the number of links can quickly grow. An efficient use of physical interfaces and cabling involves the use of trunking.



In the figure above, the right half of the figure shows how one trunk link can replace many individual VLAN links. A trunk link can be associated with a native VLAN, which is used if the trunk link fails for some reason. To distinguish between traffic belonging to different VLANs on a trunk link, the switch must have a method of identifying each frame with the appropriate VLAN. VLAN frame identification was developed for switched networks. As each frame is transmitted over a trunk link, a unique identifier is placed in the frame header. As each switch along the way receives these frames, the identifier is examined to determine to which VLAN the frames belong. These methods are described in the following. Inter-Switch Link (ISL) - a Cisco-proprietary trunking encapsulation that adds a 26-byte header and 4-byte trailer to the frame. IEEE 802.1Q (dot1q)- an industry-standard trunking encapsulation that does not change the size of the frame. Because multiple vendors support dot1q, it is becoming more common in newer switched networks. Negotiate - The port negotiates with its neighbor port to mirror its encapsulation configuration, either ISL (preferred) or 802.1Q trunk.

VLAN Trunk Protocol (VTP)

In a switched environment a subnet corresponds to a VLAN, and a VLAN may map to a single Layer 2 switch, or it may span several switches, especially at the access layer. Also, it is likely that one or more VLANs may be present on any particular switch. VLAN Trunk Protocol (VTP) is a layer-2 messaging protocol that centralizes the management of VLAN additions, deletions and changes on a network-wide basis. This simplifies the management of large switched networks with many VLANs. A VTP domain is specified by the Network Engineer and consists of one or more interconnected switches that share the same VLAN configuration. A switch can only be configured as a member of a single VTP domain. Changes to the global VLAN configuration for the domain can be implemented using either the CLI or an SNMP session. Switches defined as part of VTP domains can be configured to operate in any of three VTP modes:
Server – Advertise VLAN configuration to other switches in the same VTP domain and synchronize with other switches in the domain. Can create, modify, and delete VLANs as well as modify VLAN configuration parameters such as VTP version and VTP pruning for the entire domain. This is the default mode for a switch.

Client - Advertise VLAN configuration to other switches in the same VTP domain and synchronize their VLAN configuration with other switches based on advertisements received over trunk links; however, they are unable to create, change, or delete VLAN configurations.

Transparent - Does not advertise its VLAN configuration and does not synchronize its VLAN configuration with other switches. In VTP version 2, transparent switches do forward VTP advertisements. Advertisement types include: requests from clients, summary advertisements and subset advertisements. An advertisement contains the VLAN IDs, the Emulated LAN names for ATM LANE, the 802.10 SAID values for FDDI, the VTP domain name, the VTP configuration revision number, the MTU size and the Frame format. VTP advertisements carry configuration revision numbers that are incremented everytime a VLAN is modified. This is used to identify the most recent changes to the network topology. When a switch finds an advertisement with a higher configuration revision number, it will save the new VTP database over the old one. A VLAN that does not exist in the new database is automatically deleted from the switch, and any ports that were in the VLAN will be orphaned. VTP pruning is a technique to limit VTP broadcast from branches of the network that do not contain member ports of a specific VLAN. By default, VTP pruning is disabled. VTP pruning must be enabled on a VTP server and promulgates pruning eligibility through the entire management domain. By default, VLAN 1 is always pruning-ineligible, and VLANs 2 through 1000 are pruning-eligible.

Hết phần 1

[tranmyphuc]

SECTION B: Procedures




Step 1 Configure the switch
Configure the Hostname, access and command mode passwords, as well as the management LAN settings. These values are shown in the chart. Do not configure VLANs and trunking yet. Switch1(config)#line con 0
Switch1(config-line)#password cisco
Switch1(config-line)#login
Switch1(config-line)#line vty 0 15
Switch1(config-line)#password cisco
Switch1(config-line)#login

Switch1(config)#enable password cisco

Switch1(config)#interface VLAN 1
Switch1(config-if)#ip address 192.168.1.2 255.255.255.0


Step 2 Configure the hosts attached to the switch
Configure the host to use the same subnet for the address, mask, and default gateway as on the switch.

Step 3 Verify connectivity
a. To verify that the host and switch are correctly configured, ping the switch from the hosts. b. Were the pings successful? __________________________________________________ c. If the answer is no, troubleshoot the host and switches configurations.

Step 4 Display the VLAN interface information
On Switch_A, type the command show vlan at the privileged EXEC prompt as follows: Switch_A#show vlan
Step 5 Create and name three VLANs
Enter the following commands to create and name three VLANs: Switch_A#vlan database
Switch_A(vlan)#vlan 10 name Accounting
Switch_A(vlan)#vlan 20 name Marketing
Switch_A(vlan)#vlan 30 name Engineering
Switch_A(vlan)#exit

Step 6 Assign ports to a VLAN 10
Assigning ports to VLANs must be done from the interface mode. Enter the following commands to add ports 0/4 to 0/6 to VLAN 10: Switch_A#configure terminal
Switch_A(config)#interface fastethernet 0/4
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 10
Switch_A(config-if)#interface fastethernet 0/5
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 10
Switch_A(config-if)#interface fastethernet 0/6
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 10
Switch_A(config-if)#end

Step 7 Assign ports to VLAN 20
Switch_A#configure terminal
Switch_A(config)#interface fastethernet 0/7
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 20
Switch_A(config-if)#interface fastethernet 0/8
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 20
Switch_A(config-if)#interface fastethernet 0/9
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 20
Switch_A(config-if)#end

Step 8 Assign ports to VLAN 30
Enter the following commands to add ports 0/7 to 0/9 to VLAN 20: Switch_A#configure terminal
Switch_A(config)#interface fastethernet 0/10
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 30
Switch_A(config-if)#interface fastethernet 0/11
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 30
Switch_A(config-if)#interface fastethernet 0/12
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 30
Switch_A(config-if)#end

Step 9 Create VLANs on Switch_B
Repeat Steps 1 through 8 o n Switch_B to create its VLANs

Step 10 Display the VLAN interface information
a. On both switches, type the command show vlan at the privileged EXEC prompt as follows: Switch_A#show vlan
b. Are ports 0/10 through 0/12 assigned to VLAN 30? __________________________________________________ ___________________

Step 11 Test the VLANs
Ping from the host in Switch_A port 0/12 to the host in Switch_B port 0/12. a. Was the ping successful? __________________________________________________ _ b. Why? __________________________________________________ ________________ Ping from the host in Switch_A port 0/12 to the switch IP 192.168.1.2. c. Was the ping successful? __________________________________________________ _ d. Why? __________________________________________________ ________________

Step 12 Create the trunk
On both switches, Switch_A and Switch_B, type the following command at the fastethernet 0/1 interface command prompt. Note that it is not necessary to specify the encapsulation on a 2950, since it only supports 802.1Q. Switch_A(config)#interface fastethernet 0/1
Switch_A(config-if)#switchport mode trunk
Switch_A(config-if)#end
Switch_B(config)#interface fastethernet 0/1
Switch_B(config-if)#switchport mode trunk
Switch_B(config-if)#end

Step 13 Verify the trunk

a. To verify that port Fast Ethernet 0/1 has been established as a trunk port, type show
interface fastethernet 0/1 switchport at the privileged EXEC mode prompt. b. What type of trunking encapsulation is shown on the output results? __________________________________________________ ___________________ c. According to the output with show interface fastethernet 0/1 switchport on Switch_B, is there a difference from the Administrative Trunking Encapsulation from the Operational Trunking Encapsulation? __________________________________________________ ___________________ d. On the fragment “Trunking VLANs Enable” from the output, what does the word “ALL” mean? __________________________________________________ ___________________ e. Which encapsulation options in your Switch? __________________________________________________ _________________ f. What would happen if the two ports of the trunk were using different encapsulation? __________________________________________________ _______________

Step 14 Test the VLANS and the trunk
Ping from the host in Switch_A port 0/12 to the host in Switch_B port 0/12. a. Was the ping successful? __________________________________________________ _ b. Why? __________________________________________________ ________________ Ping from the host in Switch A port 0/12 to the switch IP 192.168.1.2. c. Was the ping successful? __________________________________________________ _ d. Why? __________________________________________________ ________________


Verify connectivity
a. To verify that the host and switch are correctly configured, ping the switch from the hosts by moving host to a new location. How? __________________________________________________ b. Were the pings successful? __________________________________________________ c. If the answer is no, troubleshoot the host and switches configurations. Erase Config and delete vlan.dat in switch B and remove the trunk line

Step 15 Configure VTP
a. VLAN Trunking Protocol (VTP) needs to be configured on both switches. VTP is the protocol that
will communicate information about which VLANs exist from one switch to another. If VTP did
not provide this information, VLANs would have to be created on all switches individually.
b. By default, the Catalyst switch series are configured as VTP servers. In the event that the sever services are turned off, use the following command to turn it back on.
Switch_A#vlan database
Switch_A(vlan)#vtp server
Switch_A(vlan)#vtp domain group1
Switch_A(vlan)#exit

Step 16 Create and name three VLANs
Enter the following commands to create and name three VLANs:
Switch_A#vlan database
Switch_A(vlan)#vlan 10 name Accounting
Switch_A(vlan)#vlan 20 name Marketing
Switch_A(vlan)#vlan 30 name Engineering
Switch_A(vlan)#exit

Step 17 Assign ports to VLAN 10
Assigning ports to VLANs must be done from the interface mode. Enter the following commands to
add ports 0/4 to 0/6 to VLAN 10:
Switch_A#configure terminal
Switch_A(config)#interface fastethernet 0/4
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 10
Switch_A(config-if)#interface fastethernet 0/5
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 10
Switch_A(config-if)#interface fastethernet 0/6
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 10
Switch_A(config-if)#end

Step 18 Assign ports to VLAN 20
Enter the following commands to add ports 0/7 to 0/9 to VLAN 20:
Switch_A#configure terminal
Switch_A(config)#interface fastethernet 0/7
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 20
Switch_A(config-if)#interface fastethernet 0/8
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 20
Switch_A(config-if)#interface fastethernet 0/9
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 20
Switch_A(config-if)#end

Step 19 Assign ports to VLAN 30
Enter the following commands to add ports 0/10 to 0/12 to VLAN 30:
Switch_A#configure terminal
Switch_A(config)#interface fastethernet 0/10
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 30
Switch_A(config-if)#interface fastethernet 0/11
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 30
Switch_A(config-if)#interface fastethernet 0/12
Switch_A(config-if)#switchport mode access
Switch_A(config-if)#switchport access vlan 30
Switch_A(config-if)#end

Step 20 Display the VLAN interface information
a. On Switch_A, type the command show vlan at the privileged EXEC prompt as follows:
Switch_A#show vlan
b. Are ports 0/10 through 0/12 assigned to VLAN 30?
__________________________________________________ ___________________
Step 21 Configure VTP client
Enter the following commands to configure Switch_B to be a VTP client:
Switch_B#vlan database
Switch_B(vlan)#vtp client
Switch_B(vlan)#vtp domain group1
Switch_B(vlan)#exit

Step 22 Create the trunk
On both switches, Switch_A and Switch_B, type the following command at the fastethernet 0/1 interface command prompt. Note that it is not necessary to specify the encapsulation on a 2950, since it only supports 802.1Q.
Switch_A(config)#interface fastethernet 0/1
Switch_A(config-if)#switchport mode trunk
Switch_A(config-if)#end
Switch_B(config)#interface fastethernet 0/1
Switch_B(config-if)#switchport mode trunk
Switch_B(config-if)#end

Insert the trunk line again

Step 23 Verify the trunk
a. To verify that port fastethernet 0/1 has been established as a trunk port, type show interface
fastethernet 0/1 switchport at the privileged EXEC mode prompt
b. What type of trunking encapsulation is shown on the output results? ____________________

Step 24 Display the VLAN interface information
a. On Switch_A, type the command show vlan at the privileged EXEC prompt as follows:
Switch_B #show vlan
b. Do VLANs 10, 20, and 30 show without having to type them in? ____________________
c. Why did this happen? __________________________________________________ ____

Step 25 Assign ports to a VLAN 10
Although the VLAN definitions have migrated to Switch_B using VTP, it is still necessary to assign
ports to these VLANs on Switch_B. Assigning ports to VLANs must be done from the interface mode.
Enter the following commands to add ports 0/4 to 0/6 to VLAN 10.
Switch_B#configure terminal
Switch_B(config)#interface fastethernet 0/4
Switch_B(config-if)#switchport mode access
Switch_B(config-if)#switchport access vlan 10
Switch_B(config-if)#interface fastethernet 0/5
Switch_B(config-if)#switchport mode access
Switch_B(config-if)#switchport access vlan 10
Switch_B(config-if)#interface fastethernet 0/6
Switch_B(config-if)#switchport mode access
Switch_B(config-if)#switchport access vlan 10
Switch_B(config-if)#end

Step 26 Assign ports to VLAN 20
Enter the following commands to add ports 0/7 to 0/9 to VLAN 20:
Switch_B#configure terminal
Switch_B(config)#interface fastethernet 0/7
Switch_B(config-if)#switchport mode access
Switch_B(config-if)#switchport access vlan 20
Switch_B(config-if)#interface fastethernet 0/8
Switch_B(config-if)#switchport mode access
Switch_B(config-if)#switchport access vlan 20
Switch_B(config-if)#interface fastethernet 0/9
Switch_B(config-if)#switchport mode access
Switch_B(config-if)#switchport access vlan 20
Switch_B(config-if)#end

Step 27 Assign ports to VLAN 30
Enter the following commands to add ports 0/10 to 0/12 to VLAN 30:
Switch_B#configure terminal
Switch_B(config)#interface fastethernet 0/10
Switch_B(config-if)#switchport mode access
Switch_B(config-if)#switchport access vlan 30
Switch_B(config-if)#interface fastethernet 0/11
Switch_B(config-if)#switchport mode access
Switch_B(config-if)#switchport access vlan 30
Switch_B(config-if)#interface fastethernet 0/12
Switch_B(config-if)#switchport mode access
Switch_B(config-if)#switchport access vlan 30
Switch_B(config-if)#end

Step 28 Display the VLAN interface information
a. On Switch_B, type the command show vlan at the privileged EXEC prompt as follows:
Switch_A#show vlan
b. Are ports 0/10 through 0/12 assigned to VLAN 30? _________________________________
Step 29 Test the VLANS and the trunk
Ping from the host in Switch_A port 0/12 to the host in Switch_B port 0/12.
a. Was the ping successful? __________________________________________________ _
b. Why? __________________________________________________ ________________
Ping from the host in Switch_A port 0/12 to the switch IP 192.168.1.2.
c. Was the ping successful? __________________________________________________ _
d. Why? __________________________________________________ ________________

Step 30 Advertise the VLAN config to other switches in the same VTP domain
Write down the version number and revision number by typing ‘#show VTP Status’ in both switches.
__________________________________________________ ________________

Add VLAN 40 to Switch A. Can you see VLAN 40 in switch B? Why?
__________________________________________________ ________________

__________________________________________________ ________________
Write down the version number and revision number by typing ‘#show VTP Status’ in both switches.
__________________________________________________ ________________

__________________________________________________ ________________

(Hết)

Chúc các bạn vui !!!