Tài liệu Lab Exercise 2 - Inter-VLAN Routing and Multi-layer Switching pdf

Date of Issue: 05-01-2001 Lab Exercise 2: Inter-VLAN Routing and Multi-layer Switching by Dan Farkas Introduction Equipment Initial Configuration Part 1: Inter-VLAN Routing Goals Task

Trang 1

Date of Issue: 05-01-2001

Lab Exercise 2: Inter-VLAN Routing and Multi-layer Switching

by Dan Farkas

Introduction

Equipment

Initial Configuration

Part 1: Inter-VLAN Routing

Goals

Task List

Solutions - Part 1

Answers

Configurations

Part 2: Multi-Layer Switching

Goals

Task List

Solutions - Part 2

Answers

Configurations

Introduction

This is the second lab exercise and should be attempted only after completing the first lab exercise This lab has two parts In the first part, a link is configured as an ISL trunk and then inter-VLAN routing is configured In the second part, Multi-layer Switching is configured and an access list is added

Equipment

l Two Catalyst 5xxx or 6xxx switches with Fast EtherChannel-capable line cards and Supervisor Engine III, FSX, or III FLX module Supervisor engine software Release 4.1(1) or later, NetFlow Feature Card (NFFC), or NFFC II

l Three PCs with NIC cards

l One Cisco 3620, 3640, 7500, 7200, 4500, or 4700 series router with Cisco IOS router software Release 11.3 (2)WA4(4) or later and a Fast Ethernet interface

Initial Configuration

Trang 2

VTP Domain: lab

VLAN 1 name: vlan1

VLAN 2 name: vlan2

VLAN 3 name : vlan3

Warning: We assume that Lab Exercise 1 has been completed If not go back and do it now.

Part 1: Inter-VLAN Routing

Goals

Reconfigure the link between the router and Switch A to be an ISL trunk Configure inter-VLAN routing on the router Test with pings Any device should be able to ping any other device

Task List

1 On the PCs

a Configure appropriate default gateways

2 On Switch A

a Configure the link that connects to the router with the set trunk on command.

b Use the set ip route default command to set up a default gateway.

3 On Switch B

a Use the set ip route default command to set up a default gateway

4 On the router

a Remove the interface configuration from lab exercise 1

b Configure and address a sub-interface for each VLAN

Device IP Addresses

Switch A 10.1.1.1/24 Switch B 10.1.1.2/24 PC-1 10.2.1.1/24 PC-2 10.2.1.2/24 PC-3 10.3.1.2/24

Router

VLAN 1 - 10.1.1.254/24 VLAN 2 - 10.2.1.1.254/24 VLAN 3 - 10.3.1.1.254/24

Trang 3

5 Ping between devices Do intra-VLAN pings work? Do inter-VLAN pings work? If any pings fail, something is not right in your configuration

Solutions - Part 1

Answers

5) All pings should work.

Configurations

{Note: x/y represents slot and port numbers On the router, 0/0 should be the actual slot and port numbers.}

SwitchA(enable)set ip default route 10.1.1.254

SwitchA(enable)set trunk x/y on

SwitchB(enable)set ip default route 10.1.1.254

Router(config)#int fa0/0

Router(config-if)#no ip address

Router(config-if)#int fa 0/0.1

Router(config-subif)#ip address 10.1.1.254 255.255.255.0

Router(config-subif)#encapsulation isl 1

Router(config-subif)#int fa 0/0.2

Part 2: Multi-Layer Switching

Goals

Configure Multi-layer Switching on the router, Switch A, and Switch B Ping between PC-2 and PC-3 Use show commands to verify MLS operations Add an access list to the router Verify a change in flow masks with show

commands

Task List

1 On Switch A and Switch B

a Use the set mls enable and set mls include commands to configure MLS.

2 On the router

a Use the mls rp ip, mls rp vtp-domain, and mls rp ip management-interface commands to configure

MLS Make the VLAN 1 interface the management interface

3 Ping between devices Do intra-VLAN pings still work? Do inter-VLAN pings still work? If any pings fail,

something is not right in your configuration

4 Wait 256 seconds for all flows to age out of the MLS cache on the switch

5 Start a continuous stream of pings between PC-2 and PC-3

a Use the show mls rp command on the router and the show mls entry command on Switch B to verify

MLS operation Note the cache entries on the switch

Trang 4

6 Stop the pings.

7 On the router

a Create Access List 101 with the command access-list 101 permit ip any any.

b Apply it to all sub-interfaces as an outbound access list

c Use the show mls rp command on the router and the show mls entry command on Switch B to verify

MLS operation Note the cache entries on the switch Notice any differences?

8 Start a continuous stream of pings between PC-2 and PC-3

a Use the show mls rp command on the router and the show mls entry command on Switch B to verify

MLS operation Note the cache entries on the switch Notice any differences?

Solutions - Part 2

Answers

3) Yes, all pings should still work

5a) The show mls rp should show you that:

• mls is globally enabled

• the vtp-domain is lab

• the flow mask is destination-ip

The show mls entry should show flows from 10.2.1.2 to 10.3.1.2 and from 10.3.1.2 to 10.2.1.2

7c) The show mls rp should show you that the flow mask is source-destination-ip.

The show mls entry should show that the cache is empty because the access-list was applied and created MLSP

purge messages

8a) The show mls entry should show flows from 10.2.1.2 to 10.3.1.2 and from 10.3.1.2 to 10.2.1.2

Configurations

SwitchA(enable)set mls enable

SwitchA(enable)set mls include 10.1.1.254

SwitchB(enable)set mls enable

SwitchB(enable)set mls include 10.1.1.254

Router(config)#mls rp ip

Router(config)#int fa 0/0.1

Router(config-subif)#mls rp vtp-domain lab

Router(config-subif)#mls rp ip

Router(config-subif)#mls rp ip management-interface

Router(config-subif)#exit

Router(config)#access-list 101 permit ip any any

Router(config)#int fa 0/0.1

Trang 5

Router(config-subif)#ip access-group 101

[IE-LANS2-LS2-F04]

[2001-04-20-02]

Tiêu đề	Inter-VLAN Routing and Multi-layer Switching
Tác giả	Dan Farkas
Chuyên ngành	Networking
Thể loại	Lab exercise
Năm xuất bản	2001

Định dạng
Số trang	5
Dung lượng	45,46 KB