UNIVERSIDAD DE CARTAGENA GUIA DE LABORATORIOS

ASIGNATURA: SEMINARIO DE GRADO SEMANA:

DOCENTE: MARCO ANTONIO SOTO BERROCAL SESIÓN:
NUCLEO TEMATICO: SWITCHING - SEGURIDAD EN REDES
TEMA O SUBTEMA: VTP (VLAN TRUNKING PROTOCOL)
OBJETIVOS:
• Crear y verificar una configuración básica de switch.
• Crear varias VLAN, otorgarles un nombre y asignarles múltiples puertos miembros.
• Crear dos líneas de enlaces troncales entre los tres switches para permitir la comunicación
entre
• VLAN apareadas.
• Configurar el protocolo VTP y observar su funcionalidad
• Probar la funcionalidad de las VLAN desplazando una estación de trabajo de una VLAN a
otra.

CONDUCTA DE ENTRADA:
• VTP se creó para solucionar los posibles problemas de funcionamiento en un entorno de
red conmutada de VLAN.
• El papel de VTP es mantener la coherencia de la configuración VLAN a lo largo de un
dominio de administración común
• VTP es un protocolo de mensajería que utiliza las tramas troncales de la capa 2 para
administrar la adición, eliminación y renombrado de VLAN en un solo dominio.
• VTP permite cambios centralizados que se comunican a todos los switches de la red

INTRODUCCIÓN:
• Antes de crear VLAN en el switch, primero debe configurar un dominio de
administración VTP en el que pueda comprobar las VLAN que actualmente hay en la
red.
• Un dominio VTP se compone de uno o más dispositivos interconectados que comparten el
mismo nombre de dominio VTP.
• Todos los switches del mismo dominio de administración comparten su información VLAN
entre sí.
• Un switch debe pertenecer solo a un dominio VTP
• Los switches VTP funcionan en uno de estos tres modos:
• Servidor
• Cliente
• Transparente

MATERIALES A UTILIZAR

COMPUTADOR PERSONAL, SOFTWARE SIMULADOR DE REDES

PROCEDIMIENTOS
1. The 2600A Fastethernet 0/0 interface IP address will be 192.168.100.1/24. We will start by
configuring the 2600A Router in the network.

Router>enable
Router#config t
Router(config)#hostname 2600A
2600A(config)#enable secret todd
2600A(config)#line console 0
2600A(config-line)# password todd
2600A(config-line)#login
2600A(config-line)#line aux 0
2600A(config-line)#password todd
2600A(config-line)#login
2600A(config-line)#line vty 0 4
2600A(config-line)#password todd
2600A(config-line)#login
2600A(config-line)#interface fastethernet 0/0
2600A(config-if)#ip address 192.168.100.1 255.255.255.0
2600A(config-if)#description connection to LAN 100
2600A(config-if)#no shutdown
2600A(config-if)#exit
2600A(config)#banner motd #
This is the 2600A router
#
2600A(config)#exit
2600A#copy run start
2600A#

2. Connect into 2950A switch and set the hostname, passwords, interface descriptions, IP
address, subnet mask and default-gateway information. The IP address of the switch will be
192.168.100.2 /24, with a default gateway of 192.168.100.1. When the configuration is
complete, verify the configuration by pinging the default gateway.

Switch>enable
Switch#config t
Switch(config)#hostname 2950A
2950A(config)#enable password todd
2950A(config)#enable secret routersim
2905A(config)#line console 0
2950A(config-line)#password console
2950A(config-line)#login
2950A(config-line)#line vty 0 15
2950A(config-line)#password todd
2950A(config-line)#login
2950A(config-line)#exit
2950A(config)#ip default-gateway 192.168.100.1
2950A(config)#interface VLAN 1
2950A(config-if)#ip address 192.168.100.2 255.255.255.0
2950A(config-if)#interface fastethernet 0/10
2950A(config-if)#description Trunk Link to 2600A
2950A(config-if)#switchport mode trunk
2950A(config-if)#speed 100
2950A(config-if)#duplex full
2950A(config-if)#interface fastethernet 0/11
2950A(config-if)#description Link to 2950B
2950A(config-if)#switchport mode trunk
2950A(config-if)#speed 100
2950A(config-if)#duplex full
2950A(config-if)#interface fastethernet 0/12
2950A(config-if)#description Trunk Link to 2950C
2950A(config-if)#switchport mode trunk
2950A(config-if)#speed 100
2950A(config-if)#duplex full
2950A(config-if)#exit
2950A(config)#exit
2950A#ping 192.168.100.1

3. Create a VTP domain of routersim and leave the 2950 switch as a VTP server.

2950A#config t
2950A(config)#vtp domain routersim
4. Connect to the 2950B switch and set the hostname, passwords, interface descriptions, IP
address, subnet mask and default-gateway information. The IP address of the switch will be
192.168.100.3/24, with a default gateway of 192.168.100.1. When the configuration is
complete, verify the configuration by pinging the default gateway.

Switch>enable
Switch#config t
Switch(config)#hostname 2950B
2950B(config)#enable password todd
2950B(config)#enable secret routersim
2950B(config)#line console 0
2950B(config-line)#password console
2950B(config-line)#login
2950B(config-line)#line vty 0 15
2950B(config-line)#password todd
2950B(config-line)#login
2950B(config-line)#exit
2950B(config)#ip default-gateway 192.168.100.1
2950B(config)#interface vlan1
2950B(config-if)#ip address 192.168.100.3 255.255.255.0
2950B(config-if)#interface fastethernet 0/11
2950B(config-if)#description Trunk Link to 2950A
2950B(config-if)#switchport mode trunk
2950B(config-if)#speed 100
2950B(config-if)#duplex full
2950B(config-if)#interface fastethernet 0/12
2950B(config-if)#description Trunk Link to 2950C
2950B(config-if)#switchport mode trunk
2950B(config-if)#speed 100
2950B(config-if)#duplex full
2950B(config-if)#exit
2950B(config)#exit
2950B#ping 192.168.100.1

5. Configure the 2950B switch to be a member of the VTP domain routersim and configure the
2950B switch as a VTP client.

2950B#config t
2950B(config)#vtp domain routersim
2950B(config)#vtp mode client

6. Connect to the 2950B switch and set the hostname, passwords, interface descriptions, IP
address, subnet mask and default-gateway information. The IP address of the switch will be
192.168.100.4/24, with a default gateway of 192.168.100.1. When the configuration is
complete, verify the configuration by pinging the default gateway.

Switch>enable
Switch#config t
Switch(config)#hostname 2950C
2950C(config)#enable password todd
2950C(config)#enable secret routersim
2950C(config)#line console 0
2950C(config-line)#password console
2950C(config-line)#login
2950C(config-line)#line vty 0 15
2950C(config-line)#password todd
2950C(config-line)#login
2950C(config-line)#exit
2950C(config)#ip default-gateway 192.168.100.1
2950C(config)#interface vlan1
2950C(config-if)#ip address 192.168.100.4 255.255.255.0
2950C(config-if)#interface fastethernet 0/11
2950C(config-if)#description Trunk Link to 2950B
2950C(config-if)#switchport mode trunk
2950C(config-if)#speed 100
2950C(config-if)#duplex full
2950C(config-if)#interface fastethernet 0/12
2950C(config-if)#description Trunk Link to 2950A
2950C(config-if)#switchport mode trunk
2950C(config-if)#speed 100
2950C(config-if)#duplex full
2950C(config-if)#exit
 2950C(config)#exit
2950C#ping 192.168.100.1

7. Configure the 2950C switch to be a member of the VTP domain routersim and configure the
2950C switch as a VTP client.

2950C#config t
2950C(config)#vtp domain routersim
2950C(config)#vtp mode client

8. Create three VLANs on 2950A switch called Sales, Marketing, Finance.

2950A#vlan database
2950A(vlan)#vlan 2 name Sales
2950A(vlan)#vlan 3 name Marketing
2950A(vlan)#vlan 4 name Finance
Notice we created the three VLANs using 2, 3 and 4. VLAN 1 is configured by default on all
switches and cannot be changed or deleted.

9. Go to the 2950B switch and type in show VLAN to verify the VLAN information was propagated
with VTP.
2950B#show vlan

You should see four VLANs, 1-4, that were propagated via VTP from the 2950A switch.

10. Go to the 2950C switch and type in show VLAN to verify the VLAN information was propagated
with VTP.

2950C#show vlan

You should see four VLANs, 1-4, that were propagated via VTP from the 2950A switch.
11. HostA, HostD and HostG will be in VLAN 2, Sales, which has a subnet address of
192.168.100.0/24. HostA will be 192.168.100.5, HostD will be 192.168.100.8 and HostG will be
192.168.100.11. The default gateway will be 192.168.100.1.

Connect to the 2950A switch and make port f0/1 a member of VLAN 2.

2950A#config t
2950A(config)#interface fastethernet 0/1
2950A(config-if)#switchport access vlan 2
2950A(config-if)#switchport mode access

Connect to the 2950B switch and make port f0/1 a member of VLAN 2.

2950B#config t
2950B(config)#interface fastethernet 0/1
2950B(config-if)#switchport access vlan 2
2950B(config-if)#switchport mode access

Connect to the 2950C switch and make port f0/1 a member of VLAN 2.

2950C#config t
2950C(config)#interface fastethernet 0/1
2950C(config-if)#switchport access vlan 2
2950C(config-if)#switchport mode access

12. Verify you have set up the VLANs correctly by pinging from HostA to HostD. Also ping from
HostA to HostG

>ping 192.168.100.8
>ping 192.168.100.11

Once you can ping, you know you have configured at least one VLAN correctly. At this time,
HostA, HostD and HostG cannot ping anything else in the network except each other.

13. HostB, HostE and HostH will be in VLAN 3, Marketing, which has a subnet address of
192.168.100.0/24. HostB will be 192.168.100.6, HostE will be 192.168.100.9 and HostH will be
192.168.100.12. The default gateway will be 192.168.100.1.
 Connect to the 2950A switch and make port f0/2 a member of VLAN 3.

2950A#config t
2950A(config)#interface fastethernet 0/2
2950A(config-if)#switchport access vlan 3
2950A(config-if)#switchport mode access

Connect to the 2950B switch and make port f0/2 a member of VLAN 3.

2950B#config t
2950B(config)#interface fastethernet 0/2
2950B(config-if)#switchport access vlan 3
2950B(config-if)#switchport mode access

Connect to the 2950C switch and make port f0/2 a member of VLAN 3.

2950C#config t
2950C(config)#interface fastethernet 0/2
2950C(config-if)#switchport access vlan 3
2950C(config-if)#switchport mode access

14. Verify that you can ping HostE from HostB. Also ping HostH from HostB.

>ping 192.168.100.9
>ping 192.168.100.12

15. HostC, HostF and HostI will be in VLAN 4, Finance, which has a subnet address of
192.168.100.0/24. HostC will be 192.168.100.7, HostF will be 192.168.100.10 and HostI will be
192.168.100.13. The default gateway will be 192.168.100.1.

Connect to the 2950A switch and make port f0/3 a member of VLAN 4.

2950A#config t
2950A(config)#interface fastethernet 0/3
2950A(config-if)#switchport access vlan 4
2950A(config-if)#switchport mode access

Connect to the 2950B switch and make port f0/3 a member of VLAN 4.

2950B#config t
2950B(config)#interface fastethernet 0/3
2950B(config-if)#switchport access vlan 4
2950B(config-if)#switchport mode access

Connect to the 2950C switch and make port f0/3 a member of VLAN 4.

2950C#config t
2950C(config)#interface fastethernet 0/3
2950C(config-if)#switchport access vlan 4
2950C(config-if)#switchport mode access

16. Verify that you can ping HostF from HostC. Also ping HostI from HostC.

>ping 192.168.100.10
>ping 192.168.100.13

ANOTACIONES U OBSERVACIONES:

EVALUACIÓN:

Trabajo en tiempo independiente