SWITCH CAPA 2

SW_CORE
Switch>enable
Switch#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#
Asignando nombre al switch
Switch(config)#hostname SW_CORE
SW_CORE(config)#
Asignando VTP domain (nombre de dominio VTP) con nombre Empresa
SW_CORE(config)#vtp domain Empresa
Changing VTP domain name from NULL to Empresa
Activando modo server
SW_CORE(config)#vtp mode server
Device mode already VTP SERVER.
Revisando la configuracin VTP
SW_CORE(config)#do show vtp status
VTP Version
:2
Configuration Revision
:0
Maximum VLANs supported locally : 255
Number of existing VLANs
:5
VTP Operating Mode
: Server
VTP Domain Name
: Empresa
VTP Pruning Mode
: Disabled
VTP V2 Mode
: Disabled
VTP Traps Generation
: Disabled
MD5 digest
: 0x2E 0x9D 0x33 0x24 0x80 0x5E 0xB3 0xBA
Configuration last modified by 0.0.0.0 at 0-0-00 00:00:00
Local updater ID is 0.0.0.0 (no valid interface found)
Creando VLANs (10,20,30,40,99)
SW_CORE(config)#vlan 10
SW_CORE(config-vlan)#name
SW_CORE(config-vlan)#exit
SW_CORE(config)#vlan 20
SW_CORE(config-vlan)#name
SW_CORE(config-vlan)#exit
SW_CORE(config)#vlan 30
SW_CORE(config-vlan)#name
SW_CORE(config-vlan)#exit
SW_CORE(config)#vlan 40
SW_CORE(config-vlan)#name

COMPRAS

VENTAS

CONTABILIDAD

GERENCIA

SW_CORE(config-vlan)#exit
SW_CORE(config)#vlan 99
SW_CORE(config-vlan)#name ADMIN
SW_CORE(config-vlan)#exit
Verificando la creacin de VLANs
SW_CORE(config)#do show vlan
VLAN Name
Status Ports
---- -------------------------------- --------- ------------------------------1 default
active Fa0/1, Fa0/2, Fa0/3, Fa0/4
Fa0/5, Fa0/6, Fa0/7, Fa0/8
Fa0/9, Fa0/10, Fa0/11, Fa0/12
Fa0/13, Fa0/14, Fa0/15, Fa0/16
Fa0/17, Fa0/18, Fa0/19, Fa0/20
Fa0/21, Fa0/22, Fa0/23, Fa0/24
Gig1/1, Gig1/2
10 COMPRAS
active
20 VENTAS
active
30 CONTABILIDAD
active
40 GERENCIA
active
99 ADMIN
active
1002 fddi-default
act/unsup
1003 token-ring-default
act/unsup
1004 fddinet-default
act/unsup
1005 trnet-default
act/unsup
Creamos las troncales por cada interfaz FA para que la configuracin del switch core viaje
a sus dependientes
SW_CORE(config)#int fa0/1
SW_CORE(config-if)#switchport mode access
SW_CORE(config-if)#switchport mode trunk
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed
state to down
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed
state to up

Ahora, el switch que est debajo de la interfaz FA0/1 del SW_CORE (Switch0) podr
ver las VLANs creadas con do show vlan:

Como an no me hemos configurado la interfaz FA0/2 del SW_CORE (Switch1) este

an NO podr ver las VLANs creadas con do show vlan:

Terminamos de activar la troncal para la interfaz FA0/2 del SW_CORE

SW_CORE(config)#int fa0/2
SW_CORE(config-if)#switchport mode access
SW_CORE(config-if)#switchport mode trunk
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed
state to down
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed
state to up

Verificamos la configuracin de la troncal en cada interfaz (Falta permitir las VLANs

creadas):
SW_CORE(config)#do show interface trunk
Port
Mode
Encapsulation Status
Native vlan
Fa0/1
on
802.1q
trunking
1
Fa0/2
on
802.1q
trunking
1
Port
Fa0/1
Fa0/2

Vlans allowed on trunk

1-1005
1-1005

Port
Fa0/1
Fa0/2

Vlans allowed and active in management domain

1,10,20,30,40,99
1,10,20,30,40,99

Port
Fa0/1
Fa0/2

Vlans in spanning tree forwarding state and not pruned

1,10,20,30,40,99
1,10,20,30,40,99

Permitimos el acceso a la troncal de solo las VLANs que hemos creado (rango FA01 al 02):
[Debera ser hasta el fa0/3]
SW_CORE(config)#interface range fa0/1-2
SW_CORE(config-if-range)#switchport trunk allowed vlan 10,20,30,40,99
SW_CORE(config-if-range)#exit
Verificamos nuevamente la configuracin de la troncal:
SW_CORE(config)#do show interface trunk
Port
Mode
Encapsulation Status
Native vlan
Fa0/1
on
802.1q
trunking
1
Fa0/2
on
802.1q
trunking
1
Port
Fa0/1
Fa0/2

Vlans allowed on trunk

10,20,30,40,99
10,20,30,40,99

Port
Fa0/1
Fa0/2

Vlans allowed and active in management domain

10,20,30,40,99
10,20,30,40,99

Port
Fa0/1
Fa0/2

Vlans in spanning tree forwarding state and not pruned

10,20,30,40,99
10,20,30,40,99

Permitir las VLANs hacia el Router

SW_CORE(config)#int fa 0/3
SW_CORE(config-if)#switchport mode access
SW_CORE(config-if)#switchport mode trunk
SW_CORE(config-if)#switchport trunk allowed vlan 10,20,30,40,99
SW_CORE(config-if)#exit
SW_CORE(config)#do show int trunk
Port
Mode
Encapsulation Status
Fa0/1
on
802.1q
trunking
Fa0/2
on
802.1q
trunking
Fa0/3
on
802.1q
trunking

Native vlan
1
1
1

Port
Fa0/1
Fa0/2
Fa0/3

Vlans allowed on trunk

10,20,30,40,99
10,20,30,40,99
10,20,30,40,99

Port
Fa0/1
Fa0/2
Fa0/3

Vlans allowed and active in management domain

10,20,30,40,99
10,20,30,40,99
10,20,30,40,99

Port
Fa0/1
Fa0/2
Fa0/3

Vlans in spanning tree forwarding state and not pruned

10,20,30,40,99
10,20,30,40,99
10,20,30,40,99

****************************************

SW_ACCESO 01 (No aplica troncales)

Switch>enable
Switch#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#
Switch(config)#hostname SW_ACC01
SW_ACC01(config)#
Activando modo cliente
SW_ACC01(config)#vtp mode client
Setting device to VTP CLIENT mode.
Verificando modo cliente
SW_ACC01#show vtp status
VTP Version
:2
Configuration Revision
: 10
Maximum VLANs supported locally : 255
Number of existing VLANs
: 10
VTP Operating Mode
: Client
VTP Domain Name
: Empresa
VTP Pruning Mode
: Disabled
VTP V2 Mode
: Disabled
VTP Traps Generation
: Disabled
MD5 digest
: 0x83 0xE1 0x9F 0xEC 0x78 0xAC 0x1E 0xB7
Configuration last modified by 0.0.0.0 at 3-1-93 01:14:13
Activar puertos de acceso para las interfaces FA02 al 11 ( VLAN10)
SW_ACC01#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
SW_ACC01(config)#interface range fa0/2-11
SW_ACC01(config-if-range)#switchport mode access
SW_ACC01(config-if-range)#switchport access vlan 10
SW_ACC01(config-if-range)#exit

Verificando los puertos asignados a la VLAN 10

SW_ACC01(config)#do show vlan
VLAN Name
Status Ports
---- -------------------------------- --------- ------------------------------1 default
active Fa0/12, Fa0/13, Fa0/14, Fa0/15
Fa0/16, Fa0/17, Fa0/18, Fa0/19
Fa0/20, Fa0/21, Fa0/22, Fa0/23
Fa0/24, Gig1/1, Gig1/2
10 COMPRAS
active Fa0/2, Fa0/3, Fa0/4, Fa0/5
Fa0/6, Fa0/7, Fa0/8, Fa0/9
Fa0/10, Fa0/11
20 VENTAS
active
30 CONTABILIDAD
active
40 GERENCIA
active
99 ADMIN
active
1002 fddi-default
act/unsup
1003 token-ring-default
act/unsup
1004 fddinet-default
act/unsup
1005 trnet-default
act/unsup
Activar puertos de acceso para las interfaces FA12 al 24 ( VLAN20)
SW_ACC01(config)#interface range fa0/12-24
SW_ACC01(config-if-range)#switchport mode access
SW_ACC01(config-if-range)#switchport access vlan 20
SW_ACC01(config-if-range)#exit
Verificando los puertos asignados a la VLAN 20
SW_ACC01#show vlan
VLAN Name
Status Ports
---- -------------------------------- --------- ------------------------------1 default
active Gig1/1, Gig1/2
10 COMPRAS
active Fa0/2, Fa0/3, Fa0/4, Fa0/5
Fa0/6, Fa0/7, Fa0/8, Fa0/9
Fa0/10, Fa0/11
20 VENTAS
active Fa0/12, Fa0/13, Fa0/14, Fa0/15
Fa0/16, Fa0/17, Fa0/18, Fa0/19
Fa0/20, Fa0/21, Fa0/22, Fa0/23
Fa0/24
30 CONTABILIDAD
active
40 GERENCIA
active
99 ADMIN
active
1002 fddi-default
act/unsup
1003 token-ring-default
act/unsup
1004 fddinet-default
act/unsup
ROUTER
Router>enable

Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Activar interface FA0/0
Router(config)#interface fa0/0
Router(config-if)#no shutdown
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed
state to up
Router(config-if)#exit
Asignando IP gateway a la VLAN 10 (SubInterface)
Router(config)#interface fa0/0.1
Router(config-subif)#encapsulation dot1Q 10
Router(config-subif)#ip address 172.16.10.1 255.255.255.0
Router(config-subif)#exit
Asignando IP gateway a la VLAN 20 (SubInterface)
Router(config)#interface fa0/0.2
Router(config-subif)#encapsulation dot1Q 20
Router(config-subif)#ip address 172.16.20.1 255.255.255.0
Router(config-subif)#exit
Asignando IP gateway a la VLAN 30 (SubInterface)
Router(config)#int fa0/0.3
Router(config-subif)#encapsulation dot1Q 30
Router(config-subif)#ip address 172.16.30.1 255.255.255.0
Router(config-subif)#exit
Asignando IP gateway a la VLAN 40 (SubInterface)
Router(config)#int fa0/0.4
Router(config-subif)#encapsulation dot1Q 40
Router(config-subif)#ip address 172.16.40.1 255.255.255.0
Router(config-subif)#exit

Do show ip route

SW_ACCESO 02 (No aplica troncales)

Switch>enable
Switch#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#
Switch(config)#hostname SW_ACC02
SW_ACC02(config)#
Activando modo cliente
SW_ACC02(config)#vtp mode client
Setting device to VTP CLIENT mode.

SW_ACC02
SW_ACC02
SW_ACC02
SW_ACC02

(config)#int range fa0/1-11

(config-if-range)#switchport mode access
(config-if-range)#switchport access vlan 30
(config-if-range)#exit

SW_ACC02
SW_ACC02
SW_ACC02
SW_ACC02

(config)#int range fa0/12-24

(config-if-range)#switchport mode access
(config-if-range)#switchport access vlan 40
(config-if-range)#exit

CAPA 3
vtp mode server
crear vlans
activar sw mode access y mode trunk
(no considera puerto de salida al router)
allowed vlan
*****************************************************
configurar sw acceso
*****************************************************
activar modo interfaz vlan
y asignacion de ip gateway
===========================
(config)#int vlan 13
(config-if)#ip address ....
#do show ip int brief

ACTIVAR LAS VLAN PERMITIDAS TRUNK

================================
sw trunk allowed vlan
*si en caso "show ip int brief" salga en down
*con esto ya existe conexion entre vlans
*****************************************************
activar funcion de router
=========================
(config)#ip routing
*****************************************************
PUERTO ENRUTADO (CONEXION SW AL ROUTER)
=======================================
SWITCH
*se debe aplicar una ip privada con mascara 30
(config)#int fa0/1
(config-if)#no swichtport
(config-if)#ip address salida