LAN protocols

lqmartin

LAN     protocols

Lab exercise
Game LANS,Inc is a company that providers high-speed backbones for entertainment centers around the country, Game LAN uses Cisco 100Mbps and Gigabit Ethernet switches to provider the switch fabric for the LANs that the company installs, A part of all Game LAN networks is the redundancy that is built into each design.

Your task is to configurate a Game LAN network bu using the following parameters as design guidelines
1 configure an Ethernet switched network as depicted in top figure
2 Use the VTP domain name , fulltime for all the switches in the network
3 Create three VLANS on this network and do not use VLAN 1 , create one VLAN for management, whichi is ip subnet 172.16.128.0/24 Mark this VLAN so that It stands our as the management VLAN when being viewed by other switches, Two other VLAn are needed , one fir the glaccess_2 route, 172.16.16.0/24 and one for the glaccess-1 router on subnet 172.17.17.0/24
4 configure the gameserver-1 and the gamesergver-2 routers to route among all the VLANs on the network, All VLANs and ip address should be capable of reaching each other, User EIGRP as the routing prototocl and use2001 as the AS ID.
5 Tune STP so that the root for all VLANs corresponds to the HSRP configurations The root for LVANs 128 and 17 should be gl-switch1, and the root for VLAN 16 should be gl-switch2
5 configure the gl-switch so that only devices on the subnet 172.16.17.0/24 can Telnet to the switch.
6(optional) port 2/24 contains a secure workstation, It has a MAC addrerss of 0000.863c.3b41, configure this port so that only this workstation will work on it  and shut it down if another workstation is plugged into it .
Equipment Needed
1 For cisco routers with Ethernet interfaces, Two workstations must have 100Mbps interfaces, Recall that your need a min if a 100Mbps to run any VLAN trunking protocol if you do not have routers with 100Mbps interface , routing also can be accomplished by  configuring three Ethernet interfaces to the switch from a single router, one interface would be in each VLAN
2 Tree Cisco Catalyst Ethernet switches, This lab was designed specifically for two Catalyst 2900/3500 series  switches and one Catalyst 4000/45000/6500 seies switch

Physical  layout and Prestaging
The networks 172.16.200.0/24 and 172.16.21.0/24 are simulated by loopback interface on the glaccess-2 and glaccess-1 routers respectively

Now , Initial Configuration gl-swich1
eet prompt gl-switch1
set vtp domain fulltime
set vlan 16
set vlan 17
set vlan 128 name management
set int sco 128 172.16.128.13 255.255.255.0
set ip route 0.0.0.0 172.16.128.1
set trunk 2/1 dot1q
set trunk 2/1 on
set trunk 2/14 dot1q
set trunk 2/14 on
set trunk 2/20 dot1q
set trunk 2/20 on

Management configuration gl-switch2
int vlan 1
shut
int vlan 128
ip add 172.16.128.11 255.255.255.0
no shut
ip default-gateway 172.16.128.1

VTP Domain creation on gl-switch2
vlan database
vtp domain fulltime
config t
interface fa0/7
switchport mode access
switchport access vlan 16

int gig0/1
swichpirt mode trunk
switchport trunk encapsulation dot1q
int fa0/10
switchport mode trunk
switchport trunk encapsulation isl

hostname glaccess-1
int loopback 20
ip add 172.16.21.6 255.255.255.0
router eigrp 2001
network 172.16.0.0
no auto-summary


hostname gameserver-1
interface fa0/0
no shut
int fa0/0.1
encapsulation dot1a 128
ip add 172.16.128.14 255.255.255.0
standby 1 priority 101 preempt
standby 1 ip 172.16.128.1
interface fa0/0.2
encapsulation dot1q 128
ip add 172.16.16.14 255.255.255.0
standby 2 priority 95 preempt
standby 2 ip 172.16.16.1

interface fa0/0.3
encapsulation dot1q 17
ip add 172.16.17.14 255.255.255.0
standby 3 priority 101 preempt
standby 3 ip 172.16.17.1

set spantree root 17,128
spanning-tree vlan 16 prority 100
set ip permit 172.16.17.0 255.255.255.0
set ip permit enable
set port security 2/24 enable 00-00-85-3c-3b-41
show port 2/24














本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u/24661/showart_625938.html