Experiment # 08 Setting Up Virtual Local Area (VLAN) Network
Experiment # 08 Setting Up Virtual Local Area (VLAN) Network
Experiment # 08 Setting Up Virtual Local Area (VLAN) Network
Software Tool:
• Cisco Packet Tracer
Theory:
VLANs are used to segment a large physical LAN into multiple small virtual LANs for better
management and greater security. In scenarios where sensitive data may be broadcast on a
network, VLANs can be created to enhance security by designating a broadcast to a specific
VLAN. Only users that belong to a VLAN are able to access and manipulate the data on that
VLAN. VLANs can also be used to enhance performance by reducing the need to send
broadcasts and multicasts to unnecessary destinations.
VLANs provide a number of advantages and features. In this Lab, I will explain the key features
provides by VLANs and how to configure VLANs on cisco switches. Some of the key features
provided by VLANs are:
• VLANs allow you to add, move, and change networks with ease by just configuring a
port into the appropriate VLAN.
• VLANs allow you to create a logical group of users by function.
• VLANs are typically independent to the users’ physical or geographic locations.
• VLANs enhance network security.
• VLANs increase the number of broadcast domains.
Each VLAN is identified by a unique identification number called VLAN ID. The range of VLAN
ID can vary from 1-1005. VLAN 1 is the default VLAN (native VLAN) that is used for the
administrative purpose.
Cisco manageable switches allow you to configure VLANs as per your network requirements.
There are two methods that can be used to configure VLANs.
1. Static VLAN: In this method, an administrator needs to configure and update VLAN
database manually each time. This method is preferred for a small network.
2. Dynamic VLAN: VLANs database can be configured and updated with the help of a
protocol called VTP (VLAN Trunking Protocol) automatically or with the least user
interaction. This method is preferred for the large networks.
To configure VLANs on a Cisco switch, use the vlan global configuration command. In
addition, one can also use the vlan database command in the privileged mode.
In this exercise, we will configure VLANs on Switch1 and Switch2. The following table lists the
details of topology that we will use.
Once you have created the preceding topology, configure the appropriate IP addresses on
each PCs. Before configuring VLANs, let’s have a look at the command syntaxes used to
configure VLANs.
Switch(config)#vlan <vlan number>
Switch(config-vlan)#vlan <name of vlan>
Once you created the desired VLANs, next, you need to assign the interfaces to the desired
VLANs. To do so, the following commands are used in the interface configuration mode.
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan <VLAN ID>
Configure VLANs Step By Step
1. Execute the following commands on Switch1 to configure a VLAN named Sales with
the VLAN ID as 10.
• Switch1(config)#vlan 10
• Switch1(config-vlan)#name Sales
• Switch1(config-vlan)#exit
2. Execute the following commands on Switch1 to configure a VLAN named Account with
the VLAN ID as 20, as shown in the following figure.
• Switch1(config)#vlan 20
• Switch1(config-vlan)#name Account
• Switch1(config-vlan)#exit
3. Once you have configured the desired VLANs, execute the following commands to
assign the Fa0/1 interface to Sales VLAN and Fa0/2 interface to Account VLAN.
• Switch1(config)#interface fa0/1
• Switch1(config-if)#switchport mode access
• Switch1(config-if)#switchport access vlan 10
• Switch1(config-if)#exit
• Switch1(config)#interface fa0/2
• Switch1(config-if)#switchport mode access
• Switch1(config-if)#switchport access vlan 20
• Switch1(config-if)#exit
• Switch1(config)#exit
4. Once you have assigned the appropriate interfaces to the appropriate VLANs, verify
the VLAN configuration by executing the following command, as shown in the following
figure.
5. After configuring VLANs on Switch1, next, configure the same VLANs (Sales and
Account) and assigned the same interfaces (Fa0/1 and fa0/2) to the respective VLANs. If you
have any issue, refer the above-mentioned table.
• Switch(config)#hostname Switch2
• Switch2(config)#vlan 10
• Switch2(config-vlan)#name Sales
• Switch2(config-vlan)#exit
• Switch2(config)#vlan 20
• Switch2(config-vlan)#name Account
• Switch2(config-vlan)#exit
• Switch2(config)#interface fa0/1
• Switch2(config-if)#switchport mode access
• Switch2(config-if)#switchport access vlan 10
• Switch2(config-if)#exit
• Switch2(config)#interface fa0/2
• Switch2(config-if)#switchport access vlan 20
• Switch2(config-if)#exit
• Switch2(config)#exit
• Switch2#show vlan brief
6. Now, you have done the VLAN configurations on both the switches. To verify your
VLAN configuration, open Command Prompt on PC0 and type the following command:
➢ Ping 10.0.0.2
8. You should not be able to ping even both the PCs are on the same network. The reason
is that PC0 (IP 10.0.0.1, interface Fa0/1) and PC1 (IP 10.0.0.2, interface Fa0/2) belong to
different VLAN IDs.
➢ Ping 10.0.0.3
9. You should not be able to ping because we still have not configured VLAN trunking
between both the switches.
Lab Task