You are on page 1of 8

PT Activity 4.4.

1: Basic VTP Configuration
Topology Diagram

Addressing Table
Device S1 S2 S3 PC1 PC2 PC3 PC4 PC5 PC6 Interface VLAN 99 VLAN 99 VLAN 99 NIC NIC NIC NIC NIC NIC IP Address 172.17.99.11 172.17.99.12 172.17.99.13 172.17.10.21 172.17.20.22 172.17.30.23 172.17.10.24 172.17.20.25 172.17.30.26 Subnet Mask 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 Default Gateway N/A N/A N/A 172.17.10.1 172.17.20.1 172.17.30.1 172.17.10.1 172.17.20.1 172.17.30.1

All contents are Copyright © 1992–2007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.

Page 1 of 8

All rights reserved.Guest (Default) VLAN 10 .0 /24 172. Task 1: Perform Basic Switch Configurations Configure the S1. End with CNTL/Z.20. trunking.CCNA Exploration LAN Switching and Wireless: VTP PT Activity 4.0 /24 Learning Objectives • • • Perform basic switch configurations.0/17 Fa0/18 .. [OK] All contents are Copyright © 1992–2007 Cisco Systems. Page 2 of 8 . S2. Configure the Ethernet interfaces on the host PCs. Configure VTP and security on the switches. Switch>enable Switch#configure terminal Enter configuration commands. Inc.17.4.17.Faculty/Staff VLAN 20 – Students Network 172.10.17.1q Trunks (Native VLAN 99) VLAN 30 . The initial network opens in a secure state with all ports administratively shutdown. and S3 switches according to the following guidelines and save all your configurations: • • • • • Configure the switch hostname as indicated on the topology. Configure an encrypted privileged EXEC mode password of class.17. Introduction In this activity. Configure a password of cisco for vty connections.0 /24 172.99. one per line..0/10 Fa0/11 . you will perform basic switch configurations.30.0/5 Fa0/6 . Configure a password of cisco for console connections. Switch(config)#hostname S1 S1(config)#enable secret class S1(config)#no ip domain-lookup S1(config)#line console 0 S1(config-line)#password cisco S1(config-line)#login S1(config-line)#line vty 0 15 S1(config-line)#password cisco S1(config-line)#login S1(config-line)#end %SYS-5-CONFIG_I: Configured from console by console S1#copy running-config startup-config Destination filename [startup-config]? Building configuration. Disable DNS lookup.1: Basic VTP Configuration Port Assignments (S2 and S3) Ports Fa0/1 . This document is Cisco Public Information. learn about VTP modes.0 /24 172. configure VTP.0/24 Assignment 802. create and distribute VLAN information and assign ports to VLANs.

PC5. Use the show vtp status command to determine the VTP operating mode for all three switches.0 (no valid interface found) All contents are Copyright © 1992–2007 Cisco Systems.0.0 at 0-0-00 00:00:00 Local updater ID is 0. Task 3: Configure VTP and Security on the Switches Step 1. All rights reserved.0. troubleshoot to correct any errors. If not. Your completion percentage should be 26%. This document is Cisco Public Information.0.0. Inc.0 at 0-0-00 00:00:00 Local updater ID is 0. PC3. If not.1: Basic VTP Configuration Your completion percentage should be 9%. Enable the user ports on S2 and S3. and PC6 with the IP addresses and default gateways indicated in the addressing table. Refer to the topology diagram to determine which ports are connected to end-user devices.0. PC4.4. Task 2: Configure the Ethernet Interfaces on the Host PCs Configure the Ethernet interfaces of PC1. S1#show vtp status VTP Version : 2 Configuration Revision : 0 Maximum VLANs supported locally : 64 Number of existing VLANs : 5 VTP Operating Mode : Server VTP Domain Name : VTP Pruning Mode : Disabled VTP V2 Mode : Disabled VTP Traps Generation : Disabled MD5 digest : 0x7D 0x5A 0xA6 0x0E 0x9A 0x72 0xA0 0x3A Configuration last modified by 0. PC2.CCNA Exploration LAN Switching and Wireless: VTP PT Activity 4. Configure the user ports in access mode. Check the current VTP settings on the three switches.0. Page 3 of 8 .0.0. S2(config)#interface fa0/6 S2(config-if)#switchport mode access S2(config-if)#no shutdown S2(config-if)#interface fa0/11 S2(config-if)#switchport mode access S2(config-if)#no shutdown S2(config-if)#interface fa0/18 S2(config-if)#switchport mode access S2(config-if)#no shutdown Step 2.0 (no valid interface found) S2#show vtp status VTP Version : 2 Configuration Revision : 0 Maximum VLANs supported locally : 64 Number of existing VLANs : 5 VTP Operating Mode : Server VTP Domain Name : VTP Pruning Mode : Disabled VTP V2 Mode : Disabled VTP Traps Generation : Disabled MD5 digest : 0x7D 0x5A 0xA6 0x0E 0x9A 0x72 0xA0 0x3A Configuration last modified by 0. troubleshoot to correct any errors.

4. All rights reserved.CCNA Exploration LAN Switching and Wireless: VTP PT Activity 4.0 (no valid interface found) VTP allows the network administrator to control the instances of VLANs on the network by creating VTP domains. Common VTP configuration tasks are setting the operating mode. you will be using S1 as the VTP server. and VTP password on all three switches.1: Basic VTP Configuration S3#show vtp status VTP Version : 2 Configuration Revision : 0 Maximum VLANs supported locally : 64 Number of existing VLANs : 5 VTP Operating Mode : Server VTP Domain Name : VTP Pruning Mode : Disabled VTP V2 Mode : Disabled VTP Traps Generation : Disabled MD5 digest : 0x7D 0x5A 0xA6 0x0E 0x9A 0x72 0xA0 0x3A Configuration last modified by 0. VLANs are then created on the VTP server and pushed to the other switches in the domain. Within each VTP domain.0. domain. and password. Set the VTP domain name to Lab4 and the VTP password to cisco on all three switches. one or more switches are configured as VTP servers. Configure S1 in server mode.0. In this activity. S2 in client mode. it is good practice to manually configure the domain name on all switches to ensure that the domain name is configured correctly. with S2 and S3 configured as VTP clients or in VTP transparent mode. domain name. Inc. Step 3. For that reason. It does not learn a new name if one has been previously set. Configure the operating mode. S1(config)#vtp mode server Device mode already VTP SERVER.0.0. Page 4 of 8 . S3(config)#vtp domain Lab4 Changing VTP domain name from NULL to Lab4 S3(config)#vtp password cisco Setting device VLAN database password to cisco S3(config)#end Note: The VTP domain name can be learned by a client switch from a server switch.0 at 0-0-00 00:00:00 Local updater ID is 0. All contents are Copyright © 1992–2007 Cisco Systems. S1(config)#vtp domain Lab4 Changing VTP domain name from NULL to Lab4 S1(config)#vtp password cisco Setting device VLAN database password to cisco S1(config)#end S2(config)#vtp mode client Setting device to VTP CLIENT mode S2(config)#vtp domain Lab4 Changing VTP domain name from NULL to Lab4 S2(config)#vtp password cisco Setting device VLAN database password to cisco S2(config)#end S3(config)#vtp mode transparent Setting device to VTP TRANSPARENT mode. Switches in different VTP domains do not exchange VLAN information. and S3 in transparent mode. This document is Cisco Public Information. Server mode is the default VTP mode for most Catalyst switches. Note that all three switches are in server mode. but only if the client switch domain is in the null state.

Configure port security on the S2 and S3 access layer switches. On all switches. All rights reserved. This document is Cisco Public Information. configure trunking and the native VLAN for FastEthernet interfaces 0/1-5. Configure trunking and the native VLAN for the trunking ports on all three switches.4.1: Basic VTP Configuration Step 4. . Configure ports fa0/6. Only commands for fa0/1 on each switch are shown below.CCNA Exploration LAN Switching and Wireless: VTP PT Activity 4. S2(config)#interface fa0/6 S2(config-if)#switchport port-security S2(config-if)#switchport port-security S2(config-if)#switchport port-security S2(config-if)#interface fa0/11 S2(config-if)#switchport port-security S2(config-if)#switchport port-security S2(config-if)#switchport port-security S2(config-if)#interface fa0/18 S2(config-if)#switchport port-security S2(config-if)#switchport port-security S2(config-if)#switchport port-security S2(config-if)#end S3(config)#interface fa0/6 S3(config-if)#switchport port-security S3(config-if)#switchport port-security S3(config-if)#switchport port-security S3(config-if)#interface fa0/11 S3(config-if)#switchport port-security S3(config-if)#switchport port-security S3(config-if)#switchport port-security S3(config-if)#interface fa0/18 S3(config-if)#switchport port-security S3(config-if)#switchport port-security S3(config-if)#switchport port-security S3(config-if)#end maximum 1 mac-address sticky maximum 1 mac-address sticky maximum 1 mac-address sticky maximum 1 mac-address sticky maximum 1 mac-address sticky maximum 1 mac-address sticky Page 5 of 8 All contents are Copyright © 1992–2007 Cisco Systems. fa0/11. and fa0/18 so that they allow only a single host and learn the MAC address of the host dynamically. S1(config)#interface fa0/1 S1(config-if)#switchport mode trunk S1(config-if)#switchport trunk native vlan 99 S1(config-if)#no shutdown S1(config-if)#interface fa0/2 S1(config-if)#switchport mode trunk S1(config-if)#switchport trunk native vlan 99 S1(config-if)#no shutdown S1(config-if)#end S2(config)#interface fa0/1 S2(config-if)#switchport mode trunk S2(config-if)#switchport trunk native vlan 99 S2(config-if)#no shutdown S2(config-if)#end S3(config)#interface fa0/2 S3(config-if)#switchport mode trunk S3(config-if)#switchport trunk native vlan 99 S3(config-if)#no shutdown S3(config-if)#end Step 5. Inc.

Fa0/5 Fa0/6. S1(config)#vlan 99 S1(config-vlan)#name S1(config-vlan)#exit S1(config)#vlan 10 S1(config-vlan)#name S1(config-vlan)#exit S1(config)#vlan 20 S1(config-vlan)#name S1(config-vlan)#exit S1(config)#vlan 30 S1(config-vlan)#name S1(config-vlan)#exit management faculty/staff students guest Verify that the VLANs have been created on S1 with the show vlan brief command.------------------------------1 default active Fa0/1. Page 6 of 8 . Fa0/16. Fa0/4. Fa0/23. Fa0/12. Fa0/9 Fa0/10. Fa0/7.-----------------------------. Fa0/15. Fa0/3.-----------------------------. Fa0/15.--------. Fa0/17 Fa0/18. Gi0/1 Gi0/2 10 faculty/staff active 20 students active 30 guest active 99 management active S3#show vlan brief VLAN Name Status Ports ---. S2#show vlan brief VLAN Name Status Ports ---. Fa0/19.1: Basic VTP Configuration Step 6.4. Use the show vlan brief command on S2 and S3 to determine if the VTP server has pushed its VLAN configuration to all the switches. There are four VLANS required in this lab: • • • VLAN 99 (management) VLAN 10 (faculty/staff) VLAN 20 (students) • VLAN 30 (guest) Configure these on the VTP server. All rights reserved. Configure VLANs on the VTP server. Fa0/24. Fa0/7. Fa0/16. Fa0/24. Fa0/5 Fa0/6.Fa0/17 Fa0/18. Packet Tracer grading is case-sensitive.CCNA Exploration LAN Switching and Wireless: VTP PT Activity 4. Check if the VLANs created on S1 have been distributed to S2 and S3. Fa0/2.Fa0/21 Fa0/22. Fa0/13 Fa0/14. Step 7. Fa0/23. Fa0/8. This document is Cisco Public Information. Fa0/21 Fa0/22. Fa0/20.--------. Fa0/8. Gig1/1 Gig1/2 1002 fddi-default active 1003 token-ring-default active All contents are Copyright © 1992–2007 Cisco Systems. Fa0/11. Fa0/9 Fa0/10. Fa0/19.Fa0/13 Fa0/14. Fa0/12. Fa0/4. Fa0/11. Fa0/20. Inc.------------------------------1 default active Fa0/1.

All rights reserved. Page 7 of 8 . Manually configure VLANs. From S2. Step 10. S3(config)#vlan 99 S3(config-vlan)#name S3(config-vlan)#exit S3(config)#vlan 10 S3(config-vlan)#name S3(config-vlan)#exit S3(config)#vlan 20 S3(config-vlan)#name S3(config-vlan)#exit S3(config)#vlan 30 S3(config-vlan)#name S3(config-vlan)#exit management faculty/staff students guest Here you see one of the advantages of VTP. ping the management interface on S3.4.12 255. these types of errors can be difficult to troubleshoot. In addition. and any error introduced here could prevent intra-VLAN communication. From S1. Configure the four VLANs identified in Step 6 on switch S3.11 255.255.255. S1(config)#interface vlan 99 S1(config-if)#ip address 172.CCNA Exploration LAN Switching and Wireless: VTP PT Activity 4. All contents are Copyright © 1992–2007 Cisco Systems.0 S1(config-if)#no shutdown S2(config)#interface vlan 99 S2(config-if)#ip address 172. S2(config)#vlan 88 %VTP VLAN configuration not allowed when device is in CLIENT mode. Inc.17. S3(config)#no vlan 88 Step 9.0 S3(config-if)#no shutdown Verify that the switches are correctly configured by pinging between them.255. ping the management interface on S2 and S3.99.17.99.255. Configure the management interface address on all three switches.255. Create a new VLAN on S2 and S3.13 255.17. S3(config)#vlan 88 S3(config-vlan)#name test S3(config-vlan)# Why are you prevented from creating a new VLAN on S2 but not S3? ______________________________________________________________________________ Delete VLAN 88 from S3.1: Basic VTP Configuration 1004 fddinet-default active 1005 trnet-default active Are the same VLANs configured on all switches? ____________________ Why do S2 and S3 have different VLAN configurations at this point? ______________________________________________________________________________ Step 8.99.255. Manual configuration is tedious and error prone. This document is Cisco Public Information.0 S2(config-if)#no shutdown S3(config)#interface vlan 99 S3(config-if)#ip address 172.

1: Basic VTP Configuration Were the pings successful? If not. S3(config)#interface fa0/6 S3(config-if-range)#switchport access vlan 30 S3(config-if-range)#interface fa0/11 S3(config-if-range)#switchport access vlan 10 S3(config-if-range)#interface fa0/18 S3(config-if-range)#switchport access vlan 20 S3(config-if-range)#end S3#copy running-config startup-config Destination filename [startup-config]? [enter] Building configuration.11 does not make use of the interface range command. Since Packet Tracer 4. Port assignments must be configured on each switch manually or dynamically using a VMPS server. only configure the first interface for each VLAN. but both S2 and S3 switches should be similarly configured. Assign switch ports to VLANs.CCNA Exploration LAN Switching and Wireless: VTP PT Activity 4. Port assignments are not configured through VTP. This document is Cisco Public Information.. Inc. Save the configuration when you are done. Page 8 of 8 . All rights reserved. Use the Check Results button to verify all components are complete..4. troubleshoot the switch configurations and try again. All contents are Copyright © 1992–2007 Cisco Systems. Step 11. Refer to the port assignment table at the beginning of the activity to assign ports to the VLANs. The commands are shown for S3 only. [OK] S3# Your completion percentage should be 100%.