http___www.ucionica.net_mreze_osnovna-vlan-konfiguracija-na-cisco-preklopniku-820__1.xml
1.1 2.1 3.1 3.2 3.3 3.4 3.5 3.6 4.1 5.1 5.2 5.3 5.4 6.1 6.2 7.1 7.2 7.3 8.1 9.1 10.1 11.1 12.1 13.1 14.1 15.1 15.2 15.3 16.1 17.1 18.1 19.1 20.1 21.1 22.1 23.1 24.1 25.1 25.2 25.3 26.1 27.1 28.1 29.1 30.1 30.2 31.1 32.1 33.1 34.1 35.1 36.1 37.1 38.1 39.1 39.2 39.3 40.1 41.1 42.1 43.1 44.1 45.1 46.1 47.1 48.1 49.1 50.1 51.1 52.1 53.1 55.1 57.1 58.1 59.1 60.1 61.1 62.1 63.1 65.1 66.1 69.1 71.1 72.1 74.1 75.1 76.1 77.1 78.1 79.1 80.1 80.2 81.1 82.1 82.2 82.3 83.1 84.1 84.2 85.1 86.1 86.2 87.1 88.1 89.1 90.1 91.1 92.1 92.2 92.3 93.1 94.1 95.1 96.1 97.1 98.1 99.1 100.1 101.1 102.1 103.1 104.1 104.2
Troubleshoot and resolve VLAN problem Exam: 200-120 - CCNA Cisco Certified Network Associate CCNA (803) VLANs divide a network in logical subunits, which have their own broadcast domains. In a VLAN only those unicast, broadcast, and multicast packets are forwarded, which are addressed to that VLAN. To allow communication between VLANs, the traffic must be routed using a router. VLANs are highly efficient as compared to the physical segmentation of a network. On top of it, VLANs are very easy to configure. The only complicated and difficult task in configuring VLANs is to finalize the users that would be the part of a VLAN. Configuring VLAN As per IEEE 802.1Q standard, Cisco Nexus 5000 Series switches support VLAN numbers between 1 and 4094. However, the VLAN number 1 and a few ranges of VLAN numbers are reserved category numbers. For example, VLAN number 1is reserved for administrative purposes and is also a Cisco default for VLAN that cannot be modified or deleted. VLAN numbers between 2 to 1005 can be used normally to create VLANs that can be modified and deleted. The VLAN numbers between 1006 – 4094 are extended VLAN numbers that can be used to create VLANs. However, for these VLANs the state of VLAN is always active, the VLAN is always enabled for this range and you cannot such down these VLANs. The VLAN numbers between 3968 – 4047 are internally allocated numbers that can be used for internal allocation of VLANs. The VLANs with these numbers cannot be created, modified or deleted by users. VLAN number 4094 is also reserved for internal use by the switch. To create a VLAN, you need to use the following code: Configure VLAN on Switch A by first entering into configuration mode. // Entering into configuration mode Switch A#configure terminal // Create VLANs with number 5 - 7 // If you enter a number that is already assigned or a number that is for internal use, you will get an error. Switch A (config)#vlan 5-7 The above given commands created the VLANs but the VLAN cannot be used unless ports are assigned to it. Remember by default all the ports are assigned to VLAN 1. You need to now configure the VLAN name and its shutdown/ not shutdown status. // Configure VLAN name as Development Switch A (config -vlan)# name development //Configure VLAN 6 name as Accounting Switch A (config)#vlan 6 Switch A (config -vlan)# nameAccounting //Configure VLAN 7 name as HRD Switch A (config)#vlan 7 Switch A (config -vlan)# nameHRD Switch A (config-vlan)# state active // The following command enables the VLAN. However, by default the VLAN is enabled and hasno shutdownvalue. You cannot shut down the VLAN1, or VLANs with numbers between 1006 to 4094. Switch A (config-vlan)# no shutdown // Go back (config-vlan)#^Z //Add ports to VLAN // configure slot type 1 on port 13. The port can be physical Ethernet port or a port channel. Switch A#configure terminal Switch A (config)#interface ethernet 1/13 S1(config-if)#switchport mode ? access Set trunking mode to ACCESS unconditionally dynamic Set trunking mode to dynamically negotiate access or trunk mode trunk Set trunking mode to TRUNK unconditionally S1(config-if)#switchport mode access The switchport mode access command allows you to specify that the port is layer 2 port. You can then assign a VLAN to the port with the switchport access command. This way you can configure multiple ports using the interface range command. // Set the access mode of the interface to the specified VLAN. switch A (config-if)# switchport access vlan 5 Verifying VLAN To verify VLAN configuration on VLAN 5 use command switch A#show running-config vlan5 To verify VLAN configuration on VLAN 5 – 7use command switch# show running-config vlan 5-7 The command displays result as: version 4.0(0) vlan 1 vlan 5 The following example shows the VLANs created on the switch and their status: switch# show vlan VLAN Name Status Ports 1 default active Eth1/1, Eth1/5, Eth1/6, Eth1/7 5 Development active 6 Accounting active 7 HRD active [output cut] The following example shows the details of VLAN 13 including its member ports: switch# show vlan id 13 VLAN Name Status Ports 13 VLAN0005 active Eth1/13, Eth1/14 VLAN Type MTU Remote SPAN VLAN Disabled Primary Secondary Type Ports The following example shows the VLAN settings summary: switch# show vlan summary Number of existing VLANs : 3 Number of existing VTP VLANs: 3 Number of existing extended VLANs : 0 Troubleshooting VLAN Any network troubleshooting should start by first checking the physical connectivity of your network. Similarly, for your VLAN connectivity try checking that your cables and switch ports are working well and are connected properly. You can check the switch ports by checking the switch ports link LEDs. After checking the physical connectivity between cables and switches, you should check the switch configurations by using thecommand show interface [interface name-number]command that allows you to check the CRC errors or late collisions on the interface. The CRC errors usually occur due to bad cables or bad network interface card. The collisions can be caused due to duplex mismatch with the attached device or congestion on the link. If the physical connectivity between the switches and the cables for the VLAN is fine and there are no bad NIC or cables and still two hosts on the VLAN are not able to connect, then you need to check whether the hosts that are not able to connect are in the same VLAN or not. If the two hosts that must connect to each other are a part of different VLAN then you need a router to establish connectivity between them. On the other hand if a host is not able to connect to a switch then you need to check that the host and the switch belong to the same subnet. Example Question While plugging in a new host VLAN 3, you realized that the membership of the host is different from what is needed for the host to reach the network services. Which of the following commands will you use to change the membership of the host? - Switch(config-if)#switchport access vlan 3 - switch# show vlan3 - switch A# show running-config vlan 3 - switch# show running-config vlan 3 Answer: A By default all switch ports are members of VLAN 1. In order to change the membership, you must change the port. You can change the port by using Switch(config-if)#switchport access vlan 3 command. Related IT Guides - Configure and verify DHCP (IOS Router) - Configure and verify NAT for given network requirements - Configure and verify network device security features - Configure and verify switch port security - Describe SNMP v2 and v3 - Describe the purpose and basic operation of the protocols in the OSI and TCP/IP models - Identify enhanced switching technologies - Troubleshoot and correct common problems associated with IP addressing and host configurations - Troubleshoot and resolve Layer 1 problems - Troubleshoot and resolve OSPF problems Can't find the necessary exam? Contact us and we will prepare it for you.
1.1 2.1 2.2 2.3 3.1 4.1 5.1 6.1 7.1 8.1 9.1 10.1 11.1 12.1 13.1 14.1 14.2 14.3 15.1 16.1 17.1 17.2 18.1 19.1 20.1 21.1 22.1 22.2
U ovom tutorijalu ćemo pokazati osnovnu VLAN (Virtual Local Area Network) konfiguraciju na Cisco preklopniku. Virtualna lokalna mreža (engl. Virtual Local Area Network – VLAN) je način logičke segmentacije mreže koja se može dinamički mijenjati i nije ovisna o fizičkoj topologiji mreže. Tehnologija virtualnih lokalnih mreža je definirana standardom IEEE 802.1Q (poznat i kao dot1q). VLAN predstavlja skupinu računala koji mogu biti u jednoj ili više odvojenih mreža, a koje su konfigurirane na način da im je omogućena međusobna komunikacija kao da se nalaze u istoj fizičkoj mreži. Vlan se konfigurira na Cisco preklopniku pomoću “vlan” naredbe, zapamtite da je VLAN 1 administrativni Vlan. preklopnik#config terminal preklopnik(confing)#vlan 2 preklopnik(config-vlan)#name ucionica preklopnik(config-vlan)#vlan 3 preklopnik(config-vlan)#ucionica1 preklopnik(config-vlan)#vlan 4 preklopnik(config-vlan)#ucionica2 preklopnik(config-vlan)#^Z preklopnik# U prethodoj konfiguraciji smo kreirali 3 Vlan -a (ucionica, ucionica1 i ucionica2). Možete kreirati Vlan -ove od broja 2 do 4094. Kao što smo i rekli Vlan 1 je rezerviran i prethodno već stvoren. Kako bi provjerili postojeće Vlan -ove unesite sljedeće: preklopnik#show vlan Sam Vlan nema funkcije ako mu nije pridodan neki port. Vlan -u pridodajemo port na sljedeći način: preklopnik# config t preklopnik(config)# interface FastEthernet0/1 preklopnik(config-if)#switchport mode access preklopnik(config-if)#switchport access vlan 3 U prethodnoj smo konfiguraciji port FastEthernet0/1 pridodali Vlan -u 3 koji smo označili kao ucionica1. Sada će taj port moći komunicirati samo sa uređajima (portovima) koji su u tom Vlan -u.