TRUNG TAM TIN HQC VNPRO
149/lD Ung Vin Khi6m, Phudng 25, Qufn Binh Thanh, [Link]
cisc.'dilt[odrd
Tel:08 35124257
Fax: 08 35124314
Website: [Link]
Forum: http:/[Link]
Livechat:
[Link]/supDort
Email: vnpro@[Link]
SWITCII FINAL LAB
A. DAu c6p nhu hinh v6:
VhB
t7? \
Ylan 10
:'+i!:+::-- _*
{-";;;;-'-F*23
ilorils{ $Errys
8|EPEelvr ,r
//
B. YOu ciu cdu hinh nhu sau:
l.
C6u hinh dudrng trunk gifra c5c switch (SiI):
o
.
Dirng giao thr?c trunk sft dqng co ch6 tag 4byte, c6c dudng trunk sr} dpng giao thric
thuong lugng <luong trunk DTP.
Ki6m tra kiSt qui c6u hinh tluong trunk dring theo y6u cAu.
2. Cdu hinh Etherchannel (5d):
Dtng giao
thr?c Etherchannel cria IEEE, c6u hinh duong Etherchannel ldm trunk
dotlq,
khOng thuong lugng DTP.
Final Lab 2
rAvr rrx Hec vNPRo
l4g/lDUng VIn Khi6m, Phuong 25, QuQn Binh Th'4rrh, [Link]
Fax 08 35124314
Tel:08 35124257
[Link]
Website:
[Link]*kriirsr Livechat:
[Link],vn
Foruin: [Link]
Email: vnual@y0@.alg
rlnuu,vaptqJn/'suppqr
3. C6u hinh VTP (5d):
o
o
c
o
o
Domain name: vnpro
Password: vnpro
DSI
vi
DS2 : vtp server
ASW: vtp client
SSW, GSW: vtp transparent
4. C6u hinh VLAITI
.
o
.
C6u hinh c6c
VLAN theo y6u cAu
VLAN dinh cho ngudi
sau:
sir dpng dAu cudi:
VLAN ddnh cho khu [Link] qudn
l1i:
VLAN 2 vd VLAN
VLAN l0
VLAN dinh cho khu [Link] gateway: VLAN
VIAN dinh
cho
khuwc
VLAN cd l4p: VLAN
server
:VLAN
172
192
100
86 sung c6u hinh trOn tluong trunk cho ph6p c6c VLAN tuong img ch4y qua, native
VLAN ld 100 vd cirn VLAN 100 ch4y qua c6c itudng trunk dE c6u hinh
ilinh ilia chi IP (10tI):
VLAN 2: subnet 2.2.2.0124
DSI interface VLAN 2:2.2.2.1124
DS2 interface VLAN 2:2.2.2.2124
Virtual IP HSRP cria VLAN 2:[Link]
VLAN 3: subnet 3.3.3.0124
o
o
o
o
vio VLAN tuong img
Ki6m tra sg lan truy6n th6ng tin VLAN tr6n c6c thi6t bi cdn l4i
o
o
o
o
nlng VLAN (5d)
G6n nhirng port theo hinh vE
5. Ilo4ch
chrfrc
Chi c6u hinh VLAN tr6n DSl, SSW, GSW.
o
o
o
g
o
o
.
vi
DSI interface VLAN 3:3.3.3.1124
DS2 interface
VLAN 3:3.3.3.2124
Virtual IP HSRP cria VLAN 3:[Link]
VLAN 172: subnet 172.16.1.0124
DSI interface VLAN 172:172.16.1.1124
Final Lab 2
TRUNG TAM TIN HQC VNPRO
149llD Ung VEti'Khim, Phudng 25, Qu{n Binh Thph, [Link]
Fax 08 35124314
Tel:08 35124257
Forum: [Link]
Website: [Link]
ciso'&dhortuad
r"'ir,i*
o
o
o
VLAN
o
o
o
o
o
o
v lyJnplq,vn/'sgppqx[
DS2 interface
VLAN 172:
Email: vnplq(@[Link]
172.16.1.2124
GW Fastethernet0/0: 172.16.1.253124
192: subnet 192.168.l.Ol24
DSI interface VLAN 192 192.168.1.1124
DS2 interface VLAN 192:192.168.1.2124
Virtual [P Address: [Link]
Monitor server: 192.168. I .100
DHCP server: [Link]
VLAN l0: subnet 10.10.10.0124
o
o
o
o
o
o
6.
Livechat:
DSI: interface vlan l0: [Link]
DS2: interfacevlan
l0:
[Link]
ASW: interface vlan l0: 10.10.10.1I
GWS: interface vlan
l0:
SSW: interface vlan 10:
[Link]
10.t0:1"0.192
:i. .
Radius Server: [Link]
Cfu hinh STP(S):
.
.
o
C6u hinh STP trn;t6t cd chc switch srl dpng giao
DSI: root switch cho t6t ch
cdc
thfc rapid-pvst.
VLAN.
DS2: secondary root switch cho t6t ch chc VLAN.
7. Cflu hinh ilinh tuy6n (lOd):
8.
BOt
KirSm tra k6t nOi ttr PC d6u cu6i di5n router GW.
khi ndng illnh tuyi5n cho DSI vd DS2 sri dqng giao thric EIGRP AS
b! DSl, DS2 vi GW.
100 cho 3 thiiSt
Ciu hinh tinh nlng HSRP (10d)
C6u hinh
DSI ld active cho t6t chcirc VLAN 2,3,]92DS2 le standby cho ciic VLAN
tuong img
thi Active
Khi c6ng Fa}l2l bic6
Khi c6ng Fa}l2l hOi pnpc thi DSI l6y lai quyAn Active sau 30 gi0y.
sU cO Aut c6p
sE chuyr5n
cho DS2.
Final Lab 2
/.
i
TRUNG TAM TIN HQC VNPRO
149/lD Ung VIn Khi6m, Phuotrg 25, Qudn Binh Th4nh, [Link]
Fax 08 35124314
Tel:08 35124257
Forum: http:/i [Link]
Website: [Link]
ctsdAuthorissdrraining Livechat:
[Link]
knail: Iqry@glqlg4lg
9. CAu hinh dlch vr; DHCP (5d):
C6u hinh DHCP server c6p ilia chi ttQng dirng dlch vu DHCP. C6c kh6ng gian c6p ip co 2
kh6ng gian:
o
o
o
10.
[Link]/24,default gateway [Link]
3.3.3.0124, default gateway [Link]
Kir5m tra c6p <tia chi IP thdnh c6ng cho PC
gin vdo c6c VLAN 2 vi VLAN
Ciiu hinh tinh 6n tlinh cho STP (10iI):
tinh n[ng Edge Port trong Rapid STP cho i6t ce citc port d6u trgc titip v6i PC,
router, server tr6n tdt ch citc switch.
CAu hinh
C6u hinh tinh ndng b6o vQ t6t ch cfucport niy (Edge Port) tir viQc ngudi dirng gln th6m
cisco switch vio. N6u vi pham sE error disable port tuong fing.
C6u hinh tinh ning b6o vQ DSI vd DS2 tir viQc ASW trd thanh root switch.
11. CAu hinh
tinh ning bflo m$t (10iI):
T6t citcitcportkh6ngsrldpngtr6nASWsEchovioVLAN
VIAN100 tr6n t6t cachc dudng trunk tr6n c6c switch.
C6u hinh ASW sao cho tdt ch chc port d6u v6i PC chi cho ph6p I PC tuong img gin vio.
Ni5u ngudi dirng gfn th6m switch/hub vd cho PC gin vdo dfr liQu cria PC ti6p theo sE bl
l00,c6runafficcria
drop.
.
o
o
C6u hinh ASW sao bho c5c user trong cirng vlan 3 kh6ng thi5 truy cflp l6n nhau
C6u hinh DS2 c6ngF0l22 sao cho niSu Radius Server tU
D6m b6o chi c6 DHCP server ld
12. Cdu hinh
.
o
.
o
d0i IP
sE shutdown
port
c c6'p IP address.
quin $ truy c$p thiiit bivir gi6m
srit
traffic
(1011):
Cdu Radius vd tao account "vnpro" vd password ld "vnpro"
C6u hinh khi telnet/console vio c6c thiiSt biphei dirng account trOn Radius, backup dirng
account local ("cisco" password ld "cisco").
Kiiim tra telnet/console thdnh c6ng.
Mgi traffic gti nhfn tr6n c6ng F0/24-SSW
13. C6u
du-o.
<Iu
phni gui vC server monitor (cdi wireshark)
hinh ra Internet (10tI):
86 sung c6u hinh default route tinh tr0n cric thitit b!tuong ung tl6 PC cria ngudi dirng
cu6i c6 th ra Internet (ping th5y [Link]).
Final Lab2
-'i
