0% found this document useful (0 votes)
7 views20 pages

InterVLAN Routing and Switching Guide

This document presents an activity on intermediate switching and inter-VLAN routing. The activity includes configuring a topology with two Cisco Catalyst 2960 switches and three VLANs (10, 20, 30). IP addresses are assigned to the VLANs and ports on the switches. The goal is to configure the VLANs, assign ports to VLANs, and verify the configuration.

Translated by

ScribdTranslations
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
7 views20 pages

InterVLAN Routing and Switching Guide

This document presents an activity on intermediate switching and inter-VLAN routing. The activity includes configuring a topology with two Cisco Catalyst 2960 switches and three VLANs (10, 20, 30). IP addresses are assigned to the VLANs and ports on the switches. The goal is to configure the VLANs, assign ports to VLANs, and verify the configuration.

Translated by

ScribdTranslations
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Page 1 of 20

Activity 5 - Intermediate Switching and InterVLAN Routing


DATA NETWORK MANAGEMENT
CENTER FOR ADVANCED MANUFACTURING TECHNOLOGY
MEDELLÍN

INTRODUCTION

The switch, as an essential component within data network infrastructures, plays


an important role at the time of implementing certain administrative actions that allow
delimit spaces, apply bulk settings and offer time availability
complete that allows the internal processes of an entity to have an infrastructure
reliable and effective.

The logical division of areas or departments within companies allows for determining and
manage the workspace of an entity by providing organization and ease for the
administrative management of the network, this results in better performance of it. The
the implementation of VLANs allows for flexible management of membership to a
specific network segment, creating virtual LANs in independent and non
necessarily contiguous.

Switching

Switching basically involves moving frames from one place to another.


of a local network, that is, it is used to connect several devices through the same one.
network within the same office or building with the purpose of minimizing collisions
from the same network.

The Ethernet protocol is the communication protocol used in switched networks.


Ethernet is the predominant LAN technology in the world and operates at the link layer.
data and in the physical layer. Ethernet protocol standards define the format, the
size, timing, and encoding of the frames in a network communication; it is for
It is important to know the Ethernet standards that define the layer 2 protocols.
Layer 1 technologies. Some of their main characteristics are:

. Most used LAN technology.


. It operates at the data link layer and at the physical layer.
. Family of network technologies defined in the IEEE standards 802.2 and 802.3.
. It supports data bandwidths of 10, 100, 1000, 10,000, 40,000, and 100,000 Mbps.
100 Gbps.
Page 2 of 20

Keywords

Switching, switching, Ethernet, VLAN, local networks.

OUTLINE OF THE ACTIVITIES


Activity 1: Preparation of the work topology

A VLAN (acronym for Virtual LAN) is a network segment made up of computers


logically grouped, without the need for them to be in the same physical space or connected to
a single Switch. Thus, a Switch can be segmented into several virtual Switches forming
independent network segments called VLAN.
There are several types of VLANs, some are:
Default or default VLAN: it is the VLAN assigned to the switch from the factory,
For Cisco switches, the default VLAN is VLAN 1.

Native VLAN: it is the VLAN associated with the trunk ports of the switch, in case of
that no association will be made will be the same as the default VLAN, that is,
for Cisco devices VLAN 1.

Data VLAN: these are the VLANs through which data traffic flows.

Voice VLAN: they are the VLANs through which the telephone service is distributed.
IP(VoIP)

Administrative VLAN: it is the VLAN that can be created on the Switch to have a
IP within the segment and be able to remotely manage the device.

Before starting to develop the proposed activities in this document, you must
to implement the following topology with its own basic configurations
of a Switch such as:
Name
Access passwords to the console
Access passwords for privileged EXEC mode
Configuración IP. (DIRECCION IP , MASCARA Y GATEWAY)

In addition, you must perform IPv4 addressing (VLSM) and IPv6 (subnets) for three
subnets, for this work will be done for IPv4 with a Class C network [Link]/24 and for IPv6
with the network 2001:1234:1234::/48, taking into account the parameters of the following table:
Page 3 of 20

VLAN SubRed Department No Host

10 1 NETWORKS 10

20 2 MAINTENANCE 70

30 3 ADSI 20

Note 1: The VLAN interfaces of the switches that we are going to use in this
implementation does not support IPv6 addressing so only the
remote management of these devices with IPv4.

Note2: The two switches form a different subnet than the corresponding subnets.
to the VLANs, this network is used as an administrative network for active devices, this network
is composed in this case of two devices, that is, the two switches, therefore both
they must have an IP within the same network; a different network can be used
[Link]/24 used for IP addressing. A network can be used
[Link]/24; remember that switches share the same network segment and for that reason
they have the same default gateway.

The proposed topology for the work is shown in the following image, for this
implementation and development of all activities contained in this document
You must use the Catalyst 2960 switches.
Página4de20

Activity 2: Configuration and assignment of VLANs

For the creation and assignment of VLANs to the switch ports, carry out the following
steps:

[Link] starting, check the status of the current VLANs, for this run the following
command in privileged mode:

Switch0#show vlan

Note:Check that there is only one VLAN, VLAN 1, which is the VLAN.
default to which all the ports of the Switch belong. Carry out
this step on the two switches belonging to the topology

2. Now proceed to create the VLANs on each Switch, below is a table


relating VLAN ID and VLAN Name.

VLAN ID VLAN NAME

10 NETWORKS

20 MAINTENANCE

30 ADSI

To create the aforementioned VLANs, execute the following commands:

Switch0 Switch1
Switch0>enable Switch1>enable
Switch0#configure terminal Switch1#configure terminal
Switch0(config)#vlan 10 Switch1(config)#vlan 10
Switch0(config-vlan)#name Networks Switch1(config-vlan)#name Networks
Switch0(config-vlan)#exit Switch1(config-vlan)#exit
Switch0(config)#vlan 20 Switch1(config)#vlan 20
Switch0(config-vlan)#name Maintenance Switch1(config-vlan)#name Maintenance
Switch0(config-vlan)#exit Switch1(config-vlan)#exit
Switch0(config)#vlan 30 Switch1(config)#vlan 30
Switch0(config-vlan)#name ADSI Switch1(config-vlan)#name ADSI
Switch0(config-vlan)#exit Switch1(config-vlan)#exit

[Link] creating the VLANs, the switch ports must be assigned to the
respective VLANs created. According to the following table, associate the VLANs with the
ports:
Page 5 of 20

Switch Port VLAN

Switch0 11 10

Switch0 12 20

Switch0 13 30

Switch1 11 10

Switch1 12 20

Switch1 13 30

In order to assign certain ports to the different VLANs, the following are executed
commands; please note that the commands shown below are generic
and you must adjust them according to the requirements of the activity

Switch0 Switch1
Switch0>enable Switch1>enable
Switch0#configure terminal Switch1#configure terminal
Siwtch0(config)#interface FastEthernet 0/[# Siwtch1(config)#interface FastEthernet 0/[#
port port
Siwtch0(config-if)#switchport mode access Siwtch1(config-if)#switchport mode access
Siwtch0(config-if)#switchport access vlan [ID Siwtch1(config-if)#switchport access vlan [ID
VLAN VLAN
Siwtch0(config-if)#exit Siwtch1(config-if)#exit

4. Now check that the ports are associated with the different VLANs as per
activity requirements, for this execute the following command:

Switch1#show vlan

Questions:

a) Execute the command Switch0#show startup-config o Switch0#sh stay store the


configuration file that is stored in the flash of the Switch with the name of
[Link]

b) Execute the command Switch0#show running-config Switch0#sh run and store


the configuration file that is stored in the flash of the Switch with the name
from '[Link]'.
Page 6 of 20

Note:To this end, you can simply select the text on your screen.
interest and 'copy and paste' in notepad and save it as [Link] and as [Link]
respectively.

c) Compare the configuration files '[Link]' and '[Link]', citing the differences.
found between the two configuration files.

d) Run the command Switch0#show vlan brief, answer the following questions

How many VLANs are configured on the Switch?


¿Cuáles son los ID de las Vlans existentes y su respectivo nombre?
What ports belong to the default VLAN?
¿Qué puertos pertenecen a las diferentes Vlan’s (vlan 10, vlan 20 y vlan30)?

e) Take a screenshot of the output of the show Vlan command that evidences the membership.
from the different ports of the Switch.

Respond before proceeding with the lab

Activity 3: Configuration of trunk links.

It can be observed that both PC0 and PC04 belong to VLAN 10 called NETWORKS.
but even though the devices belong to the same VLAN and have addressing within
the same subnet do not have connectivity and this can be verified by pinging between them
equipment; this is because the traffic travels labeled and therefore a type of is needed
special link called trunk link, which allows traffic to flow through it
with different tagging, that is, traffic associated with different VLAN.
With the following steps, you will be able to associate the connection ports between switches as
trunk links and verify connectivity between the equipment.
5. In order to create the trunk link, the access mode of the interface must be changed.
interconnect both switches, for this, execute the following commands:

Switch0 Switch1

Switch0>enable Switch1>enable
Switch0#configure terminal Switch1#configure terminal
Siwtch0(config)#interface FastEthernet 0/# Siwtch1(config)#interface FastEthernet 0/#
Page 7 of 20

Siwtch0(config-if)#switchport mode trunk Siwtch1(config-if)#switchport mode trunk


Siwtch0(config-if)#CTRL-Z Siwtch1(config-if)#CTRL-Z

Note: Observe that the command "interface FastEthernet" is executed in the mode of
general configuration of the Switch and that the parameter '0/#' corresponds to the number of the
interface that interconnects the two switches and will act as a trunk link

6. Now that the trunk links are configured through which it can pass the
labeled traffic of the VLANs, check the connectivity and functionality of the link
trunk. To do this, ping between the devices belonging to the same VLAN

Note: Remember that the switch reduces collision domains, creating a domain of
collision by port, but regarding broadcast domains it remains a domain
shared by all switch ports when it has the default configuration
(VLAN 1 - default VLAN) and no additional VLANs are created; when segmenting the switch
logically (creating VLANs) several virtual switches are created, creating a domain of
Page 8 of 20

unique broadcast for each of the ports associated with the VLANs, thus there exists one for each
VLAN a different broadcast domain.

Questions:

f) Execute the command Switch0#show interfaces trunk answer the following


questions:

Which ports have trunking mode active?


What type of encapsulation does the trunk link have?
Which VLANs are allowed to pass through the trunk link?

g) Execute the following commands on switch1:

Switch1>enable
Switch1#configure terminal
Switch1#interface FastEthernet 0/#

Note: Observe that interface FastEthernet 0/# corresponds to the interface chosen to be
configured in trunk mode.

Switch1(config-if)#switchport trunk allowed vlan 1


Switch1(config-if)#switchport trunk allowed vlan add 10
Switch1(config-if)#switchport trunk allowed vlan add 20
Switch1(config-if)#switchport trunk allowed vlan add 30
Switch1(config-if)#end
Switch1#show interfaces trunk

Answer the following question:

Which VLANs are allowed to transit through the trunk link?

Take a picture evidencing your previous response.

Note1: There are several methods to add VLANs to the trunk port, you can specify
a range (Switch1(config-if)#switchport trunk allowed vlan 1-30) or adding each
one of the VLANs manually as is the case with the commands executed before
this note.
Page 9 of 20

Note2: By default, trunk links allow traffic to pass through.


coming from VLAN 1 to VLAN 1500, you can define whether you want to allow it or not
that certain VLANs traffic circulates through a trunk link.

Respond before continuing with the lab.

Activity 4: Routing between VLAN

As can be seen in the previous points of this document, the VLANs


they correspond to different subnets, and this is how the switch is logically segmented
crear dominios de broadcast independientes, pero para poder interconectar las diferentes
VLANs, that is, different subnet segments require a device capable of
route the traffic from one network to another and that device is the router.

For this activity, basic configuration will be done to allow communication between the different
VLANs created previously, for this it is necessary to add a router (2901) to the
topology with which activities 1 to 4 were worked (to make the connection between the
router and the switch used the GigabitEthernet ports, thus remaining:

Both the router and the switch have their boot sequence, following the system load.
the router enters a dialogue for its respective configuration, we are not going to use
this assistant, since the configurations that will be made do not cover globally
the parameters for the advanced operation of the router; to carry out the configuration
basic that allows configuring the router for Inter-VLAN traffic the following are executed
commands:
Page 10 of 20

7. Enter the interface with which I connect the router to the Switch to activate it

Router(config)#interface gigabitEthernet 0/#


Router(config-if)#no shutdown
Router(config-if)#exit

Note: Observe that the interface gigabitEthernet 0/# corresponds to the chosen interface to be
configured in trunk mode and is directly connected to Switch0. Have
it also states that only the physical interfaces are activated.

8. Create and configure the subinterfaces for each VLAN on the same physical link

Router(config)#interface gigabitEthernet 0/#."id-vlan"


Router(config-subif)#encapsulation dot1Q "id-vlan"
Router(config-subif)#ip address [ip address] [netmask]
Router(config-subif)#ipv6 address [ipv6 address]/[network prefix]
Router(config-subif)#exit

Note1: The gigabitEthernet 0/#."id-vlan" notation corresponds as follows: the #


corresponds to the port number that connects the router to the switch, and the 'id-vlan' corresponds
to the number of the VLAN that is to be assigned to this subinterface (virtual interface).

Note2: The encapsulation notation dot1Q 'idvlan' corresponds as follows: the dot1Q
corresponds to the encapsulation method in this case is dot1Q and the 'id-vlan'
corresponds to the number of the VLAN that will be assigned to this encapsulation.

Note 3: The notation 'IP address' and 'netmak' correspond to a valid IP address within
from the subnet of the devices associated with each VLAN, so if the network address to which
the devices connected to VLAN 10 belong to [Link]/28, then the address
The IP of this subinterface will be the Gateway chosen in that subnet, being the first address.
Valid IP within this [Link]/28.

Note4: The notation 'IPv6 address' and 'network prefix' correspond to an IPv6 address
valid within the subnet of the devices associated with each VLAN, so if the IPv6 address
the network to which the devices connected to VLAN 10 belong is
2001:1234:1234:1::/64, then the IP address of this subinterface will be the Gateway.
chosen in that subnet, being the first valid IPv6 address within it
2001:1234:1234:1::1/64.

Note5: This procedure must be repeated for each of the VLANs desired.
route with the router
Page 11 of 20

[Link], the router is configured with three subinterfaces corresponding to each VLAN.
The virtual ports or subinterfaces on the router have dot1Q encapsulation enabled.
that allows the circulation of tagged traffic from VLANs, but is lacking
configure the port that interconnects the switch with the router, this port must be a link
trunk to allow traffic from the different VLANs to the router, the configuration is
just like it was done to connect both switches. To do this, the following are executed
comandos:

Switch0>enable
Switch0#configure terminal
Siwtch0(config)#interface gigabitEthernet 0/#
Siwtch0(config-if)#switchport mode trunk
Siwtch0(config-if)#CTRL-Z

Note: Observe that the command 'interface gigabitEthernet 0/#' is executed in mode
general configuration of the Switch and that the parameter '0/#' corresponds to the number of the
interface that interconnects the switch with the router.

At this point, all the devices in the topology should have connectivity for that.
ping from a device belonging to a specific VLAN to another device belonging to a
Different VLAN.

Questions:

h) Execute the following commands on the router

Router>enable
Router#show ip interface brief
Router#show ip route

Answer the following questions:

What is the IP address of the GigabitEthernet 0/# interface?


What is the IP address of the GigabitEthernet 0/#.10 interface?
What is the IP address of the GigabitEthernet 0/#.20 interface?
What is the IP address of the GigabitEthernet 0/#.30 interface?
Which networks are directly connected to the router?

i) Record the results of the following topology tests.


Page 12 of 20

Satisfactory PING

Origin Destination IPv4 IPv6

YES NO YES NO

PC4 PC2

PC4 PC1

PC0 PC5

PC0 PC6

PC0 Switch0
N/A
PC1 Switch1

Note: At this point for the previous table all connectivity tests must be
be satisfactory, if there is any that fails, check the previous procedures until
reach this section.

Respond before proceeding with the laboratory

Activity 5: VLAN Trunking Protocol - VTP

Sometimes the growth of the network brings with it the need for new network devices,
manually configuring VLANs is a laborious process for a network that
It has many switches, at this point the management of the VLANs has been carried out in
manual form, the increase of Switches in the infrastructure makes it necessary the
implementation of the VTP protocol, which allows centralized management of VLANs
admitting the replication of configurations to other Switches, returning the management of the
Segmentation, at layer 2 level, of the network into a comfortable and efficient task.

It should be noted that although the VTP protocol replicates basic information of the VLANs
(name, ID and other data), this protocol does not replicate the belonging of the ports to such
VLANs, so in the switches, the membership of the ports to the VLANs will have to be configured.
manually.

Before we start configuring the VTP protocol, we need to add certain components.
additional to the topology that has been worked on, review the following topology and
determine what should be added to the existing topology:
Page 13 of 20

Note: Observe that in the topology there is a new switch (switch2) and that this switch will have
for each existing VLAN a new device, the intention is that the new switch
acquire the VLAN configuration automatically from switch0, so NO
I TRIED TO CREATE THE VLANS MANUALLY, below is the process
to follow in order to achieve the proposed topology.

Before continuing with the VTP protocol configuration, remember to perform the
basic configurations on the new Switch (Switch2), for this I configured
Name
Access passwords for the console
Passwords for access to privileged EXEC mode
IP configuration. (IP ADDRESS, SUBNET MASK AND GATEWAY)
Trunk link configuration (Between Switch1 and Switch2)

Note:Please note that for the moment you should not make any kind of configuration.
VLAN

10. In the new switch (switch2) that has just been added to the topology, run the following
commands
Switch2>enable
Switch2#show vtp status
Page 14 of 20

Questions:

j) After executing the command Switch2#show vtp status, answer:

What is the default version of the VTP protocol of Switch2?


What is the VTP mode with which switches come by default?
without making any modifications to VLANs?
What domain is assigned to them by default?
How many VLANs are supported locally?
What is the value of the VTP revision of this Switch?

Respond before continuing with the laboratory

The following are a series of steps that will allow you to assign the different modes.
VTP to each of the switches in the topology.

11. VTP protocol configuration (VTP Server)


To configure Switch0 in VTP Server mode, execute the following commands:
Switch0>enable
Switch0#configure terminal
Switch0(config)#vtp domain admon-redes

Nota: The Server mode configuration on Switch0 does not need to be done, since
By default, the switches come with VTP server mode enabled to prevent any modification.
to the VLANs that are created manually

12. VTP protocol configuration (VTP Transparent)


To configure Switch1 in VTP Transparent mode, execute the following
commands:

Switch1>enable
Switch1#configure terminal
Switch1(config)#vtp domain admon-redes
Switch1(config)#vtp mode transparent
Switch1(config)#exit
Page 15 of 20

13. VTP protocol configuration (VTP Client)


To configure Switch1 in VTP Client mode, execute the following commands:

Switch2>enable
Switch2#configure terminal
Switch2(config)#vtp domain admon-redes
Switch2(config)#vtp mode client
Switch2(config)#exit

Now, you have made the necessary configurations to replicate the VLANs, only
It is necessary to make some changes to the Switch that acts as the VTP server and verify that the Switch
Transparent VTP allows changes to pass through but does not apply them, while the VTP Switch
the client applies the changes and creates the Vlans automatically.

Note: Please note that when creating VLANs, a file is created in the flash called
[Link] the configuration file contains everything related to VLANs in the
Switch, it is important that when a backup of the files is needed
switch configuration, a backup of this file should also be made, since if not
performing a backup may result in losing all VLAN configurations

Questions:

k) In switch2 execute the command Switch2#show vtp status, starting from the
obtained results respond:

What is the currently configured VTP mode on switch2?


What domain is assigned to switch2?
How many VLANs are supported locally?
What is the value of the VTP revision of this switch?

l) On switch1, execute the command Switch1#show vtp status, starting from the
results obtained respond:

What is the VTP mode currently configured on switch1?


What domain is assigned to switch1?
What is the value of the VTP revision of this switch?

m) Create a new VLAN manually on Switch0 that has the following


parameters:

ID-VLAN=40
Page 16 of 20

Nombre=VTP-VLAN

After creating the VLAN (VTP-VLAN), execute the necessary commands on the
different switches to answer the following questions:

What differences do you find in the review value when compared to the one obtained in Switch2?
in the itemL?
How many VLANs are there in Switch2?
How many VLANs are there in Switch1?
Were the changes from switch0 replicated in switch1? (Y/N) Justify your answer
answer
Are there ports assigned to the new VLANs created on switch2? (Y/N)
Justify your answer

Note: Carry out the assignment of the ports to their respective VLANs, and carry out the
IP configuration required on the PCs, as well as the configuration of the trunk link between
the switch1 and switch0 to allow traffic from the new VLAN (vlan40), so we can already
guarantee full connectivity with the other elements of the topology

n) Record the results of the following tests in the topology

Satisfactory PING

Origin Destiny IPv4 IPv6

YES NO YES NO

PC7 PC5

PC8 PC2

PC9 PC0

Respond before proceeding with the lab.

Activity 6: Basic Security Configuration of the Switch

The Switch, as a device of great value within the functioning of a LAN network, must
have security mechanisms that allow for secure management of our network, from
Page 17 of 20

the access of users through virtual terminals, up to the possible connection of


equipment at exposed network points within our internal network. For this activity
some basic security configurations will be explored for better management of
device.

Security in access passwords.

So far, the configuration of access passwords has been completed.


basic, if the running-config file is checked, it can be observed that the passwords
appear in plain text (they are readable) therefore anyone who manages to access the mode
privileged exec can know the access password to the console and virtual terminals.

There is a very useful command that allows you to encrypt (make unreadable) all passwords.
configured in the system, for this the following command is executed in mode of
global configuration:

Switch2(config)#service password-encryption

From this moment on, all passwords entered will be encrypted. This helps us
keep the access keys hidden.

Security in Switch ports

Access to the connection points by unauthorized personnel is a task that the


network administrators cannot easily control the simple act of disconnecting a
patch cord of the organization's equipment and connect it to someone's external equipment
it is easy and allows access to the internal corporate network. This vulnerability allows for
unauthorized personnel are not allowed to make use of the company's resources, to mitigate this type of
threats can be configured on the switches so that in the event of any attempt
take protective measures against access by an unauthorized device in the entity.

The switch as a layer 2 device in the OSI reference model uses the addresses
MAC to do its job, this is how it takes the MAC address of the devices connected to
the ports to configure the security parameters.

There are several options to configure MAC address learning, which are

Secure static MAC addresses: These are configured manually.


entering the MAC address of the device connected to the port, these addresses
are stored in the address table and are added to the configuration of the
Switch
Page 18 of 20

switchport port-security mac-address MAC address

Dynamic secure MAC addresses: These are learned dynamically,


automatically taking the MAC address of the device connected to a port
specifically, this type of configuration is temporary, which means that it is lost.
said learning when the switch restarts or powers off.

switchport port-security

Secure MAC addresses without modifications: This learns dynamically,


taking the MAC address of the device connected to a port automatically
specifically, this type of configuration is permanent, storing them in the table
to address them and then save them in the Switch configuration

switchport port-security mac-address sticky MAC address


switchport-port-security mac-address sticky

To secure the ports of a switch, the following procedure is carried out:

14. We enter interface configuration mode

Switch(config)#interface fastEthernet 0/#

15. We configure the learning of MAC addresses on the specific port and the action
what will be taken in case of a security breach

Switch(config-if)#switchport mode access


Switch(config-if)#switchport port-security
Switch(config-if)#switchport port-security mac-address sticky
Switch(config-if)#switchport port-security maximum #
Switch(config-if)#switchport port-security violation shutdown
Switch(config-if)#end

Note1: Note that the command "interface FastEthernet" is executed in mode


general configuration of the Switch and the parameter '0/#' corresponds to the number of the
interface that is desired to be secured.

Note2: Note that the command "switchport port-security mac-address sticky" is


run in interface configuration mode and allow dynamic learning of the
MAC address of the device connected to that port. For the Switch to be able to learn
the MAC address of the device connected to the specific port must exist in some way
of traffic, for this I performed a ping from the PC to the Gateway of the subnet.
Page 19 of 20

Note3: Observe that the command 'switchport port-security maximum' is executed in the
configuration mode interface and the parameter "#" indicates the number of addresses
maximum MACs that will be allowed on that port.

Note 4: Please note that the command 'switchport port-security violation' is executed on the
interface configuration mode and the parameter 'shutdown' indicates the action that is
take over the interface when a security breach occurs.

Questions:

o) On any of the Switches where security was configured on the port


execute the command Switch#show port-security interface fastEthernet 0/#,a
Based on the results obtained, respond:

What is the state of security at the port?


What is the mode of violation?
How many MACs are enabled for this port?

Note: Observe that the command "show port-security interface FastEthernet" is executed
in the general configuration mode of the Switch and the parameter "0/#" corresponds to the
interface number that was secured.

p) On any of the Switches where security was configured on the port


execute the command Switch#show port-security address, based on the results
obtained respond

What is the MAC address learned on the port and which VLAN does it belong to?

Change the MAC address of the device that is connected to the switch port.
which configured the security, for this click on the PC, go to the tab
Config, and select the FastEthernet section, there in the MAC Address section change
some of the digits of the MAC address. Please answer the following question:

What is the current status of the interface to which the PC is connected?


Did the MAC address change?

Finally, run on the Switch where the security breach occurred


commandSwitch#show port-security interface fastEthernet 0/#,starting from the
obtained results respond:

What is the value of the security breach counter?


What is the value of the port status?
Page 20 of 20

EVIDENCES TO BE SUBMITTED:

Performance evidence

Complete development of the activities proposed in: activity 5: Intermediate Switching and
InterVLAN Routing

Evidence of knowledge

Report in PDF format with the answers to each of the questions

Product evidence

Report in PDF format with images captured from each process.

Prepared by: Date 14 04 2020


Andres Mauricio Ortiz Morales
Laura Helena Valderrama Lopez

You might also like