VLAN Configuration Lab using Cisco

Packet Tracer
Introduction
In this lab, students will learn how to configure VLANs (Virtual Local Area Networks) using
Cisco Packet Tracer. VLANs allow network administrators to segment networks logically,
separating different types of traffic for security and performance reasons. By the end of this
lab, students should understand how to create and configure VLANs, assign ports to VLANs,
and verify VLAN configurations.

What is a VLAN (virtual LAN)?

A virtual LAN (VLAN) is a logical overlay network that groups a subset of devices that share
a physical LAN, isolating the traffic for each group.

A LAN is a group of computers or other devices in the same place -- e.g., the same building
or campus -- that share the same physical network. A LAN is usually associated with an
Ethernet (Layer 2) broadcast domain, which is the set of network devices an Ethernet
broadcast packet can reach.

Computers on the LAN connect to the same network switch, either directly or through
wireless access points (APs) connected to the same switch. Computers can also connect to
one of a set of interconnected switches, such as access switches that connect to a backbone
switch. Once traffic crosses a router and engages Layer 3 (IP-related) functions, it is not
considered to be on the same LAN, even if everything stays in the same building or floor. As
a result, a location could have many interconnected LANs.

Like the LAN it sits atop, a VLAN operates at Layer 2 of the network, the Ethernet level.
VLANs partition a single switched network into a set of overlaid virtual networks that can
meet different functional and security requirements. This partitioning avoids having
multiple, distinct physical networks for different use cases.

Objectives
1. Understand the concept of VLANs and their use in network segmentation.
2. Create VLANs on a Cisco switch using Cisco Packet Tracer.
3. Assign switch ports to VLANs.
4. Verify the VLAN configuration using show commands.
Equipment Required
1. Cisco Packet Tracer software.
2. Three PCs.
3. One Cisco 2960 switch.
4. Ethernet cables for connecting devices.

Network Topology
In this lab, we will create a simple network consisting of three PCs and a switch. Two VLANs
will be created to segregate the PCs into different virtual networks. PC1 and PC2 will be in
VLAN 10, while PC3 will be in VLAN 20.

Lab Instructions

Step 1: Create VLANs

1. Open Cisco Packet Tracer and add a Cisco 2960 switch and three PCs to the workspace.
2. Connect each PC to the switch using Ethernet cables.
3. Open the CLI of the switch.
4. Enter the following commands to create VLAN 10 and VLAN 20:

```
Switch> enable
Switch# configure terminal
Switch(config)# vlan 10
Switch(config-vlan)# name VLAN10
Switch(config-vlan)# exit
Switch(config)# vlan 20
Switch(config-vlan)# name VLAN20
Switch(config-vlan)# exit
```

Step 2: Assign Ports to VLANs

1. Assign the ports connecting to PC1 and PC2 to VLAN 10:

```
Switch(config)# interface range fastethernet 0/1-2
Switch(config-if-range)# switchport mode access
Switch(config-if-range)# switchport access vlan 10
Switch(config-if-range)# exit
```
2. Assign the port connecting to PC3 to VLAN 20:
 ```
Switch(config)# interface fastethernet 0/3
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 20
Switch(config-if)# exit
```

Step 3: Verify VLAN Configuration

1. Use the following command to verify that the VLANs have been created and the ports
have been assigned to the correct VLANs:

```
Switch# show vlan brief
```
This command will display a table listing all VLANs and the ports assigned to each VLAN.

Step 4: Test Connectivity

1. Assign IP addresses to the PCs as follows:

PC1: 192.168.10.1/24
PC2: 192.168.10.2/24
PC3: 192.168.20.1/24

2. Try to ping between PCs within the same VLAN:

- PC1 should be able to ping PC2 (both in VLAN 10).
- PC3 should not be able to ping either PC1 or PC2 (PC3 is in VLAN 20).

3. Verify that traffic is properly segmented between VLANs.

 Lab2-2

Post-Lab Questions:

1. What is the purpose of VLANs in a network?

2. How do you create and assign a VLAN to an interface on a Cisco router or switch?

3. What are some benefits of using VLANs for network segmentation?

Required Devices:

 1 Router

 1 Switch

 4 PCs

 Ethernet cables

Steps:

1. Start Packet Tracer:

o Open Packet Tracer and create a new project.

2. Add Devices:
 o Drag and drop 1 router, 1 switch, and 4 PCs onto the workspace.

3. Connect Devices:

o Use straight-through cables to connect the router to the first switch.

o Connect each PC to a switch using straight-through cables.

4. Configure VLANs on Switches:

o Select the first switch and enter the CLI.

o Create VLANs:

o Switch> enable

o Switch# configure terminal

o Switch(config)# vlan 10

o Switch(config-vlan)# name VLAN10

o Switch(config-vlan)# vlan 20

o Switch(config-vlan)# name VLAN20

o Switch(config-vlan)# exit

5. Assign Ports to VLANs:

o Assign ports to VLANs on each switch:

o Switch(config)# interface range fastethernet 0/1-2

o Switch(config-if-range)# switchport mode access

o Switch(config-if-range)# switchport access vlan 10

o Switch(config-if-range)# exit

o Switch(config)# interface range fastethernet 0/10-11

o Switch(config-if-range)# switchport mode access

o Switch(config-if-range)# switchport access vlan 20

o Switch(config-if-range)# exit

6. Configure Inter-VLAN Routing on Router:

o Enter the router’s CLI and configure sub-interfaces:

 o Router> enable

o Router# configure terminal

o Router(config)# interface fastethernet 0/0.10

o Router(config-subif)# encapsulation dot1Q 10

o Router(config-subif)# ip address 192.168.10.1 255.255.255.0

o Router(config-subif)# exit

o Router(config)# interface fastethernet 0/0.20

o Router(config-subif)# encapsulation dot1Q 20

o Router(config-subif)# ip address 192.168.20.1 255.255.255.0

o Router(config-subif)# exit

7. Assign IP Addresses to PCs:

o Configure IP addresses on each PC:

 PCs in VLAN 10: 192.168.10.2/24, 192.168.10.3/24

 PCs in VLAN 20: 192.168.20.2/24, 192.168.20.3/24

8. Test Connectivity:

o Ping between PCs in the same VLAN to ensure they can communicate.

o Ping between PCs in different VLANs to test inter-VLAN routing.

Saving the Lab in a Word Document

1. Document the Steps:

o Open Microsoft Word.

o Document each step with screenshots from Packet Tracer.

o Include the configuration commands used.