Configure a Vlan for a Cisco Switch

* Vlan configuration ideas (access and Trunk) (1) create a Vlan and configure a static VLAN on an IOS-based switch: switch # vlandatabaseswitch (vlan) # vlanvlan-numnamevlan-nameswitch (vlan) # exitswitch # configureteriminalswitch (config) # interfaceinterfacemodu

* Vlan configuration ideas (access and Trunk) (1) create a Vlan and configure a static VLAN on the IOS-based switch: switch # vlan database switch (vlan) # vlan-num name vlan-name switch (vlan) # exit switch # configure teriminal switch (config) # interface modu

* VlanConfigurationConcept (access, Trunk) (1) create a Vlan In IOS-basedVswitchUpperConfigurationStatic VLAN: Switch # vlan database Switch (vlan) # vlan-num name vlan-name Switch (vlan) # exit Switch # configure teriminal Switch (config) # interface module/number Switch (config-if) # switchport mode access // set the port mode to access Switch (config-if) # switchport access vlan-num // set the vlan to which the port belongs Switch (config-if) # end VerificationConfiguration: Show vlan (2)ConfigurationTrunk Link Dry track is in two catalystVswitchPort or catalystVswitchA point-to-point link with the router. Trunk links can carry multiple VLANs. In IOS-basedVswitchUpperConfigurationTrunk Link Switch (config) # interface mod/port Switch (config-if) # switchport modeTrunk// Set the port modeTrunkMode Switch (config-if) # switchport trunk encapsulation {isl dotlq} // set the frame encapsulated by trunk Switch (config-if) # switchport trunk allowed vlan remove vlan-list // allow those VLANs to pass through trunk (Appendix: switchport trunk allowed vlan {add all outer t remove} vlan-list) * No switchport No switchport // change the physical port to a layer-3 Port, that is, the layer-3 port is used as the port on the router.ConfigurationAfter the layer-3 port is configured, you can allocate an IP address on the port. Of course, you can still connect to the PC ,. Router port: indicates a physical portConfigurationThe port generated by the no switchport command in the status. All the three layers require IP addresses for Route exchange. ConfigurationExample: Switch # configure terminal Switch (config) # interface gigabitethernet0/2 Switch (config-if) # no switchport Switch (config-if) # ip address 192.20.135.21 255.255.255.0 Switch (config-if) # no shutdown Switch (config-if) # end Appendix: show interfaces [interface-id] switchport // display the status of the L2 port, which can be used to determine whether the port is a L2 or L3 port. Eg: Switch # show interfaces fastethernet 0/1 switchport * Layer 3VswitchVLAN settings (1) Method 1: GeneralConfiguration Switch # configure terminal Switch (config) # vlan 20 Switch (config-vlan) # name test20 Switch (config-vlan) # ip address 1.1.1.1 255.255.255.0 Switch (config-vlan) # end Method 2: enable VLANConfiguration: Switch # vlan database // enter the VLANConfigurationStatus Switch (vlan) # vlan 20 name test20 // Add the vlan id and VLAN name Switch (vlan) # exit update the VLAN database and exit (2) allocate a port to a VLAN Switch # configure terminal Switch (config) # interface fastethernet0/1 Switch (config-if) # switchport mode access // defines the working mode of the L2 port as the access mode Switch (config-if) # switchport access vlan 2 // assign a port to a VLAN Switch (config-if) # end Switch # (3)ConfigurationVLAN Trunks Switch # configure terminal Switch (config) # interface fastethernet0/4 Switch (config-if) # switchport mode trunk Switch (config-if) # switchport trunk encapsulation dot1q Switch (config-if) # end Appendix: switchport trunk encapsulation {isl dot1q negotiate }//ConfigurationTrunk encapsulates ISL or 802.1Q or automatically negotiates Switchport mode {dynamic {auto desirable} trunk} (usually not used ),ConfigurationLayer 2 trunk mode. (Dynamic auto-automatically negotiate whether it is a trunk; dynamic desirable-set the port to trunk if the peer port is trunk, desirable, or automatic mode; trunk-set the port to the forced trunk mode, regardless of whether the other port is trunk) (4) define the VLAN allowed by the trunk Switch (config) # interface fastethernet0/1 Switch (config-if) # switchport trunk allowed vlan remove 2 //ConfigurationVLAN allowed by trunk Switch (config-if) # end Appendix: switchport trunk allowed vlan {add all subnet t remove} vlan-list (5)ConfigurationNative VLAN (802.1q) Switch (config-if) # switchport trunk native vlan-num // The trunk port that encapsulates 802.1q can accept data streams with or without tags,VswitchTransmits unlabeled data streams to the native vlan. By default, the native VLAN is VLAN 1. Use no switchport trunk native vlan PortConfigurationThe command returns to the default status. (6)ConfigurationA group of Ports 4006 # configure terminal 4006 (config) # interface range fastethernet2/1-5 4006 (config-if-range) # no shutdown // Note: a space must be added between the port numbers. For example, interface range fastethernet 2/1-5 is valid, while interface range fastethernet 2/1-5 is invalid. The following example shows how to use a commaConfigurationGroups with different port types: 4006 # configure terminal 4006 (config) # interface range fastethernet2/1-3, gigabitethernet3/1-2 4006 (config-if-range) # no shutdown (7) Other Common commands Duplex {auto full half} // set full or half duplex. Speed {10 100 1000 auto nonegotiate} sets the port speed // Note: 1000 only works on Gigabit ports. the GBIC module only works at 1000 Mbps. nonegotiate can only use 1000BASE-SX,-LX, and-zx gbic on these GBIC. Copy running-config startup-config // Save settings (8)ConfigurationEtherChannel Several Ethernet ports are bound to an independent Logical Link. For example, 4006Vswitch, You can bind up to eight compatible ports with the same speed on any module of 4006. Each Ethernet channel has a port-channel port number. To bind an Ethernet channel, a logical port-channel is generated.ConfigurationIt can affect the bound physical ports, butConfigurationThe logical port cannot be affected.Configuration. 1) layer-3 Ethernet channel (logical port-channe)Configuration Switch # configure terminal Switch (config) # interface port-channel 1 // create a logical port Switch (config-if) # ip address 172.32.52.10 255.255.255.0 Switch (config-if) # end 2) layer-3 physical portConfiguration Switch # configure terminal Switch (config) # interface range fastethernet 5/4-5 (Note: spaces are required) Switch (config-if) # no switchport // change the port to a layer-3 Interface Switch (config-if) # no ip address // confirm that the interface does not existConfigurationIP address Switch (config-if) # channel-group 1 mode desirable Switch (config-if) # end Appendix: Switch (config-if) # channel-group port_channel_number mode {auto desirable on} // Add the physical port to an Ethernet channel and determine the PagP mode. 3) layer-2 Ethernet ChannelConfiguration Switch # configure terminal Switch (config) # interface range fastethernet 5/6-7 (Note: spaces are required) Switch (config-if-range) # channel-group 2 mode desirable Switch (config-if-range) # end Switch # show running-config interface port-channel 2 Building configuration... Current configuration: ! Interface Port-channel2 Switchport access vlan 10 Switchport mode access End Switch #

* How to implement port Aggregation

If you want ConfigurationThe Trunk connection between the two 6509 sets is first connected with gigabit optical fiber, and then respectively ConfigurationThe trunk of the BIND port can use only one pair of optical fiber, or use two pairs of optical fiber as the port channel, ConfigurationAs follows:

When a pair of optical fiber cables are connected Configuration:

Interface GigabitEthernet1/1

No ip address

Switchport

Switchport trunk encapsulation dot1q

Switchport trunk native vlan 1

When connecting two pairs of optical fibers, the port channel must be used to perform the following operations on two 65 Configuration:

Interface port-channe1

No ip address

Switchport

Switchport trunk encapsulation dot1q

Switchport trunk native vlan 1

!

Interface GigabitEthernet1/1

No ip address

Duplex full

Speed1000

Switchport mode trunk

Switchport trunk encapsulation dot1q

Switchport trunk native vlan 1

Channel-group 1 mode on

!

Interface GigabitEthernet1/2

No ip address

Duplex full

Speed1000

Switchport mode trunk

Switchport trunk encapsulation dot1q

Switchport trunk native vlan 1

Channel-group 1 mode on

* VTP Cropping

(1) In IOS-based VswitchUpper ConfigurationVTP mode:

Switch # vlan database

Switch (vlan) # vtp domain-name

Switch (vlan) # vtp {sever cilent transparent}

Switch (vlan) # vtp password

In the CLI-based VswitchUpper ConfigurationVTP mode:

Switch (enable) set vtp [domain-name] [mode {sever cilent transparent}] [password]

(2) In IOS-based VswitchUpper ConfigurationVTP version:

Switch # vlan database

Switch (vlan) # vtp v2-mode

In the CLI-based VswitchUpper ConfigurationVTP version:

Switch (enable) set vtp v2 enable

(3) In IOS-based VswitchStart VTP cropping on:

Switch # vlan database

Switch (vlan) # vtp pruning

In the CLI-based VswitchStart VTP cropping on:

Switch (enable) set vtp pruning enable