Experiment No: 03
Experiment Name: VLAN configuration.
Objective:
The objective of this lab report is to document the successful configuration and
implementation of Virtual Local Area Networks (VLANs) within a network environment,
encompassing the creation of VLANs, port assignment, and inter-VLAN communication
setup. Through this practical exercise, the aim is to comprehend the fundamental concept and
advantages of VLANs, showcasing their ability to enhance network performance, security,
and management by logically segmenting the network into isolated segments while allowing
controlled communication between them.
Theory:
The lab report explores the theory and practical implementation of Virtual Local Area
Networks (VLANs) in a network infrastructure. VLANs are utilized to segment a single
physical network into multiple logical networks, enhancing network management, security,
and efficiency. This segmentation is achieved by grouping devices with similar requirements
or purposes into the same VLAN, isolating their communication from devices in other
VLANs. VLANs are configured on network switches, where each VLAN is assigned a
unique identifier (VLAN ID) and can be associated with specific ports. Inter-VLAN
communication is facilitated through routing, either using a Layer 3 switch or an external
router, allowing controlled data exchange between VLANs. By effectively isolating network
traffic, VLANs optimize network performance, simplify network administration, and provide
a layer of security by limiting communication between devices to only those within the same
VLAN.
Equipment:
1. Cisco switch (model: Cisco Catalyst 2960 series)
2. Console cable
3. PCs for testing
4. Ethernet cables
5. Terminal emulation software.
Working Procedure:
To implement this practical following network topology is required to be configured using
the VLAN commands. After configuring the given network, a packet should be ping from any
one machine to another.
Task 1: Prepare the Network
Step 1: Cable a network that is similar to the one in the topology diagram.
Any current switch can be used as it has the required interfaces that will be shown in the
network topology.
Step 2: Clear any existing configurations on the switches, and initialize all ports in the
shutdown state.
Task 2: Perform Basic Switch Configurations
Step 1: Configure the switches according to the following guidelines.
· Configure the switch hostname.
· Disable DNS lookup.
· Configure an EXEC mode password of class.
· Configure a password of cisco for console connections.
· Configure a password of cisco for vty connections.
Step 2: Re-enable the user ports on S2 and S3
Task 3: Configure and Activate Ethernet Interfaces.
Step 1: Configure the PCs.
we can complete this lab using only two PCs by simply changing the IP addressing for the
two PCs specific to a test you want to conduct.
Task 4: Configure VLANs on the Switch
Step 1: Create VLANs on switch S1.
Using the vlan vlan-id command in global configuration mode to add a VLAN to switch S1.
There are four VLANS configured for this lab: VLAN 10 (faculty/staff); VLAN 20
(students); VLAN 30 (guest); and VLAN 99 (management). After you create the VLAN, you
will be in vlan configuration mode, where you can assign a name to the VLAN with the
name. VLAN name command,
Step 2: Verify that the VLANs have been created on S1.
Use the show VLAN brief command to verify that the VLANs have been created.
Network Topology:
Result:
The VLAN configuration was successfully implemented, creating distinct broadcast domains
for different segments of the network. Inter-VLAN routing was established, enabling
communication between devices in separate VLANs. Testing confirmed seamless
connectivity within individual VLANs as well as effective data exchange between different
VLANs. This demonstrated the successful segmentation of the network for improved
security, optimized performance, and efficient resource allocation.
Discussion:
In this discussion, the practical implementation of Virtual Local Area Networks (VLANs)
was examined, revealing their transformative impact on network segmentation, security, and
management. By successfully creating and configuring VLANs, we achieved a clear
understanding of how network switches can be organized into distinct virtual networks, each
with its own purpose and access controls. The process of assigning ports to specific VLANs
demonstrated the precise control administrators have over network traffic flow, reducing
unnecessary communication and enhancing security. The implementation of inter-VLAN
communication highlighted the crucial role of routing in enabling controlled data exchange
between these segmented networks. This lab reinforced the notion that VLANs significantly
enhance network performance by isolating broadcast domains and optimizing resource
utilization. Notably, VLANs also simplify network management, allowing tailored
configurations for each VLAN, streamlining administration tasks. Looking ahead, this lab
underscores the practical relevance of VLANs in scenarios ranging from multi-tenancy to
compliance, while also pointing toward advanced areas of exploration like VLAN Trucking
Protocol and more intricate network architectures. Overall, this practical experience deepened
our comprehension of VLANs as a vital tool for modern network design and operation,
offering tangible benefits in terms of organization, security, efficiency, and adaptability.