SlideShare a Scribd company logo
Module 3: VLANs
Instructor Materials
Switching, Routing, and
Wireless Essentials v7.0
(SRWE)
3
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
▪ To facilitate learning, the following features within the GUI may be included in this module:
What to Expect in this Module
Feature Description
Animations Expose learners to new skills and concepts.
Videos
Expose learners to new skills and concepts.
Check Your
Understanding(CYU)
Per topic online quiz to help learners gauge content understanding.
Interactive Activities A variety of formats to help learners gauge content understanding.
Syntax Checker
Small simulations that expose learners to Cisco command line to practice
configuration skills.
PT Activity
Simulation and modeling activities designed to explore, acquire, reinforce, and
expand skills.
4
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
What to Expect in this Module (Cont.)
▪ To facilitate learning, the following features may be included in this module:
Module 3: VLANs
Switching, Routing, and
Wireless Essentials v7.0
(SRWE)
14
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Module Objectives
Module Title: Protocols and Models
Module Objective: Explain how network protocols enable devices to access local and remote
network resources.
Topic Title Topic Objective
Overview of VLANs Explain the purpose of VLANs in a switched network.
VLANs in a Multi-Switched
Environment
Explain how a switch forwards frames based on VLAN configuration
in a multi-switch environment.
VLAN Configuration
Configure a switch port to be assigned to a VLAN based on
requirements.
VLAN Trunks Configure a trunk port on a LAN switch.
Dynamic Trunking Protocol Configure Dynamic Trunking Protocol (DTP).
15
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
3.1 Overview of VLANs
16
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Overview of VLANs
VLAN Definitions
VLANs are logical connections with other similar
devices.
Placing devices into various VLANs have the
following characteristics:
• Provides segmentation of the various groups
of devices on the same switches
• Provide organization that is more
manageable
• Broadcasts, multicasts and unicasts are
isolated in the individual VLAN
• Each VLAN will have its own unique range
of IP addressing
• Smaller broadcast domains
17
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Overview of VLANs
Benefits of a VLAN Design
Benefits of using VLANs are as
follows:
Benefits Description
Smaller Broadcast
Domains
Dividing the LAN reduces the number of broadcast domains
Improved Security Only users in the same VLAN can communicate together
Improved IT Efficiency VLANs can group devices with similar requirements, e.g. faculty vs.
students
Reduced Cost One switch can support multiple groups or VLANs
Better Performance Small broadcast domains reduce traffic, improving bandwidth
Simpler Management Similar groups will need similar applications and other network resources
18
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Overview of VLANs
Types of VLANs
Default VLAN
VLAN 1 is the following:
• The default VLAN
• The default Native VLAN
• The default Management
VLAN
• Cannot be deleted or
renamed
Note: While we cannot delete
VLAN1 Cisco will recommend
that we assign these default
features to other VLANs
19
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Overview of VLANs
Types of VLANs (Cont.)
Data VLAN
• Dedicated to user-generated traffic (email and web traffic).
• VLAN 1 is the default data VLAN because all interfaces are assigned to this VLAN.
Native VLAN
• This is used for trunk links only.
• All frames are tagged on an 802.1Q trunk link except for those on the native VLAN.
Management VLAN
• This is used for SSH/Telnet VTY traffic and should not be carried with end user traffic.
• Typically, the VLAN that is the SVI for the Layer 2 switch.
20
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Overview of VLANs
Types of VLANs (Cont.)
Voice VLAN
• A separate VLAN is required because Voice
traffic requires:
• Assured bandwidth
• High QoS priority
• Ability to avoid congestion
• Delay less that 150 ms from source to
destination
• The entire network must be designed to
support voice.
21
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Overview of VLANs
Packet Tracer – Who Hears the Broadcast?
In this Packet Tracer activity, you will do the following:
• Observe Broadcast Traffic in a VLAN Implementation
• Complete Review Questions
22
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
3.2 VLANs in a
Multi-Switched Environment
23
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLANs in a Multi-Switched Environment
Defining VLAN Trunks
A trunk is a point-to-point link between
two network devices.
Cisco trunk functions:
• Allow more than one VLAN
• Extend the VLAN across the entire
network
• By default, supports all VLANs
• Supports 802.1Q trunking
24
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLANs in a Multi-Switched Environment
Networks without VLANs
Without VLANs, all devices connected to the switches will receive all unicast, multicast, and
broadcast traffic.
25
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLANs in a Multi-Switched Environment
Networks with VLANs
With VLANs, unicast, multicast, and broadcast traffic is confined to a VLAN. Without a Layer
3 device to connect the VLANs, devices in different VLANs cannot communicate.
26
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLANs in a Multi-Switched Environment
VLAN Identification with a Tag
• The IEEE 802.1Q header is 4 Bytes
• When the tag is created the FCS must be
recalculated.
• When sent to end devices, this tag must be removed
and the FCS recalculated back to its original number.
802.1Q VLAN Tag Field Function
Type • 2-Byte field with hexadecimal 0x8100
• This is referred to as Tag Protocol ID (TPID)
User Priority • 3-bit value that supports
Canonical Format Identifier (CFI) • 1-bit value that can support token ring frames on Ethernet
VLAN ID (VID) • 12-bit VLAN identifier that can support up to 4096 VLANs
27
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLANs in a Multi-Switched Environment
Native VLANs and 802.1Q Tagging
802.1Q trunk basics:
• Tagging is typically done on all VLANs.
• The use of a native VLAN was designed for
legacy use, like the hub in the example.
• Unless changed, VLAN1 is the native VLAN.
• Both ends of a trunk link must be configured
with the same native VLAN.
• Each trunk is configured separately, so it is
possible to have a different native VLANs on
separate trunks.
28
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLANs in a Multi-Switched Environment
Voice VLAN Tagging
The VoIP phone is a three port switch:
• The switch will use CDP to inform the phone of the Voice
VLAN.
• The phone will tag its own traffic (Voice) and can set Cost
of Service (CoS). CoS is QoS for layer 2.
• The phone may or may not tag frames from the PC.
Traffic Tagging Function
Voice VLAN tagged with an appropriate Layer 2 class of service (CoS) priority value
Access VLAN can also be tagged with a Layer 2 CoS priority value
Access VLAN is not tagged (no Layer 2 CoS priority value)
29
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLANs in a Multi-Switched Environment
Voice VLAN Verification Example
The show interfaces fa0/18 switchport command can show us both data and voice
VLANs assigned to the interface.
30
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLANs in a Multi-Switched Environment
Packet Tracer – Investigate a VLAN Implementation
In this Packet Tracer activity, you will:
• Part 1: Observe Broadcast Traffic in a VLAN Implementation
• Part 2: Observe Broadcast Traffic without VLANs
31
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
3.3 VLAN Configuration
32
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Configuration
VLAN Ranges on Catalyst Switches
Catalyst switches 2960 and 3650 support over
4000 VLANs.
Normal Range VLAN 1 – 1005 Extended Range VLAN 1006 - 4095
Used in Small to Medium sized businesses Used by Service Providers
1002 – 1005 are reserved for legacy VLANs Are in Running-Config
1, 1002 – 1005 are auto created and cannot
be deleted
Supports fewer VLAN features
Stored in the vlan.dat file in flash Requires VTP configurations
VTP can synchronize between switches
33
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Configuration
VLAN Creation Commands
VLAN details are stored in the vlan.dat file. You create VLANs in the global
configuration mode.
Task IOS Command
Enter global configuration mode. Switch# configure terminal
Create a VLAN with a valid ID number. Switch(config)# vlan vlan-id
Specify a unique name to identify the
VLAN.
Switch(config-vlan)# name vlan-name
Return to the privileged EXEC mode. Switch(config-vlan)# end
Enter global configuration mode. Switch# configure terminal
34
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Configuration
VLAN Creation Example
• If the Student PC is going to be in
VLAN 20, we will create the VLAN first
and then name it.
• If you do not name it, the Cisco IOS
will give it a default name of vlan and
the four digit number of the VLAN. E.g.
vlan0020 for VLAN 20.
Prompt Command
S1# Configure terminal
S1(config)# vlan 20
S1(config-vlan)# name student
S1(config-vlan)# end
35
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Configuration
VLAN Port Assignment Commands
Once the VLAN is created, we can then assign it to the correct interfaces.
Task Command
Enter global configuration mode. Switch# configure terminal
Enter interface configuration mode. Switch(config)# interface interface-id
Set the port to access mode. Switch(config-if)# switchport mode access
Assign the port to a VLAN. Switch(config-if)# switchport access vlan vlan-id
Return to the privileged EXEC mode. Switch(config-if)# end
36
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Configuration
VLAN Port Assignment Example
We can assign the VLAN to the port
interface.
• Once the device is assigned the
VLAN, then the end device will need
the IP address information for that
VLAN
• Here, Student PC receives
172.17.20.22
Prompt Command
S1# Configure terminal
S1(config)# Interface fa0/18
S1(config-if)# Switchport mode access
S1(config-if)# Switchport access vlan 20
S1(config-if)# end
37
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Configuration
Data and Voice VLANs
An access port may only be
assigned to one data VLAN.
However it may also be assigned to
one Voice VLAN for when a phone
and an end device are off of the
same switchport.
38
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Configuration
Data and Voice VLAN Example
• We will want to create and name both Voice
and Data VLANs.
• In addition to assigning the data VLAN, we
will also assign the Voice VLAN and turn on
QoS for the voice traffic to the interface.
• The newer catalyst switch will automatically
create the VLAN, if it does not already exist,
when it is assigned to an interface.
Note: QoS is beyond the scope of this course.
Here we do show the use of the mls qos trust
[cos | device cisco-phone | dscp | ip-
precedence] command.
39
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Configuration
Verify VLAN Information
Use the show vlan command. The
complete syntax is:
show vlan [brief | id vlan-id | name
vlan-name | summary]
Task Command Option
Display VLAN name, status, and its ports one VLAN per line. brief
Display information about the identified VLAN ID number. id vlan-id
Display information about the identified VLAN name. The vlan-name
is an ASCII string from 1 to 32 characters.
name vlan-name
Display VLAN summary information. summary
40
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Configuration
Change VLAN Port Membership
There are a number of ways to change VLAN
membership:
• re-enter switchport access vlan vlan-id
command
• use the no switchport access vlan to
place interface back in VLAN 1
Use the show vlan brief or the show
interface fa0/18 switchport commands to
verify the correct VLAN association.
41
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Configuration
Delete VLANs
Delete VLANs with the no vlan vlan-id command.
Caution: Before deleting a VLAN, reassign all member ports to a different VLAN.
• Delete all VLANs with the delete flash:vlan.dat or delete vlan.dat commands.
• Reload the switch when deleting all VLANs.
Note: To restore to factory default – unplug all data cables, erase the startup-configuration
and delete the vlan.dat file, then reload the device.
42
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Configuration
Packet Tracer – VLAN Configuration
In this Packet Tracer activity, you will perform the following:
• Verify the Default VLAN Configuration
• Configure VLANs
• Assign VLANs to Ports
43
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
3.4 VLAN Trunks
44
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Trunks
Trunk Configuration Commands
Configure and verify VLAN trunks. Trunks are layer 2 and carry traffic for all VLANs.
Task IOS Command
Enter global configuration mode. Switch# configure terminal
Enter interface configuration mode. Switch(config)# interface interface-id
Set the port to permanent trunking mode. Switch(config-if)# switchport mode trunk
Sets the native VLAN to something other
than VLAN 1.
Switch(config-if)# switchport trunk native vlan
vlan-id
Specify the list of VLANs to be allowed on
the trunk link.
Switch(config-if)# switchport trunk allowed
vlan vlan-list
Return to the privileged EXEC mode. Switch(config-if)# end
45
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Trunks
Trunk Configuration Example
The subnets associated with each VLAN are:
• VLAN 10 - Faculty/Staff - 172.17.10.0/24
• VLAN 20 - Students - 172.17.20.0/24
• VLAN 30 - Guests - 172.17.30.0/24
• VLAN 99 - Native - 172.17.99.0/24
F0/1 port on S1 is configured as
a trunk port.
Note: This assumes a 2960
switch using 802.1q tagging.
Layer 3 switches require the
encapsulation to be configured
before the trunk mode.
Prompt Command
S1(config)# Interface fa0/1
S1(config-if)# Switchport mode trunk
S1(config-if)# Switchport trunk native vlan 99
S1(config-if)# Switchport trunk allowed vlan 10,20,30,99
S1(config-if)# end
46
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Trunks
Verify Trunk Configuration
Set the trunk mode and native vlan.
Notice sh int fa0/1 switchport command:
• Is set to trunk administratively
• Is set as trunk operationally (functioning)
• Encapsulation is dot1q
• Native VLAN set to VLAN 99
• All VLANs created on the switch will pass
traffic on this trunk
47
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Trunks
Reset the Trunk to the Default State
• Reset the default trunk settings with
the no command.
• All VLANs allowed to pass traffic
• Native VLAN = VLAN 1
• Verify the default settings with a
sh int fa0/1 switchport command.
48
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Trunks
Reset the Trunk to the Default State (Cont.)
Reset the trunk to an access mode with the
switchport mode access command:
• Is set to an access interface administratively
• Is set as an access interface operationally
(functioning)
49
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Trunks
Packet Tracer – Configure Trunks
In this Packet Tracer activity, you will perform the following:
• Verify VLANs
• Configure Trunks
50
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
VLAN Trunks
Packet Tracer – Configure VLANs and Trunking – Physical Mode
Lab – Configure VLANs and Trunking
In this Packet Tracer Physical Mode activity and in the Lab, you will complete the
following objectives:
• Build the Network and Configure Basic Device Settings
• Create VLANs and Assign Switch Ports
• Maintain VLAN Port Assignments and the VLAN Database
• Configure an 802.1Q Trunk Between the Switches
• Delete the VLAN Database (In the Lab only.)
51
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
3.5 Dynamic Trunking Protocol
52
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Dynamic Trunking Protocol
Introduction to DTP
Dynamic Trunking Protocol (DTP) is a proprietary Cisco protocol.
DTP characteristics are as follows:
• On by default on Catalyst 2960 and 2950 switches
• Dynamic-auto is default on the 2960 and 2950 switches
• May be turned off with the nonegotiate command
• May be turned back on by setting the interface to dynamic-auto
• Setting a switch to a static trunk or static access will avoid negotiation issues with the
switchport mode trunk or the switchport mode access commands.
53
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Dynamic Trunking Protocol
Negotiated Interface Modes
The switchport mode command has additional options.
Use the switchport nonegotiate interface configuration command to stop DTP negotiation.
Option Description
access
Permanent access mode and negotiates to convert the neighboring link
into an access link
dynamic auto
Will becomes a trunk interface if the neighboring interface is set to trunk
or desirable mode
dynamic desirable
Actively seeks to become a trunk by negotiating with other auto or
desirable interfaces
trunk
Permanent trunking mode and negotiates to convert the neighboring link
into a trunk link
54
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Dynamic Trunking Protocol
Results of a DTP Configuration
DTP configuration options are as follows:
Dynamic Auto
Dynamic
Desirable
Trunk Access
Dynamic Auto Access Trunk Trunk Access
Dynamic
Desirable
Trunk Trunk Trunk Access
Trunk Trunk Trunk Trunk
Limited
connectivity
Access Access Access
Limited
connectivity
Access
55
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Dynamic Trunking Protocol
Verify DTP Mode
The default DTP configuration is
dependent on the Cisco IOS version and
platform.
▪ Use the show dtp interface command
to determine the current DTP mode.
▪ Best practice recommends that the
interfaces be set to access or trunk and
to turnoff DTP
56
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Dynamic Trunking Protocol
Packet Tracer – Configure DTP
In this Packet Tracer activity, you will perform the following:
• Configure static trunking
• Configure and verify DTP
57
© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
3.6 Module Practice and Quiz
58
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Module Practice and Quiz
Packet Tracer – Implement VLANs and Trunking
In this Packet Tracer activity, you will perform the following:
• Configure VLANs
• Assign Ports to VLANs
• Configure Static Trunking
• Configure Dynamic Trunking
59
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Module Practice and Quiz
Lab – Implement VLANs and Trunking
In this lab, you will perform the following:
• Build the Network and Configure Basic Device Settings
• Create VLANs and Assign Switch Ports
• Configure an 802.1Q Trunk between the Switches
60
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Module Practice and Quiz
What did I learn in this module?
• VLANs are based on logical instead of physical connections.
• VLANs can segment networks based on function, team, or application.
• Each VLAN is considered a separate logical network.
• A trunk is a point-to-point link that carries more than one VLAN.
• VLAN tag fields include the type, user priority, CFI and VID.
• A separate voice VLAN is required to support VoIP.
• Normal range VLAN configurations are stored in the vlan.dat file in flash.
• An access port can belong to one data VLAN at a time, but may also have a
Voice VLAN.
61
© 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Module Practice and Quiz
What did I learn in this module? (Cont.)
• A trunk is a Layer 2 link between two switches that carries traffic for all VLANs.
• Trunks will need tagging for the various VLANs, typically 802.1q .
• IEEE 802.1q tagging makes provision for one native VLAN that will remain
untagged.
• An interface can be set to trunking or nontrunking.
• Trunk negotiation is managed by the Dynamic Trunking Protocol (DTP).
• DTP is a Cisco proprietary protocol that manages trunk negotiations.
Cisco Packet Tracer- SRWE_Module_3_VLAN.pdf

More Related Content

PPTX
VLANs_Module_3.pptx
PPTX
SRWE_Mod-3.pptxazsDFGHJK,./.L,MNBVCXZzxCV
PDF
CCNAv5 - S2: Chapter3 Vlans
PPTX
KPUCC-Rs instructor ppt_chapter3_final
PPTX
CCNA (R & S) Module 03 - Routing & Switching Essentials - Chapter 6
PPTX
CCNA_RSE_Chp6.pptx
PPTX
CCNA2 Verson6 Chapter6
PPTX
Chapter 14 : vlan
VLANs_Module_3.pptx
SRWE_Mod-3.pptxazsDFGHJK,./.L,MNBVCXZzxCV
CCNAv5 - S2: Chapter3 Vlans
KPUCC-Rs instructor ppt_chapter3_final
CCNA (R & S) Module 03 - Routing & Switching Essentials - Chapter 6
CCNA_RSE_Chp6.pptx
CCNA2 Verson6 Chapter6
Chapter 14 : vlan

Similar to Cisco Packet Tracer- SRWE_Module_3_VLAN.pdf (20)

PPTX
CCNA_RSE_Chp6 Virtual Local Area Network
PPTX
VLAN chapters for networking CCNA_RSE_Chp6.pptx
PPTX
CCNA 2 Routing and Switching v5.0 Chapter 3
PPT
Vlan final
PPT
Virtual local area network
PPTX
LAN Switching and Wireless: Ch3 - Virtual Local Area Networks (VLANs)
PDF
Ccna rse chp6 VLAN
PPTX
Week 9 VLAN, SISTIM INFORMASI MANAGEMEN
PPTX
ENCOR_Capitulo 1.pptx
PPTX
Encor chapter 1_packet forwarding
PPTX
Virtual lan’s (vlan’s)
PPTX
PPT
mod8-VLANs.ppt
PPTX
Virtual LAN
DOCX
Vlan Types
PPT
Icnd210 s02l01
PPTX
Virtual LAN and Vlan Trunking Protocol.pptx
PPTX
Vlans configuration and explanation (Ali).pptx
PPT
Mod8 vlans
CCNA_RSE_Chp6 Virtual Local Area Network
VLAN chapters for networking CCNA_RSE_Chp6.pptx
CCNA 2 Routing and Switching v5.0 Chapter 3
Vlan final
Virtual local area network
LAN Switching and Wireless: Ch3 - Virtual Local Area Networks (VLANs)
Ccna rse chp6 VLAN
Week 9 VLAN, SISTIM INFORMASI MANAGEMEN
ENCOR_Capitulo 1.pptx
Encor chapter 1_packet forwarding
Virtual lan’s (vlan’s)
mod8-VLANs.ppt
Virtual LAN
Vlan Types
Icnd210 s02l01
Virtual LAN and Vlan Trunking Protocol.pptx
Vlans configuration and explanation (Ali).pptx
Mod8 vlans
Ad

Recently uploaded (20)

PDF
Transform Your ITIL® 4 & ITSM Strategy with AI in 2025.pdf
PDF
August Patch Tuesday
PDF
Microsoft Solutions Partner Drive Digital Transformation with D365.pdf
PDF
STKI Israel Market Study 2025 version august
PPTX
OMC Textile Division Presentation 2021.pptx
PDF
project resource management chapter-09.pdf
PDF
NewMind AI Weekly Chronicles - August'25-Week II
PDF
1 - Historical Antecedents, Social Consideration.pdf
PPTX
Chapter 5: Probability Theory and Statistics
PPTX
MicrosoftCybserSecurityReferenceArchitecture-April-2025.pptx
PDF
Hybrid model detection and classification of lung cancer
PDF
ENT215_Completing-a-large-scale-migration-and-modernization-with-AWS.pdf
PDF
Getting started with AI Agents and Multi-Agent Systems
PDF
Hindi spoken digit analysis for native and non-native speakers
PDF
Zenith AI: Advanced Artificial Intelligence
PPTX
Modernising the Digital Integration Hub
PDF
From MVP to Full-Scale Product A Startup’s Software Journey.pdf
PDF
Video forgery: An extensive analysis of inter-and intra-frame manipulation al...
PDF
Web App vs Mobile App What Should You Build First.pdf
PDF
NewMind AI Weekly Chronicles – August ’25 Week III
Transform Your ITIL® 4 & ITSM Strategy with AI in 2025.pdf
August Patch Tuesday
Microsoft Solutions Partner Drive Digital Transformation with D365.pdf
STKI Israel Market Study 2025 version august
OMC Textile Division Presentation 2021.pptx
project resource management chapter-09.pdf
NewMind AI Weekly Chronicles - August'25-Week II
1 - Historical Antecedents, Social Consideration.pdf
Chapter 5: Probability Theory and Statistics
MicrosoftCybserSecurityReferenceArchitecture-April-2025.pptx
Hybrid model detection and classification of lung cancer
ENT215_Completing-a-large-scale-migration-and-modernization-with-AWS.pdf
Getting started with AI Agents and Multi-Agent Systems
Hindi spoken digit analysis for native and non-native speakers
Zenith AI: Advanced Artificial Intelligence
Modernising the Digital Integration Hub
From MVP to Full-Scale Product A Startup’s Software Journey.pdf
Video forgery: An extensive analysis of inter-and intra-frame manipulation al...
Web App vs Mobile App What Should You Build First.pdf
NewMind AI Weekly Chronicles – August ’25 Week III
Ad

Cisco Packet Tracer- SRWE_Module_3_VLAN.pdf

  • 1. Module 3: VLANs Instructor Materials Switching, Routing, and Wireless Essentials v7.0 (SRWE)
  • 2. 3 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential ▪ To facilitate learning, the following features within the GUI may be included in this module: What to Expect in this Module Feature Description Animations Expose learners to new skills and concepts. Videos Expose learners to new skills and concepts. Check Your Understanding(CYU) Per topic online quiz to help learners gauge content understanding. Interactive Activities A variety of formats to help learners gauge content understanding. Syntax Checker Small simulations that expose learners to Cisco command line to practice configuration skills. PT Activity Simulation and modeling activities designed to explore, acquire, reinforce, and expand skills.
  • 3. 4 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential What to Expect in this Module (Cont.) ▪ To facilitate learning, the following features may be included in this module:
  • 4. Module 3: VLANs Switching, Routing, and Wireless Essentials v7.0 (SRWE)
  • 5. 14 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Module Objectives Module Title: Protocols and Models Module Objective: Explain how network protocols enable devices to access local and remote network resources. Topic Title Topic Objective Overview of VLANs Explain the purpose of VLANs in a switched network. VLANs in a Multi-Switched Environment Explain how a switch forwards frames based on VLAN configuration in a multi-switch environment. VLAN Configuration Configure a switch port to be assigned to a VLAN based on requirements. VLAN Trunks Configure a trunk port on a LAN switch. Dynamic Trunking Protocol Configure Dynamic Trunking Protocol (DTP).
  • 6. 15 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3.1 Overview of VLANs
  • 7. 16 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Overview of VLANs VLAN Definitions VLANs are logical connections with other similar devices. Placing devices into various VLANs have the following characteristics: • Provides segmentation of the various groups of devices on the same switches • Provide organization that is more manageable • Broadcasts, multicasts and unicasts are isolated in the individual VLAN • Each VLAN will have its own unique range of IP addressing • Smaller broadcast domains
  • 8. 17 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Overview of VLANs Benefits of a VLAN Design Benefits of using VLANs are as follows: Benefits Description Smaller Broadcast Domains Dividing the LAN reduces the number of broadcast domains Improved Security Only users in the same VLAN can communicate together Improved IT Efficiency VLANs can group devices with similar requirements, e.g. faculty vs. students Reduced Cost One switch can support multiple groups or VLANs Better Performance Small broadcast domains reduce traffic, improving bandwidth Simpler Management Similar groups will need similar applications and other network resources
  • 9. 18 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Overview of VLANs Types of VLANs Default VLAN VLAN 1 is the following: • The default VLAN • The default Native VLAN • The default Management VLAN • Cannot be deleted or renamed Note: While we cannot delete VLAN1 Cisco will recommend that we assign these default features to other VLANs
  • 10. 19 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Overview of VLANs Types of VLANs (Cont.) Data VLAN • Dedicated to user-generated traffic (email and web traffic). • VLAN 1 is the default data VLAN because all interfaces are assigned to this VLAN. Native VLAN • This is used for trunk links only. • All frames are tagged on an 802.1Q trunk link except for those on the native VLAN. Management VLAN • This is used for SSH/Telnet VTY traffic and should not be carried with end user traffic. • Typically, the VLAN that is the SVI for the Layer 2 switch.
  • 11. 20 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Overview of VLANs Types of VLANs (Cont.) Voice VLAN • A separate VLAN is required because Voice traffic requires: • Assured bandwidth • High QoS priority • Ability to avoid congestion • Delay less that 150 ms from source to destination • The entire network must be designed to support voice.
  • 12. 21 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Overview of VLANs Packet Tracer – Who Hears the Broadcast? In this Packet Tracer activity, you will do the following: • Observe Broadcast Traffic in a VLAN Implementation • Complete Review Questions
  • 13. 22 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3.2 VLANs in a Multi-Switched Environment
  • 14. 23 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLANs in a Multi-Switched Environment Defining VLAN Trunks A trunk is a point-to-point link between two network devices. Cisco trunk functions: • Allow more than one VLAN • Extend the VLAN across the entire network • By default, supports all VLANs • Supports 802.1Q trunking
  • 15. 24 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLANs in a Multi-Switched Environment Networks without VLANs Without VLANs, all devices connected to the switches will receive all unicast, multicast, and broadcast traffic.
  • 16. 25 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLANs in a Multi-Switched Environment Networks with VLANs With VLANs, unicast, multicast, and broadcast traffic is confined to a VLAN. Without a Layer 3 device to connect the VLANs, devices in different VLANs cannot communicate.
  • 17. 26 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLANs in a Multi-Switched Environment VLAN Identification with a Tag • The IEEE 802.1Q header is 4 Bytes • When the tag is created the FCS must be recalculated. • When sent to end devices, this tag must be removed and the FCS recalculated back to its original number. 802.1Q VLAN Tag Field Function Type • 2-Byte field with hexadecimal 0x8100 • This is referred to as Tag Protocol ID (TPID) User Priority • 3-bit value that supports Canonical Format Identifier (CFI) • 1-bit value that can support token ring frames on Ethernet VLAN ID (VID) • 12-bit VLAN identifier that can support up to 4096 VLANs
  • 18. 27 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLANs in a Multi-Switched Environment Native VLANs and 802.1Q Tagging 802.1Q trunk basics: • Tagging is typically done on all VLANs. • The use of a native VLAN was designed for legacy use, like the hub in the example. • Unless changed, VLAN1 is the native VLAN. • Both ends of a trunk link must be configured with the same native VLAN. • Each trunk is configured separately, so it is possible to have a different native VLANs on separate trunks.
  • 19. 28 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLANs in a Multi-Switched Environment Voice VLAN Tagging The VoIP phone is a three port switch: • The switch will use CDP to inform the phone of the Voice VLAN. • The phone will tag its own traffic (Voice) and can set Cost of Service (CoS). CoS is QoS for layer 2. • The phone may or may not tag frames from the PC. Traffic Tagging Function Voice VLAN tagged with an appropriate Layer 2 class of service (CoS) priority value Access VLAN can also be tagged with a Layer 2 CoS priority value Access VLAN is not tagged (no Layer 2 CoS priority value)
  • 20. 29 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLANs in a Multi-Switched Environment Voice VLAN Verification Example The show interfaces fa0/18 switchport command can show us both data and voice VLANs assigned to the interface.
  • 21. 30 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLANs in a Multi-Switched Environment Packet Tracer – Investigate a VLAN Implementation In this Packet Tracer activity, you will: • Part 1: Observe Broadcast Traffic in a VLAN Implementation • Part 2: Observe Broadcast Traffic without VLANs
  • 22. 31 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3.3 VLAN Configuration
  • 23. 32 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Configuration VLAN Ranges on Catalyst Switches Catalyst switches 2960 and 3650 support over 4000 VLANs. Normal Range VLAN 1 – 1005 Extended Range VLAN 1006 - 4095 Used in Small to Medium sized businesses Used by Service Providers 1002 – 1005 are reserved for legacy VLANs Are in Running-Config 1, 1002 – 1005 are auto created and cannot be deleted Supports fewer VLAN features Stored in the vlan.dat file in flash Requires VTP configurations VTP can synchronize between switches
  • 24. 33 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Configuration VLAN Creation Commands VLAN details are stored in the vlan.dat file. You create VLANs in the global configuration mode. Task IOS Command Enter global configuration mode. Switch# configure terminal Create a VLAN with a valid ID number. Switch(config)# vlan vlan-id Specify a unique name to identify the VLAN. Switch(config-vlan)# name vlan-name Return to the privileged EXEC mode. Switch(config-vlan)# end Enter global configuration mode. Switch# configure terminal
  • 25. 34 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Configuration VLAN Creation Example • If the Student PC is going to be in VLAN 20, we will create the VLAN first and then name it. • If you do not name it, the Cisco IOS will give it a default name of vlan and the four digit number of the VLAN. E.g. vlan0020 for VLAN 20. Prompt Command S1# Configure terminal S1(config)# vlan 20 S1(config-vlan)# name student S1(config-vlan)# end
  • 26. 35 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Configuration VLAN Port Assignment Commands Once the VLAN is created, we can then assign it to the correct interfaces. Task Command Enter global configuration mode. Switch# configure terminal Enter interface configuration mode. Switch(config)# interface interface-id Set the port to access mode. Switch(config-if)# switchport mode access Assign the port to a VLAN. Switch(config-if)# switchport access vlan vlan-id Return to the privileged EXEC mode. Switch(config-if)# end
  • 27. 36 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Configuration VLAN Port Assignment Example We can assign the VLAN to the port interface. • Once the device is assigned the VLAN, then the end device will need the IP address information for that VLAN • Here, Student PC receives 172.17.20.22 Prompt Command S1# Configure terminal S1(config)# Interface fa0/18 S1(config-if)# Switchport mode access S1(config-if)# Switchport access vlan 20 S1(config-if)# end
  • 28. 37 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Configuration Data and Voice VLANs An access port may only be assigned to one data VLAN. However it may also be assigned to one Voice VLAN for when a phone and an end device are off of the same switchport.
  • 29. 38 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Configuration Data and Voice VLAN Example • We will want to create and name both Voice and Data VLANs. • In addition to assigning the data VLAN, we will also assign the Voice VLAN and turn on QoS for the voice traffic to the interface. • The newer catalyst switch will automatically create the VLAN, if it does not already exist, when it is assigned to an interface. Note: QoS is beyond the scope of this course. Here we do show the use of the mls qos trust [cos | device cisco-phone | dscp | ip- precedence] command.
  • 30. 39 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Configuration Verify VLAN Information Use the show vlan command. The complete syntax is: show vlan [brief | id vlan-id | name vlan-name | summary] Task Command Option Display VLAN name, status, and its ports one VLAN per line. brief Display information about the identified VLAN ID number. id vlan-id Display information about the identified VLAN name. The vlan-name is an ASCII string from 1 to 32 characters. name vlan-name Display VLAN summary information. summary
  • 31. 40 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Configuration Change VLAN Port Membership There are a number of ways to change VLAN membership: • re-enter switchport access vlan vlan-id command • use the no switchport access vlan to place interface back in VLAN 1 Use the show vlan brief or the show interface fa0/18 switchport commands to verify the correct VLAN association.
  • 32. 41 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Configuration Delete VLANs Delete VLANs with the no vlan vlan-id command. Caution: Before deleting a VLAN, reassign all member ports to a different VLAN. • Delete all VLANs with the delete flash:vlan.dat or delete vlan.dat commands. • Reload the switch when deleting all VLANs. Note: To restore to factory default – unplug all data cables, erase the startup-configuration and delete the vlan.dat file, then reload the device.
  • 33. 42 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Configuration Packet Tracer – VLAN Configuration In this Packet Tracer activity, you will perform the following: • Verify the Default VLAN Configuration • Configure VLANs • Assign VLANs to Ports
  • 34. 43 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3.4 VLAN Trunks
  • 35. 44 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Trunks Trunk Configuration Commands Configure and verify VLAN trunks. Trunks are layer 2 and carry traffic for all VLANs. Task IOS Command Enter global configuration mode. Switch# configure terminal Enter interface configuration mode. Switch(config)# interface interface-id Set the port to permanent trunking mode. Switch(config-if)# switchport mode trunk Sets the native VLAN to something other than VLAN 1. Switch(config-if)# switchport trunk native vlan vlan-id Specify the list of VLANs to be allowed on the trunk link. Switch(config-if)# switchport trunk allowed vlan vlan-list Return to the privileged EXEC mode. Switch(config-if)# end
  • 36. 45 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Trunks Trunk Configuration Example The subnets associated with each VLAN are: • VLAN 10 - Faculty/Staff - 172.17.10.0/24 • VLAN 20 - Students - 172.17.20.0/24 • VLAN 30 - Guests - 172.17.30.0/24 • VLAN 99 - Native - 172.17.99.0/24 F0/1 port on S1 is configured as a trunk port. Note: This assumes a 2960 switch using 802.1q tagging. Layer 3 switches require the encapsulation to be configured before the trunk mode. Prompt Command S1(config)# Interface fa0/1 S1(config-if)# Switchport mode trunk S1(config-if)# Switchport trunk native vlan 99 S1(config-if)# Switchport trunk allowed vlan 10,20,30,99 S1(config-if)# end
  • 37. 46 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Trunks Verify Trunk Configuration Set the trunk mode and native vlan. Notice sh int fa0/1 switchport command: • Is set to trunk administratively • Is set as trunk operationally (functioning) • Encapsulation is dot1q • Native VLAN set to VLAN 99 • All VLANs created on the switch will pass traffic on this trunk
  • 38. 47 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Trunks Reset the Trunk to the Default State • Reset the default trunk settings with the no command. • All VLANs allowed to pass traffic • Native VLAN = VLAN 1 • Verify the default settings with a sh int fa0/1 switchport command.
  • 39. 48 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Trunks Reset the Trunk to the Default State (Cont.) Reset the trunk to an access mode with the switchport mode access command: • Is set to an access interface administratively • Is set as an access interface operationally (functioning)
  • 40. 49 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Trunks Packet Tracer – Configure Trunks In this Packet Tracer activity, you will perform the following: • Verify VLANs • Configure Trunks
  • 41. 50 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential VLAN Trunks Packet Tracer – Configure VLANs and Trunking – Physical Mode Lab – Configure VLANs and Trunking In this Packet Tracer Physical Mode activity and in the Lab, you will complete the following objectives: • Build the Network and Configure Basic Device Settings • Create VLANs and Assign Switch Ports • Maintain VLAN Port Assignments and the VLAN Database • Configure an 802.1Q Trunk Between the Switches • Delete the VLAN Database (In the Lab only.)
  • 42. 51 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3.5 Dynamic Trunking Protocol
  • 43. 52 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Dynamic Trunking Protocol Introduction to DTP Dynamic Trunking Protocol (DTP) is a proprietary Cisco protocol. DTP characteristics are as follows: • On by default on Catalyst 2960 and 2950 switches • Dynamic-auto is default on the 2960 and 2950 switches • May be turned off with the nonegotiate command • May be turned back on by setting the interface to dynamic-auto • Setting a switch to a static trunk or static access will avoid negotiation issues with the switchport mode trunk or the switchport mode access commands.
  • 44. 53 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Dynamic Trunking Protocol Negotiated Interface Modes The switchport mode command has additional options. Use the switchport nonegotiate interface configuration command to stop DTP negotiation. Option Description access Permanent access mode and negotiates to convert the neighboring link into an access link dynamic auto Will becomes a trunk interface if the neighboring interface is set to trunk or desirable mode dynamic desirable Actively seeks to become a trunk by negotiating with other auto or desirable interfaces trunk Permanent trunking mode and negotiates to convert the neighboring link into a trunk link
  • 45. 54 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Dynamic Trunking Protocol Results of a DTP Configuration DTP configuration options are as follows: Dynamic Auto Dynamic Desirable Trunk Access Dynamic Auto Access Trunk Trunk Access Dynamic Desirable Trunk Trunk Trunk Access Trunk Trunk Trunk Trunk Limited connectivity Access Access Access Limited connectivity Access
  • 46. 55 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Dynamic Trunking Protocol Verify DTP Mode The default DTP configuration is dependent on the Cisco IOS version and platform. ▪ Use the show dtp interface command to determine the current DTP mode. ▪ Best practice recommends that the interfaces be set to access or trunk and to turnoff DTP
  • 47. 56 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Dynamic Trunking Protocol Packet Tracer – Configure DTP In this Packet Tracer activity, you will perform the following: • Configure static trunking • Configure and verify DTP
  • 48. 57 © 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3.6 Module Practice and Quiz
  • 49. 58 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Module Practice and Quiz Packet Tracer – Implement VLANs and Trunking In this Packet Tracer activity, you will perform the following: • Configure VLANs • Assign Ports to VLANs • Configure Static Trunking • Configure Dynamic Trunking
  • 50. 59 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Module Practice and Quiz Lab – Implement VLANs and Trunking In this lab, you will perform the following: • Build the Network and Configure Basic Device Settings • Create VLANs and Assign Switch Ports • Configure an 802.1Q Trunk between the Switches
  • 51. 60 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Module Practice and Quiz What did I learn in this module? • VLANs are based on logical instead of physical connections. • VLANs can segment networks based on function, team, or application. • Each VLAN is considered a separate logical network. • A trunk is a point-to-point link that carries more than one VLAN. • VLAN tag fields include the type, user priority, CFI and VID. • A separate voice VLAN is required to support VoIP. • Normal range VLAN configurations are stored in the vlan.dat file in flash. • An access port can belong to one data VLAN at a time, but may also have a Voice VLAN.
  • 52. 61 © 2019, 2021 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Module Practice and Quiz What did I learn in this module? (Cont.) • A trunk is a Layer 2 link between two switches that carries traffic for all VLANs. • Trunks will need tagging for the various VLANs, typically 802.1q . • IEEE 802.1q tagging makes provision for one native VLAN that will remain untagged. • An interface can be set to trunking or nontrunking. • Trunk negotiation is managed by the Dynamic Trunking Protocol (DTP). • DTP is a Cisco proprietary protocol that manages trunk negotiations.