π― Obiettivi
πΊοΈ Topologia
π Guida
Lab 1 β VLAN Base
Crea 2 VLAN su SW1, assegna le porte e verifica che il traffico sia isolato. Usa i PC per testare ping tra stessa VLAN e tra VLAN diverse.
0%
VLAN 10: 192.168.10.0/24 β VLAN 20: 192.168.20.0/24
π₯οΈ
PC1
VLAN 10
.10.10
.10.10
π₯οΈ
PC2
VLAN 10
.10.20
.10.20
π₯οΈ
PC3
VLAN 10
.10.30
.10.30
β Fa0/1 β Fa0/2 β Fa0/3
π SW1
Switch 2960 β Fa0/1-6
β Fa0/4 β Fa0/5 β Fa0/6
π§
SRV1
VLAN 20
.20.10
.20.10
π§
SRV2
VLAN 20
.20.20
.20.20
π§
SRV3
VLAN 20
.20.30
.20.30
1Accedi allo switch
enable β configure terminal
2Crea VLAN 10
vlan 10
name UFFICIO
exit
name UFFICIO
exit
3Crea VLAN 20
vlan 20
name SERVER
exit
name SERVER
exit
4Assegna Fa0/1-3 alla VLAN 10
interface range Fa0/1-3
switchport mode access
switchport access vlan 10
exit
switchport mode access
switchport access vlan 10
exit
5Assegna Fa0/4-6 alla VLAN 20
interface range Fa0/4-6
switchport mode access
switchport access vlan 20
exit
switchport mode access
switchport access vlan 20
exit
6Verifica le VLAN
end β show vlan brief
Dovresti vedere VLAN 10 con Fa0/1-3 e VLAN 20 con Fa0/4-6.
Dovresti vedere VLAN 10 con Fa0/1-3 e VLAN 20 con Fa0/4-6.
7Test isolamento β Passa ai PC
Seleziona PC1 e fai:
ping 192.168.10.20 β β (stessa VLAN)
ping 192.168.20.10 β β (VLAN diversa!)
ping 192.168.10.20 β β (stessa VLAN)
ping 192.168.20.10 β β (VLAN diversa!)
8Test da SRV1
Seleziona SRV1:
ping 192.168.20.20 β β (stessa VLAN 20)
ping 192.168.10.10 β β (VLAN diversa!)
ping 192.168.20.20 β β (stessa VLAN 20)
ping 192.168.10.10 β β (VLAN diversa!)
π‘ PerchΓ© il ping tra VLAN fallisce? PerchΓ© le VLAN creano broadcast domain separati. Γ come avere 2 switch fisici diversi. Per far comunicare le VLAN serve un router (Lab 2!).
SW1 β Console
SW1
PC1
PC2
PC3
SRV1
SRV2
Switch>