{"id":1129,"date":"2024-04-22T23:56:36","date_gmt":"2024-04-23T04:56:36","guid":{"rendered":"https:\/\/techlensfocus.com\/?p=1129"},"modified":"2024-05-05T19:40:06","modified_gmt":"2024-05-06T00:40:06","slug":"cisco-packet-tracer-tutorial-vlan-configuration","status":"publish","type":"post","link":"https:\/\/techlensfocus.com\/index.php\/2024\/04\/22\/cisco-packet-tracer-tutorial-vlan-configuration\/","title":{"rendered":"Cisco Packet Tracer Tutorial: VLAN Configuration"},"content":{"rendered":"\n

<\/p>\n\n\n\n

Table of Contents<\/div>
<\/span><\/span><\/span><\/span><\/div><\/div>
<\/div>
    <\/ol><\/div><\/div><\/div>\n\n\n\n

    <\/p>\n\n\n\n

    This lab will guide you through step by step of configuring VLANs on a simulated network using Cisco Packet Tracer. Before we jump into the lab, let’s have a quick review of what VLAN is.<\/p>\n\n\n\n

    <\/p>\n\n\n\n

    What is a VLAN?<\/h2>\n\n\n\n

    <\/p>\n\n\n\n

    VLAN stand for Virtual Local Area Network. VLANs allow us to segment a network, separating devices into different broadcast domains (or different subnets), even if they are physically connected to the same network switch. Devices within a VLAN can communicate freely, but traffic is restricted between VLANs, improving network security and performance.<\/p>\n\n\n\n

    <\/p>\n\n\n\n

    Benefits of VLAN<\/h3>\n\n\n\n
      \n
    • Enhanced Security:<\/strong> By isolating traffic, VLANs prevent unauthorized access to sensitive data across different departments or user groups.<\/li>\n\n\n\n
    • Improved Network Performance:<\/strong> Limiting broadcast traffic within a VLAN reduces congestion and improves overall network speed for devices.<\/li>\n\n\n\n
    • Simplified Network Management:<\/strong> VLANs make it easier to manage and troubleshoot network issues by segmenting devices based on their purpose.<\/li>\n\n\n\n
    • Increased Scalability:<\/strong> As your network grows, you can easily add new devices to specific VLANs without major reconfiguration.<\/li>\n<\/ul>\n\n\n\n

      <\/p>\n\n\n\n

      Essential VLAN terminologies<\/h3>\n\n\n\n
        \n
      • Broadcast Domain:<\/strong> A group of devices that can see all broadcast traffic on the network segment. VLANs create separate broadcast domains.<\/li>\n\n\n\n
      • Port:<\/strong> The physical connection point on a switch where devices are plugged in.<\/li>\n\n\n\n
      • Access Port:<\/strong> A switch port configured to belong to a single VLAN, restricting devices connected to that port to communicate only with others within the same VLAN.<\/li>\n\n\n\n
      • Trunk Port:<\/strong> A switch port configured to carry traffic for multiple VLANs, allowing communication between different VLANs (usually connects switches).<\/li>\n\n\n\n
      • VLAN ID:<\/strong> A unique identifier assigned to each VLAN to differentiate traffic and manage access control.<\/li>\n\n\n\n
      • Port tagging<\/strong>: or VLAN tagging, is a technique used to identify and manage different virtual LANs (VLANs) on a network switch.<\/li>\n<\/ul>\n\n\n\n

        <\/p>\n\n\n\n

        Lab Setup<\/h2>\n\n\n\n

        <\/p>\n\n\n\n

        Here is the network topology for this lab:<\/p>\n\n\n

        \n
        \"\"<\/figure>\n<\/div>\n\n\n
          \n
        • We will configure PC1 <\/strong>and PC2 <\/strong>in VLAN 10<\/strong>. And PC3 <\/strong>and PC4 <\/strong>in VLAN 20<\/strong>.<\/li>\n\n\n\n
        • VLAN 10 <\/strong>will be named “HR”.<\/li>\n\n\n\n
        • VLAN 20 <\/strong>will be named “Marketing”.<\/li>\n<\/ul>\n\n\n\n

          <\/p>\n\n\n\n

          VLAN Configuration<\/h2>\n\n\n\n

          <\/p>\n\n\n\n

          VLAN 1 <\/strong>is the default VLAN on Cisco. Therefore, all the switch port are member of VLAN1. We can check by using the command “show vlan”<\/strong> or “show vlan brief”<\/strong>.<\/p>\n\n\n\n

          Switch>enable\nSwitch#show vlan\n\nVLAN Name                             Status    Ports\n---- -------------------------------- --------- -------------------------------\n1    default                          active    Fa0\/1, Fa0\/2, Fa0\/3, Fa0\/4\n                                                Fa0\/5, Fa0\/6, Fa0\/7, Fa0\/8\n                                                Fa0\/9, Fa0\/10, Fa0\/11, Fa0\/12\n                                                Fa0\/13, Fa0\/14, Fa0\/15, Fa0\/16\n                                                Fa0\/17, Fa0\/18, Fa0\/19, Fa0\/20\n                                                Fa0\/21, Fa0\/22, Fa0\/23, Fa0\/24\n                                                Gig0\/1, Gig0\/2\n1002 fddi-default                     active    \n1003 token-ring-default               active    \n1004 fddinet-default                  active    \n1005 trnet-default                    active    \n\nVLAN Type  SAID       MTU   Parent RingNo BridgeNo Stp  BrdgMode Trans1 Trans2\n---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------\n1    enet  100001     1500  -      -      -        -    -        0      0\n1002 fddi  101002     1500  -      -      -        -    -        0      0   \n1003 tr    101003     1500  -      -      -        -    -        0      0   \n1004 fdnet 101004     1500  -      -      -        ieee -        0      0   \n1005 trnet 101005     1500  -      -      -        ibm  -        0      0   <\/pre>\n\n\n\n
            \n
          • In the output, under “VLAN Name,” you can see VLAN 1<\/strong> listed as “default,”.<\/li>\n\n\n\n
          • The “Ports” column shows which ports are members of each VLAN. In this case, all FastEthernet (Fa0\/1 – Fa0\/24) and GigabitEthernet (Gig0\/1, Gig0\/2) ports are members of VLAN1.<\/li>\n<\/ul>\n\n\n\n
            Note that because all ports are in the same VLAN 1<\/strong>, we are able to ping between hosts. For example, we can ping PC5 <\/strong>(10.0.0.12) from PC2 <\/strong>(10.0.0.11)<\/p>\n\n\n
            \n
            \"\"<\/figure>\n<\/div>\n\n\n
            <\/p>\n\n\n\n
            Create and name the VLAN<\/h3>\n\n\n\n
            <\/p>\n\n\n\n
            In this step, we will create two VLANs on the switch, that is  VLAN 10 <\/strong>with the name “HR” <\/strong>and VLAN 20 <\/strong>with the name “Marketing”<\/strong>.<\/p>\n\n\n\n
            First, create VLAN 10<\/strong> and name it “HR”:<\/p>\n\n\n\n
            Switch>enable\nSwitch#configure terminal\nEnter configuration commands, one per line.  End with CNTL\/Z.\nSwitch(config)#vlan 10\nSwitch(config-vlan)#name HR\nSwitch(config-vlan)#exit<\/pre>\n\n\n\n
            Second, create VLAN 20<\/strong> and name it “Marketing”<\/p>\n\n\n\n
            Switch#configure terminal\nEnter configuration commands, one per line.  End with CNTL\/Z.\nSwitch(config)#vlan 20\nSwitch(config-vlan)#name Marketing\nSwitch(config-vlan)#exit<\/pre>\n\n\n\n
            Next, we use the command “show vlan brief<\/strong>” to check the result. You will notice that VLAN 10<\/strong> is named “HR,” and VLAN 20 <\/strong>is named “Marketing.”<\/p>\n\n\n\n
            Switch#show vlan brief\n\nVLAN Name                             Status    Ports\n---- -------------------------------- --------- -------------------------------\n1    default                          active    Fa0\/1, Fa0\/2, Fa0\/3, Fa0\/4\n                                                Fa0\/5, Fa0\/6, Fa0\/7, Fa0\/8\n                                                Fa0\/9, Fa0\/10, Fa0\/11, Fa0\/12\n                                                Fa0\/13, Fa0\/14, Fa0\/15, Fa0\/16\n                                                Fa0\/17, Fa0\/18, Fa0\/19, Fa0\/20\n                                                Fa0\/21, Fa0\/22, Fa0\/23, Fa0\/24\n                                                Gig0\/1, Gig0\/2\n10   HR                               active    \n20   Marketing                        active    \n1002 fddi-default                     active    \n1003 token-ring-default               active    \n1004 fddinet-default                  active    \n1005 trnet-default                    active    <\/pre>\n\n\n\n
            <\/p>\n\n\n\n
            Assign switch ports to VLAN<\/h3>\n\n\n\n
            <\/p>\n\n\n\n
            Next we will assign port to VLAN. Because these port belong to a single VLAN so we configure these port as access port. We will assign F0\/1<\/strong> and F0\/3<\/strong> to VLAN 10<\/strong>.<\/p>\n\n\n\n
            Switch>enable\nSwitch#configure terminal\nEnter configuration commands, one per line.  End with CNTL\/Z.\nSwitch(config)#int f0\/1\nSwitch(config-if)#switchport mode access\nSwitch(config-if)#switchport access vlan 10\nSwitch(config-if)#do show vlan\n\nVLAN Name                             Status    Ports\n---- -------------------------------- --------- -------------------------------\n1    default                          active    Fa0\/2, Fa0\/3, Fa0\/4, Fa0\/5\n                                                Fa0\/6, Fa0\/7, Fa0\/8, Fa0\/9\n                                                Fa0\/10, Fa0\/11, Fa0\/12, Fa0\/13\n                                                Fa0\/14, Fa0\/15, Fa0\/16, Fa0\/17\n                                                Fa0\/18, Fa0\/19, Fa0\/20, Fa0\/21\n                                                Fa0\/22, Fa0\/23, Fa0\/24, Gig0\/1\n                                                Gig0\/2\n10   HR                               active    Fa0\/1\n20   Marketing                        active    \n1002 fddi-default                     active    \n1003 token-ring-default               active    \n1004 fddinet-default                  active    \n1005 trnet-default                    active    \n<\/pre>\n\n\n\n
            Switch>enable\nSwitch#configure terminal\nEnter configuration commands, one per line.  End with CNTL\/Z.\nSwitch(config)#int f0\/3\nSwitch(config-if)#switchport mode access\nSwitch(config-if)#switchport access vlan 10\nSwitch(config-if)#do show vlan\n\nVLAN Name                             Status    Ports\n---- -------------------------------- --------- -------------------------------\n1    default                          active    Fa0\/2, Fa0\/4, Fa0\/5, Fa0\/6\n                                                Fa0\/7, Fa0\/8, Fa0\/9, Fa0\/10\n                                                Fa0\/11, Fa0\/12, Fa0\/13, Fa0\/14\n                                                Fa0\/15, Fa0\/16, Fa0\/17, Fa0\/18\n                                                Fa0\/19, Fa0\/20, Fa0\/21, Fa0\/22\n                                                Fa0\/23, Fa0\/24, Gig0\/1, Gig0\/2\n10   HR                               active    Fa0\/1, Fa0\/3\n20   Marketing                        active    \n1002 fddi-default                     active    \n1003 token-ring-default               active    \n1004 fddinet-default                  active    \n1005 trnet-default                    active    <\/pre>\n\n\n\n
            From the output, you can see that VLAN 10 <\/strong>(“HR”) has ports Fa0\/1<\/strong> and Fa0\/3<\/strong> assigned to it.<\/p>\n\n\n\n
            Next, we continue assign port F0\/2 <\/strong>and F0\/4 <\/strong>to VLAN 20<\/strong>.<\/p>\n\n\n\n
            Switch>enable\nSwitch#configure terminal\nEnter configuration commands, one per line.  End with CNTL\/Z.\nSwitch(config)#int f0\/2\nSwitch(config-if)#switchport mode access\nSwitch(config-if)#switchport access vlan 20\nSwitch(config-if)#exit\nSwitch(config)#int f0\/4\nSwitch(config-if)#switchport mode access\nSwitch(config-if)#switchport access vlan 20\nSwitch(config-if)#do show vlan\n\nVLAN Name                             Status    Ports\n---- -------------------------------- --------- -------------------------------\n1    default                          active    Fa0\/5, Fa0\/6, Fa0\/7, Fa0\/8\n                                                Fa0\/9, Fa0\/10, Fa0\/11, Fa0\/12\n                                                Fa0\/13, Fa0\/14, Fa0\/15, Fa0\/16\n                                                Fa0\/17, Fa0\/18, Fa0\/19, Fa0\/20\n                                                Fa0\/21, Fa0\/22, Fa0\/23, Fa0\/24\n                                                Gig0\/1, Gig0\/2\n10   HR                               active    Fa0\/1, Fa0\/3\n20   Marketing                        active    Fa0\/2, Fa0\/4\n1002 fddi-default                     active    \n1003 token-ring-default               active    \n1004 fddinet-default                  active    \n1005 trnet-default                    active  <\/pre>\n\n\n\n
            As you can see, the output from command “do show vlan” shows VLAN 20 <\/strong>(“Marketing”) has ports Fa0\/2<\/strong> and Fa0\/4<\/strong> assigned to it.<\/p>\n\n\n\n
            <\/p>\n\n\n\n
            Testing the result<\/h2>\n\n\n\n
            <\/p>\n\n\n\n
            Now you have finished VLAN configuration, let’s try to test the connectivity between VLANs.<\/p>\n\n\n\n
            Ping PC1 <\/strong>(10.0.0.10, VLAN 10) from PC2 <\/strong>(10.0.0.11, VLAN 10). The ping should be successful because PC1 <\/strong>and PC2 <\/strong>are in the same VLAN 10<\/strong>.<\/p>\n\n\n\n
            \"\"<\/figure>\n\n\n\n
            Ping PC5 <\/strong>(10.0.0.12, VLAN 1) from PC2 <\/strong>(10.0.0.11, VLAN 10). The ping will fail because PC5 <\/strong>and PC2 <\/strong>are not in the same VLAN, even though PC5 <\/strong>and PC2 <\/strong>are in the same subnet. VLAN has logically segmented the network into separate broadcast domains. To be able to communicate with each other, devices need to send their packets to a router, which then route the packets between VLANs.<\/p>\n\n\n\n
            \"\"<\/figure>\n\n\n\n
            <\/p>\n\n\n\n
            Notes<\/h2>\n\n\n\n
            <\/p>\n\n\n\n