-
Notifications
You must be signed in to change notification settings - Fork 1
/
cisco-vlan.txt
158 lines (139 loc) · 4 KB
/
cisco-vlan.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
Cisco Vlan
- Vlan = untuk memecah broadcast domain di Layer 2
- Bisa membuat multiple VLAN (1 switch banyak vlan)
- Setiap vlan punya IP Network sendiri
- Setiap VLAN hanya bisa berhubungan melalui router, tapi bisa juga make switch L3
- VLAN di buat di dalam switch
- Kmputer yang terhubung di vlan tidak tahu bahwa dia di VLan 2
Saat ngirim data, switch vlan akan menambah tag pada frame dari komputer
Keuntungan VLAN:
- Aman karena broadcast domain kecil dan dari sniffing
- Mengurangi Biaya perangkat
- Performa network
- Memperkecil broadcast domain
- Efisiensi dalam mengontrol jaringan
Tipe Vlan
- Data VLAN
- Default VLAN
- Native VLAN
- Management VLAN
VLAN Mode Switchport
- Trunk = Port yang menghubungkan antar switch
- Access = Port yang menghubungkan antar komputer
VLAN Trunk
- Dia menjembatani antar vlan
- Menghubungkan antar switch vlan
- Trunk tidak masuk ke vlan mana pun
VTP
Komputer --- Switch vlan (dibungkus paketnya jadi vlan 2) --- oper ke trunk (dibungkus pake pake id native vlan, tidak bawa id vlan 2) --- sampe ke switch sebelah (buka frame native vlan) --- oper ke vlan 2
Bandwidth Cable
- Cat 53 = 100mbps
- Cat 6 = 1000mbps
- FO = 100 Gbps
DTP (Dynamic Trunking Protocol)
- Hanya di cisco
- Untuk me manage negosiasi trunk
- Sudah ada lama daroi Cisco 2960
Config Core Switch jadi server
# configure terminal
# vtp mode server
# vtp domain sabtocorp
# vtp password 123
# end
# copy running-config startup-config
Config Core Switch bikin trunk
# interface range fastEthernet 0/1-4
# switchport mode trunk
# switchport trunk native vlan 69
# end
# copy running-config startup-config
# conf terminal
# vlan 2
# name hrd
# vlan 3
# name ga
Config Switch lantai 1
# configure terminal
# interface fastEthernet 0/1
# switchport mode trunk
# switchport trunk native vlan 69
# vtp mode client
# vtp domain sabtocorp
# vtp password 123
# end
# copy running-config startup-config
(Secara otomatis database VLAN di Core switch masuk di Switch client)
Config Switch lantai 2
# configure terminal
# interface fastEthernet 0/1
# switchport mode trunk
# switchport trunk native vlan 69
# vtp mode client
# vtp domain sabtocorp
# vtp password 123
# end
# copy running-config startup-config
Config Switch lantai 3
# configure terminal
# interface fastEthernet 0/1
# switchport mode trunk
# switchport trunk native vlan 69
# vtp mode client
# vtp domain sabtocorp
# vtp password 123
# end
# copy running-config startup-config
Config Switch lantai 4
# configure terminal
# interface fastEthernet 0/1
# switchport mode trunk
# switchport trunk native vlan 69
# vtp mode client
# vtp domain sabtocorp
# vtp password 123
# end
# copy running-config startup-config
Config switch lantai 1 buat vlan
#interface range fastEthernet 0/2-3
#switchport mode access
#switchport access vlan 2
#end
#interface range fastEthernet 0/4-5
#switchport mode access
#switchport access vlan 3
#end
# copy running-config startup-config
Config CoreSwitch
#interface gigabitEthernet 0/1
#switchport mode trunk
#switchport trunk native vlan 69
#end
#copy running-config startup-config
Config Router Utama R1
#interface gigabitEthernet 0/1
#no shutdown
#exit
#interface gigabitEthernet 0/1.2
#encapsulation dot1Q 2
#ip address 192.168.2.1 255.255.255.0
#interface gigabitEthernet 0/1.3
#encapsulation dot1Q 3
#ip address 192.168.3.1 255.255.255.0
#interface gigabitEthernet 0/1.4
#encapsulation dot1Q 4
#ip address 192.168.4.1 255.255.255.0
#interface gigabitEthernet 0/1.5
#encapsulation dot1Q 5
#ip address 192.168.5.1 255.255.255.0
#interface gigabitEthernet 0/1.6
#encapsulation dot1Q 6
#ip address 192.168.6.1 255.255.255.0
#interface gigabitEthernet 0/1.7
#encapsulation dot1Q 7
#ip address 192.168.7.1 255.255.255.0
#interface gigabitEthernet 0/1.8
#encapsulation dot1Q 8
#ip address 192.168.8.1 255.255.255.0
#interface gigabitEthernet 0/1.9
#encapsulation dot1Q 9
#ip address 192.168.9.1 255.255.255.0