Comments on: setup VLAN

By: kwt712

kwt712 — Mon, 17 Aug 2009 14:03:02 +0000

Can someone help with this please

I have a cisco catalyst 2950 24 port and i have a Linksys 48 port 10/100 + 2-Port Gigabit Smart Switch. When i do the VLan on Cisco Catalyst Switch and daisy chain the linksys to it, would it let me configure the port on linksys (my answer is no) … just checking. Also, when i daisy chain off of Cisco Switch, i assume i have to use the the port (like .35 or .31) to daisy chain cause if i want to use that entire switch (linksys) for .35.

thanks

By: r0berth1

r0berth1 — Fri, 14 Aug 2009 15:36:13 +0000

This is for the switch:

service timestamps debug datetime
service timestamps log datetime
service password-encryption
!
hostname devicename <—Device name goes here
!
enable secret level 15 pass <—your pass goes here
!
aaa new-model
aaa authentication login default local
aaa authentication login no-tacacs local
aaa authentication ppp default local
aaa authorization exec default local
aaa authorization network default local
!
username username secret pass <—your pass goes here
!
clock timezone CST -6
clock summer-time CDT recurring
ip subnet-zero
no ip domain-lookup
!
vlan 1
name **VLAN1**
vlan 2
name **VLAN2**
vlan 3
name **VLAN3**
!
interface FastEthernet0/1
description **Uplink to router**
switchport mode trunk
switchport trunk encapsulation dot1q
speed 100
duplex full
!
interface range FastEthernet0/2 – 9
description **VLAN1**
switchport access vlan 1
switchport mode access
speed 100
duplex full
spanning-tree portfast
!
interface range FastEthernet0/10 – 17
description **VLAN2**
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface range FastEthernet0/18 – 24
description **Vlan3**
switchport access vlan 3
switchport mode access
spanning-tree portfast
!
interface range GigabitEthernet0/1 – 2
description **Servers**
switchport access vlan 3
switchport mode access
spanning-tree portfast
!
interface vlan1
no ip address
shutdown
!
interface vlan1
description **PC Vlan**
ip address 0.0.0.0 255.255.255.0
no shutdown
!
ip default-gateway 0.0.0.0
!
snmp-server community pass RW
!
banner login ^C
this is optional, but enter your banner text here.^C
!
line con 0
exec-timeout 30 0
line vty 0 4
exec-timeout 30 0
line vty 5 15
exec-timeout 30 0
!
ntp server 0.0.0.0
logging 0.0.0.0
!
end

By: r0berth1

r0berth1 — Fri, 14 Aug 2009 15:29:11 +0000

This is for a 2811:
!
version 12.4
service timestamps debug datetime
service timestamps log datetime
serice password-encryption
!
hostname ##rtrname## <—Enter your router name here
!
enable secret 0 password <—your password goes here
!
aaa new-model <—These are used for TACACS+, but you can remove them
aaa authentication login default group tacacs+ <—These are used for TACACS+, but you can remove them
aaa authentication ppp default local <—These are used for TACACS+, but you can remove them
aaa authorization exec default local group tacacs+ <—These are used for TACACS+, but you can remove them
aaa accounting exec default start-stop group tacacs+ <—These are used for TACACS+, but you can remove them
aaa accounting network default start-stop group tacacs+ <—These are used for TACACS+, but you can remove them
aaa session-id common <—These are used for TACACS+, but you can remove them
!
clock timezone CST -6
clock summer-time CST recurring 2 Sun Mar 2:00 1 Sun Nov 2:00
clock calendar-valid
!
ip cef
!
crypto key generate rsa <—These are used for TACACS+, but you can remove them
1024 <—These are used for TACACS+, but you can remove them
!
ip tftp source-interface Loopback0
no ip bootp server
no ip domain lookup
ip domain name yourdomainhere <—These are used for TACACS+, but you can remove them
ip ssh authentication-retries 4 <—These are used for TACACS+, but you can remove them
!
username User secret 0 pass <–your pass here
!
class-map match-any data
match access-group 101
class-map match-all voice
match dscp ef
!
policy-map voice-priority
class voice
priority 384
class data
set precedence 3
bandwidth remaining percent 100
class class-default
fair-quere
random-detect
set ip precedence 0
!
interface Loopback0
ip address ##loop0-ip## 255.255.255.255 <—Remove everthing from the first # and the last # and replace with your IP Address
!
interface Serial0/0
description **MPLS Circut**
mtu 1600
bandwidth 1544
no ip address
encapsulation frame-relay IETF
load-interval 30
service-module t1 timeslots 1-24
frame-relay lmi-type ansi
service-policy output voice-priority
no shutdown
!
interface Serial0/0.##frame-DLCI## point-to-point <—Replace everything from the first # and the last # and replace with your DLCI
ip address ##frame-ip## 255.255.255.252 <—Remove everthing from the first # and the last # and replace with your IP Address
ip flow ingress <—Only used if you have a netflow server
ip flow egress <—Only used if you have a netflow server
no cdp enable
frame-relay interface-dlci ##frame-DLCI## <—Replace everything from the first # and last # and replace with your DLCI
!
interface FastEthernet0/0.1
description **MANAGEMENT VLAN – DO NOT USE**
encapsulaiton dot1Q native
no snmp trap link-status
!
interface FastEthernet0/0.220 <—Change to any vlan number
description **PC-VLAN**
encapsulation dot1Q 220 <—Change to any vlan number
ip address ##eth0-ip## 255.255.255.0 <—Remove everthing from the first # and the last # and replace with your IP Address
no shut
!
interface FastEthernet0/0.120 <—Change to any vlan number
description **VOIP-VLAN**
encapsulation dot1Q 120 <—Change to any vlan number
ip address ##eth1-ip## 255.255.255.0 <—Remove everthing from the first # and the last # and replace with your IP Address
no shut
!
interface FastEthernet0/1
no ip address
shutdown
!
ip route 0.0.0.0 0.0.0.0 ##frame1-ip## <—Remove everthing from the first # and the last # and replace with your Next Hop address
!
ip flow-export source serial0/0/0 <—Used for netflow and can be removed
ip flow-export version 5 <—Used for netflow and can be removed
ip flow-export destination 10.50.30.201 2055 <—Used for netflow and can be removed
!
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 864000 requesta 10000
ip tacacs source-interface Loopback0
!
logging 0.0.0.0 <—-Sends info to Syslog server and can be removed
access-list 101 remark **MPLS QOS ACL**
access-list 101 permit ip any any
access-list 101 remark **MPLS QOS ACL**
snmp-server community 3cl1p$3 RW
!
tacacs-server host 0.0.0.0 <—Used for TACACS+ and SSH2 but can be removed
tacacs-server directed-request <—Used for TACACS+ and SSH2 but can be removed
tacacs-server key pass <—Used for TACACS+ and SSH2 but can be removed
!
banner login ^CCC
This is optional but enter your banner here. Shows up on the login screen.^C
!
line con 0
exec-timeout 30 0
logging synchronous
!
line aux 0
modem Dialin
transport input all
!
line vty 0 4
exec-timeout 30 0
logging synchronous
transport input ssh <— if you only want to telnet, change SSH to telnet
!
line vty 5 15
exec-timeout 30 0
logging synchronous
transport input ssh <— if you only want to telnet, change SSH to telnet
!
scheduler allocate 20000 1000
ntp source Loopback0
ntp server 0.0.0.0 <— if you have an NTP server, enter it’s ip here, or remove this line.
!
end

By: kwt712

kwt712 — Thu, 13 Aug 2009 19:17:50 +0000

thanks

By: kwt712

kwt712 — Thu, 13 Aug 2009 18:22:56 +0000

Can you please do that, i would help alot … thanks

By: r0berth1

r0berth1 — Thu, 13 Aug 2009 18:06:56 +0000

Kwt712, if you need me to. I can post a 2811 and 2950 template and you can just change what you need for later use.

By: r0berth1

r0berth1 — Thu, 13 Aug 2009 17:51:40 +0000

Good catch, I forgot to select the FastEthernet0/0 section when i copied it from my switch.

By: blankreg

blankreg — Thu, 13 Aug 2009 15:40:44 +0000

The router config is on the interface that connects directly to the FastEthernet0/1 of the switch.

One other thing, as R0berth1 fixed the speed and duplex on the trunk port on the switch, you should also do the same on the router, otherwise it will probably end up as half-duplex. Just add the commands on the router.

interface FastEthernet0/0
speed 100
duplex full

Other than that, R0berth1 gave you the full working answer

By: kwt712

kwt712 — Thu, 13 Aug 2009 14:56:51 +0000

Thanks for the configuration. for the router configuration, is this i have to add to the main router or the router that is pointing to this switch … let me know. thanks