How does one configure Department or Geographical VLANs? ⋆ Network Design Implementation Consultation

How does one configure Department or Geographical VLANs?

VLANs are used to create separate groupings of devices. Prior to VLANs, all the devices had to be on the same switch – users, printers and servers needed to be together had to be physically colocated. Most often VLANs were used to separate departments, but than can be used geographically.

Acme Company originally had all of their devices in Default Vlan, VLAN 1. Acme company has decided to separate it’s four departments into different VLANs to reduce the broadcast traffic and segregate users to access their department resources.

Accounting
Sales
Engineering
Research

Over time with the use of VLANs, the company was able to allow free movement of users between floors and eventually cubes but grant access the proper access by department using VLANs.

VLAN	NAME	SUBNET
1	default	1.1.1.0
2	Accounting	2.2.2.0
3	Sales	3.3.3.0
4	Engineering	4.4.4.0
5	Research	5.5.5.0

The switch is at factory default, which means its has no pre-existing configuration, the VLAN database only has the default VLAN, VLAN 1. Cisco has additional VLANs, 1002-1005, for support of older ethernet solutions, FDDI and Token Ring.

switchA>

switchA# en
switchA# Password:
switchA# sh vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6
Fa0/7, Fa0/8, Fa0/9, Fa0/1
Fa0/11, Fa0/12, Fa0/13, Fa0/14
Fa0/15, Fa0/16, Fa0/17, Fa0/18
Fa0/19, Fa0/20, Fa0/21, Fa0/22
Fa0/23, Fa0/24, Fa0/25, Fa0/26
Fa0/27, Fa0/28, Fa0/29, Fa0/30
Fa0/31, Fa0/32, Fa0/33, Fa0/34
Fa0/35, Fa0/36, Fa0/37, Fa0/38
Fa0/39, Fa0/40, Fa0/41, Fa0/42
Fa0/43, Fa0/44, Fa0/45, Fa0/46
Fa0/47, Fa0/48, Gi0/1, Gi0/2
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1002 fddi 101002 1500 - - - - - 0 0
1003 tr 101003 1500 - - - - - 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0
1005 trnet 101005 1500 - - - ibm - 0 0
Remote SPAN VLANs
------------------------------------------------------------------------------
Primary Secondary Type Ports
------- --------- ----------------- -----------------------------------------

To create the VLANs

switchA>

switchA# conf t
Enter configuration commands, one per line. End with CNTL/Z.

switchA(config)# vlan 2

switchA(config-vlan)# name Accounting
switchA(config-vlan)# vlan 3
switchA(config-vlan)# name Sales
switchA(config-vlan)# vlan 4
switchA(config-vlan)# name Engineering
switchA(config-vlan)# end

switchA>

switchA# sh vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Fa0/3, Fa0/4, Fa0/5, Fa0/6
Fa0/7, Fa0/8, Fa0/9, Fa0/10
Fa0/11, Fa0/12, Fa0/13, Fa0/14
Fa0/15, Fa0/16, Fa0/17, Fa0/18
Fa0/19, Fa0/20, Fa0/21, Fa0/22
Fa0/23, Fa0/24, Fa0/25, Fa0/26
Fa0/27, Fa0/28, Fa0/29, Fa0/30
Fa0/31, Fa0/32, Fa0/33, Fa0/34
Fa0/35, Fa0/36, Fa0/37, Fa0/38
Fa0/39, Fa0/40, Fa0/41, Fa0/42
Fa0/43, Fa0/44, Fa0/45, Fa0/46
Fa0/47, Fa0/48, Gi0/1, Gi0/2
2 Accounting active
3 Sales active
4 Engineering active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2
---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ ------
1 enet 100001 1500 - - - - - 0 0
2 enet 100002 1500 - - - - - 0 0
3 enet 100003 1500 - - - - - 0 0
4 enet 100004 1500 - - - - - 0 0
1002 fddi 101002 1500 - - - - - 0 0
1003 tr 101003 1500 - - - - - 0 0
1004 fdnet 101004 1500 - - - ieee - 0 0
1005 trnet 101005 1500 - - - ibm - 0 0

Remote SPAN VLANs
------------------------------------------------------------------------------

Primary Secondary Type Ports
------- --------- ----------------- ------------------------------------------

January 7, 2014 / Articles, Switching / Tags: 200, Cisco, Layer2, switching, VLAN

Like this post!

About the Author

Praveen Bahethi

Chief Technical Officer, Shilpa Systems
Washington D.C. Metro Area
Information Technology and Services
Driven leader looking to reduce costs and enhance revenues through the efficient and productive use of Technology Specialties: Managing Technology Teams Developing and Teaching Courseware Using a Comprehensive approach to Converged Infrastructure with insight into Technology, Costs, and People.

Comments

No comment yet.