Configuring Trunk Ports (switch Cisco)



In this lab you will familiarize yourself with the following commands;
Command
Description
switchport mode trunk
This command when executed in interface configuration mode on a switch port will configure the switchport as a trunk port which carries all VLAN traffic.
switchport trunk encapsulation isl
This command is executed in interface configuration mode to specify that the trunk will use the Cisco Inter-Switch Link (ISL) encapsulation protocol.
switchport trunk encapsulation dot1q
This command is executed in interface configuration mode to specify that the trunk will use the IEEE 802.1q standard encapsulation protocol.
show interface trunk
This command is executed in privileged mode to show which interfaces are currently trunking and which trunking protocol is used.
show interface interfacename#/# switchport
This command when executed in privileged mode will show information relating to the specified interface such as the interface operational mode (trunk or access), native vlan, trunking VLAN’s permitted on the trunk link and more.

Lab Prerequisites

  • Establish a console session with devices SW1, SW2, R1 and R2 than configure the devices respected hostname(s).
  • Configure R1′s FastEthernet0/0 interface with the IP Address 10.1.1.1/24 and R2′s FastEthernet0/1 interface with the IP address of 10.1.1.2/24
  • Create VLAN 10 as a layer 2 VLAN on SW1 and SW2. (Layer 2 VLAN’s do not have Layer 3 VLAN interfaces representing the VLAN; ie, no interface Vlan10.)
  • Configure SW1′s FastEthernet0/1 and SW2′s FastEthernet0/2 interfaces as static access interfaces for VLAN 10.

Lab Objectives

  • Shutdown interfaces FastEthernet0/11 and FastEthernet0/12 on both SW1 and SW2 and configure an IEEE 802.1q trunk on interface FastEthernet0/10 of both SW1 and SW2.
  • Verify your trunk link configuration by using the show interface interfacename#/# trunk command.
  • Verify that R1 has IP reachability to R2 by using ping command on R1.
  • Change SW1′s FastEthernet0/2 interface to be placed into VLAN 5 and verify your verify IP reachability between R1 and R2 again.
Read Me
The Lab instruction for this lab is demonstrated using a Cisco Catalyst 3560 Series Switch, not the NM-16ESW.. Also note that the NM-16ESW does not support ISL trunk encapsulation which will be demonstrated in the lab instruction.

Lab Instruction

Step 1. – Shutdown interfaces FastEthernet0/11 and FastEthernet0/12 on both SW1 and SW2 and configure an IEEE 802.1q trunk on interface FastEthernet0/10 of both SW1 and SW2.
To configure an interface as a static trunk you’ll first need to configure the encapsulation type first as an interface whose trunk encapsulation is “Auto” can not be configured to “trunk” mode.
SW1 con0 is now available
Press RETURN to get started.
SW1>enable
SW1#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
SW1(config-if)#interface range Fa0/11 - 12
SW1(config-if-range)#shutdown
SW1(config-if-range)#interface fa0/10
SW1(config-if)#switchport trunk encapsulation dot1q
SW1(config-if)#switchport mode trunk
SW1(config-if)#no shut
SW1(config-if)#end
SW1#
And now the same configuration on SW2;
SW2 con0 is now available

Press RETURN to get started.

SW2>enable
SW2#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
SW2(config-if)#interface range Fa0/11 - 02
SW2(config-if-range)#shutdown
SW2(config-if-range)#interface fa0/10
SW2(config-if)#switchport trunk encapsulation dot1q
SW2(config-if)#switchport mode trunk
SW2(config-if)#no shut
SW2(config-if)#end
SW2#
Step 2 . – Verify your trunk link configuration by using the show interface FastEthernet0/10 trunk command as shown below on both SW1 and SW2;
SW1#show interface FastEthernet0/10 trunk

Port      Mode         Encapsulation  Status        Native vlan
Fa0/10    on           802.1q         trunking      1

Port      Vlans allowed on trunk
Fa0/10    1-4094

Port      Vlans allowed and active in management domain
Fa0/10    1,10

Port      Vlans in spanning tree forwarding state and not pruned
Fa0/10    1
SW1#
SW2#show interface FastEthernet0/10 trunk

Port      Mode         Encapsulation  Status        Native vlan
Fa0/10    on           802.1q         trunking      1

Port      Vlans allowed on trunk
Fa0/10    1-4094

Port      Vlans allowed and active in management domain
Fa0/10    1,10

Port      Vlans in spanning tree forwarding state and not pruned
Fa0/10    1
SW2#
Step 3. – Verify that R1 has IP reachability to R2 by using ping command on R1.
Now that you have a trunk link between SW1 and SW2, traffic generated on SW1 in VLAN 10 should be able to propagate to VLAN 10 on SW2. To test this, ping R2′s FastEthernet 0/1 interface (IP Address 10.1.1.2) From R1 as shown below;
R1#ping 10.1.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 4/29/60 ms
R1#
When you ping R2′s FastEthernet0/1 interface IP address from R1, the router knows that the destination IP address is on the same local subnet therefore it ARP’s for the MAC address of host 10.1.1.2, This ARP request is received on SW1 and forwarded to SW2 and onto R2 which responds “Hey I’m 10.1.1.2, my MAC address is ABCD.EF12.3456″. Now that R1 knows the MAC address for 10.1.1.2 it then fowards the ICMP packet towards SW1 with the correct destination MAC address. Initially SW1 will not know the location of that MAC address because the machine is not local to that switch so therefore it will forward the frame out interfaces within that VLAN except the interface that the frame was received on. When the frame is received by SW2 it then is switched out the correct port as the MAC exists already in its MAC address table. When R2 responds to the ICMP packet it will then go the opposite way towards SW1. After SW1 receives a response from R2 destined to R1 seeing a NEW source MAC address that SW1 has not learned it will then install the MAC address into the CAM Table (Mac Address Table) for future use.

Step 4. – Change SW1′s FastEthernet0/2 interface to be placed into VLAN 5 and verify your verify IP reachability between R1 and R2 again.
You can also test this further by placing SW2′s interface that is connected to R2 in a different vlan and attempt to ping R2 from R1 and no doubly it will fail as shown below;
SW2#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
SW2(config)#interface FastEthernet0/2
SW2(config-if)#switchport access vlan 5
% Access VLAN does not exist. Creating vlan 5
SW2(config-if)#end
SW2#
R1#ping 10.1.1.2

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.2, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
R1#
As demonstrated in this lab you can use trunk links to pass traffic in multiple VLAN’s between multiple switches using a single link.
Due to the NM-16ESW and Cisco 2950 not supporting the ISL trunk encapsulation, a configuration example is given below. Note that the only configuration difference between Dot1q and ISL is the switchport trunk encapsulation isl | dot1q command option.
c3560-Switch1>enable
c3560-Switch1#configure terminal
c3560-Switch1(config)#interface fa0/10
c3560-Switch1(config-if)#switchport trunk encap isl
c3560-Switch1(config-if)#switchport mode trunk
c3560-Switch1(config-if)#end
c3560-Switch1#sh int fa0/10 trunk

Port        Mode             Encapsulation  Status        Native vlan
Fa0/10      on               isl            trunking      1

Port        Vlans allowed on trunk
Fa0/10      none

Port        Vlans allowed and active in management domain
Fa0/10      none

Port        Vlans in spanning tree forwarding state and not pruned
Fa0/10      none
c3560-Switch1#

Configuring Router on a Stick


In this lab you’ll familiarize yourself with the following new commands;
Command
Description
encapsulation dot1Q #
This command is executed from ethernet sub-interface configuration mode and binds the sub interface(s) to a particular 802.1q tagged vlan.
no ip routing
This command is executed from global configuration and disables the routers ability to be used as a router, effectively turning it into a test client machine like a windows box.
ip default-gateway 1.2.3.4
This command is executed in global configuration mode to configure a non-routing device to use the specific IP Address as a default-gateway.
show ip interface brief
This command can be executed from user or privileged mode to view the current IP addresses of all interfaces on the device.


Lab Prerequisites

  • Establish a console session with devices R1, R2, R3 and SW1 than configure the devices respected hostname(s).
  • Create VLAN’s 20 and 30 on SW1 and configure interface Fa0/1 on SW1 as an 802.1q trunk link.
  • On SW1 configure interface Fa0/2 to access VLAN20 and Fa0/3 to access VLAN 30.
  • Configure the IP address 10.1.20.2/24 on R2′s FastEthernet0/0 interface.
  • Configure the IP address 10.1.30.3/24 on R3′s Fastethernet0/0 interface.

Lab Objectives

  • Configure a new Sub-Interface on R1 to match the VLAN 20 (Fa0/0.20) and configure the sub-interface to use 802.1q encapsulation and the Dot1q tag of 20. Configure the sub-interface to use the IP address 10.1.20.1/24.
  • Configure a new Sub-Interface on R1 to match the VLAN 30 (Fa0/0.30) and configure the sub-interface to use 802.1q encapsulation and the Dot1q tag of 30. Configure the sub-interface to use the IP address 10.1.30.1/24. Verify your sub-interface configuration.
  • Disable IP Routing on R2 and R3 and configure the default gateway on R2 and R3 to use R1′s respected Sub-interface as the default gateway.
  • Verify that R2 can ping R3′s FastEthernet0/0 interface using R1 as the default-gateway.

Lab Instruction

Step 1. – Configure a new Sub-Interface on R1 to match the VLAN 20 (Fa0/0.20) and configure the sub-interface to use 802.1q encapsulation and the Dot1q tag of 20. Configure the sub-interface to use the IP address 10.1.20.1/24.
To create a new sub-interface you’ll use the interface fa0/0.# command in global configuration mode. To enable the sub-interface to use 802.1q you’ll use the encapsulation dot1q # command whereas # is the dot1q VLAN tag as shown below;
R1 con0 is now available
Press RETURN to get started.
R1>enable
R1#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
R1(config)#interface fa0/0
R1(config-if)#no shut
R1(config-if)#interface fa0/0.20
R1(config-subif)#encapsulation dot1q 20
R1(config-subif)#ip add 10.1.20.1 255.255.255.0
R1(config-subif)#exit
R1(config)#
Step 2. Configure a new Sub-Interface on R1 to match the VLAN 30 (Fa0/0.30) and configure the sub-interface to use 802.1q encapsulation and the Dot1q tag of 30. Configure the sub-interface to use the IP address 10.1.30.1/24. Verify your sub-interface configuration.
R1(config)#interface fa0/0.30
R1(config-subif)#encapsulation dot1q 30
R1(config-subif)#ip add 10.1.30.1 255.255.255.0
R1(config-subif)#end
R1#sh run interface fa0/0.20
Building configuration...
Current configuration : 96 bytes
!
interface FastEthernet0/0.20
 encapsulation dot1Q 20
 ip address 10.1.20.1 255.255.255.0
end
R1#sh run interface fa0/0.30
Building configuration...
Current configuration : 96 bytes
!
interface FastEthernet0/0.30
 encapsulation dot1Q 30
 ip address 10.1.30.1 255.255.255.0
end
R1#show ip interface brief | inc FastEthernet0/0
Interface               IP-Address    OK? Method   Status     Protocol
FastEthernet0/0         unassigned    YES unset    up         up
FastEthernet0/0.20      10.1.20.1     YES manual   up         up
FastEthernet0/0.30      10.1.30.1     YES manual   up         up
R1#
Step 3. – Disable IP Routing on R2 and R3 and configure the default gateway on R2 and R3 to use R1’s respected Sub-interface as the default gateway.
To disable IP Routing on R2 and R3 use the no ip routing command in global configuration. To specify a default gateway use the ip default-gateway x.x.x.x as shown below;
R2 con0 is now available
Press RETURN to get started.R2>enable
R2#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
R2(config)#no ip routing
R2(config)#ip default-gateway 10.1.20.1
R2(config)#end
R2#
R3 con0 is now available
Press RETURN to get started.
R3>enable
R3#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
R3(config)#no ip routing
R3(config)#ip default-gateway 10.1.30.1
R3(config)#end
R3#
Step 4. – Verify that R2 can ping R3’s FastEthernet0/0 interface using R1 as the default-gateway as shown below;
R2#ping 10.1.30.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.30.3, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 8/23/52 ms
R2#


Share files folder devices printers in peer to peer workgroup network(xp)

We have configured workgroup network. Now in this article we would share file, folder and printer in workgroup network. In Window XP home edition we only have Simple File Sharing option which does not allow us to password protect the shared resources. In Window XP professional we could use advance file sharing to password protect the shared resources.

Enable Simple File Sharing on Windows XP Professional

Simple file sharing is the only available option in XP home edition and its also selected as default option in professional edition. So we would use simple file sharing in our example. On Xp professional you could check simple file sharing status by going to the Tools menu in Windows Explorer and selecting Folder Options.
folder options
Select the View tab and scroll to the bottom of the options. Check the box next to Use Simple File Sharing Recommended.
Folder Option Properties
Trick :- how can we use special file sharing permission in workgroup ?
Ans. Just uncheck this option

Share file and folder in workgroup network

Right click on the folder which you want to share and select Sharing and Security
You may get following window if file sharing is not enabled yet. Click on "If you understand the security risks but want to share files without running the wizard, click here."
For security reason it would prompt you to use Network Setup Wizard to enable file and sharing. See our previous article if you would like to use Network Setup Wizard. Select Just Enable File Sharing
Default sharing mode is read only. In read only mode users can see the shared files and folders but they would not allow to modify them. Click on the check box next to Allow Network Users To Change My Files. and click on ok.
A hand would appear just under the folder once it is shared.
To view this shared folder on other workgroup computer open my network. In my network place you would see all computers of workgroup network. Open the computer from which you have just shared the folder .

How to share printer in workgroup network

  • Local printer is the printer that is attached with system directly.
  • Network printer is the printer that is attached with other system and we will use it via network.

Installing Local printer

Local printer is required before you share it on network. To install local printer connect it with system. And check it in printer and fax. Start ==> Setting ==> printer and faxes
If you did not see any printer here it means system has not detected the printer yet. You need to install it manually. Click on add a printer
This will launch add printer wizard
Select Local printer attached to this computer
Select the port on which you have attached the printer
Select the manufacturer and model of your printer. if you have printer driver CD then use have disk options
give any name to your printer for example OfficePrinter, LabPrinter, any thing that is close to your specification
If you want to print test page then choose Yes otherwise select No
Click on Finish to complete the Wizard
Before sharing on network it's best practice to test the printer. Do some printing.
Share Printer in workgroup network
Sharing a printer is similar to sharing the folder.
Right-click on the printer and select Sharing.
You will see the following dialog box. Click on If you understand the security risks.................
Select Share This Printer. Provide a name for the shared printer and Click OK
sharing hand will appear under your printer

Installing Network printer

Network printer will be installed on all other computers. To install a network printer
Start ==> Setting ==> printer and faxes ==> Add a printer ==> Select Network printer
If you know the exact path of printer than type it otherwise Select Browse for a printer
Select the printer
If you want to print test page than choose Yes otherwise select No
Click on Finish to complete the Wizard
Click on finish. Now you have installed the network printer. You could make it default printer. Right click on printer and select make it default.

How to configure Remote Desktop ( RDP ) Step By Step Guide

RDP remote desktop protocol is a nice feature of XP professional. It is not available in XP home edition. RDP allow you to share the desktop. With RDP you could access desktop from any computers. You need to enable it before use. To enable it follow these steps:
Start ==> Control Panel ==> Select Add Or Remove Programs ==> Select Add/Remove Windows Components ==> Select Internet Information Services ==> Click the Details button ==> Select World Wide Web Service ==> Click the Details button ==> Check the Remote Desktop Web Connection checkbox ==> Click OK ==>Click Next ==> Click Finish to complete the wizard
To make this update either restart the computer or follow these steps
  • Click Start ==> Select Run ==> Enter Net Stop w3svc ==> click the OK button or press Enter.
  • Click Start ==> Select All Programs ==> Select Microsoft Update ==>Select Scan For Updates ==> Install all critical updates on the host system.
  • Click Start ==> Select Run ==> Enter Net Start w3svc ==> click the OK button.

>>>Installing Remote Desktop connection on non-XP systems

As I previously said RDP is feature of XP Professional. But good thing about it is you could install it on other platform also. On other system you need to install it separately form the CD of XP Professional . To install the RDP follow these steps:
  • Insert Windows XP Professional CD in CD or DVD drive.
  • From the resulting Welcome To Microsoft Windows XP screen, click Perform Additional Tasks.
  • Click Setup Remote Desktop Connection from the What Do You Want To Do Screen.
  • The InstallShield Wizard will open; click Next on the Welcome To The InstallShield Wizard for Remote Desktop Connection.
  • Read and accept the license agreement and click Next.
  • Enter the customer name and organization, and specify whether the desktop connection is to be available to all users or only the logged in user and click Next.
  • Click Install.
  • Click Finish.
Once RDP is install you could access it by clicking Start ==> Programs ==> Accessories ==> Communications ==> Remote Desktop Connection or by opening a command prompt and typing mstsc.

Firewall settings

Window firewall must be open for RDP before you start working with RDP. You could either turn off the firewall or configure it to allow the RDP. If you are using RDP only in local network with trusted computers than you could turn off the window firewall. But if you are using RDP over the un-trusted network its better to use firewall. To configure windows firewall follow these steps :
  • Click Start.
  • Click Control Panel.
  • Access the Windows Firewall menu (by clicking Windows Firewall using Control Panel's Category View or by clickingSecurity Center and selecting Windows Firewall using the Classic Vew).
  • Click the Exceptions tab.
  • Confirm the Remote Desktop checkbox is checked and isn't overridden by a group policy.
When working with other firewalls, it's usually best that port 3389 (and port 80) be opened to enable Terminal Services traffic (and the connection to the Remote Desktop application). This is especially true when attempting to connect to Small Business Server 2003 desktops.

Enabling user access

Create an user account with administrative privilege.
  • Click Start.
  • Click Control Panel.
  • Click User accounts
create user
Click on Create a new account
Enter the name for new account
Now create password for this account
By default remote access is disabled. We need to enable it from my computer properties
  • Right click on My Computer and select properties
  • Click the Remote tab.
  • Checked the Allow Users To Connect Remotely To This Computer.
  • Click the Select Remote Users button
Click the Add button.
Now click on advance
Now we need to add our user in Remote desktop users group which by default have permission to access system remotely.
  • Click OK to close the Select Users window.
  • Click OK to close the Remote Desktop Users window
By default, any members of the Administrators group can connect to the system, even if they're not specifically authorized using the Remote Desktop Users window.
Connecting with Remote Desktop from other computer
We have successfully configured RDP. Now go on other computer and follow these steps to access that computer remotely
  • Click on Start.
  • Select Run.
  • Typing mstsc and click OK.
Alternatively, one can:
  • Click Start.
  • Click All Programs.
  • Click Accessories.
  • Click Communications.
  • Click Remote Desktop Connection.
Type the ip address of the computer where we have configured RDP
Give the user name and password
Now you can access computer
when you have finished you can disconnects the session.
start ==> Disconnects