search the web

Monday, September 28, 2015

Creating a new VLAN


VLAN and Trunk

VLAN makes separate broadcast domain and divide one physical broadcast domain to different virtual domains.
VLAN 1: It is the default vlan that all interfaces are assigned to it. We can’t delete or rename the VLAN1.
VLAN Features:
·         Logical Group Users
·         Segments Broadcast Domain
·         Subnet correlation
·         Access Control
·         Quality of Service
·         Security
·         Management
·         Traffic Control

How to create a new VLAN

HRT-S1# vlan database
HRT-S1(vlan-if)#vlan 100
HRT-S1(vlan-if)#name finance
How to assign ports to a VLAN
HRT-S1(config-if)#switchport mode access
HRT-S1(config-if)#switchport access vlan 100
How to see VLANs
HRT-S1# show vlan 100
HRT-S1(config-if)#do show vlan brief
Trunk: Different VLANs can communicate with each other through trunking. And it is used between two switches ports to allow the same VLANs on each switch to communicate together.
Switch interface Mode
HRT-S1(config-if)#switchport mode access
HRT-S1(config-if)#switchport mode trunk
HRT-S1(config-if)#switchport trunk (auto, negotiable, nonnegotiable, desirable)
Inter VLAN
Allow different of VLANs in a single switch to communicate to each other through sub-interfaces of a router.
VTP
VTP stands for vlan trunking protocol. It is used to create communication among vlan of different switches.
VTP Mode:
1.      Server: create, change and update vlans(By default all VTP mode is server)
2.      Client: only update vlans
3.      Transparent: It is neutral and just pass the updates
HTTP Activation
By activating of HTTP protocol in Cisco’s device, we can login to them graphically and do configuration or changes.
Router (config)# ip http server
Router (config)# ip http secure-server
Router (config)#ip http authentication local
Router (config)# username admin privilege 15 password admin or secret admin
Router (config)# line vty 0 15
Router (config-line)#password 12345
Router (config)# line console
Router (config-line)# password
Router (config)# interface fastethernet 0/1
Router (config-if)# ip address 10.10.10.1 255.0.0.0
Router (config)# do wr
Password Recovery for Cisco 2950 Switches
The default configuration for the switch allows an end user with physical access to the switch to recover from a lost password by interrupting the boot process during power-on and by entering a new password. These recovery procedures require that you have physical access to the switch.
 Note On these switches, a system administrator can disable some of the functionality of this feature by allowing an end user to reset a password only by agreeing to return to the default configuration. If you are an end user trying to reset a password when password recovery has been disabled, a status message shows this during the recovery process.


These sections describes how to recover a forgotten or lost switch password:
Procedure with Password Recovery Enabled
Procedure with Password Recovery Disabled
You enable or disable password recovery by using the service password-recovery global configuration command. Follow the steps in this procedure if you have forgotten or lost the switch password.
 Step 1 Initialize the flash file system:
switch: flash_init
Step 2 If you had set the console port speed to anything other than 9600, it has been reset to that particular speed. Change the emulation software line speed to match that of the switch console port.
Step 3 Load any helper files:
swtch: load_helper
Step 4 Display the contents of flash memory:
switch: dir flash:
The switch file system appears:
Directory of flash:
   13  drwx         192   Mar 01 1993 22:30:48  c2960-lanbase-mz.122-25.FX
   11  -rwx        5825   Mar 01 1993 22:31:59  config.text
   18  -rwx         720   Mar 01 1993 02:21:30  vlan.dat
16128000 bytes total (10003456 bytes free)
Step 5 Rename the configuration file to config.text.old.
This file contains the password definition.
switch: rename flash:config.text flash:config.text.old
Step 6
Boot the system:
switch: boot
You are prompted to start the setup program. Enter N at the prompt:
Continue with the configuration dialog? [yes/no]: N
Step 7 At the switch prompt, enter privileged EXEC mode:
Switch> enable
Step 8 Rename the configuration file to its original name:
Switch# rename flash:config.text.old flash:config.text
Step 9 Copy the configuration file into memory:
Switch# copy flash:config.text system:running-config
Source filename [config.text]?
Destination filename [running-config]?
Press Return in response to the confirmation prompts.
The configuration file is now reloaded, and you can change the password.
Step 10 Enter global configuration mode:
Switch# configure terminal
Step 11 Change the password:
Switch (config)# enable secret password
The secret password can be from 1 to 25 alphanumeric characters, can start with a number, is case sensitive, and allows spaces but ignores leading spaces.
Step 12 Return to privileged EXEC mode:
Switch (config)# exit
Switch#
Step 13 Write the running configuration to the startup configuration file:
Switch# copy running-config startup-config
The new password is now in the startup configuration.


Note This procedure is likely to leave your switch virtual interface in a shutdown state. You can see which interface is in this state by entering the show running-config privileged EXEC command. To re-enable the interface, enter the interface vlan vlan-id global configuration command, and specify the VLAN ID of the shutdown interface. With the switch in interface configuration mode, enter the no shutdown command.


Step 14 Reload the switch:
Switch# reload
Step 1:
Power off the switch first, then press the mode button while you are switching on the switch again. Hold it for 15 seconds until SYS is solid green, and then release it.
Step 2:
Switch:
Switch: flash_init
Step 3:
Switch: dir flash:
Switch: config.text
Step 4:
Switch: rename flash:config.text flash: oldconfig.backup
Switch: boot
Step 5:
To recover the old configuration:
Switch# rename flash:oldconfig.backup flash:config.text

for initial configuration of Router, switch or AP visit link below
initial configuration of Router, Switch or AP


No comments: