Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Help me define a VLAN on Cisco Switches.

Posted on 2006-04-10
7
Medium Priority
?
1,556 Views
Last Modified: 2012-05-07
I know this might be easy for most experts, but I needed this setup ASAP, and I was hoping I get help doing it.
I have a network with a Catalyst 4507 with 48Gbps Ethernet ports, and 16-1Gbps SX  ports.
Also I have as distribution switches multiple 2950's .

I have a server (proxy1, IP 10.0.0.5) connected to port Gi 7/5 (which is Gig over UTP).
I currently have only one vlan for the whole network.
The subnet is 10.0.0.0/21

my 4507's IP is 10.0.0.240

I have Pc (I call it Gif, IP 10.0.0.161) which is connected to port (4) in switch 10.0.0.207
the switch "10.0.0.207" is connected through its port Gi01 to port Gi4/3 in the 4507

and another PC ( I  call it Dave, IP 10.0.0.34) which is connected through its port Gi01 to port (9) in switch 10.0.0.208
the switch "10.0.0.208" is connected to port Gi4/5 in the 4507

[Gif]--------port4-[++++++]=Gi01===Gi4/3=[ 4507             ]=Gi4/5=====Gi01=[+++++++]--port9-----[Dave]
10.0.0.161          10.0.0.207                        [ 10.0.0.240     ]                              10.0.0.208              10.0.0.34
                                                                 [                      ]-Gi7/5------[Proxy1]
                                                                                                           10.0.0.5  


Requirement:
1) PC "Gif" will be able to only see the server "proxy1"
2) PC "Dave" will be able to only  see the server "proxy1"
3) "Proxy1" will be available to any one else in the network.
Note: don't care if "Gif" can see "Dave" or not.

How can I establish this

Thanks in advance.
0
Comment
Question by:hkunnana
  • 2
  • 2
4 Comments
 
LVL 9

Expert Comment

by:cooledit
ID: 16423778
hi, there

ok so as I see it you will need 3-4 VLAN's

Lets name them:
VLAN 1 Management VLAN
Proxy 1=VLAN 2
David = VLAN 3
GIF = VLAN 4

Cisco 4507
Now on the cisco 4507 you assign each VLAN an IP Address ex.
VLAN 1 10.0.0.1/255.255.255.0
VLAN 2 10.0.1.2/255.255.255.0
VLAN 3 10.0.2.1/255.255.255.0
VLAN 4 10.0.2.2/255.255.255.0

VLAN Trunking:
4507
interface FastEthernet0/4
switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 2,3,4
 switchport mode trunk


So on these switches where these users are connected you first of all enable VLAN trunking.
then you can do it per port basis. Lets take the "GIF" machine
on the port where it is connected you now do :

interface FastEthernet0/4
switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 2
 switchport mode trunk

switch that the port is allowed to run vlans through (even if you set just
VLAN 2, cisco will automatically add VLAN 1 and VLAN 1002-1005) to the port
and set the port to trunk mode aswell. Trunk mode tells the switch that
a number of VLANS can go through it.
Last line is usually the mother of all screw-ups. If you forget that, you
won't get your VLAN working. Simple as that.
conf t
interface FastEthernet0/1
 duplex half
 speed 10
 switchport access vlan 2
end
-----------------

You could also make a VTP domain so you will basically setup all on one switch per MAC address it could later turn out to be a mess but is a nice feature.

Colledit
0
 
LVL 12

Author Comment

by:hkunnana
ID: 16432067
Thanks Cooledit, but I see that using these subnetting (specially with these addresses) will miss my network up.
I have read a little and manged to do the following till now:

I have created VLAN number 10, and createda a VTP domain DOM1. at first I tried to make the 4507 s server for the domain and then made all other switches as clients, and set the corrsponding ports  for the PC's in VLAN-10 only, and the port for Proxy1 in VLAN 1,10 . but that didn't work good, as the PC's were not isolated as I wished.
Then I've made all switches as VTP servers, and using VLAN 10 , assigned ports corrsponding to the PC's to static VLAN10, all other ports only VLAN1, and the trunk port to VLANs 1&10.

that did work to isolate the network of the PC's with the proxy1 from my network. Now what is missing is the need to allow all other netwok members to also reach the Proxy1.

0
 
LVL 9

Accepted Solution

by:
cooledit earned 2000 total points
ID: 16434654
hi, there

this is the problem VLAN 1 is the default management VLAN and is assigned to all ports.
you should rather create just 1 more VLAN

as you want to have 3 different "subnet" broadcasting doamin, so PC dave can talk to the proxy 1 that is 2 VLAN.

VLAN 1 Proxy1 needs access to PC Dave ---- PC-GIF

VLAN 1 is the default Management VLAN do not use this one.
VLAN 2 Proxy1 Access to VLAN 1, VLAN 3,
VLAN 3 PC Dave Access to VLAN 2,  
VLAN 4 PC GIF Access to VLAN 2

This is the best way I can explain it.

Cooledit
0
 
LVL 12

Author Comment

by:hkunnana
ID: 16435088
hi, Cool,

It seems reasonable, I will try it and let you know.

thanks

Hkunnana
0

Featured Post

Put Machine Learning to Work--Protect Your Clients

Machine learning means Smarter Cybersecurity™ Solutions.
As technology continues to advance, managing and analyzing massive data sets just can’t be accomplished by humans alone. It requires huge amounts of memory and storage, as well as high-speed processing of the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will show how Aten was able to supply easy management and control for Artear's video walls and wide range display configurations of their newsroom.
In this article, the configuration steps in Zabbix to monitor devices via SNMP will be discussed with some real examples on Cisco Router/Switch, Catalyst Switch, NAS Synology device.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question