L2 Switching & VLANs Lab troubleshooting

 


This lab explores basic configurations to practice VLANs and switching concepts

you can download the lab from thekeithbarker.com under the name "Cisco PT Layer 2 Switching and VLANs" 

then extract the files, open the ".pkt" file and follow along with me 

Lab Objective: use the laptop to open the web page on the Server at 10.67.83.35

  • Use VLAN 10 for the Laptop and Server.
  • VLAN 10 is supporting the IPv4 network of 10.67.83.32 /27

Assumptions:

  • Trunking is already configured between switches.
  • DHCP services are already enabled for VLAN 10.


Let's start 

  • Laptop:

when you enter the Laptop configuration you notice that it is not powered on


enter the Laptop's physical configurations and click on the power button

after that, you notice the appearance of the wifi signals and the APIPA IP address which mean that it is not connected to the DHCP server   


  • Switch 3

show vlan brief

there's a vlan 10 and port fa0/2 is part of it

show interface fa0/2 switchport

fa0/2 is an access port on vlan 10


show interfaces trunk   

fa0/1 is a trunk port 
 

Switch 3 is configured correctly

  • Switch 2
show interfaces trunk


  •    Switch 1   

show interface trunk

port fa0/2 is a trunk port   


let's verify now fa0/1

show interface fa0/1 switchport 

the interface fa0/1 is part of vlan 1     


let's lists the VLANs in this device and confirm the old result

show vlan brief 

VLAN 10 doesn't exist in Sw1, and fa0/1 is part of the native VLAN 



to fix this you can:

  • create the VLAN
    • config terminal
    • vlan 10
  • assign the interface to it
    • int fa0/1
    • switchport mode access

    • switchport access vlan 10   

  • or you can assign the interface to the VLAN and it creates the VLAN automatically   




  • Switch2

we need to go back to Sw2 and add the VLAN 10 

because if a switch received an 802.1Q and the Vlan's ID doesn't exist in its configuration, it can't understand it so it will be dropped 

we wait a moment for the DHCP request to kick in and we can notice that the Laptop's IP address is changed   

now try to ping the Server from Laptop    


verify the connectivity: open the Web page on the Server at 10.67.83.35



The lab is completed ... 







Comments

Post a Comment

Popular posts from this blog

OpenVas: Vulnerability Scanning | Installation Guide

Image
  Introduction: OpenVAS is a vulnerability scanner that analyzes endpoints and web apps to uncover and detect flaws. Corporations frequently employ it as part of their mitigation strategies to initially identify any weaknesses in their operational or testing servers and apps. This isn't an ultimate solution, but it can assist in the elimination of any common weaknesses that may have sneaked through the gaps. Installation: There are three methods to install GreenBone openVas: 1- Install from Kali/OpenVas repositories:  This way varies in difficulty because of the needed configurations, you can simply install it with apt. sudo apt-get update -y &&  sudo apt-get upgrade -y &&  sudo apt-get dist-upgrade -y sudo apt-get install openvas sudo gvm-setup sudo gvm-check-setup 2- Install from source (Manually): This way is not the best for beginners due to prerequisite installations and error handling can be challenging. github.com/greenbone/openvas-scanner 3- Run from docker:
Read more

Nmap | TryHackMe Walkthrough

Image
  An in-depth look at scanning with Nmap, a powerful network scanning tool. This room was created by DarkStar  and  MuirlandOracle , as it provides a great way to learn and start practicing nmap. I encourage you to give it a try by yourself since the hands-on practice will give you more understanding of the topic (take advantage of the manual page man nmap ). Task2: What networking constructs are used to direct traffic to the right application on a server? Ports How many of these are available on any network-enabled computer? 65535 [Research] How many of these are considered "well-known"? (These are the "standard" numbers mentioned in the task) 1024 Task3: What is the first switch listed in the help menu for a 'Syn Scan' (more on this later!)? -sS Which switch would you use for a "UDP scan"? -sU If you wanted to detect which operating system the target is running on, which switch would you use? -O Nmap provides a switch to detect the version of the
Read more

Azure Sentinel: Use Microsoft's SIEM to map global attacks

Image
 in this tutorial, we will display attacks from all over the globe on a world map using Microsoft cloud SIEM (Security Information and Event Management) this is a step-by-step guided lab so it will be a long tutorial. Project steps this project needs multiple stages to be completed, when you finish this guide you will be able to: create and configure a Virtual Machine using Azure configure a cloud network security group and create firewall rules create and configure a Logs Analytics Workspace collect data from Virtual Machines into Azure get familiar with PowerShell scripting and APIs use (KQL) Kusto Query Language (the Azure data exporter language)  Let's get started First of all, go ahead and create a free Azure account at  https://azure.microsoft.com/en-us/free/   When you're done with that go to your dashboard at  https://portal.azure.com/ Ps: Just a quick note before we begin, you will notice in Azure as in GCP or AWS that the search bar is your b
Read more