configuring password switch, VLAN, Trunk, Trunk Allowed

Langkah Kerja:
- Buat topologi seperti di bawah ini

- lalu isikan ip addressnya klik gambar PC>desktop>up configuration, saya menggunakan ip 172.12.10.21 sampai 172.12.10.26

- kemudian saya akan membuat 3 password antara lain:
- Enable secret, fungsinya untuk proteksi sebelum masuk mode privileged
- Password console, fungsinya untuk proteksi sebelum masuk user mode
- Password Telnet /VTY, fungsinya sama seperti password console,bedanya kalo password vty via jaringan. cara settingnya klik switch(S1)>cli

- kemudian ketik “enable” untuk masuk mode privileged
S1>enable
S1#
- lalu ketik “conf t” untuk masuk global configuration
S1#conf t Enter configuration commands, one per line. End with CNTL/Z.
- langsung saja, untuk enable secret passwordnya ciscosec, console passwordnya ciscocon, yang terakhir telnet/vty passwordnya ciscovty,lebih jelas liat tulisan di bawah
S1(config)#enable secret ciscosec S1(config)#exit S1(config)#line console 0 S1(config-line)#password ciscocon S1(config-line)#exec-timeout 5 0 S1(config-line)#login S1(config-line)#exit S1(config)#line vty 0 4 S1(config-line)#password ciscovty S1(config-line)#exec-timeout 5 0 S1(config-line)#login S1(config-line)#exit
- ketikan “service password-encryption” untuk mengenkripsi password lebih jelasnya liat tulisan dibawah
S1(config)#service password-encryption S1(config)#
- lalu kita cek sudah berhasil apa belum dengan cara ketik “do show run”
S1(config)#do show run Building configuration... Current configuration : 1408 bytes ! version 12.2 no service timestamps log datetime msec no service timestamps debug datetime msec service password-encryption ! hostname S1 ! enable secret 5 $1$mERr$thF1sEHJ9Dl2J3WzXxyZ1/ ! ! ! ! ! spanning-tree mode pvst ! interface FastEthernet0/1 switchport trunk allowed vlan 10,20,30 switchport mode trunk ! interface FastEthernet0/2 switchport access vlan 10 switchport mode access ! interface FastEthernet0/3 switchport access vlan 20 switchport mode access ! interface FastEthernet0/4 switchport access vlan 30 switchport mode access ! interface Vlan1 no ip address shutdown ! line con 0 password 7 0822455D0A1606181C login exec-timeout 5 0 ! line vty 0 4 exec-timeout 5 0 password 7 0822455D0A1613030B login line vty 5 15 login ! ! ! end
- lakukan konfigurasi seperti di atas pada switch(S2) dan switch(S3)
- sekarang kita configurasi vlannya caranya klik switch(S1)>cli, masuk ke global configuration, saya akan membuat vlan 10,20,30 kemudian masukan port mana saja yang akan masuk vlan 10,20,30
S1#conf t Enter configuration commands, one per line. End with CNTL/Z. S1(config)#vlan 10 S1(config-vlan)#name guru S1(config-vlan)#exit S1(config)#vlan 20 S1(config-vlan)#name siswa S1(config-vlan)#exit S1(config)#vlan 30 S1(config-vlan)#name tu S1(config-vlan)#exit S1(config)#interface fa0/2 S1(config-if)#switchport mode access S1(config-if)#switchport access vlan 10 S1(config-if)#exit S1(config)#interface fa0/3 S1(config-if)#switchport mode access S1(config-if)#switchport access vlan 20 S1(config-if)#exit S1(config)#interface fa0/4 S1(config-if)#switchport mode access S1(config-if)#switchport access vlan 30 S1(config-if)#exit
- lalu kita cek sudah benar atau belum dengan cara ketik “do show vlan brief”
S1(config)#do show vlan brief VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------- 1 default active Fa0/1, Fa0/5, Fa0/6, Fa0/7 Fa0/8, Fa0/9, Fa0/10, Fa0/11 Fa0/12, Fa0/13, Fa0/14, Fa0/15 Fa0/16, Fa0/17, Fa0/18, Fa0/19 Fa0/20, Fa0/21, Fa0/22, Fa0/23 Fa0/24, Gig0/1, Gig0/2 10 guru active Fa0/2 20 siswa active Fa0/3 30 tu active Fa0/4 1002 fddi-default active 1003 token-ring-default active 1004 fddinet-default active 1005 trnet-default active
- lakukanlah configurasi seperti di atas pada switch(S2)
- sekarang kita akan mengkonfigurasi trunknya
- sebelumnya kita harus membuat vlan dulu di switch pusat(S3), jika kita tidak membuat vlan di switch pusat, maka mode trunk akan gagal.

S3#conf t Enter configuration commands, one per line. End with CNTL/Z. S3(config)#vlan 10 S3(config-vlan)#name guru S3(config-vlan)#exit S3(config)#vlan 20 S3(config-vlan)#name siswa S3(config-vlan)#exit S3(config)#vlan 30 S3(config-vlan)#name tu S1(config-vlan)#exit
- kita konfigurasi mode trunk di switch(S1) terlebih dahulu, caranya liat tulisan di bawah ini
S1(config)#interface fa0/1 S1(config-if)#switchport mode trunk S1(config-if)# %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up S1(config-if)#switchport mode trunk S1(config-if)#switchport trunk allowed vlan 10,20,30 S1(config-if)#exit
- lalu kita konfigurasi mode trunk di switch(S2) , caranya liat tulisan di bawah ini
S2(config)#interface fa0/2 S2(config-if)#switchport mode trunk S2(config-if)# %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to up S2(config-if)#switchport mode trunk S2(config-if)#switchport trunk allowed vlan 10,20,30 S2(config-if)#exit
- sekarang kita konfigurasi mode trunk di switch pusat (S3)
S3(config)# %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up S3(config)#interface fa0/1 S3(config-if)#switchport mode trunk S3(config-if)#switchport trunk allowed vlan 10,20,30 S3(config-if)#exit S3(config)# %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to up S3(config)#interface fa0/2 S3(config-if)#switchport mode trunk S3(config-if)#switchport trunk allowed vlan 10,20,30 S3(config-if)#exit
- setelah itu kita cek apakah sudah benar atau belum, dengan cara ketik”do shoh interface trunk”
S3(config)#do show interface trunk Port Mode Encapsulation Status Native vlan Fa0/1 on 802.1q trunking 1 Fa0/2 on 802.1q trunking 1 Port Vlans allowed on trunk Fa0/1 10,20,30 Fa0/2 10,20,30 Port Vlans allowed and active in management domain Fa0/1 10,20,30 Fa0/2 10,20,30 Port Vlans in spanning tree forwarding state and not pruned Fa0/1 10,20,30 Fa0/2 10,20,30
- jika sudah merasa benar maka konfigurasi trunk sudah beres
- sekarang kita cek dengan cara ngeping caranya klik gambar pc>desktop>command prompt

selesai……….selamat mencoba
Tidak ada komentar:
Posting Komentar