Setup:
You will work together in groups of 3.
0. Boot your 3 machines into Linux. Unplug 2 of the machines from all networks.
1. Get a Cisco SG300 switch/router and serial-to-USB cable from your benevolent professor. Connect the switch/router to a USB port on the one machine still connected to the orange network. Plug in the router now so that it starts booting.
2. Download and install putty
on the same machine. (Use apt-get
. If you don't remember how to do this, look back at a previous lab to see how.)
*** Q1: What is the command to get putty
onto your computer? ***
3. Configure putty to be able to communicate with the router over the USB port (/dev/ttyUSB0
).
sudo putty
Serial
for the Connection Type:/dev/ttyUSB0
Session
. Click on Default Settings.
Click Save
.Open
.4. Login
User Name:
cisco
Password: cisco
Please change your password from the default settings. Please change the password for better protection of your network. Do you want to change the password (Y/N)[Y] ? N
switch4968b6#
5. Set some initial configuration options
switch4968b6# config terminal
(set the device to receive configuration commands from the terminal)
(or, better, choose your own name here)
switch4968b6(config)# hostname is333-1
is333-1# end
is333-1#
show running-config
<lots of output here>
*** Q2. What mode is the switch in? What version of software is running? ***
6. Let's create a new VLAN to do switching on
is333-1# config t
is333-1(config)# vlan database
is333-1(config-vlan)# vlan 10
is333-1(config-vlan)# int vlan 10
is333-1(config-if)# name red (or pick your own name here)
is333-1(config-vlan)# end
is333-1# show run
7. Now, we can add physical ports/interfaces to the VLAN
First, plug your other two computers into the switch/router in ports 1 and 2. Make sure you see the green carrier LEDs flash periodically. Then, do the following:
is333-1# config t
(short for GigabitEthernet 1)
is333-1(config)# int Gi1
is333-1(config-if)# switchport mode access
is333-1(config-if)# switchport access vlan 10
is333-1(config-if)# end
is333-1# show vlan
Repeat step 7. for port Gi2. Then, do the following to save the current configuration to flash so that it is used after a reboot.
is333-1# copy running-config startup-config
8. Configuring IP addresses on the other machines
We don't have a DHCP server running anywhere, so we'll have to configure IP addresses on these machines "statically".
Edit
. Wired Connection 1
, and click Edit...
IPv4 Settings
tab. Change the Method:
to Manual
.+Add
192.168.10.10, <tab>, 192.168.10.1
.Save...
ip addr
and confirm that the machine has the IP address configured.ping
between the machines to see if you can communicate.
9. Monitor the behavior
On the switch/router, run this command:
show mac address-table
*** Q3. What does it tell you? ***
show mac address-table
again. show spanning-tree
10. Access the switch from a browser
In order to access the web interface on the switch, we have to give the switch itself an IP address, and then we have to get onto that same network from another computer.
On the switch, do these commands:
is333-1# config t
we are configuring the management vlan, vlan 1)
is333-1(config)# int vlan 1 (
is333-1(config-if)# ip address 192.168.1.1 /24
is333-1# end
*** Q7. Describe what the above commands did. ***
Now, on the Linux machine that you've been using to type commands into the switch/router console:
Open a browser on the Linux box and go to 192.168.1.1. Use cisco
for the username, and cisco
for the password.
Now, poke around a bit on the web interface. Look at statistics for the interfaces, vlan information, etc.
*** Q8. Describe how you can view the system log and describe what you see in that log. ***
*** Q9. Describe how you can change one of the ports being used (port 1 or 2) to be "Administratively Down". ***
11. Clean up and submit your answers via moodle.
delete startup-config
reload
Clean up your ethernet cables nicely and put them away.
On each machine change the interfaces back to using DHCP (Automatic)
from Manual
IP address configuration. Plug the machines back in to the orange network and confirm that they get 153.106.x.y IP addresses.