Set up edge ports for a desktop, a printer, a phone port and a virtual host's LACP uplink

Steps

1. Place the devices and cable them as the Links table lists: Copper Cross-Over for the two S1-S2 links, Copper Straight-Through for every end device. There is no router in this lab, so each VLAN is tested from inside itself and the Addressing table gives no gateways. Set each end device's static address from the table now (Desktop > IP Configuration on the PCs, the laptop and the server; Config > FastEthernet0 on the printer).
2. On S1, create the VLANs the edge ports will use:

Switch> enable
Switch# configure terminal
Switch(config)# hostname S1
S1(config)# vlan 10
S1(config-vlan)# name STAFF
S1(config-vlan)# exit
S1(config)# vlan 30
S1(config-vlan)# name PRINTERS
S1(config-vlan)# exit
S1(config)# vlan 150
S1(config-vlan)# name VOICE
S1(config-vlan)# exit

3. Make the desktop, printer and laptop ports fixed access ports with PortFast. switchport mode access stops the port ever becoming a trunk through DTP; PortFast lets it forward as soon as the link comes up, and Packet Tracer prints a warning that PortFast belongs only on ports facing a single host, which is the case here.

S1(config)# interface FastEthernet0/1
S1(config-if)# description Desk PC
S1(config-if)# switchport mode access
S1(config-if)# switchport access vlan 10
S1(config-if)# spanning-tree portfast
S1(config-if)# exit
S1(config)# interface range FastEthernet0/6 - 7
S1(config-if-range)# description Print room
S1(config-if-range)# switchport mode access
S1(config-if-range)# switchport access vlan 30
S1(config-if-range)# spanning-tree portfast
S1(config-if-range)# exit

4. Configure the phone port. The access VLAN carries the PC's untagged frames; the voice VLAN is the one a phone would learn through CDP and tag its voice frames with. The port stays an access port. Packet Tracer's IP phones need a power adapter and call control to boot, which this lab does not build, so PC2 is cabled straight in to stand for the PC behind the phone.

S1(config)# interface FastEthernet0/3
S1(config-if)# description Desk phone with PC behind it
S1(config-if)# switchport mode access
S1(config-if)# switchport access vlan 10
S1(config-if)# switchport voice vlan 150
S1(config-if)# spanning-tree portfast
S1(config-if)# end
S1# show interfaces FastEthernet0/3 switchport

Find Access Mode VLAN: 10 and Voice VLAN: 150 in the output. Swapping those two numbers is the classic error: the PC would land in the voice VLAN. 5. From Laptop1, check that the printer answers inside VLAN 30:

C:\> ping 192.168.30.5

Now break it. A colleague tidying the VLAN database deletes VLAN 30, believing it unused:

S1# configure terminal
S1(config)# no vlan 30
S1(config)# end

Repeat the ping from Laptop1 and expect Request timed out. Diagnose it with show commands only: run show vlan brief and notice that VLAN 30 has gone and Fa0/6 and Fa0/7 appear under no VLAN at all. Then run show interfaces FastEthernet0/6 switchport and read the line Access Mode VLAN: 30 (Inactive): the port is still assigned to VLAN 30, but VLAN 30 does not exist, so the port forwards nothing. Making the port a trunk would not help; the printer sends untagged frames in one VLAN. The fix is to create the VLAN again:

S1# configure terminal
S1(config)# vlan 30
S1(config-vlan)# name PRINTERS
S1(config-vlan)# end

Ping the printer from Laptop1 once more; the replies return without touching the ports. 6. Set up the virtual host's side. On S2, the stand-in virtual switch, put SRV1 in VLAN 10 and start LACP on the two uplinks in passive mode. Then do the same on S1, so that both ends are passive:

Switch> enable
Switch# configure terminal
Switch(config)# hostname S2
S2(config)# vlan 10
S2(config-vlan)# name STAFF
S2(config-vlan)# exit
S2(config)# interface FastEthernet0/1
S2(config-if)# switchport mode access
S2(config-if)# switchport access vlan 10
S2(config-if)# spanning-tree portfast
S2(config-if)# exit
S2(config)# interface range GigabitEthernet0/1 - 2
S2(config-if-range)# channel-group 1 mode passive
S2(config-if-range)# end
S1# configure terminal
S1(config)# interface range GigabitEthernet0/1 - 2
S1(config-if-range)# channel-group 1 mode passive
S1(config-if-range)# end
S1# show etherchannel summary

Wait 30 seconds and run the show command again. Neither member is flagged (P): passive only answers LACP, so with passive at both ends nobody starts the negotiation and no bundle forms. 7. Fix the pairing from the switch side, the way lesson 9 recommends when the switch must start the negotiation, then put the trunk settings on the port channel at both ends. A host uplink is a trunk with DTP turned off, because a host does not speak DTP.

S1# configure terminal
S1(config)# interface range GigabitEthernet0/1 - 2
S1(config-if-range)# channel-group 1 mode active
S1(config-if-range)# exit
S1(config)# interface Port-channel1
S1(config-if)# switchport mode trunk
S1(config-if)# switchport trunk allowed vlan 10
S1(config-if)# switchport nonegotiate
S1(config-if)# end
S2# configure terminal
S2(config)# interface Port-channel1
S2(config-if)# switchport mode trunk
S2(config-if)# switchport trunk allowed vlan 10
S2(config-if)# switchport nonegotiate
S2(config-if)# end

Active with passive forms a bundle. Run show etherchannel summary on S1 and expect Po1(SU) with both members (P). If the bundle has not formed after a minute, enter shutdown and then no shutdown on S1's Gi0/1 - 2 range to restart the negotiation. Then, from PC1, run ping 192.168.10.20 to reach the virtual machine across the bundle. 8. A new virtual machine needs VLAN 40. Create the VLAN on both switches and extend the trunk with add. Without add, the command would replace the list and SRV1 in VLAN 10 would lose its network.

S1# configure terminal
S1(config)# vlan 40
S1(config-vlan)# name VM-NEW
S1(config-vlan)# exit
S1(config)# interface Port-channel1
S1(config-if)# switchport trunk allowed vlan add 40
S1(config-if)# end
S2# configure terminal
S2(config)# vlan 40
S2(config-vlan)# name VM-NEW
S2(config-vlan)# exit
S2(config)# interface Port-channel1
S2(config-if)# switchport trunk allowed vlan add 40
S2(config-if)# end
S1# show interfaces trunk

The allowed list for Po1 should now read 10,40. Repeat PC1's ping to SRV1 to prove VLAN 10 still crosses. 9. Finish with a written table, one row per S1 edge port: the device type, access or trunk, the VLAN or VLANs, PortFast yes or no, and which lesson 9 rule chose each setting. Add one row for a ceiling access point in local mode (an access port in the AP management VLAN) and one for a standalone access point (a trunk whose native VLAN is its management VLAN), which this lab does not cable.