simulasi InterVLAN dan accessgroup

LANGSUNG AJA..........................
ok dech kita mulai aja yach..
simulasi ini dibuat untuk keamanan koneksi aja dan meminimalisir broadcast dari LAN


1. router
VLAN 1 IP 192.168.1.1
VLAN 2 IP 192.168.11.1

2.switch_server ada 2 server
server VLAN 1 IP 192.168.1.2
server VLAN 2 IP 192.168.11.2

3. switch_client ada 2 PC
client VLAN 1 IP 192.168.1.100
client VLAN 1 IP 192.168.11.100

Setting Router InterVLAN

Quote

Router>enable
Router#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#hostname router_InterVLAN
router_InterVLAN(config)#enable secret cisco
router_InterVLAN(config)#line vty 0 1
router_InterVLAN(config-line)#login
% Login disabled on line 66, until 'password' is set
% Login disabled on line 67, until 'password' is set
router_InterVLAN(config-line)#password cisco1
router_InterVLAN(config-line)#exit

router_InterVLAN(config)#int fa 0/0.1
router_InterVLA(config-subif)#description ini adalah VLAN 1
router_InterVLA(config-subif)#encapsulation dot1Q 1
router_InterVLA(config-subif)#ip address 192.168.1.1 255.255.255.0
router_InterVLA(config-subif)#exit

router_InterVLAN(config)#int fa 0/0.2
router_InterVLA(config-subif)#desc
router_InterVLA(config-subif)#description ini adalah VLAN 2
router_InterVLA(config-subif)#encapsulation dot1Q 2
router_InterVLA(config-subif)#ip address 192.168.11.1 255.255.255.0
router_InterVLA(config-subif)#exit

router_InterVLAN(config)#int fa 0/0
router_InterVLAN(config-if)#no shutdown
router_InterVLAN(config-if)#exit
router_InterVLAN(config)#

Setting Swicth Penghubung

Quote

Switch>enable
Switch#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#hostname switch_penghubungV

switch_penghubungV(config)#int fa 0/1
switch_penghubungV(config-if)#switchport mode trunk

switch_penghubungV(config-if)#int fa 0/2
switch_penghubungV(config-if)#switchport mode trunk

switch_penghubungV(config-if)#int fa 0/3
switch_penghubungV(config-if)#switchport mode trunk

switch_penghubungV(config-if)#exit

Setting Switch Server

Quote

Switch>enable
Switch#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#hostname swicth_server

swicth_server(config)#int fa 0/1
swicth_server(config-if)#switchport mode trunk

swicth_server(config-if)#int fa 0/2
swicth_server(config-if)#switchport mode access
swicth_server(config-if)#switchport access vlan 1

swicth_server(config-if)#int fa 0/3
swicth_server(config-if)#switchport mode access
swicth_server(config-if)#switchport access vlan 2
swicth_server(config-if)#exit
swicth_server(config)#exit

swicth_server#vlan database
swicth_server(vlan)#vlan 1
VLAN 1 modified:
swicth_server(vlan)#vlan 2
VLAN 2 modified:
swicth_server(vlan)#exit
APPLY completed.
Exiting....
swicth_server#sh vlan

Setting Switch Client

Quote

Switch>enable
Switch#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Switch(config)#hostname swicth_client
swicth_client(config)#int fa 0/1
swicth_client(config-if)#switchport mode trunk

swicth_client(config-if)#int fa 0/2
swicth_client(config-if)#switchport mode access
swicth_client(config-if)#switchport access vlan 1

swicth_client(config-if)#int fa 0/3
swicth_client(config-if)#switchport mode access
swicth_client(config-if)#switchport access vlan 2
swicth_client(config-if)#exit
swicth_client(config)#exit

swicth_client#vlan database
swicth_client(vlan)#vlan 1
VLAN 1 modified:
swicth_client(vlan)#vlan 2
VLAN 2 modified:
swicth_client(vlan)#exi
APPLY completed.
Exiting....
swicth_client#sh vlan

nah.. klo dah setting semua.. dari masing2 PC atau server bisa saling berubungan atau koneksi,, klo ga percaya ping aja..
maka dari itu kita setting accesslist groupnya..

Setting Access List Group dari Router

Quote

router_InterVLAN>enable
Password:
router_InterVLAN#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
router_InterVLAN(config)#access-list 1 permit host 192.168.1.2
router_InterVLAN(config)#access-list 2 permit host 192.168.11.2
router_InterVLAN(config)#int fa 0/0.1
router_InterVLA(config-subif)#ip access-group 1 out
router_InterVLA(config-subif)#exit
router_InterVLAN(config)#int fa 0/0.2
router_InterVLA(config-subif)#ip access-group 2 out
router_InterVLA(config-subif)#exit
router_InterVLAN(config)#exit

kesimpulannya:
1. klo kita ping dari server atau clinet VLAN 1 tidak bisa ke server atau client VLAN 2, begitu juga sebaliknya
2. Penghematan broadcast antar VLAN
3. dl.. :Dl

.. Selamat Mencoba, semoga bisa membantu ::..

Artikel Terkait:

• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 
• 

Posted in: Internet,Komputer