Vlan dibuat dengan menggunakan jaringan pihak ke tiga. VLAN merupakan sebuah bagian kecil jaringan IP yang terpisah secara logik. VLAN memungkinkan beberapa jaringan IP dan jaringan-jaringan kecil (subnet) berada dalam jaringan switched switched yang sama. Agar computer bisa berkomunikasi pada VLAN yang sama, setiap computer harus memiliki sebuah alamat IP dan Subnet Mask yang sesuai dengan VLAN tersebut. Switch harus dikonfigurasi dengan VLAN dan setiap port dalam VLAN harus didaftarkan ke VLAN. Sebuah port switch yang telah dikonfigurasi dengan sebuah VLAN tunggal disebut sebagai access port.
Sebuah VLAN memungkinkan seorang Administrator untuk menciptakan sekelompok peralatan yang secara logic dihubungkan satu sama lain. Dengan VLAN, kita dapat membagi jaringan switch secara logik berdasarkan fungsi, departemen atau project team .
Penerapan sebuah teknologi VLAN memungkinkan sebuah jaringan menjadi lebih fleksibel untuk mendukung tujuan bisnis.
Berikut ini beberapa keuntungan menggunakan VLAN:
•Security– Departemen yang memiliki data sensitive terpisah dari jaringan yang ada, akan mengurangi peluang pelanggaran akses ke informasi rahasia dan penting.
• Cost reduction – Penghematan biaya dihasilkan dari tidak diperlukannya biaya yang mahal untuk upgrades jaringan dan efisiensi penggunaan bandwidth dan uplink yang tersedia.
• Higher performance – Dengan membagi jaringan layer 2 menjadi beberapa worksgroup secara logik (broadcast domain) mengurangi trafik yang tidak diperlukan pada jaringan dan meningkatkan performa.
• Broadcast storm mitigation – Dengan membagi sebuah jaringan menjadi VLAN mengurangi jumlah peralatan yang berpartisipasi dalam broadcast storm.
• Improved IT staff efficiency – Dengan VLAN pengelolaan jaringan lebih mudah, karena user-user dengan kebutuhan jaringan yang sama berbagi VLAN yang sama.
• Simpler project or application management – Memiliki fungsi-fungsi terpisah mempermudah pengelolaan sebuah project atau bekerja dengan aplikasi khusus.
NB:uraian diatas diambil dari https://id.wikipedia.org/wiki/VLAN
Adapun formulasinya adalah sbb:
@switch
int vlan1
ip address 192.168.1.100 255.255.255.0
ip default-gateway 192.168.1.100
no shutdown
sh ip interface vlan1
sh interface vlan1
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
conf t
vlan 2
name lab
sh vlan id 2
sh vlan name lab
int fa0/1
switchport mode access
switchport access vlan 2
no shutdown
end
sh vlan brief
wr
copy run-config startup-config
#config>no vlan 2
port switch yang ke routerint fa0/7
switchport mode trunk
no shutdown
******************************@router
#buat subinterface=>namaInterface.idVlan=soRouter aktifkan dot1q
int fa0/0.2
encapsulatiion dot1q 2
ip address 192.168.2.1 255.255.255.0
no shutdown
.....
sh ip route
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
VLAN Trunking Protokol
VTP version=harus sama dalam 1 domain
VTP domain=harus sama antara server dan client
VTP mode=as server /client
VTP password=harus sama dalam 1 domain
PC-SW1-SW0-SW2-PC
SW0=VTP domain
SW0 =>
vtp mode server
vtp domain kelas
vtp version 2
vtp password 123
end
SW1 /SW2=>
vtp mode client
vtp domain kelas
vtp password 123
#tidak perlu versi..karena server akan autoupdate
sh vtp status
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
VLAN10 R-onStick VLAN10
VLAN20 SW2 (f0/1) SW1 (f0/3) SW3 VLAN20
VLAN30 VLAN30
atau diilustrasikan dalam packet tracert
SW1 =>
vtp mode server
vtp domain kelas
vtp version 2
vtp password 123
sh vtp status
vlan 10
name VLAN10
vlan 20
name VLAN20
vlan 30
name VLAN30
end
sh vlan brief
int fa0/1
switchport mode trunk
description koneksi ke switch2
sh int fa0/1
int fa0/3
switchport mode trunk
description koneksi ke switch3
sh int fa0/3
SW2 =>
vtp mode client
vtp domain kelas
vtp password 123
end
sh vtp status
sh vlan brief
int fa0/1
switchport mode trunk
description koneksi ke switch2
sh int fa0/1
int fa0/11
switchport access vlan 10
int fa0/12
switchport access vlan 20
int fa0/13
switchport access vlan 30
SW3 =>
vtp mode client
vtp domain kelas
vtp password 123
end
sh vtp status
sh vlan brief
int fa0/3
switchport mode trunk
description koneksi ke switch3
sh int fa0/3
int fa0/11
switchport access vlan 10
int fa0/12
switchport access vlan 20
int fa0/13
switchport access vlan 30
================================================================
The Real Implementation:
Switch1/ServerVTP
Current configuration : 1198 bytes
!
version 12.1
interface FastEthernet0/1
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 20
!
interface FastEthernet0/3
switchport access vlan 30
interface FastEthernet0/23
description koneksi ke server
switchport mode trunk
!
interface Vlan1
no ip address
shutdown
end
======================
SWITCH2 / CLIENT1Current configuration : 1198 bytes
!
version 12.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Switch
!
!
!
spanning-tree mode pvst
!
interface FastEthernet0/1
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 20
!
interface FastEthernet0/3
switchport access vlan 30
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
description koneksi ke server
switchport mode trunk
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
!
!
!
line con 0
!
line vty 0 4
login
line vty 5 15
login
!
!
end
==================
SWITCH3 / CLIENT2
Current configuration : 1246 bytes
!
version 12.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Switch
!
!
!
spanning-tree mode pvst
!
interface FastEthernet0/1
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
description koneksi ke server
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
!
!
!
line con 0
!
line vty 0 4
login
line vty 5 15
login
!
!
end
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#sh ru
Switch#sh running-config
Building configuration...
Current configuration : 1246 bytes
!
version 12.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Switch
!
!
!
spanning-tree mode pvst
!
interface FastEthernet0/1
switchport access vlan 10
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 20
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
description koneksi ke server
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
shutdown
!
!
!
!
line con 0
!
line vty 0 4
login
line vty 5 15
login
!
!
end
=========================
Router On STick
Current configuration : 820 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
!
!
!
!
!
!
!
ip cef
no ipv6 cef
!
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.10
encapsulation dot1Q 10
ip address 192.168.1.1 255.255.255.0
!
interface FastEthernet0/0.20
encapsulation dot1Q 20
ip address 192.168.2.1 255.255.255.0
!
interface FastEthernet0/0.30
encapsulation dot1Q 30
ip address 192.168.3.1 255.255.255.0
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Vlan1
no ip address
shutdown
!
ip classless
!
ip flow-export version 9
!
!
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
!
!
end
Tes koneksi berhasil antar VLAN
semoga bermanfaat :-)
diambil dari materi kursus hari I di lp2maray.com
Tidak ada komentar:
Posting Komentar