Lab 4-3 – Configuring a Management VLAN Interface

In this lab you will learn how to create and/or configure a Cisco Catalyst Switched Virtual Interface aka: VLAN Interface for management purposes.

Real World Application & Core Knowledge

In the switching world, a logical interface for a VLAN is called a Switched Virtual Interface. When you’re configuring a switch you will see these interfaces represented as a vlan interface. You have the ability to configure these interfaces just as you would a FastEthernet interface. A VLAN Interface can be assigned an IP address, bridge group, interface description and even a quality of service policy.


Having a VLAN Interface gives layer 2 devices the ability to communicate with other devices at layer 3. Multi-Layer switches use VLAN interfaces to enable multi-layer routing functions on a single switch. Basically the switch is its own router-on-a-stick, which is discussed in lab 4-20. In a Multi-Layer switched network, switches such as the Cisco 3550 and Cisco 3560 use VLAN interfaces as default gateways for the PC’s and other host machines on the network to communicate with other IP Networks.

For example; A Cisco 3550 has 2 VLAN’s, VLAN 10 and VLAN 20. Both have a VLAN interface assigned to each with an IP address such as 192.168.10.0/24 and 192.168.20.0/24. When a PC on VLAN 10 needs to communicate to a pc on VLAN 20 it will use the vlan interface as the default gateway and the switch will route the packet via layer3 and the switch will then switch the packet at layer2 in the new VLAN.

Layer 2 only switches can only have a single active vlan interface at any given time. This interface is called the Management VLAN interface. Layer 2 Cisco switches include Cisco 2900XL, 2950 and 2960.

In this lab you will familiarize yourself with VLAN interface configuration mode.

Lab Prerequisites

  • If you are using GNS3 than load the Stub Area Networking GNS3 topology than start devices; R1 and SW1.
  • Establish a console session with devices R1 and SW1 than configure the devices respected hostname(s).
  • For verification purposes you will need configure a VTY line password on R1 and assign the 10.1.1.1/24 host IP address to R1′s FastEthernet0/0 interface.

Lab Objectives

  • Create the VLAN number 10 and name it Management.
  • Create the VLAN 10 interface and assign it an IP address of 10.1.1.10/24
  • Assign the FastEthernet0/1 interface on SW1 to VLAN 10.
  • Verify the management VLAN configuration by using R1 to telnet the IP address of VLAN 10 on SW1.

Lab Instruction

Read Me

The Lab instruction is demonstrated using a Cisco Catalyst switch, not the NM-16ESW as used in GNS3.

You should be familiar with the commands required to complete the objectives of this lab from previous labs in the Free CCNA Workbook.

Step 1. – Create the VLAN number 10 and name it Management.

SW1 con0 is now available

Press RETURN to get started.

SW1>enable
SW1>configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
SW1(config)#vlan 10
SW1(config-vlan)#name Management
SW1(config-vlan)#end
SW1#

Step 2. – Create the VLAN 10 interface and assign it an IP address of 10.1.1.10/24.

To complete this objective you first need to create the VLAN interface by going into global configuration and then VLAN interface configuration mode by using the command interface vlan # Keep in mind that the VLAN interface number is proportional to the vlan number created. So Interface Vlan10 is used for VLAN 10 whereas interface Vlan20 would be used for VLAN 20.

SW1#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
SW1(config)#interface vlan10
SW1(config-if)#ip address 10.1.1.10 255.255.255.0
SW1(config-if)#no shut
SW1(config-if)#

Step 3. – Assign the FastEthernet0/1 interface on SW1 to VLAN 10.

SW1(config-if)#interface FastEthernet0/1
SW1(config-if)#switchport access vlan 10
SW1(config-if)#no shut
SW1(config-if)#end
SW1#


By this point you should now be able to ping R1′s FastEthernet0/0 interface as shown below;

R1#ping 10.1.1.10

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.1.1.10, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/39/100 ms
R1#

Step 4. – Verify the management VLAN configuration by using R1 to telnet the IP address of VLAN 10 on SW1.

R1#telnet 10.1.1.10
Trying 10.1.1.10 ... Open

User Access Verification

Password:
SW1>

14 comments so far

Add Your Comment
  1. Hello. Setting up a lab environment. VLAN10 Core. VLAN 20 SERVERS. VLAN 25 MANAGEMENT. I have a BSD router handing the routing by a single trunk port. VLAN 25 has an IP address of 192.168.65 /26 on port 17. Management LAN is primarily for Telnet access and DELL server management port access.

    The question is, how do I access that management port? Do I just set up VLAN 25 to trunk also? Do I have to connect cat5 to port 17 and then route that also? Or am I going about this entirely the wrong way?

  2. Setting up multiple VLAN’s and a Layer 2 switch and requiring IP communications between those VLAN’s will require a router to route between the VLAN’s. If you have a Layer 3 switch you can just assign IP Addresses to the SVI interface and set the SVI interface as the default gateway for machines on specific VLAN’s. If you dont have a Layer 3 switch you’ll need to try something like Router-on-a-stick. In which case you should check out Lab 4-12 – Configuring Inter-VLAN Routing

    -Free CCNA Workbook Author

  3. i have tried to change my color scheme like yours but cant seem to change the colors.
    i can make it all green but how can i change the cursor text to blue like
    you? I have done the obvious load default profile change cursor text color to what i want then
    click save and no change

    help……

    thnas

  4. How to configure interface 0/1 in two VLAN such as VLAN2 and VLAN3

  5. Need sample example (commands) for configuring single interface to Two VLANs…

  6. i have a doubt,
    how can i make the router have connetcion successefull with the SVI, and the computers?

  7. Can u help me how to check logs in cisco devices.except show log command.