Cisco 2950 VLAN setup

Timsmith23 · 9th February 2006

I am very new to cisco networking and need some help. A customer needs me to setup a Cisco 2950 and setup VLANs to separate several companies in the building. Can someone please help me or point me in the right direction. I have googled the subject, but have not found a clear cut step-by-step guide.

Thanks

Tim

**ReggieB** · 10th February 2006

If you've not bought the switch yet, buy yourself seperate switches for each company. If you use HP Procurves (2124s for 24 port switches, or 408 for 8 port), you get better hardware, for less price. If you can afford it HP Procurve 2524, and 2512 switches are well worth the investment.

If you have bought the hardware already, use that switch for the largest company, and then buy an HP procurve switch for each of the others.

Call me a cynic, but all you get from Cisco kit is an inflated price and a headache supporting and/or selling it. (Please save me from ever again having to track down which cisco upgrade I need to purchase to get a feature I want.) 3com and netgear kit is good too, if you don't fancy the HP.

I've never really understood the love some network designers have for VLAN. It is usually cheaper, easier, and less likely to cause errors if you seperate the hardware. The days when switches cost thousands of pounds and you needed to squeeze every last ounce out of each one are over. Also layer 3 switches are so cheap that if you need to break up a broadcast domian, its better to use one of those and do it at layer 3.

Paul Westhead · 10th February 2006

How many VLANs do you need?

Do you require routing between the VLANs ?

Timsmith23 · 11th February 2006

Paul Westhead · 11th February 2006

FIrstly you will need to create the VLAN.

This is done using the following

from enable mode type "vlan database"

The create the VLAN using the "vlan <number>" command bearing in mind that VLAN 1 is the management VLAN so do not use this one.

Then go into each interface adn issue the following command:

switchport access vlan <vlan number>

This will only allow communication within its own VLAN and it is also assuming that you are only using one switch.

Timsmith23 · 13th February 2006

Thanks a lot

So once I have the vlans setup is there a way to designate which ports on the switch go to each vlan or is that something that is done in windows?

Paul Westhead · 13th February 2006

Appologies Tim,

The following is what you need to do:

From hte priveleged commadn prompt type:

"Vlan Database"

Then type Vlan <VLAN Number> bearing in mind that each company will require there own VLAN to keep them seperate.

Next is the part that puts each port into the appropiate VLAN.

After exiting from the VLAN database you will then need to type:

configure terminal

interface Fastethernet <number here> <-- This gives you the appropiate interface for configuration-->

Switchport access Vlan <Vlan Number> <--This then says port XX you now belong to VLAN XX>

Hope this makes things a little clearer.

Timsmith23 · 13th February 2006

Thanks Paul

This should do it.

I assume that when you say "interface Fastethernet <number here> " you are refering to port numbers on the switch.

Paul Westhead · 13th February 2006

Yes,

Exactly what is the setup as I am confused as towards why you require this VLAN seperation?

Timsmith23 · 13th February 2006

I boss and the company we are working with want VLANs so I will give them vlans.

Paul Westhead · 13th February 2006

Quote:

Originally Posted by Timsmith23

I boss and the company we are working with want VLANs so I will give them vlans.

It all depends upon what you want doing with the VLANS though. If you are working with more than one switch there is more to it that what is above. Also if you require a port in a communal VLAN then this will also need more configuration.

Timsmith23 · 13th February 2006

Its only one Cisco 2950

Paul Westhead · 13th February 2006

Quote:

Originally Posted by Timsmith23

Its only one Cisco 2950

Alright are you going to be sharing the same routing for things such as internet traffic?

Timsmith23 · 13th February 2006

Yes we have a single T1 connection

Paul Westhead · 13th February 2006

This now throws a spanner into the works.