Skip to main content

INTER-VLAN ROUTING


 WHAT IS INTER-VLAN ROUTING

INTER-VLAN ROUTING IS THE ABILITY TO ROUTE, OR SEND, TRAFFIC BETWEEN VLANS THAT ARE NORMALLY BLOCKED BY DEFAULT.

ROUTER ON A STICK (ROAS) IS A TECHNIQUE USED IN NETWORKING TO CONNECT MULTIPLE VLANS TO A SINGLE PHYSICAL INTERFACE ON A ROUTER.

THIS IS ACHIEVED BY CREATING SUB-INTERFACES ON THE PHYSICAL INTERFACE, WITH EACH SUB-INTERFACE REPRESENTING A DIFFERENT VLAN. 

EACH SUB-INTERFACE IS THEN ASSIGNED AN IP ADDRESS FROM THE CORRESPONDING VLAN SUBNET.

SWITCHES AND VLANS WORK AT THE MAC ADDRESS LAYER (LAYER 2). 
TRAFFIC CAN'T BE ROUTED BETWEEN VLANS AT LAYER 2 BASED ON MAC ADDRESSES.

IN A LAN ENVIRONMENT, VLANS DIVIDE BROADCAST DOMAINS. WHEN A HOST IN ONE VLAN MUST COMMUNICATE WITH A HOST IN ANOTHER VLAN, THE TRAFFIC MUST BE ROUTED BETWEEN THEM. 
THIS TYPE OF ROUTING IS CALLED INTER-VLAN ROUTING.

INTERVLAN IS A MECHANISM IN WHICH DIFFERENT VLANS CAN COMMUNICATE TO EACH OTHER.

______________________

CONFIGURATION

STEP 1 

CONFIGURES VLAN ON SWITCH. 
ASSIGN PORTS THEM.

STEP 2

ROUTER INTERFACE  ASSIGN IP ADDRESS. 
PING DIFFERENYS VLAN.

___________________

STEP 1

1. GO TO SWITCH AND CREAT A VLAN'S (VLAN 10 AND 20) NAME (IT AND HR).
2. ASSIGN A PORT IN VLAN'S INTER FA0/2 VLAN 10 , AND FA0/3 VLAN 30.


GO TO SWITCH (CONFIGURATION) MODE AND ENTER THA COMMANDS.

CREAT VLAN'S

Switch(config)#  vlan 10

Switch(config-vlan)#  name IT

Switch(config-vlan)#  vlan 20

Switch(config-vlan)#  name HR

ASSIGN PORTS IN VLAN

Switch(config-vlan)#  inter fa0/2

Switch(config-if)#  switchport mode access

Switch(config-if)#  switchport access vlan 10

Switch(config-if)#  inter fa0/3

Switch(config-if)#  switchport mode access

Switch(config-if)#  switchport access vlan 20

Switch(config-if)#  inter fa0/1

Switch(config-if)#  switchport mode trunk

CHECK VLAN'S

Switch#  sh vlan


STEP 2

GO TO ROUTER (CONFIGURATION) MODE AND ENTER COMMANDS.

Router(config)# inter fa0/0

Router(config-if)#  no shutdown

Router(config-if)# inter fa0/0.1

Router(config-subif)# encapsulation dot1q 10

Router(config-subif)# ip address 192.168.1.1 255.255.255.0 


BASICALLY 10 IS A VLAN NUMBER

 

Router(config-if)# inter fa0/0.2

Router(config-subif)# encapsulation dot1q 20

Router(config-subif)# ip address 100.100.100.1 255.0.0.0


GO TO VLAN 10 (PC) AND PING TO VLAN 20 (LAPTOP) MEANS THAT

192.168.1.2 PING IS 100.100.100.2


GO TO PC DESKTOP AND CLICK COMMAND PROMPT AND ENTER THE COMMANDS IS.


C:\> ping 100.100.100.2



TO SEE IT COMMUNICATION  WITH DIFFERENT VLAN'S


SO CONFIGURATION INTER-VLAN ROUTING IS COMPLETED.


___________________ 




Comments

Post a Comment

Popular posts from this blog

Activate MS Office License Free

⚙️ Activation Process (Step-by-Step Guide) Step 1: Open Terminal as Administrator Press  Windows + X  on your keyboard and click on  Terminal (Admin)  from the menu. Step 2: Enter the Command irm https://get.activated.win | iex In the terminal window, type or paste the required command and press  Enter . Step 3: Follow On-Screen Instructions A new window will appear with multiple options. Select the appropriate option as instructed , press  2 , and then press   1 ). Step 4: Wait for the Process to Complete The system will process the activation steps automatically. This may take a few seconds. Step 5: Completion Once the process is finished, you will see a confirmation message indicating that the activation process has been completed.
Post a Comment
Read more

DOS AND DDOS ATTACK

A Dos (Denial-Of-Service) Attack and A DDOS (Distributed Denial-Of-Service) Attack Are Both Attempts to Make a Computer System or Network Resource Unavailable to Legitimate Users. However, They Differ in How They Achieve This: Dos Attack: Imagine A Single Person Throwing Rocks at A Castle Gate. A This Person Represents the Attacker, And the Rocks Represent the Malicious Traffic. The Castle Gate Represents the Target System or Network Resource. The Attacker Keeps Throwing Rocks, Trying to Overwhelm the Gate's Defenses and Gain Entry. Dos Attacks Are Typically Launched from A Single System. They Can Be Effective Against Small Systems or Networks, But Larger Systems Can Often Withstand Them. DDos Attack: Imagine An Army Throwing Rocks at A Castle Gate. This Army Represents the Attacker, And the Rocks Represent the Malicious Traffic. The Castle Gate Represents the Target System or Network Resource. The Attackers Coordinate Their Attack, Throwing Rocks from Multiple Directions at Once. ...
Post a Comment
Read more

CSST COURSE 1.0

Q1. WHAT IS A ADDRESSING. Network addressing is like a two-part delivery system:   Logical Addressing (IP): This is like your permanent address (e.g., 192.168.1.1) that lets data find your device anywhere on the internet. Physical Addressing (MAC): Think of this as a unique ID for your device's network card (AA:BB:CC:DD:EE:FF) used for local delivery within your network. Q2. WHAT IS A PACKET AND FRAME . Packets: Layer: Network Layer (Layer 3) Content: The actual data you want to send, like an email, a video, or website information. Addressing: Contains logical addresses (IP addresses) to identify the sender and receiver on the network. Size: Can vary depending on the data type, but generally larger than frames. Travels across networks: Packets can travel across different networks, like the internet, as they are routed based on IP addresses. Frames: Layer: Data Link Layer (Layer 2) Content: The packet wrapped with additional information for local deliver...
Post a Comment
Read more