This document provides instructions for configuring inter-VLAN routing on a network with three switches and one router. It describes preparing the network topology, configuring basic settings on the devices, creating VLANs on the switches, configuring trunk links and EtherChannels, and using 802.1Q encapsulation on the router interfaces to route between the VLANs. Verification steps are provided to test the configuration at each stage.

1. amir-jafari.com
©2015 Amir Jafari – www.amir-Jafari.com. All rights reserved. Page 1 of 12
CCNA Lab 5:
Configuring Inter-VLAN Routing

2. amir-jafari.com
©2015 Amir Jafari – www.amir-Jafari.com. All rights reserved. Page 2 of 12
Table of Contents Page
1- Objectives...................................................................................................................................................4
2- Scenario .....................................................................................................................................................4
3- Equipment List............................................................................................................................................4
4- Topology Diagram ......................................................................................................................................5
5-Addressing Table.........................................................................................................................................6
6-Detailed Lab Steps ......................................................................................................................................7
6-1 Part 1: Prepare the Network (Cable, Erase, and Reload the Switch and Router)................................7
6-1-1- Designing and Configuration ........................................................................................................7
6-1-2- Verification ....................................................................................................................................7
6-1-3 Troubleshooting .............................................................................................................................7
6-2: Part 2: Perform Basic Device Configurations on Switchs and Router.................................................7
6-2-1- Designing and Configuration ........................................................................................................7
6-2-2- Verification ....................................................................................................................................8
6-3: Part 3: Configure Switch and Router to Accept Incoming SSH Connections......................................8
6-3-1- Designing and Configuration ........................................................................................................8
6-3-2- Verification ....................................................................................................................................8
6-4: Part 4: Configure and Activate Ethernet Interfaces .............................................................................8
6-5: Part 5: Configure VLANs on the Switch...............................................................................................9
6-5-1- Designing and Configuration ........................................................................................................9
6-5-2- Verification ................................................................................................................................. 10
6-6: Part 6: Configuring EtherChannels................................................................................................... 11
6-6-1- Designing and Configuration ..................................................................................................... 11
6-6-2- Verification ................................................................................................................................. 11
6-7: Part 7: Configuring Routing to VLANs using 802.1Q on Routers..................................................... 11
6-7-1- Designing and Configuration ..................................................................................................... 11

3. amir-jafari.com
©2015 Amir Jafari – www.amir-Jafari.com. All rights reserved. Page 3 of 12
6-7-2- Verification ................................................................................................................................. 12

4. amir-jafari.com
©2015 Amir Jafari – www.amir-Jafari.com. All rights reserved. Page 4 of 12
1- Objectives
Demonstrate and explain the impact of Layer 3 boundaries imposed by creating VLANs
Configure a router to support 802.1q trunking on a Fast Ethernet interface
Configure a router with subinterfaces corresponding to the configured VLANs
Demonstrate and explain inter-VLAN routing
2- Scenario
In this lab you will practice configuring routing to VLANs using 802.1Q on routers and verifying Inter-VLAN
routing.
3- Equipment List
Three Cisco Catalyst 2960 Switchs with Cisco IOS Release 12.2. The Cisco implementation of
SSH requires Cisco IOS Software to support RSA authentication and minimum DES encryption—
a cryptographic software image.
Cisco 1841 Integrated Services Router with Cisco IOS Software Release 12.4T
Three PCs that will run Windows XP or later

5. amir-jafari.com
©2015 Amir Jafari – www.amir-Jafari.com. All rights reserved. Page 5 of 12
4- Topology Diagram

6. amir-jafari.com
©2015 Amir Jafari – www.amir-Jafari.com. All rights reserved. Page 6 of 12
5-Addressing Table
Port Assignments – Switch 2
Interface Configuration Table – Router 1

7. amir-jafari.com
©2015 Amir Jafari – www.amir-Jafari.com. All rights reserved. Page 7 of 12
6-Detailed Lab Steps
6-1 Part 1: Prepare the Network (Cable, Erase, and Reload the Switch and Router)
6-1-1- Designing and Configuration
Step 1: Cable a network
Cable a network that is similar to the one in the topology diagram.
Step 2: Clear the configuration on the switch and router
Clear the configuration on all the switchs based on the “CCNA Lab 1-Configuring a Switch Part I”, Detailed
Lab Steps, Part 1.
Remove the router startup configuration file from NVRAM.
Router#erase startup-config
6-1-2- Verification
Do the verification based on the “CCNA Lab 1-Configuring a Switch Part I”, Detailed Lab Steps, Part 1.
6-1-3 Troubleshooting
Do the troubleshooting based on the “CCNA Lab 1-Configuring a Switch Part I”, Detailed Lab Steps, Part
1.
6-2: Part 2: Perform Basic Device Configurations on Switchs and Router
6-2-1- Designing and Configuration
Perform Basic Device Configurations on all the switchs and router based on the “CCNA Lab 1-Configuring
a Switch Part I”, Detailed Lab Steps, Part 2.
Notice: Configure the Layer 3 address of the switchs.

8. amir-jafari.com
©2015 Amir Jafari – www.amir-Jafari.com. All rights reserved. Page 8 of 12
For management purposes, we will use VLAN 99. First, you will create the new VLAN 99 on the switch.
Then you will set the IP address of the switch to 172.17.99.11 with a subnet mask of 255.255.255.0 on the
internal virtual interface VLAN 99.
S1(config-vlan)#vlan 99
S1(config-vlan)#name management
S1(config-vlan)#exit
S1(config)#interface vlan99
S1(config-if)#ip address 172.17.99.11 255.255.255.0
S1(config-if)#no shutdown
Do the same configuration on switches S2 and S3 based on the Addressing Table.
A management VLAN is any VLAN that you configure to access the management capabilities of a switch.
6-2-2- Verification
Do the verification based on the “CCNA Lab 1-Configuring a Switch Part I”, Detailed Lab Steps, Detailed
Lab Steps, Part 2.
6-3: Part 3: Configure Switch and Router to Accept Incoming SSH Connections
6-3-1- Designing and Configuration
Configure all the switchs and router to accept Incoming SSH Connections based on the “CCNA Lab 2-
Configuring a Switch Part 2”, Detailed Lab Steps, Part 4.
6-3-2- Verification
Do the verification based on the the “CCNA Lab 2-Configuring a Switch Part 2”, Detailed Lab Steps, Part
4.
6-4: Part 4: Configure and Activate Ethernet Interfaces
Step 1: Configure the PCs
All three PCs with the IP addresses and default gateways should be configured.

9. amir-jafari.com
©2015 Amir Jafari – www.amir-Jafari.com. All rights reserved. Page 9 of 12
6-5: Part 5: Configure VLANs on the Switch
6-5-1- Designing and Configuration
Step 1: Create VLANs on switch S1
There are four VLANS configured for this lab: VLAN 10 (faculty); VLAN 20 (students); VLAN 30 (guest);
and VLAN 99 (management).
S1(config)#vlan 10
S1(config-vlan)#name faculty
S1(config-vlan)#vlan 20
S1(config-vlan)#name students
S1(config-vlan)#vlan 30
S1(config-vlan)#name guest
S1(config-vlan)#end
Step 2: Configure and name VLANs on switches S2 and S3
Create and name VLANs 10, 20, 30, and 99 on S2 and S3 using the commands from Step 1.
Step 3: Assign switch ports to VLANs on S2
Refer to the port assignment table, ports are assigned to VLANs in interface configuration mode. The
commands are shown for S2.
S2(config)#interface range fa0/6-10
S2(config-if-range)#switchport access vlan 30
S2(config-if-range)#interface range fa0/11-17
S2(config-if-range)#switchport access vlan 10
S2(config-if-range)#interface range fa0/18-24
S2(config-if-range)#switchport access vlan 20
S2(config-if-range)#end
Step 4: Configure trunking and the native VLAN for the trunking ports on all switches
Use the interface range command in global configuration mode to simplify configuring trunking.
S1(config)#interface range fa0/1-4
S1(config-if-range)#switchport mode trunk
S1(config-if-range)#switchport trunk native vlan 99

10. amir-jafari.com
©2015 Amir Jafari – www.amir-Jafari.com. All rights reserved. Page 10 of 12
S1(config-if)#switchport trunk allowed vlan 10,20,30,99
S1(config-if-range)#end
S2(config)# interface range fa0/1-4
S2(config-if-range)#switchport mode trunk
S2(config-if-range)#switchport trunk native vlan 99
S2(config-if)#switchport trunk allowed vlan 10,20,30,99
S2(config-if-range)#end
S3(config)# interface range fa0/1-4
S3(config-if-range)#switchport mode trunk
S3(config-if-range)#switchport trunk native vlan 99
S3(config-if)#switchport trunk allowed vlan 10,20,30,99
S3(config-if-range)#end
6-5-2- Verification
Step 1: Verify that the VLANs have been created on S1, S2 and S3
Use the show vlan brief command to verify that the VLANs have been created.
S2#show vlan brief
Step 2: Determine which ports have been added
Use the show vlan id vlan-number command on S2 to see which ports are assigned to VLAN 10.
You can also view VLAN assignment information using the show interfaces interface
switchport command.
S2#show vlan id 30
S2#show interfaces fastEthernet 0/6 switchport
Step 3: Verify that the trunks have been configured on S1, S2 and S3
Verify that the trunks have been configured with the show interface trunk command.
S1#show interface trunk
S1#show interfaces status
Step 4: Verify that the switches can communicate
From S1, ping the management address on both S2 and S3.
S1#ping 172.17.99.12
S1#ping 172.17.99.13

11. amir-jafari.com
©2015 Amir Jafari – www.amir-Jafari.com. All rights reserved. Page 11 of 12
6-6: Part 6: Configuring EtherChannels
6-6-1- Designing and Configuration
Step 1: Configuring Manual EtherChannel
S1(config)#interface range fa0/1-2
S1(config-if-range)# channel-group 1 mode on
S1(config)#interface range fa0/3-4
S1(config-if-range)# channel-group 2 mode on
S2(config)#interface range fa0/1-2
S2(config-if-range)# channel-group 1 mode on
S2(config)#interface range fa0/3-4
S2(config-if-range)# channel-group 2 mode on
S3(config)#interface range fa0/1-2
S3(config-if-range)# channel-group 1 mode on
S3(config)#interface range fa0/3-4
S3(config-if-range)# channel-group 2 mode on
6-6-2- Verification
Step 1: Verify that the PortChannels have been created on S1, S2 and S3
S1#show etherchannel summary
S1#show interfaces status
6-7: Part 7: Configuring Routing to VLANs using 802.1Q on Routers
6-7-1- Designing and Configuration
Step 1: Configure the trunking interface on R1
Router on a Stick (ROAS) uses router VLAN trunking configuration to give the router a logical router
interface connected to each VLAN, and therefore each subnet that sits on a separate VLAN.

12. amir-jafari.com
©2015 Amir Jafari – www.amir-Jafari.com. All rights reserved. Page 12 of 12
R1(config)#interface fastethernet 0/1
R1(config-if)#no shutdown
R1(config-if)#interface fastethernet 0/1.1
R1(config-subif)#encapsulation dot1q 1
R1(config-subif)#ip address 172.17.1.1 255.255.255.0
R1(config-if)#interface fastethernet 0/1.10
R1(config-subif)#encapsulation dot1q 10
R1(config-subif)#ip address 172.17.10.1 255.255.255.0
R1(config-if)#interface fastethernet 0/1.20
R1(config-subif)#encapsulation dot1q 20
R1(config-subif)#ip address 172.17.20.1 255.255.255.0
R1(config-if)#interface fastethernet 0/1.30
R1(config-subif)#encapsulation dot1q 30
R1(config-subif)#ip address 172.17.30.1 255.255.255.0
R1(config-if)#interface fastethernet 0/1.99
R1(config-subif)#encapsulation dot1q 99 native
R1(config-subif)#ip address 172.17.99.1 255.255.255.0
6-7-2- Verification
Step 1: Checking the routing table on R1
R1#show ip route
Step 2: Verify Router Trunking Configuration
show vlans command to Match Sample Router Trunking Configuration.
R1#show vlans
Step 3: Ping PC1 from PC2
Ping from host PC2 to host PC1. Routing between VLANs has been configured so the ping should be
successful.