configuring password switch, VLAN,
Trunk, Trunk Allowed
Langkah Kerja:
Buat topologi seperti di bawah ini
lalu isikan ip addressnya klik gambar
PC>desktop>up configuration, saya
menggunakan ip 172.12.10.21 sampai
172.12.10.26
kemudian saya akan membuat 3
password antara lain:
Enable secret, fungsinya untuk proteksi
sebelum masuk mode privileged
Password console, fungsinya untuk
proteksi sebelum masuk user mode
Password Telnet /VTY, fungsinya sama
seperti password console,bedanya kalo
password vty via jaringan. cara
settingnya klik
switch(S1)>cli
kemudian ketik “enable” untuk masuk
mode privileged
S1>enable
S1#
lalu ketik “conf t” untuk masuk global
configuration
S1#conf t
Enter configuration commands, one per line. End with
CNTL/Z.
langsung saja, untuk enable secret
passwordnya ciscosec, console
passwordnya ciscocon, yang terakhir
telnet/vty passwordnya ciscovty,lebih
jelas liat tulisan di bawah
S1(config)#enable secret ciscosec
S1(config)#exit
S1(config)#line console 0
S1(config-line)#password ciscocon
S1(config-line)#exec-timeout 5 0
S1(config-line)#login
S1(config-line)#exit
S1(config)#line vty 0 4
S1(config-line)#password ciscovty
S1(config-line)#exec-timeout 5 0
S1(config-line)#login
S1(config-line)#exit
ketikan “service password-encryption”
untuk mengenkripsi password lebih
jelasnya liat tulisan dibawah
S1(config)#service password-
encryption
S1(config)#
lalu kita cek sudah berhasil apa belum
dengan cara ketik “do show run”
S1(config)#do show run
Building configuration...
Current configuration : 1408 bytes
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
hostname S1
enable secret 5 $1$mERr$thF1sEHJ9Dl2J3WzXxyZ1/
spanning-tree mode pvst
interface FastEthernet0/1
switchport trunk allowed vlan 10,20,30
switchport mode trunk
!
interface FastEthernet0/2
switchport access vlan 10
switchport mode access
interface FastEthernet0/3
switchport access vlan 20
switchport mode access
interface FastEthernet0/4
switchport access vlan 30
switchport mode access
interface Vlan1
no ip address
shutdown
line con 0
password 7 0822455D0A1606181C
login
exec-timeout 5 0
!
line vty 0 4
exec-timeout 5 0
password 7 0822455D0A1613030B
login
line vty 5 15
login
end
lakukan konfigurasi seperti di atas pada
switch(S2) dan switch(S3)
sekarang kita configurasi vlannya
caranya klik switch(S1)>cli, masuk ke
global configuration, saya akan membuat
vlan 10,20,30 kemudian masukan port
mana saja yang akan masuk vlan
10,20,30
S1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
S1(config)#vlan 10
S1(config-vlan)#name guru
S1(config-vlan)#exit
S1(config)#vlan 20
S1(config-vlan)#name siswa
S1(config-vlan)#exit
S1(config)#vlan 30
S1(config-vlan)#name tu
S1(config-vlan)#exit
S1(config)#interface fa0/2
S1(config-if)#switchport mode access
S1(config-if)#switchport access vlan 10
S1(config-if)#exit
S1(config)#interface fa0/3
S1(config-if)#switchport mode access
S1(config-if)#switchport access vlan 20
S1(config-if)#exit
S1(config)#interface fa0/4
S1(config-if)#switchport mode access
S1(config-if)#switchport access vlan 30
S1(config-if)#exit
lalu kita cek sudah benar atau belum
dengan cara ketik “do show vlan brief”
S1(config)#do show vlan brief
VLAN Name Status Ports
---- -------------------------------- --------- ------------------
-------------
1 default active Fa0/1, Fa0/5, Fa0/6, Fa0/7
Fa0/8, Fa0/9, Fa0/10, Fa0/11
Fa0/12, Fa0/13, Fa0/14, Fa0/15
Fa0/16, Fa0/17, Fa0/18, Fa0/19
Fa0/20, Fa0/21, Fa0/22, Fa0/23
Fa0/24, Gig0/1, Gig0/2
10 guru active Fa0/2
20 siswa active Fa0/3
30 tu active Fa0/4
1002 fddi-default active
1003 token-ring-default active
1004 fddinet-default active
1005 trnet-default active
lakukanlah configurasi seperti di atas
pada switch(S2)
sekarang kita akan mengkonfigurasi
trunknya
sebelumnya kita harus membuat vlan
dulu di switch pusat(S3), jika kita tidak
membuat vlan di switch pusat, maka
mode trunk akan gagal.
S3#conf t
Enter configuration commands, one per line. End with CNTL/Z.
S3(config)#vlan 10
S3(config-vlan)#name guru
S3(config-vlan)#exit
S3(config)#vlan 20
S3(config-vlan)#name siswa
S3(config-vlan)#exit
S3(config)#vlan 30
S3(config-vlan)#name tu
S1(config-vlan)#exit
kita konfigurasi mode trunk di
switch(S1) terlebih dahulu, caranya liat
tulisan di bawah ini
S1(config)#interface fa0/1
S1(config-if)#switchport mode trunk
S1(config-if)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up
S1(config-if)#switchport mode trunk
S1(config-if)#switchport trunk allowed vlan 10,20,30
S1(config-if)#exit
lalu kita konfigurasi mode trunk di
switch(S2) , caranya liat tulisan di bawah
ini
S2(config)#interface fa0/2
S2(config-if)#switchport mode trunk
S2(config-if)#
%LINEPROTO-5-UPDOWN: Line protocol
on Interface FastEthernet0/2,
changed state to down
%LINEPROTO-5-UPDOWN: Line protocol
on Interface FastEthernet0/2,
changed state to up
S2(config-if)#switchport mode trunk
S2(config-if)#switchport trunk
allowed vlan 10,20,30
S2(config-if)#exit
sekarang kita konfigurasi mode trunk di
switch pusat (S3)
S3(config)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up
S3(config)#interface fa0/1
S3(config-if)#switchport mode trunk
S3(config-if)#switchport trunk allowed vlan 10,20,30
S3(config-if)#exit
S3(config)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to down
%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to up
S3(config)#interface fa0/2
S3(config-if)#switchport mode trunk
S3(config-if)#switchport trunk allowed vlan 10,20,30
S3(config-if)#exit
setelah itu kita cek apakah sudah benar
atau belum, dengan cara ketik”do shoh
interface trunk”
S3(config)#do show interface trunk
Port Mode Encapsulation Status Native vlan
Fa0/1 on 802.1q trunking 1
Fa0/2 on 802.1q trunking 1
Port Vlans allowed on trunk
Fa0/1 10,20,30
Fa0/2 10,20,30
Port Vlans allowed and active in management domain
Fa0/1 10,20,30
Fa0/2 10,20,30
Port Vlans in spanning tree forwarding state and not pruned
Fa0/1 10,20,30
Fa0/2 10,20,30
jika sudah merasa benar maka
konfigurasi trunk sudah beres
sekarang kita cek dengan cara ngeping
caranya klik gambar
pc>desktop>command prompt
selesai……….selamat mencoba
