Step 1: Configure the Switches for Remote Acce S1(config)#interface vlan 55 S1(config-if)#ip address 10.10.55.11 255.255.255.

0 S1(config-if)#no shutdown S1(config)#ip default-gateway 10.10.55.1 S1(config)#ex S2(config)#interface vlan 55 S2(config-if)#ip address 10.10.55.12 255.255.255.0 S2(config-if)#no shutdown S2(config)#ip default-gateway 10.10.55.1 S2(config)#ex S3(config)#interface vlan 55 S3(config-if)#ip address 10.10.55.13 255.255.255.0 S3(config-if)#no shutdown S3(config)#ip default-gateway 10.10.55.1 S3(config)#ex Step 2: Configure Trunking. S1(config)#interface range fastEthernet 0/19-24 S1(config-if-range)#switchport mode trunk S1(config-if-range)#switchport trunk native vlan 55 S1(config-if-range)#ex S2(config)#interface range fastEthernet 0/19-24 S2(config-if-range)#switchport mode trunk S2(config-if-range)#switchport trunk native vlan 55 S2(config-if-range)#ex S3(config)#interface range fastEthernet 0/19-24 S3(config-if-range)#switchport mode trunk S3(config-if-range)#switchport trunk native vlan 55 S3(config-if-range)#ex Step 3: Configure VTP and VLANs. a)

S1(config)#vtp mode server S1(config)#vtp domain BRANCH Setting device VLAN database password to vtpbranch b) S1(config)#vlan 40 S1(config-vlan)#name Staff S1(config-vlan)#ex S1(config)#vlan 50 S1(config-vlan)#name Admin S1(config-vlan)#ex S1(config)#vlan 55 S1(config-vlan)#name Management S1(config-vlan)#ex S1(config)#vlan 80 S1(config-vlan)#name Wireless S1(config-vlan)#ex c) S2(config)#vtp mode client S2(config)#vtp domain BRANCH S2(config)#vtp password vtpbranch S3(config)#vtp mode client S3(config)#vtp domain BRANCH S3(config)#vtp password vtpbranch d) S3#show vtp status VTP Version : 2 Configuration Revision : 8 Maximum VLANs supported locally : 255 Number of existing VLANs : 9 VTP Operating Mode : Client VTP Domain Name : BRANCH VTP Pruning Mode : Disabled VTP V2 Mode : Disabled VTP Traps Generation : Disabled

MD5 digest : 0xE9 0x2F 0xA0 0xA7 068 004 073 0x6B Configuration last modified by 10.10.55.11 at 3-2-93 00:16:56 Step 4: Configure Interfaces for VLAN Access S2(config)#interface range fastEthernet 0/1-10 S2(config-if-range)#switchport mode access S2(config-if-range)#switchport access vlan 40 S2(config-if-range)#ex S2(config)#interface range fastEthernet 0/11-17 S2(config-if-range)#switchport mode access S2(config-if-range)#switchport access vlan 50 S2(config-if-range)#ex S2(config)#interface fastEthernet 0/18 S2(config-if)#switchport mode access S2(config-if)#switchport access vlan 80 S2(config-if)#ex S3(config)#interface range fastEthernet 0/1-10 S3(config-if-range)#switchport mode access S3(config-if-range)#switchport access vlan 40 S3(config)#interface range fastEthernet 0/11-17 S3(config-if-range)#switchport mode access S3(config-if-range)#switchport access vlan 50 S3(config-if-range)#ex S3(config)#interface fastEthernet 0/18 S3(config-if)#switchport mode access S3(config-if)#switchport access vlan 80 S3(config-if)#ex S3#show vlan brief VLAN Name Status Ports - 1 default active Fa0/23, Fa0/24, Gig1/1, Gig1/2 40 Staff active Fa0/1, Fa0/2, Fa0/3, Fa0/4 Fa0/5, Fa0/6, Fa0/7, Fa0/8 Fa0/9, Fa0/10 50 Admin active Fa0/11, Fa0/12, Fa0/13, Fa0/14 Fa0/15, Fa0/16, Fa0/17

55 Management active 80 Wireless active Fa0/18 1002 fddi-default active 1003 token-ring-default active 1004 fddinet-default active 1005 trnet-default active Step 5: Configure Spanning Tree S1(config)#spanning-tree vlan 40 priority 12288 S1(config)#spanning-tree vlan 50 priority 12288 S1(config)#spanning-tree vlan 55 priority 12288 S1(config)#spanning-tree vlan 80 priority 12288 S2(config)#spanning-tree vlan 40 priority 16384 S2(config)#spanning-tree vlan 50 priority 16384 S2(config)#spanning-tree vlan 55 priority 16384 S2(config)#spanning-tree vlan 80 priority 16384 Branch(config)#interface fastEthernet 0/0 Branch(config-if)#no shutdown Branch(config)#interface fastEthernet 0/0.40 Branch(config-subif)#encapsulation dot1Q 40 Branch(config-subif)#ip address 10.10.40.1 255.255.255.0 Branch(config-subif)#no shutdown Branch(config-subif)#ex Branch(config)#interface fastEthernet 0/0.50 Branch(config-subif)#encapsulation dot1Q 50 Branch(config-subif)#ip address 10.10.50.1 255.255.255.0 Branch(config-subif)#no shutdown Branch(config-subif)#ex Branch(config)#interface fastEthernet 0/0.55 Branch(config-subif)#encapsulation dot1Q 55 Branch(config-subif)#ip address 10.10.55.1 255.255.255.0 Branch(config-subif)#no shutdown Branch(config-subif)#ex Branch(config)#interface fastEthernet 0/0.80 Branch(config-subif)#encapsulation dot1Q 80

Branch(config-subif)#ip address 10.10.80.1 255.255.255.0 Branch(config-subif)#no shutdown Branch#show vlan-switch VLAN Name Status Ports - 1 default active 1002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2 - - - 1 enet 100001 1500 - - 0 0 1002 fddi 101002 1500 - - 0 0 1003 tr 101003 1500 - - 0 0 1004 fdnet 101004 1500 - ieee 0 0 1005 trnet 101005 1500 - ibm 0 0 Remote SPAN VLANs Primary Secondary Type Ports - Step 7: Configure Port Security S3(config)#interface fastEthernet 0/2 S3(config-if)#switchport mode access S3(config-if)#switchport port-security maximum 2 S3(config-if)#switchport port-security mac-address sticky S3(config-if)#switchport port-security violation shutdown S3(config-if)#ex S3#show port-security address Secure Mac Address Table