Configure / Assign Static IP address to Cisco Layer 2 Switch or VLAN interface

Assign ip address to switch or assign ip address to vlan
In this article will demonstrate on how to assign an ip address statically to cisco layer 2 switch.

You can assign ip address to a cisco layer 2 switch by using the virtual interfaces  (VLAN interfaces) not physical interfaces, by configuring ip address to the vlan interface as shown in the following commands and video.

London(config)#int vlan 1
London(config-if)#ip address 192.168.10.10 255.255.255.0
London(config-if)#no shutdown

Looking at the above diagram, we assigned ip address 192.168.10.10 to the cisco switch0, after that Router0 that has ip address 192.168.10.1 can ping to the cisco switch.

Router0#ping 192.168.10.10

!!!!! 

Note that vlans are identified with a number from 1 to 4094 when the enhanced software image is installed and 1 to 1005 when the standard software image is installed.

To do so, watch this simple and short video

To get automatic updates on your youtube guide, subscribe to the channel

http://www.youtube.com/channel/UCl25WPPKY4jnkGf32DnXU5w

To get automatic updates on your facebook, join a facebook group
https://www.facebook.com/groups/netsyshorizon/

 

Related Links:
OSPF Cost Calculation and Configuring Bandwidth and ip ospf cost

https://youtu.be/zgqaVkQe5Sw

EIGRP Composite Metric Calculation and Configuring different delay values and Bandwidth values

https://youtu.be/GsnV4Bc3On8

Configure / Assign IP address to Cisco Layer 3 Switch

https://youtu.be/s9DMZCq27Ys

SSH from cisco router and switch to another

https://youtu.be/_I-0Vgc8E9s

Assign ip address to cisco switch / Assign ip address to vlan

https://youtu.be/Q9SUVmyJr80

Configuring cisco extended acl / extended named access control list tutorial using packet tracer

https://youtu.be/Tj6H8pg06f0

Configure Cisco  Extended ACL/ Extended Numbered Access Control List ACL Using Packet Tracer

https://youtu.be/j0CDNAa2Wqg

Port Forwarding and Static Nat on Cisco Routers - Access your private network from the internet

https://youtu.be/8WVWoW86Uhw

Configure Cisco Named Standard Access Control List ACL on Cisco routers

https://youtu.be/u2zmuRZazFw

How Access List works - Numbered Standard Access List configuring

https://youtu.be/rLci6mFg2BA

Cisco router WAN Redundancy/WAN Failover and Change Routing dynamicaly Using IP SLA - Route Tracking

https://youtu.be/x3xZhbrX7Ww

Cisco Named Access Control Lists Editing (add and delete individual lines+resequence)

https://youtu.be/RToV6h2rGeM

Connecting  GNS3 to Vmware

https://youtu.be/WuLf3ESAx94

How to download and install GNS3 1.2 + adding IOS image to GNS3

https://youtu.be/CXVNpERIPo4

Mikrotik router PPPoE client configuration - Mikrotik PPPoE client Setup

https://youtu.be/aUGL20rjbVA

Add IOS images to GNS3

https://youtu.be/GjxODWeuC5Y

Connect your PC to GNS3 - connecting GNS3 to local machine

https://youtu.be/c_b_-rGWnJc

Configuration register value - changing the configuration register

https://youtu.be/YVAKerOmJpk

Backup and Restore Cisco Configuration file -  Cisco backup Config

https://youtu.be/YMX1EMPjBC0

Telnet Vs SSH - Difference betweenTelnet and SSH Configuration

https://youtu.be/15pfENww-dk

Capture telnet password using wireshark - Sniffing telnet password using wireshark

https://youtu.be/xShwyUq-uHk

Clock Rate vs Bandwidth - Configuring clock rate and bandwidth

https://youtu.be/rntsm5bHagI

Configure Default routes on cisco routers

https://youtu.be/E5-kpZt8LU4

Configure cisco router hostname and ip address

https://youtu.be/1OYMlMzQ1dE

Cisco Router Password Recovery

https://youtu.be/6shdtrAx9l0

Configure DHCP on Cisco router - Cisco router as a DHCP Server

https://youtu.be/YTCgVn9X4ac

Static Routing Configuration Using Packet Tracer

https://youtu.be/v05Jm4h-Zms

Keywords:

Setting an ip address to cisco layer2 switch
configuring ip address to cisco switch
configuring ip address to vlan interface
assigning ip address to vlan
assigning ip address to cisco switch
assign ip address to vlan
assign ip address to cisco switch
basic switch configuration
how to static assign ip address to cisco switch
Interface ip address configuration on cisco layer switches
how to configure ip address to cisco switch
Static ip address on cisco layer 2 switch
how to add ip address to vlan
Virtual lan interface ip address assignment
giving a switch ip address
set a managment ip address to cisco catalyst switch
assign ip to cisco switch
vlan ip address assgining
assign ip address to vlan interface

Configure Cisco Named Extended Access Control List

In this article will demonstrate on extended named access control List (Extended Named ACL).

Access control list is used for filtering unwanted traffic, there are two types of acl :numbered and named acl. numbered access lists are either standard or extended. Also, named access lists are either standard or extended. So, there are four access lists

1. Numbered standard access list
2. Numbered extended access list
3. Named standard access list
4. Named extended access list

 In this article will cover Named Extended Access List. Extended means it will filter the packet based on the source ip address, destination ip address, protocol, and port. Named  means that the access list is identified by name not by number and has a feature of editing (adding and removing specific lines capability).

Access Control List Rules

1- If you use Numbered (Standard and Extended) and Named (Standard and Extended) Access Lists, the packet is always compared with each line of the access list in sequential order, means If the source packet ip address matches the first line(entry) of the acl, the router will not check  all other entries in the access list. If the source ip address doesn't match the first line of the acl, the router will check the second line and so on. The packet is compared with lines of the access list only until a match is made. Once it matches the condition on a line of the access list, no further comparisons take place.

2- There is an implicit deny at the end of each access list—this means that if a packet doesn't match the condition on any of the lines in the access list, the packet will be discarded.

3- The access list is applied on an interface in a specific direction -Inbound or Outbound. Inbound: The packets will be processed through the acl before routed to the outbound interfaces. Outbound: The packets are routed to the outbound interface, and then processed through the acl.

4- Standard (numbered and named) access control lists filter network traffic by examining the source ip address in a packet (filtering traffic based on the source ip address).

5- The Named Access Lists (Standard and Extended) are editable, means you can insert a line in between the lines or at the top of the entries. Also you can delete specific line. So, there is a capability of modifying the access list(adding a line or deleting specific line).

6- Standard Access Control List is placed as close to destination as possible.

7- Extended Access Control List is placed as close to source as possible.

Extended Named Access Lists

Named Extended Access Control Lists use the following syntax
R(config)# ip access-list extended <access-list-name>

R(config-ext-nacl)<permit/deny> <protocol> < source address> <wildcard mask> <destination address> <wildcard mask><operator> <port>

[protocol]

PROTOCOL	DESCRIPTION
ahp	Authentication Header Protocol
eigrp	Cisco’s EIGRP routing protocol
esp	Encapsulation Security Payload
gre	Cisco’s GRE tunneling
icmp	Internet Control Message Protocol
ip	Any Internet Protocol
ospf	OSPF routing protocol
tcp	Transmission Control Protocol
udp	User Datagram Protocol

[operator]

OPERATOR	DESCRIPTION
dscp	Match packets with given dscp value
eq	Match only packets on a given port number
established	established
gt	Match only packets with a greater port number
lt	Match only packets with a lower port number
neq	Match only packets not on a given port number
precedence	Match packets with given precedence value
range	Match only packets in the range of port numbers

[port]

PORT	DESCRIPTION
	Port number
ftp	File Transfer Protocol (21)
pop3	Post Office Protocol v3 (110)
smtp	Simple Mail Transport Protocol (25)
telnet	Telnet (23)
www	World Wide Web (HTTP, 80)

Looking at the above diagram, we want preventing network 192.168.10.0/24 from accessing network 192.168.30.0/24 using icmp-echo (ping) and ftp only, and everything else is permitted.

The extended access list is applied as close to source network, and we want preventing network 192.168.10.0/24 (Source) from accessing network 192.168.30.0/24(Destination) using icmp-echo and ftp. That's why i will write the configuration on Router0.

Configuration Steps:

1- Create an access list

1-Router0(config)#ip access-list extended tariq
2-Router0(config-ext-nacl)# deny icmp 192.168.10.0 0.0.0.255 192.168.30.0 0.0.0.255 echo
3-Router0(config-ext-nacl)# deny tcp 192.168.10.0 0.0.0.255 192.168.30.0 0.0.0.255 eq 21
4-Router0(config-ext-nacl)# permit ip any any

Line 1:creating extended named access list, and tariq is the name of the access-list Line2:denying echo(ping) from the source network 192.168.10.0/24 to the destination network 192.168.30.0/24, echo is an application of the icmp protocol
Line3:denying ftp from the source network 192.168.10.0/24 to the destination network 192.168.30.0/24, ftp uses tcp.
Line4:permitting any protocol (ip means any protocol) from any source network to destination network, this means permitting everything.

2- The access list is applied on an interface in a specific direction: no action (permit or deny)  will be taken until the access list is applied on an interface in a specific direction.

In this example we will apply the acl on the interface f0/0 in inbound direction, means the router interface g0/0 will receive the icmp-echo and ftp packets from network 192.168.10.0/24 that are going to network 192.168.30.0/24 and prevent these packets from being routed to the other interfaces such as s0/0/0. So it blocks network 192.168.10.0/24 from reaching network 192.168.30.0/24 using the icmp-echo(ping) and ftp.

before writing the commands below, host 192.168.10.2 can ping to 192.168.30.2
Router0(config)#int f0/0
Router0(config-if)#ip access-group tariq in

After writing the above commands (applying the acl on the interface), host 192.168.10.2 can't ping to 192.168.30.2

To edit this named access list https://youtu.be/RToV6h2rGeM
To view the configured access list

Router#sh access-lists
Extended IP access list tariq
10 deny icmp 192.168.10.0 0.0.0.255 192.168.30.0 0.0.0.255 echo (4 match(es))
20 deny tcp 192.168.10.0 0.0.0.255 192.168.30.0 0.0.0.255 eq ftp
30 permit ip any any (4 match(es))

For more details, watch this simple and short video on youtube
http://adf.ly/1Hmo2r
https://youtu.be/Tj6H8pg06f0

To get automatic updates on your facebook, join a facebook group
https://www.facebook.com/groups/netsyshorizon/

Configure Extended Numbered Access Lists - Extended ACL Example and Lab

In this article will demonstrate on Extended numbered Access Control List (Extended Numbered ACL).

Access control list is used for filtering unwanted traffic, there are two types of acl :numbered and named acl. numbered access lists are either standard or extended. Also, named access lists are either standard or extended. So, there are four access lists

1. Numbered standard access list
2. Numbered extended access list
3. Named standard access list
4. Named extended access list

 In this article will cover Numbered Extended Access List. Extended means it will filter the packet based on the source ip address, destination ip address, protocol, and port. Numbered  means that the access list is identified by number not by name and doesn't have a feature of editing (adding and removing specific lines capability).

Access Control List Rules

1- If you use Numbered (Standard and Extended) and Named (Standard and Extended) Access Lists, the packet is always compared with each line of the access list in sequential order, means If the source packet ip address matches the first line(entry) of the acl, the router will not check  all other entries in the access list. If the source ip address doesn't match the first line of the acl, the router will check the second line and so on. The packet is compared with lines of the access list only until a match is made. Once it matches the condition on a line of the access list, no further comparisons take place.

2- There is an implicit deny at the end of each access list—this means that if a packet doesn't match the condition on any of the lines in the access list, the packet will be discarded.

3- The access list is applied on an interface in a specific direction -Inbound or Outbound. Inbound: The packets will be processed through the acl before routed to the outbound interfaces. Outbound: The packets are routed to the outbound interface, and then processed through the acl.

4- Standard (numbered and named) access control lists filter network traffic by examining the source ip address in a packet (filtering traffic based on the source ip address).

5- The Named Access Lists (Standard and Extended) are editable, means you can insert a line in between the lines or at the top of the entries. Also you can delete specific line. So, there is a capability of modifying the access list(adding a line or deleting specific line).

6- Standard Access Control List is placed as close to destination as possible.

7- Extended Access Control List is placed as close to source as possible.

Extended Numbered access lists

Numbered Extended Access Control Lists use the following syntax
R(config)# access-list <permit/deny> <protocol> < source address> <wildcard mask> <destination address> <wildcard mask><operator> <port>

Below describes the parameters present in the Extended Numbered ACL syntax.<100-199> is extended numbered access control list range.

<protocol>

PROTOCOL	DESCRIPTION
ahp	Authentication Header Protocol
eigrp	Cisco’s EIGRP routing protocol
esp	Encapsulation Security Payload
gre	Cisco’s GRE tunneling
icmp	Internet Control Message Protocol
ip	Any Internet Protocol
ospf	OSPF routing protocol
tcp	Transmission Control Protocol
udp	User Datagram Protocol

<operator>

OPERATOR	DESCRIPTION
dscp	Match packets with given dscp value
eq	Match only packets on a given port number
established	established
gt	Match only packets with a greater port number
lt	Match only packets with a lower port number
neq	Match only packets not on a given port number
precedence	Match packets with given precedence value
range	Match only packets in the range of port numbers

<port>

PORT	DESCRIPTION
	Port number
ftp	File Transfer Protocol (21)
pop3	Post Office Protocol v3 (110)
smtp	Simple Mail Transport Protocol (25)
telnet	Telnet (23)
www	World Wide Web (HTTP, 80)

Looking at the above diagram, we want preventing network 192.168.10.0/24 from accessing network 192.168.30.0/24 using icmp-echo (ping) only, and everthing else is permitted.

The extended access list is applied as close to source network, and we want perventing network 192.168.10.0/24 (Source) from accessing network 192.168.30.0/24(Destination) using icmp-echo. That's why i will write the configuration on Router0.

Configuration Steps:

1- Create an access list which is identified by a number, I used 110 as a number of the access list, icmp protocol, and echo service name, as you see below in the first command . You should know that you can use the port number or service name, in the this example i used the service name.  the second command permits the packets coming from any network to any network using any protocol, I used ip protocol which means any protocol.

Router0(config)#access-list 110 deny icmp 192.168.10.0 0.0.0.255 192.168.30.0 0.0.0.255 echo
Router0(config)#access-list 110 permit ip any any

2- The access list is applied on an interface in a specific direction: no action(permit or deny)  will be taken until the access list is applied on an interface in a specific direction.

In this example we will apply the acl on the interface g0/1 in inbound direction, means the router interface g0/1 will receive the icmp-echo packets from network 192.168.10.0/24 that are going to network 192.168.30.0/24 and prevent these packets from being routed to the other interfaces such as g0/0.

before writing the commands below, host 192.168.10.2 can reach 192.168.30.2
Router0(config)#int f0/0
Router0(config-if)#ip access-group 110 in

After writing the above commands (applying the acl on the interface), host 192.168.10.2 can't access 192.168.30.2

To view the configured access list
Extended IP access list 110
 deny icmp 192.168.10.0 0.0.0.255 192.168.30.0 0.0.0.255 echo (4 match(es))
permit ip any any (4 match(es))

For more details, watch this simple and short video on youtube
http://adf.ly/1H8Afy
https://youtu.be/j0CDNAa2Wqg

To get automatic updates on your facebook, join a facebook group
https://www.facebook.com/groups/netsyshorizon/