Segmentasi Jaringan VLAN menggunakan Cisco Packet Tracer
Nama: Nandana Ardhani
Kelas: PTI 202 C
NIM: 23050974113
Requirement
1 Router (Router0)
2 Switch (Switch0, Switch1)
4 PC (PC0, PC1, PC2, PC3)
Goal Project
VLAN 10 ( IT ) : 192.168.2.0/24 ( BIRTH DATE = 2 ) PC0 & PC1
VLAN 20 ( FINANCE ) : 192.168.72.0/24 ( NIM = 72 ) PC2 & PC3
Step 1 Build And Configuraiton
Build
1 Router → Router0 ( PT Router )
2 Switches → Switch0, Switch1 ( use switch 2960 )
4 PCs → PC0, PC1, PC2, PC3 ( PC PT )
Connect Configuration
Connect `PC0` and `PC1` to `Switch0` on ports `FastEthernet0/1` and `0/2`
Connect `PC2` and `PC3` to `Switch1` on ports `FastEthernet0/1` and `0/2`
Connect `Switch0` `FastEthernet0/24` to `Router0` `FastEthernet0/0`
Connect `Switch1` `FastEthernet0/24` to `Router0` `FastEthernet0/1`
use copper straight through
Step 2 Switch Configuration
Switch 0 (for it department VLAN 10)
bash
enable
conf t
vlan 10
name IT
exit
interface range fa0/1 - 2
switchport mode access
switchport access vlan 10
exit
interface fa0/24
switchport mode trunk
exit
Switch1 (for finance department VLAN 20)
enable
conf t
vlan 20
name FINANCE
exit
interface range fa0/1 - 2
switchport mode access
switchport access vlan 20
exit
interface fa0/24
switchport mode trunk
exit
Step 3 Configuration Router
enable
conf t
interface fa0/0.10
encapsulation dot1Q 10
ip address 192.168.2.1 255.255.255.0
exit
interface fa0/0.20
encapsulation dot1Q 20
ip address 192.168.72.1 255.255.255.0
exit
interface fa0/0
no shutdown
exit
Step 4 Configuration Static IP
| PC | IP Address | Subnet Mask | Default Gateway |
| --- | ------------- | ------------- | --------------- |
| PC0 | 192.168.2.10 | 255.255.255.0 | 192.168.2.1 |
| PC1 | 192.168.2.11 | 255.255.255.0 | 192.168.2.1 |
| PC2 | 192.168.72.10 | 255.255.255.0 | 192.168.72.1 |
| PC3 | 192.168.72.11 | 255.255.255.0 | 192.168.72.1 |
Step 5 Configuration ACL on Router
enable
conf t
access-list 100 deny ip 192.168.2.0 0.0.0.255 192.168.72.0 0.0.0.255
access-list 100 deny ip 192.168.72.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 100 permit ip any any
interface fa0/0
ip access-group 100 in
exit
Step 6 Testing The Project
to test the project you can start ping on the command line on PC
this must be success ping
----------------------------------------------------------------------------------------------
PC 0
ping 192.168.2.11
PC 2
ping 192.168.72.11
this must be fail ping
----------------------------------------------------------------------------------------------
PC 0
ping 192.168.72.10
PC 3
```
ping 192.168.2.11