Verification & Packet Tracer Assembly Guide: PTL-0009

Lab ID: PTL-0009
Lab Title: VLAN Segmentation and Access Port Configuration
Category: switching
Difficulty: Beginner

1. Physical & Packet Tracer Assembly Manifest#

Device Hardware & Module Schedule#

Port-to-Port Cabling Matrix#

Addressing Table#

2. Pre-Configuration & Starter State#

In the starter state (starter):

• All 4 PCs are cabled to Switch S1.
• All 24 switch ports reside in factory-default VLAN 1 (default).
• Prior to VLAN segmentation, all 4 PCs share a single broadcast domain.
• Student must create VLAN 10, VLAN 20, VLAN 99, assign ports Fa0/1-10 to VLAN 10, assign ports Fa0/11-20 to VLAN 20, configure Management SVI 99, and verify broadcast boundary isolation.

Complete reference configuration:

• configs/S1.txt

3. Positive Verification Tests#

Test POS-01: VLAN Database and Membership Verification#

• Action: At S1#, issue show vlan brief.
• Expected Terminal Output:

  S1# show vlan brief
  
  VLAN Name                             Status    Ports
  ---- -------------------------------- --------- -------------------------------
  1    default                          active    Fa0/21, Fa0/22, Fa0/23, Fa0/24, Gi0/1, Gi0/2
  10   Faculty                          active    Fa0/1, Fa0/2, Fa0/3, Fa0/4, Fa0/5, Fa0/6, Fa0/7, Fa0/8, Fa0/9, Fa0/10
  20   Students                         active    Fa0/11, Fa0/12, Fa0/13, Fa0/14, Fa0/15, Fa0/16, Fa0/17, Fa0/18, Fa0/19, Fa0/20
  99   Management                       active    
  

• Criterion: VLANs 10, 20, and 99 are active; ports Fa0/1-10 belong to VLAN 10; ports Fa0/11-20 belong to VLAN 20.

Test POS-02: Intra-VLAN Communication (Faculty VLAN 10)#

• Action: From PC-Faculty-1 (192.168.10.11), ping PC-Faculty-2 (192.168.10.12).
• Expected Terminal Output:

  C:\> ping 192.168.10.12
  Pinging 192.168.10.12 with 32 bytes of data:
  Reply from 192.168.10.12: bytes=32 time<1ms TTL=128
  Reply from 192.168.10.12: bytes=32 time<1ms TTL=128
  Reply from 192.168.10.12: bytes=32 time<1ms TTL=128
  Reply from 192.168.10.12: bytes=32 time<1ms TTL=128
  

• Criterion: Successful intra-VLAN reachability with 0% loss.

Test POS-03: Intra-VLAN Communication (Student VLAN 20)#

• Action: From PC-Student-1 (192.168.20.11), ping PC-Student-2 (192.168.20.12).
• Expected Terminal Output:

  C:\> ping 192.168.20.12
  Pinging 192.168.20.12 with 32 bytes of data:
  Reply from 192.168.20.12: bytes=32 time<1ms TTL=128
  Reply from 192.168.20.12: bytes=32 time<1ms TTL=128
  Reply from 192.168.20.12: bytes=32 time<1ms TTL=128
  Reply from 192.168.20.12: bytes=32 time<1ms TTL=128
  

• Criterion: Successful intra-VLAN reachability with 0% loss.

4. Negative Verification Tests#

Test NEG-01: Inter-VLAN Broadcast Domain Isolation#

• Action: From PC-Faculty-1 (VLAN 10), attempt to ping PC-Student-1 (VLAN 20: 192.168.20.11).
• Expected Terminal Output:

  C:\> ping 192.168.20.11
  Pinging 192.168.20.11 with 32 bytes of data:
  Request timed out.
  Request timed out.
  Request timed out.
  Request timed out.
  
  Ping statistics for 192.168.20.11:
      Packets: Sent = 4, Received = 0, Lost = 4 (100% loss)
  

• Criterion: 100% packet loss. Confirms that Layer 2 switches do not forward frames between different VLANs without a Layer 3 routing device.

Test NEG-02: Port Configured for Non-Existent VLAN#

• Action: Assign a port to an uncreated VLAN (e.g. switchport access vlan 50). Inspect show vlan brief.
• Expected Behavior: Catalyst switches automatically create the VLAN in vlan.dat (VLAN0050), warning the administrator that explicit naming was omitted.

5. Diagnostic & Troubleshooting Reference#