Memuat project...
Memuat project...
Network Segmentation with VLAN and Inter-VLAN Routing
This project simulates an office network with three departments: HR (VLAN 10), IT (VLAN 20), and Finance (VLAN 30). Each department has its own switch, connected to a core switch (SW-CORE) through 802.1Q trunks, and then to a single router (R-CORE).
VLAN separation keeps each department's traffic isolated and better organized. Communication between departments still works through router-on-a-stick, where one physical interface is divided into three subinterfaces that act as the gateway for each VLAN. The router also serves as a DHCP server with a separate pool for each department, so every device (PC, laptop, printer) automatically receives an IP address, gateway, and DNS server.
What was implemented:
• VLAN creation and access port assignment per department
• 802.1Q trunking between switches and to the router
• Subinterfaces Fa0/0.10, Fa0/0.20, and Fa0/0.30 as VLAN gateways
• Multi-pool DHCP (192.168.2.0/24, 192.168.3.0/24, 192.168.4.0/24)
• Inter-VLAN connectivity testing with ping and PDU
Result:
All devices obtain their IP configuration from DHCP, and cross-VLAN communication between HR, IT, and Finance was tested successfully.
Simulasi jaringan perusahaan di Cisco Packet Tracer 8.2.2 dengan tiga divisi (HR, IT, Finance) yang dipisah per VLAN, di-routing lewat satu router, dan mendapat IP otomatis dari DHCP.
| VLAN | Divisi | Subnet | Gateway | Switch | Port access |
|---|---|---|---|---|---|
| 10 | HR | 192.168.2.0/24 | 192.168.2.1 | SW-HR | Fa0/2-6 |
| 20 | IT | 192.168.3.0/24 | 192.168.3.1 | SW-IT | Fa0/2-6 |
| 30 | Finance | 192.168.4.0/24 | 192.168.4.1 | SW-FIN | Fa0/2-6 |
Link trunk: Router Fa0/0 ↔ SW-CORE Fa0/1, dan SW-CORE Fa0/2-4 ↔ switch divisi (Fa0/1).
hostname SW-HR
vlan 10
name HR
!
interface fastEthernet 0/1
switchport mode trunk
!
interface range fastEthernet 0/2 - 6
switchport mode access
switchport access vlan 10
SW-IT memakai VLAN 20 (name IT) dan SW-FIN memakai VLAN 30 (name FINANCE) dengan pola yang sama.
hostname SW-CORE
vlan 10
name HR
vlan 20
name IT
vlan 30
name FINANCE
!
interface range fastEthernet 0/1 - 4
switchport mode trunk
hostname R-CORE
!
interface fastEthernet 0/0
no shutdown
!
interface fastEthernet 0/0.10
encapsulation dot1Q 10
ip address 192.168.2.1 255.255.255.0
interface fastEthernet 0/0.20
encapsulation dot1Q 20
ip address 192.168.3.1 255.255.255.0
interface fastEthernet 0/0.30
encapsulation dot1Q 30
ip address 192.168.4.1 255.255.255.0
!
ip dhcp excluded-address 192.168.2.1
ip dhcp excluded-address 192.168.3.1
ip dhcp excluded-address 192.168.4.1
!
ip dhcp pool HR
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 8.8.8.8
ip dhcp pool IT
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 8.8.8.8
ip dhcp pool FINANCE
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 8.8.8.8
| No | Sumber | Tujuan | Skenario | Hasil |
|---|---|---|---|---|
| 1 | Laptop0 | Laptop1 | HR → IT | Successful |
| 2 | Laptop0 | PC5 | HR → IT | Successful |
| 3 | PC3 | Printer2 | HR → Finance | Successful |
| 4 | PC4 | Laptop1 | HR → IT | Successful |