CCNA Foundations Day 1: VLAN and Port Security

Archive lab

Build and harden a small branch campus Layer 2 network with a distribution switch and two access switches. Implement VLANs, trunking, and basic port security, then verify from the end hosts and troubleshoot common L2 mistakes.

Learning objectives

• Create and name multiple VLANs and a dedicated management VLAN
• Assign access ports to the correct VLANs for each host
• Configure 802.1Q trunks with explicit allowed VLAN lists and a hardened native VLAN
• Implement basic port security with sticky MAC on access ports
• Verify VLAN and port-security operation from hosts and switches
• Troubleshoot incorrect VLAN assignments, trunk mismatches, and port-security violations

Troubleshooting focus

• Verify every link's interface status and IP addressing (`show ip interface brief`) and correct any interface that is down or misaddressed.
• Confirm each device's running configuration matches the lab objective, and bring any interface, route, or service that is not in its expected state back to health.
• Trace end-to-end reachability with ping/traceroute and isolate the first hop where forwarding fails.