Hello Wendell,
you can create additional Vlans 201, 202 on both the router C892 and Catalyst 2960 (on Cat2960 you probably need to create Vlan 200 too if it is used with default configuration ).
Router
config t
vlan 201
name DATA2
vlan 202
name DATA3
exit
int vlan 201
desc DATA2
ip address 10.188.2.1 255.255.255.0
ip nat inside
no shut
exit
int vlan 202
desc DATA3
ip address 10.188.3.1 255.255.255.0
ip nat inside
no shut
exit
Now the router physical port to the switch has to be configured in the following manner
interface gi2
description to the C2960 giX
switchport
switchport mode trunk
switchport trunk allowed vlan 200,201,202
The NAT ACL has to be updated as follows
ip access-list standard NAT-LIST
permit 10.188.1.0 0.0.0.255
permit 10.188.2.0 0.0.0.255
permit 10.188.3.0 0.0.0.255
You need to gain access to the switch via a console cable and to configure it for the three Vlans and to be managed remotely
Let us suppose the default username cisco cisco is still there you access on the console with it
if you get enabled prompt #
You can do the following
config t
vlan 200
name DATA
vlan 201
name DATA1
vlan 202
name DATA2
exit
int vlan 200
ip address 10.188.1.2 255.255.255.0
description management
no shut
exit
ip default-gateway 10.188.1.1
The switch port connected to the router can be found using
show cdp neighbors
Let us suppose it is gi0/0 you need to configure it as a trunk carrying Vlans 200,201,202
interface gi0/0
description to router:gi2
switchport
switchport mode trunk
switchport trunk allowed vlan 200,201,202
WARNING NOTE:
There is an important impact in this change:
up to now you have used default configuration on the switch that means all ports are access ports in Vlan 1.
With the proposed change you need to move all access ports to vlan 200, then selected ports will be in vlan 201 and other selected ports in vlan 202.
config t
interface range gi0/1 - 24
switchport
switchport access vlan 200
to be able to telnet to the switch you need the following config
config t
line vty 0 4
login local
login privilege 15
exit
You are recommended to configure a username and password pair of your choice and to remove the default cisco/cisco
username myadmin privilege 15 password <your-password>
It is wise also to set an enable passord on the switch if you are not able to reach level 15 by telnet
enable secret <your-secret-password>
note: the enable secret will be encrypted you must remember the password you have entered to be able to use it later
Hope to help
Giuseppe
