SlideShare a Scribd company logo

Ccna 4 final lab switchi

Download as DOCX, PDF
••
Leandro Uglar, profile picture
Leandro Uglar

This document provides instructions for completing a Packet Tracer practice skills assessment involving wireless LAN configuration. The steps include: 1. Configuring VLANs, trunking, VTP, and inter-VLAN routing on switches and a router. 2. Modifying STP settings and enabling port security on switch ports. 3. Configuring a wireless LAN including SSID, security, and DHCP services. 4. Verifying connectivity between network devices.

Education
1 of 20
Downloaded 23 times
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
ESwitching Basic Switching/Wireless PT Practice SBA A few things to keep in mind while completing this activity: 1. Do not use the browser Back button or close or reload any exam windows during the exam. 2. Do not close Packet Tracer when you are done. It will close automatically. 3. Click the Submit Assessment button to submit your work. Introduction In this practice Packet Tracer Practice Skills Based Assement, you will:  configure VLANs using VTP  configure inter-VLAN routing  modify STP  configure port security  add a wireless LAN
Addressing Table Device Interface Address Subnet Mask Default Gateway Branch Fa0/0.40 10.10.40.1 255.255.255.0 n/a Fa0/0.50 10.10.50.1 255.255.255.0 n/a Fa0/0.55 10.10.55.1 255.255.255.0 n/a Fa0/0.80 10.10.80.1 255.255.255.0 n/a WLAN Internet 10.10.80.10 255.255.255.0 10.10.80.1 Wireless 10.10.100.1 255.255.255.0 n/a S1 VLAN 55 10.10.55.11 255.255.255.0 10.10.55.1 S2 VLAN 55 10.10.55.12 255.255.255.0 10.10.55.1 S3 VLAN 55 10.10.55.13 255.255.255.0 10.10.55.1 Staff 1 NIC 10.10.40.10 255.255.255.0 10.10.40.1 Staff 2 NIC 10.10.40.11 255.255.255.0 10.10.40.1 Admin NIC 10.10.50.10 255.255.255.0 10.10.50.1 WRS PC NIC DHCP assigned 255.255.255.0 10.10.100.1 Note: The password for user EXEC mode is cisco. The password for privileged EXEC mode is class. Step 1: Configure the Switches for Remote Access. Create, enable, and address VLAN 55 as the management interface on all three switches. Use the values found in the addressing table. Step 2: Configure Trunking. Note: Packet Tracer now supports the use of the range argument for the interface command. For interfaces FastEthernet 0/1 through FastEthernet 0/4 on all three switches:  Configure static trunking.  Assign VLAN 55 as the native VLAN.
S3(config)#interface RAnge fastEthernet 0/1-4 S3(config-if-range)#sw S3(config-if-range)#switchport mod S3(config-if-range)#switchport mode tru S3(config-if-range)#switchport mode trunk %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4, changed state to up S3(config-if-range)#sw S3(config-if-range)#switchport tru S3(config-if-range)#switchport trunk S3(config-if-range)#switchport trunk native vl S3(config-if-range)#switchport trunk native vlan 55 S3(config-if-range)#no shu S3(config-if-range)#no shutdown S3(config-if-range)#exit S3(config)# Step 3: Configure VTP and VLANs. a. Configure S1 as VTP server and the following VTP parameters:  S1 is the VTP server.
 VTP domain name: BRANCH  VTP password: vtpbranch S1(config)#vtp mode ser S1(config)#vtp mode server Device mode already VTP SERVER. S1(config)#vt S1(config)#vtp dom S1(config)#vtp domain BRANCH Changing VTP domain name from NULL to BRANCH S1(config)#vtp S1(config)#vtp pass S1(config)#vtp password vtpbranch Setting device VLAN database password to vtpbranch b. Create and name the following VLANs on S1.  VLAN 40: Staff  VLAN 50: Admin  VLAN 55: Management  VLAN 80: Wireless S1(config)#vl S1(config)#vlan 40 S1(config-vlan)#na S1(config-vlan)#name Staff S1(config-vlan)#exit S1(config)#vl S1(config)#vlan 50 S1(config-vlan)#na S1(config-vlan)#name Admin S1(config-vlan)#vl S1(config-vlan)#exit S1(config)#vl S1(config)#vlan 55 %LINK-5-CHANGED: Interface Vlan55, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan55, changed state to up S1(config-vlan)#na S1(config-vlan)#name Management S1(config-vlan)#exit S1(config)#vl S1(config)#vlan 88 S1(config-vlan)#nam S1(config-vlan)#name Wireless S1(config-vlan)#exit S1(config)#exit S1#
c. Configure S2 and S3 as VTP clients to participate in the BRANCH VTP domain. S2(config)#vtp mod S2(config)#vtp mode cli S2(config)#vtp mode client Setting device to VTP CLIENT mode. S2(config)#vt S2(config)#vtp pass S2(config)#vtp dom S2(config)#vtp domain BRANCH Domain name already set to BRANCH. S2(config)#vtp S2(config)#vtp pass S2(config)#vtp password vtpbranch Setting device VLAN database password to vtpbranch S2(config)# %LINK-5-CHANGED: Interface Vlan55, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan55, changed state to up S2(config)#exot ^ % Invalid input detected at '^' marker. S2(config)# S2(config)#exit S2# S3(config)#vtp mod S3(config)#vtp mode cli S3(config)#vtp mode client Setting device to VTP CLIENT mode. S3(config)#vtp S3(config)#vtp bran S3(config)#vtp doma S3(config)#vtp domain BRANCH Domain name already set to BRANCH. S3(config)#vtp S3(config)#vtp pass S3(config)#vtp password vtpbranch Setting device VLAN database password to vtpbranch S3(config)# %LINK-5-CHANGED: Interface Vlan55, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan55, changed state to up
S3(config)#exit S3# %SYS-5-CONFIG_I: Configured from console by console S3# d. Verify that VTP is operational. S3#ping 10.10.55.13 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.55.13, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 0/1/2 ms S3#ping 10.10.55.12 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.55.12, timeout is 2 seconds: ..!!! Success rate is 60 percent (3/5), round-trip min/avg/max = 8/8/8 ms S3#ping 10.10.55.11 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.55.11, timeout is 2 seconds: ..!!! Success rate is 60 percent (3/5), round-trip min/avg/max = 4/4/4 ms S3# Step 4: Configure Interfaces for VLAN Access VLAN port assignments on each switch are as follows:
Device Ports Assignment S2, S3 Fa0/1 – 0/10 40 S2, S3 Fa0/11 – 0/17 50 S3 Fa0/18 80 a. Configure access ports on access layer switches.  Configure the appropriate interfaces on S2 and S3 for access mode.  Assign VLANs according to the port assignments table. b. Verify trunking and VLAN assignments. S3(config)#inter S3(config)#interface fa S3(config)#interface fastEthernet 0/6 S3(config-if)#sw S3(config-if)#switchport mod S3(config-if)#switchport mode acc S3(config-if)#switchport mode access S3(config-if)#swe S3(config-if)#sw S3(config-if)#switchport acc S3(config-if)#switchport access vl S3(config-if)#switchport access vlan 40 S3(config-if)#no shu S3(config-if)#no shutdown S3(config-if)#exit Step 5: Configure Spanning Tree. a. Modify STP root bridge elections.  Using a priority of 12288, set S1 as the root bridge for all VLANs.  Using a priority of 16384, set S2 so that it will become the root for all VLANs if S1 fails. b. Verify the spanning tree election. S1(config)#spanning-tree vlan 1-99 priority 12288 S1(config)#spanning-tree vlan 1-99 prio S1(config)#spanning-tree vlan 1-99 root pri S1(config)#spanning-tree vlan 1-99 root primary S1(config)# S1(config)# S2(config)#spanning-tree vlan 1-99 priority 16384 S2(config)#spanning-tree vlan 1-99 root secondary S2(config)#exit
Step 6: Configure Inter-VLAN Routing.  Use the information in the Addressing Table to configure Branch for inter-VLAN routing. Be sure to designate the native VLAN.  Verify inter-VLAN routing. S1(config)#interface fastEthernet 0/5 S1(config-if)#sw S1(config-if)#switchport mod S1(config-if)#switchport mode trunk S1(config-if)#no shu S1(config-if)#no shutdown S1(config-if)#exit BRANCH(config)#inter BRANCH(config)#interface fa BRANCH(config)#interface fastEthernet 0/0.40 BRANCH(config-subi f)#ip add BRANCH(config-subi f)#ip address 10.10.40.1 255.255.255.0 BRANCH(config-subi f)#encap BRANCH(config-subi f)#encapsulation do BRANCH(config-subi f)#encapsulation dot1Q 40 BRANCH(config-subi f)#no sh BRANCH(config-subi f)#no shutdown BRANCH(config-subi f)#exit BRANCH(config)#interface fastEthernet 0/0.50 BRANCH(config-subi f)#ip add BRANCH(config-subi f)#ip address 10.10.50.1 255.255.255.0 BRANCH(config-subi f)#encap BRANCH(config-subi f)#encapsulation do BRANCH(config-subi f)#encapsulation dot1Q 50 BRANCH(config-subi f)#no shu BRANCH(config-subi f)#no shutdown BRANCH(config-subi f)#exit BRANCH(config)#inter BRANCH(config)#interface fa BRANCH(config)#interface fastEthernet 0/0.55 BRANCH(config-subi f)#ip add BRANCH(config-subi f)#ip address 10.10.55.1 255.255.255.0 BRANCH(config-subi f)#encap BRANCH(config-subi f)#encapsulation do BRANCH(config-subi f)#encapsulation dot1Q 55 BRANCH(config-subi f)#no shu BRANCH(config-subi f)#no shutdown
BRANCH(config-subi f)#exit BRANCH(config)#inter BRANCH(config)#interface fa BRANCH(config)#interface fastEthernet 0/0.80 BRANCH(config-subi f)#ip add BRANCH(config-subi f)#ip address 10.10.80.1 255.255.255.0 BRANCH(config-subi f)#encap BRANCH(config-subi f)#encapsulation do BRANCH(config-subi f)#encapsulation dot1Q 80 BRANCH(config-subi f)#no0 shu BRANCH(config-subi f)#no0 shu Step 7: Configure Port Security. Note: Best practice requires port security on all access ports. However, for this practice exercise you will only configure one port with security. a. Configure S3 with port security on FastEthernet 0/2.  Enable port security.  No more than two MAC addresses are allowed on the FastEthernet 0/2 port for S3.  Once learned, MAC addresses should be automatically added to the running configuration.  If this policy is violated, the port should be automatically disabled. b. Verify that port security is implemented. S2(config-if)#switchport por S2(config-if)#switchport port-security ? mac-address Secure mac address maximum Max secure addresses violation Security violation mode <cr> S2(config-if)#switchport port-security ma S2(config-if)#switchport port-security mac-address sticky S2(config-if)#sw S2(config-if)#switchport por S2(config-if)#switchport port-security max S2(config-if)#switchport port-security maximum 1 S2(config-if)#sw S2(config-if)#switchport por S2(config-if)#switchport port-security vio S2(config-if)#switchport port-security violation ? protect Security violation protect mode restrict Security violation restrict mode shutdown Security violation shutdown mode S2(config-if)#switchport port-security violation sh S2(config-if)#switchport port-security violation shutdown S2(config-if)#no shu S2(config-if)#no shutdown
S2(config-if)#exit S2(config)# S2#show port-security interface fastEthernet 0/5 Port Security : Enabled Port Status : Secure-up Violation Mode : Shutdown Aging Time : 0 mins Aging Type : Absolute SecureStatic Address Aging : Disabled Maximum MAC Addresses : 1 Total MAC Addresses : 0 Configured MAC Addresses : 0 Sticky MAC Addresses : 0 Last Source Address:Vlan : 0000.0000.0000:0 Security Violation Count : 0 S2# Step 8: Configure the Wireless LAN. Refer to the Addressing Table to configure the wireless LAN. a. Configure WLAN.  Use static addressing on the Internet interface.  Set the router IP and subnet mask.  Use the DHCP Server Settings to configure the router to provide wireless hosts with an IP address.  The starting IP address in the wireless LAN subnet is 10.10.100.15.  The maximum number of users is 75. b. Configure wireless security.  Set the SSID to Branch_WLAN.  Enable WEP security and use 0123456789 as key1. c. Use branch123 as the remote management password. d. Configure WRS PC to access the wireless network that is provided by WLAN. WRS PC uses DHCP to obtain addressing information. Note: It will not be possible for devices to ping WRS PC since WRS PC is behind the WLAN NAT firewall. Step 9: Verify Connectivity. Although these are not scored, the following connectivity tests should be successful.  S1 can ping Branch. S1# S1#ping 10.10.55.1 Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.55.1, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 3/4/5 ms S1#ping 10.10.50.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.50.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 3/4/5 ms S1#ping 10.10.40.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.40.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 2/3/5 ms S1#ping 10.10.80.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.80.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 3/4/5 ms  S2 can ping Branch. S2>ping 10.10.55.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.55.1, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 7/7/8 ms S2>ping 10.10.40.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.40.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 7/8/9 ms S2>ping 10.10.80.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.80.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 7/8/9 ms
S2>ping 10.10.50.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.50.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 7/7/9 ms  S3 can ping Branch. S3#ping 10.10.55.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.55.1, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 7/7/9 ms S3#ping 10.10.50.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.50.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 7/8/9 ms S3#ping 10.10.40.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.40.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 7/7/9 ms S3#ping 10.10.80.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.80.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 7/7/9 ms S3#  Staff 1 can ping Admin. PC>ipconfig IP Address......................: 10.10.40.10 Subnet Mask.....................: 255.255.255.0 Default Gateway.................: 10.10.40.1 PC>ping 10.10.50.10 Pinging 10.10.50.10 with 32 bytes of data:
Reply from 10.10.50.10: bytes=32 time=28ms TTL=127 Reply from 10.10.50.10: bytes=32 time=22ms TTL=127 Reply from 10.10.50.10: bytes=32 time=26ms TTL=127 Reply from 10.10.50.10: bytes=32 time=23ms TTL=127 Ping statistics for 10.10.50.10: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 22ms, Maximum = 28ms, Average = 24ms PC>10  Admin can ping Staff 2. PC>ipconfig IP Address......................: 10.10.50.10 Subnet Mask.....................: 255.255.255.0 Default Gateway.................: 10.10.50.1 PC>ping 10.10.40.11 Pinging 10.10.40.11 with 32 bytes of data: Request timed out. Reply from 10.10.40.11: bytes=32 time=23ms TTL=127 Reply from 10.10.40.11: bytes=32 time=23ms TTL=127 Reply from 10.10.40.11: bytes=32 time=22ms TTL=127 Ping statistics for 10.10.40.11: Packets: Sent = 4, Received = 3, Lost = 1 (25% loss), Approximate round trip times in milli-seconds: Minimum = 22ms, Maximum = 23ms, Average = 22ms PC>  WRS PC can ping Staff 1. ROUTER AND SWITCH CONFIGURATION: BRANCH#show startup-config Using 808 bytes !
version 12.4 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname BRANCH ! ! ! ! interface FastEthernet0/0 no ip address duplex auto speed auto ! interface FastEthernet0/0.40 encapsulation dot1Q 40 ip address 10.10.40.1 255.255.255.0 ! interface FastEthernet0/0.50 encapsulation dot1Q 50 ip address 10.10.50.1 255.255.255.0 ! interface FastEthernet0/0.55 encapsulation dot1Q 55 ip address 10.10.55.1 255.255.255.0 ! interface FastEthernet0/0.80 encapsulation dot1Q 80 ip address 10.10.80.1 255.255.255.0 ! interface FastEthernet0/1 no ip address duplex auto speed auto shutdown ! interface Vlan1 no ip address shutdown ! ip classless ! ! ! ! ! ! ! line con 0 line vty 0 4 login ! ! ! end
S1#show running-config Building configuration... Current configuration : 1403 bytes ! version 12.2 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname S1 ! ! spanning-tree vlan 1-99 priority 12288 ! interface FastEthernet0/1 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/2 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/3 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/4 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/5 switchport mode trunk ! interface FastEthernet0/6 switchport mode trunk ! interface FastEthernet0/7 ! interface FastEthernet0/8 ! interface FastEthernet0/9 ! interface FastEthernet0/10 ! interface FastEthernet0/11 ! interface FastEthernet0/12 ! interface FastEthernet0/13 ! interface FastEthernet0/14 ! interface FastEthernet0/15 ! interface FastEthernet0/16 !
interface FastEthernet0/17 ! interface FastEthernet0/18 ! interface FastEthernet0/19 ! interface FastEthernet0/20 ! interface FastEthernet0/21 ! interface FastEthernet0/22 ! interface FastEthernet0/23 ! interface FastEthernet0/24 ! interface GigabitEthernet1/1 ! interface GigabitEthernet1/2 ! interface Vlan1 no ip address shutdown ! interface Vlan55 ip address 10.10.55.11 255.255.255.0 ! ip default-gateway 10.10.55.1 ! ! line con 0 ! line vty 0 4 login line vty 5 15 login ! ! end S2#show running-config Building configuration... Current configuration : 1591 bytes ! version 12.2 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname S2 ! ! spanning-tree vlan 1-99 priority 16384 ! interface FastEthernet0/1
switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/2 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/3 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/4 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/5 switchport access vlan 50 switchport mode access switchport port-security switchport port-security mac-address sticky switchport port-security mac-address sticky 000D.BD88.A1E5 ! interface FastEthernet0/6 switchport access vlan 40 switchport mode access ! interface FastEthernet0/7 ! interface FastEthernet0/8 ! interface FastEthernet0/9 ! interface FastEthernet0/10 ! interface FastEthernet0/11 ! interface FastEthernet0/12 ! interface FastEthernet0/13 ! interface FastEthernet0/14 ! interface FastEthernet0/15 ! interface FastEthernet0/16 ! interface FastEthernet0/17 ! interface FastEthernet0/18 ! interface FastEthernet0/19 ! interface FastEthernet0/20 ! interface FastEthernet0/21 ! interface FastEthernet0/22 ! interface FastEthernet0/23 !
interface FastEthernet0/24 ! interface GigabitEthernet1/1 ! interface GigabitEthernet1/2 ! interface Vlan1 no ip address shutdown ! interface Vlan55 ip address 10.10.55.12 255.255.255.0 ! ip default-gateway 10.10.55.1 ! ! line con 0 ! line vty 0 4 login line vty 5 15 login ! ! end S2# S3#show ru S3#show running-config Building configuration... Current configuration : 1369 bytes ! version 12.2 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname S3 ! ! ! interface FastEthernet0/1 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/2 switchport trunk native vlan 55 switchport mode trunk
! interface FastEthernet0/3 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/4 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/5 ! interface FastEthernet0/6 switchport access vlan 40 switchport mode access ! interface FastEthernet0/7 ! interface FastEthernet0/8 ! interface FastEthernet0/9 ! interface FastEthernet0/10 ! interface FastEthernet0/11 ! interface FastEthernet0/12 ! interface FastEthernet0/13 ! interface FastEthernet0/14 ! interface FastEthernet0/15 ! interface FastEthernet0/16 ! interface FastEthernet0/17 ! interface FastEthernet0/18 ! interface FastEthernet0/19 ! interface FastEthernet0/20 ! interface FastEthernet0/21 ! interface FastEthernet0/22 ! interface FastEthernet0/23 ! interface FastEthernet0/24 ! interface GigabitEthernet1/1 ! interface GigabitEthernet1/2 ! interface Vlan1 no ip address shutdown ! interface Vlan55
ip address 10.10.55.13 255.255.255.0 ! ip default-gateway 10.10.55.1 ! ! line con 0 ! line vty 0 4 login line vty 5 15 login ! ! end

More Related Content

PPTX
Dcn configuration via cli
Khalil Al-Alami
 
DOC
Mini link tn configuration
Hammad Tabish
 
PDF
Xpic implementation xpd alignment interference test
Khalil Al-Alami
 
DOCX
How to configure vlan, stp, dtp step by step guide
IT Tech
 
PPTX
OSPF point-to-Multipoint non-broadcast over Frame-Relay
NetProtocol Xpert
 
PDF
BaseBand-6630-Moshell-Commands .pdf
wafawafa52
 
PPT
RNC_in_Pool.ppt
Hatim100
 
PPTX
Voice over LTE .pptx
Abhilash C A
 
Dcn configuration via cli
Khalil Al-Alami
 
Mini link tn configuration
Hammad Tabish
 
Xpic implementation xpd alignment interference test
Khalil Al-Alami
 
How to configure vlan, stp, dtp step by step guide
IT Tech
 
OSPF point-to-Multipoint non-broadcast over Frame-Relay
NetProtocol Xpert
 
BaseBand-6630-Moshell-Commands .pdf
wafawafa52
 
RNC_in_Pool.ppt
Hatim100
 
Voice over LTE .pptx
Abhilash C A
 

What's hot (20)

PDF
End-to-End QoS in LTE
Radisys Corporation
 
PDF
Minilink TN Ethernet Config.pdf
FahruddinThaha
 
DOCX
Tti bundling in fdd and tdd
Laxman Mewari
 
PPTX
CCNA2 Verson6 Chapter6
Chaing Ravuth
 
PDF
IPV6 Hands on Lab
Cisco Canada
 
PDF
LTE Load balancing.pdf
Karan Sharma
 
PDF
HUAWEI Switch HOW-TO - Configuring link aggregation in static LACP mode
IPMAX s.r.l.
 
PPTX
LTE Attach Call Flow_Vi.pptx
GaganVerma62
 
PDF
CCNA Lab Guide
Salachudin Emir
 
PDF
FTP Conflict troubleshooting & MINI-LINK TN FTP
Mohamed Abd El Razek Bakry
 
PPTX
CCNA 2 Routing and Switching v5.0 Chapter 2
Nil Menon
 
PDF
CCNAv5 - S2: Chapter5 Inter Vlan Routing
Vuz Dở Hơi
 
PDF
Ericsson LTE Commands.pdf
MbBot
 
PDF
Cisco commands List for Beginners (CCNA, CCNP)
DH Da Lat
 
PDF
Ccna Commands In 10 Minutes
CCNAResources
 
DOCX
Cisco router configuration tutorial
IT Tech
 
DOCX
Connection management
Muhammad Shehzad Ashraf
 
PDF
CCNA - Routing & Switching Commands
Eng. Emad Al-Atoum
 
DOC
Lab 6.4.1 InterVLAN routing
Muhd Mu'izuddin
 
PPT
Quality of service
Yasser El Harbili
 
End-to-End QoS in LTE
Radisys Corporation
 
Minilink TN Ethernet Config.pdf
FahruddinThaha
 
Tti bundling in fdd and tdd
Laxman Mewari
 
CCNA2 Verson6 Chapter6
Chaing Ravuth
 
IPV6 Hands on Lab
Cisco Canada
 
LTE Load balancing.pdf
Karan Sharma
 
HUAWEI Switch HOW-TO - Configuring link aggregation in static LACP mode
IPMAX s.r.l.
 
LTE Attach Call Flow_Vi.pptx
GaganVerma62
 
CCNA Lab Guide
Salachudin Emir
 
FTP Conflict troubleshooting & MINI-LINK TN FTP
Mohamed Abd El Razek Bakry
 
CCNA 2 Routing and Switching v5.0 Chapter 2
Nil Menon
 
CCNAv5 - S2: Chapter5 Inter Vlan Routing
Vuz Dở Hơi
 
Ericsson LTE Commands.pdf
MbBot
 
Cisco commands List for Beginners (CCNA, CCNP)
DH Da Lat
 
Ccna Commands In 10 Minutes
CCNAResources
 
Cisco router configuration tutorial
IT Tech
 
Connection management
Muhammad Shehzad Ashraf
 
CCNA - Routing & Switching Commands
Eng. Emad Al-Atoum
 
Lab 6.4.1 InterVLAN routing
Muhd Mu'izuddin
 
Quality of service
Yasser El Harbili
 
Ad

Viewers also liked (20)

PDF
Rapide deployment with Pathloss
Mounir Slimani
 
PPT
Vlans
1 2d
 
PDF
CCNA Lab 4-Configuring EtherChannels and optimizing Spanning Tree Protocol on...
Amir Jafari
 
PPTX
CCNP Route - Distribución, IPSLA, PBR
Juan Zambrano Burgos
 
PDF
Configuring a gns3 ethernet nio cloud free ccna workbook
Dare Tintin
 
PDF
CCNA Lab 2-Configuring a Switch Part II
Amir Jafari
 
PDF
Smart powetr grids
Amir Jafari
 
PDF
CCNA Lab 3-VLAN Configuration on Switch
Amir Jafari
 
PPT
Designing Clocked Synchronous State Machine
Abhilash Nair
 
PPT
CCNA- part 9 vlan
Sandeep Sharma IIMK Smart City,IoT,Bigdata,Cloud,BI,DW
 
PDF
CCNA Lab 1-Configuring a Switch Part I
Amir Jafari
 
PDF
Wrou01
tanawan44
 
DOCX
Сүлжээ1
Lhagvaa Byamba
 
PDF
Advanced multihoming
Chinmay Biswas
 
PDF
CCNA Lab 5-Configuring Inter-VLAN Routing
Amir Jafari
 
PPTX
CCNA R&S-01-Introduction to Cisco Certified Network Associate
Amir Jafari
 
PPTX
CCCNA R&S-02-The TCP-IP and OSI Networking Models
Amir Jafari
 
PPT
Convolutional Codes And Their Decoding
Kakali Saharia
 
PPT
Lan wan
Nur Islam
 
PPTX
Design and Implementation of Dynamic Routing in Wireless Networks
Satish Reddy
 
Rapide deployment with Pathloss
Mounir Slimani
 
Vlans
1 2d
 
CCNA Lab 4-Configuring EtherChannels and optimizing Spanning Tree Protocol on...
Amir Jafari
 
CCNP Route - Distribución, IPSLA, PBR
Juan Zambrano Burgos
 
Configuring a gns3 ethernet nio cloud free ccna workbook
Dare Tintin
 
CCNA Lab 2-Configuring a Switch Part II
Amir Jafari
 
Smart powetr grids
Amir Jafari
 
CCNA Lab 3-VLAN Configuration on Switch
Amir Jafari
 
Designing Clocked Synchronous State Machine
Abhilash Nair
 
CCNA- part 9 vlan
Sandeep Sharma IIMK Smart City,IoT,Bigdata,Cloud,BI,DW
 
CCNA Lab 1-Configuring a Switch Part I
Amir Jafari
 
Wrou01
tanawan44
 
Сүлжээ1
Lhagvaa Byamba
 
Advanced multihoming
Chinmay Biswas
 
CCNA Lab 5-Configuring Inter-VLAN Routing
Amir Jafari
 
CCNA R&S-01-Introduction to Cisco Certified Network Associate
Amir Jafari
 
CCCNA R&S-02-The TCP-IP and OSI Networking Models
Amir Jafari
 
Convolutional Codes And Their Decoding
Kakali Saharia
 
Lan wan
Nur Islam
 
Design and Implementation of Dynamic Routing in Wireless Networks
Satish Reddy
 
Ad

Similar to Ccna 4 final lab switchi (20)

PPT
07 module extending switched netwroks with virtual la ns
Asif
 
PPTX
Switching techniques in networking and uses
lochanraj1
 
PDF
Switch inter vlan_routing
Ramesh Thumburu
 
PDF
欧洲杯投注app-欧洲杯投注app推荐-欧洲杯投注app| 立即访问【ac123.net】
foismail170
 
PDF
欧洲杯投注网站-欧洲杯投注网站推荐-欧洲杯投注网站| 立即访问【ac123.net】
foismail170
 
PDF
9.VLAN+Principle - Network - ruijie.pdf (
RaihanRamadhan71
 
PDF
欧洲杯比赛投注官网-欧洲杯比赛投注官网网站-欧洲杯比赛投注官网|【​网址​🎉ac123.net🎉​】
velosonando62
 
PDF
欧洲杯比赛投注官网-欧洲杯比赛投注官网网站-欧洲杯比赛投注官网|【​网址​🎉ac123.net🎉​】
ahmedendrise81
 
PDF
2024欧洲杯最好的投注软件-2024欧洲杯最好的投注软件网址-2024欧洲杯最好的投注软件|【​网址​🎉ac123.net🎉​】
akrooshsaleem36
 
PDF
2024欧洲杯平台-2024欧洲杯平台网址-2024欧洲杯平台|【​网址​🎉ac123.net🎉​】
talhaaslan625
 
PDF
Lab6.4.1
Kanbuncha Panichcharoen
 
PDF
Vlan lab
tmim8
 
PDF
Cisco labs practical7
Tai Lam
 
PDF
Ccna3 lab 9_1_5b_en
vin424
 
PPTX
lab 2 (1)bbbbhbbbvvvvvvccccbbvvvccc.pptx
BinyamBekeleMoges
 
PDF
Cisco how to configure vlan
1 2d
 
PDF
Cisco how to configure vlan
1 2d
 
PDF
CCN3Switching_lab_5_5_2
alan moreno
 
PDF
Exercise 4c stp rapid pvst+ question
sufi1248
 
PDF
Day 5 VIRTUAL LANS
anilinvns
 
07 module extending switched netwroks with virtual la ns
Asif
 
Switching techniques in networking and uses
lochanraj1
 
Switch inter vlan_routing
Ramesh Thumburu
 
欧洲杯投注app-欧洲杯投注app推荐-欧洲杯投注app| 立即访问【ac123.net】
foismail170
 
欧洲杯投注网站-欧洲杯投注网站推荐-欧洲杯投注网站| 立即访问【ac123.net】
foismail170
 
9.VLAN+Principle - Network - ruijie.pdf (
RaihanRamadhan71
 
欧洲杯比赛投注官网-欧洲杯比赛投注官网网站-欧洲杯比赛投注官网|【​网址​🎉ac123.net🎉​】
velosonando62
 
欧洲杯比赛投注官网-欧洲杯比赛投注官网网站-欧洲杯比赛投注官网|【​网址​🎉ac123.net🎉​】
ahmedendrise81
 
2024欧洲杯最好的投注软件-2024欧洲杯最好的投注软件网址-2024欧洲杯最好的投注软件|【​网址​🎉ac123.net🎉​】
akrooshsaleem36
 
2024欧洲杯平台-2024欧洲杯平台网址-2024欧洲杯平台|【​网址​🎉ac123.net🎉​】
talhaaslan625
 
Lab6.4.1
Kanbuncha Panichcharoen
 
Vlan lab
tmim8
 
Cisco labs practical7
Tai Lam
 
Ccna3 lab 9_1_5b_en
vin424
 
lab 2 (1)bbbbhbbbvvvvvvccccbbvvvccc.pptx
BinyamBekeleMoges
 
Cisco how to configure vlan
1 2d
 
Cisco how to configure vlan
1 2d
 
CCN3Switching_lab_5_5_2
alan moreno
 
Exercise 4c stp rapid pvst+ question
sufi1248
 
Day 5 VIRTUAL LANS
anilinvns
 

Recently uploaded (20)

PDF
The Minister of Tourism, Culture and Creative Arts, Abla Dzifa Gomashie has e...
nservice241
 
PDF
Sunset Boulevard Student Revision Booklet
jpinnuck
 
PDF
Presentation of the MIPLM subject matter expert Erdem Kaya
MIPLM
 
PDF
Antianginal agents, Definition, Classification, MOA.pdf
Prerana Jadhav
 
PPTX
FSSAI (Food Safety and Standards Authority of India) & FDA (Food and Drug Adm...
Dr. Paindla Jyothirmai
 
PPTX
HISTORY COLLECTION FOR PSYCHIATRIC PATIENTS.pptx
PoojaSen20
 
PPTX
Measures_of_location_-_Averages_and__percentiles_by_DR SURYA K.pptx
Surya Ganesh
 
PPTX
An introduction to Dialogue writing.pptx
drsiddhantnagine
 
PPTX
Information Texts_Infographic on Forgetting Curve.pptx
Tata Sevilla
 
PDF
The-Invisible-Living-World-Beyond-Our-Naked-Eye chapter 2.pdf/8th science cur...
Sandeep Swamy
 
PPTX
CARE OF UNCONSCIOUS PATIENTS .pptx
AneetaSharma15
 
PDF
Phylum Arthropoda: Characteristics and Classification, Entomology Lecture
Miraj Khan
 
PPTX
How to Close Subscription in Odoo 18 - Odoo Slides
Celine George
 
PPTX
Python-Application-in-Drug-Design by R D Jawarkar.pptx
Rahul Jawarkar
 
PDF
PG-BPSDMP 2 TAHUN 2025PG-BPSDMP 2 TAHUN 2025.pdf
AshifaRamadhani
 
PPTX
CONCEPT OF CHILD CARE. pptx
AneetaSharma15
 
PPTX
TEF & EA Bsc Nursing 5th sem.....BBBpptx
AneetaSharma15
 
PDF
The Picture of Dorian Gray summary and depiction
opaliyahemel
 
PDF
Virat Kohli- the Pride of Indian cricket
kushpar147
 
PPTX
family health care settings home visit - unit 6 - chn 1 - gnm 1st year.pptx
Priyanshu Anand
 
The Minister of Tourism, Culture and Creative Arts, Abla Dzifa Gomashie has e...
nservice241
 
Sunset Boulevard Student Revision Booklet
jpinnuck
 
Presentation of the MIPLM subject matter expert Erdem Kaya
MIPLM
 
Antianginal agents, Definition, Classification, MOA.pdf
Prerana Jadhav
 
FSSAI (Food Safety and Standards Authority of India) & FDA (Food and Drug Adm...
Dr. Paindla Jyothirmai
 
HISTORY COLLECTION FOR PSYCHIATRIC PATIENTS.pptx
PoojaSen20
 
Measures_of_location_-_Averages_and__percentiles_by_DR SURYA K.pptx
Surya Ganesh
 
An introduction to Dialogue writing.pptx
drsiddhantnagine
 
Information Texts_Infographic on Forgetting Curve.pptx
Tata Sevilla
 
The-Invisible-Living-World-Beyond-Our-Naked-Eye chapter 2.pdf/8th science cur...
Sandeep Swamy
 
CARE OF UNCONSCIOUS PATIENTS .pptx
AneetaSharma15
 
Phylum Arthropoda: Characteristics and Classification, Entomology Lecture
Miraj Khan
 
How to Close Subscription in Odoo 18 - Odoo Slides
Celine George
 
Python-Application-in-Drug-Design by R D Jawarkar.pptx
Rahul Jawarkar
 
PG-BPSDMP 2 TAHUN 2025PG-BPSDMP 2 TAHUN 2025.pdf
AshifaRamadhani
 
CONCEPT OF CHILD CARE. pptx
AneetaSharma15
 
TEF & EA Bsc Nursing 5th sem.....BBBpptx
AneetaSharma15
 
The Picture of Dorian Gray summary and depiction
opaliyahemel
 
Virat Kohli- the Pride of Indian cricket
kushpar147
 
family health care settings home visit - unit 6 - chn 1 - gnm 1st year.pptx
Priyanshu Anand
 

Ccna 4 final lab switchi

  • 1. ESwitching Basic Switching/Wireless PT Practice SBA A few things to keep in mind while completing this activity: 1. Do not use the browser Back button or close or reload any exam windows during the exam. 2. Do not close Packet Tracer when you are done. It will close automatically. 3. Click the Submit Assessment button to submit your work. Introduction In this practice Packet Tracer Practice Skills Based Assement, you will:  configure VLANs using VTP  configure inter-VLAN routing  modify STP  configure port security  add a wireless LAN
  • 2. Addressing Table Device Interface Address Subnet Mask Default Gateway Branch Fa0/0.40 10.10.40.1 255.255.255.0 n/a Fa0/0.50 10.10.50.1 255.255.255.0 n/a Fa0/0.55 10.10.55.1 255.255.255.0 n/a Fa0/0.80 10.10.80.1 255.255.255.0 n/a WLAN Internet 10.10.80.10 255.255.255.0 10.10.80.1 Wireless 10.10.100.1 255.255.255.0 n/a S1 VLAN 55 10.10.55.11 255.255.255.0 10.10.55.1 S2 VLAN 55 10.10.55.12 255.255.255.0 10.10.55.1 S3 VLAN 55 10.10.55.13 255.255.255.0 10.10.55.1 Staff 1 NIC 10.10.40.10 255.255.255.0 10.10.40.1 Staff 2 NIC 10.10.40.11 255.255.255.0 10.10.40.1 Admin NIC 10.10.50.10 255.255.255.0 10.10.50.1 WRS PC NIC DHCP assigned 255.255.255.0 10.10.100.1 Note: The password for user EXEC mode is cisco. The password for privileged EXEC mode is class. Step 1: Configure the Switches for Remote Access. Create, enable, and address VLAN 55 as the management interface on all three switches. Use the values found in the addressing table. Step 2: Configure Trunking. Note: Packet Tracer now supports the use of the range argument for the interface command. For interfaces FastEthernet 0/1 through FastEthernet 0/4 on all three switches:  Configure static trunking.  Assign VLAN 55 as the native VLAN.
  • 3. S3(config)#interface RAnge fastEthernet 0/1-4 S3(config-if-range)#sw S3(config-if-range)#switchport mod S3(config-if-range)#switchport mode tru S3(config-if-range)#switchport mode trunk %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/2, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4, changed state to down %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/4, changed state to up S3(config-if-range)#sw S3(config-if-range)#switchport tru S3(config-if-range)#switchport trunk S3(config-if-range)#switchport trunk native vl S3(config-if-range)#switchport trunk native vlan 55 S3(config-if-range)#no shu S3(config-if-range)#no shutdown S3(config-if-range)#exit S3(config)# Step 3: Configure VTP and VLANs. a. Configure S1 as VTP server and the following VTP parameters:  S1 is the VTP server.
  • 4.  VTP domain name: BRANCH  VTP password: vtpbranch S1(config)#vtp mode ser S1(config)#vtp mode server Device mode already VTP SERVER. S1(config)#vt S1(config)#vtp dom S1(config)#vtp domain BRANCH Changing VTP domain name from NULL to BRANCH S1(config)#vtp S1(config)#vtp pass S1(config)#vtp password vtpbranch Setting device VLAN database password to vtpbranch b. Create and name the following VLANs on S1.  VLAN 40: Staff  VLAN 50: Admin  VLAN 55: Management  VLAN 80: Wireless S1(config)#vl S1(config)#vlan 40 S1(config-vlan)#na S1(config-vlan)#name Staff S1(config-vlan)#exit S1(config)#vl S1(config)#vlan 50 S1(config-vlan)#na S1(config-vlan)#name Admin S1(config-vlan)#vl S1(config-vlan)#exit S1(config)#vl S1(config)#vlan 55 %LINK-5-CHANGED: Interface Vlan55, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan55, changed state to up S1(config-vlan)#na S1(config-vlan)#name Management S1(config-vlan)#exit S1(config)#vl S1(config)#vlan 88 S1(config-vlan)#nam S1(config-vlan)#name Wireless S1(config-vlan)#exit S1(config)#exit S1#
  • 5. c. Configure S2 and S3 as VTP clients to participate in the BRANCH VTP domain. S2(config)#vtp mod S2(config)#vtp mode cli S2(config)#vtp mode client Setting device to VTP CLIENT mode. S2(config)#vt S2(config)#vtp pass S2(config)#vtp dom S2(config)#vtp domain BRANCH Domain name already set to BRANCH. S2(config)#vtp S2(config)#vtp pass S2(config)#vtp password vtpbranch Setting device VLAN database password to vtpbranch S2(config)# %LINK-5-CHANGED: Interface Vlan55, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan55, changed state to up S2(config)#exot ^ % Invalid input detected at '^' marker. S2(config)# S2(config)#exit S2# S3(config)#vtp mod S3(config)#vtp mode cli S3(config)#vtp mode client Setting device to VTP CLIENT mode. S3(config)#vtp S3(config)#vtp bran S3(config)#vtp doma S3(config)#vtp domain BRANCH Domain name already set to BRANCH. S3(config)#vtp S3(config)#vtp pass S3(config)#vtp password vtpbranch Setting device VLAN database password to vtpbranch S3(config)# %LINK-5-CHANGED: Interface Vlan55, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan55, changed state to up
  • 6. S3(config)#exit S3# %SYS-5-CONFIG_I: Configured from console by console S3# d. Verify that VTP is operational. S3#ping 10.10.55.13 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.55.13, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 0/1/2 ms S3#ping 10.10.55.12 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.55.12, timeout is 2 seconds: ..!!! Success rate is 60 percent (3/5), round-trip min/avg/max = 8/8/8 ms S3#ping 10.10.55.11 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.55.11, timeout is 2 seconds: ..!!! Success rate is 60 percent (3/5), round-trip min/avg/max = 4/4/4 ms S3# Step 4: Configure Interfaces for VLAN Access VLAN port assignments on each switch are as follows:
  • 7. Device Ports Assignment S2, S3 Fa0/1 – 0/10 40 S2, S3 Fa0/11 – 0/17 50 S3 Fa0/18 80 a. Configure access ports on access layer switches.  Configure the appropriate interfaces on S2 and S3 for access mode.  Assign VLANs according to the port assignments table. b. Verify trunking and VLAN assignments. S3(config)#inter S3(config)#interface fa S3(config)#interface fastEthernet 0/6 S3(config-if)#sw S3(config-if)#switchport mod S3(config-if)#switchport mode acc S3(config-if)#switchport mode access S3(config-if)#swe S3(config-if)#sw S3(config-if)#switchport acc S3(config-if)#switchport access vl S3(config-if)#switchport access vlan 40 S3(config-if)#no shu S3(config-if)#no shutdown S3(config-if)#exit Step 5: Configure Spanning Tree. a. Modify STP root bridge elections.  Using a priority of 12288, set S1 as the root bridge for all VLANs.  Using a priority of 16384, set S2 so that it will become the root for all VLANs if S1 fails. b. Verify the spanning tree election. S1(config)#spanning-tree vlan 1-99 priority 12288 S1(config)#spanning-tree vlan 1-99 prio S1(config)#spanning-tree vlan 1-99 root pri S1(config)#spanning-tree vlan 1-99 root primary S1(config)# S1(config)# S2(config)#spanning-tree vlan 1-99 priority 16384 S2(config)#spanning-tree vlan 1-99 root secondary S2(config)#exit
  • 8. Step 6: Configure Inter-VLAN Routing.  Use the information in the Addressing Table to configure Branch for inter-VLAN routing. Be sure to designate the native VLAN.  Verify inter-VLAN routing. S1(config)#interface fastEthernet 0/5 S1(config-if)#sw S1(config-if)#switchport mod S1(config-if)#switchport mode trunk S1(config-if)#no shu S1(config-if)#no shutdown S1(config-if)#exit BRANCH(config)#inter BRANCH(config)#interface fa BRANCH(config)#interface fastEthernet 0/0.40 BRANCH(config-subi f)#ip add BRANCH(config-subi f)#ip address 10.10.40.1 255.255.255.0 BRANCH(config-subi f)#encap BRANCH(config-subi f)#encapsulation do BRANCH(config-subi f)#encapsulation dot1Q 40 BRANCH(config-subi f)#no sh BRANCH(config-subi f)#no shutdown BRANCH(config-subi f)#exit BRANCH(config)#interface fastEthernet 0/0.50 BRANCH(config-subi f)#ip add BRANCH(config-subi f)#ip address 10.10.50.1 255.255.255.0 BRANCH(config-subi f)#encap BRANCH(config-subi f)#encapsulation do BRANCH(config-subi f)#encapsulation dot1Q 50 BRANCH(config-subi f)#no shu BRANCH(config-subi f)#no shutdown BRANCH(config-subi f)#exit BRANCH(config)#inter BRANCH(config)#interface fa BRANCH(config)#interface fastEthernet 0/0.55 BRANCH(config-subi f)#ip add BRANCH(config-subi f)#ip address 10.10.55.1 255.255.255.0 BRANCH(config-subi f)#encap BRANCH(config-subi f)#encapsulation do BRANCH(config-subi f)#encapsulation dot1Q 55 BRANCH(config-subi f)#no shu BRANCH(config-subi f)#no shutdown
  • 9. BRANCH(config-subi f)#exit BRANCH(config)#inter BRANCH(config)#interface fa BRANCH(config)#interface fastEthernet 0/0.80 BRANCH(config-subi f)#ip add BRANCH(config-subi f)#ip address 10.10.80.1 255.255.255.0 BRANCH(config-subi f)#encap BRANCH(config-subi f)#encapsulation do BRANCH(config-subi f)#encapsulation dot1Q 80 BRANCH(config-subi f)#no0 shu BRANCH(config-subi f)#no0 shu Step 7: Configure Port Security. Note: Best practice requires port security on all access ports. However, for this practice exercise you will only configure one port with security. a. Configure S3 with port security on FastEthernet 0/2.  Enable port security.  No more than two MAC addresses are allowed on the FastEthernet 0/2 port for S3.  Once learned, MAC addresses should be automatically added to the running configuration.  If this policy is violated, the port should be automatically disabled. b. Verify that port security is implemented. S2(config-if)#switchport por S2(config-if)#switchport port-security ? mac-address Secure mac address maximum Max secure addresses violation Security violation mode <cr> S2(config-if)#switchport port-security ma S2(config-if)#switchport port-security mac-address sticky S2(config-if)#sw S2(config-if)#switchport por S2(config-if)#switchport port-security max S2(config-if)#switchport port-security maximum 1 S2(config-if)#sw S2(config-if)#switchport por S2(config-if)#switchport port-security vio S2(config-if)#switchport port-security violation ? protect Security violation protect mode restrict Security violation restrict mode shutdown Security violation shutdown mode S2(config-if)#switchport port-security violation sh S2(config-if)#switchport port-security violation shutdown S2(config-if)#no shu S2(config-if)#no shutdown
  • 10. S2(config-if)#exit S2(config)# S2#show port-security interface fastEthernet 0/5 Port Security : Enabled Port Status : Secure-up Violation Mode : Shutdown Aging Time : 0 mins Aging Type : Absolute SecureStatic Address Aging : Disabled Maximum MAC Addresses : 1 Total MAC Addresses : 0 Configured MAC Addresses : 0 Sticky MAC Addresses : 0 Last Source Address:Vlan : 0000.0000.0000:0 Security Violation Count : 0 S2# Step 8: Configure the Wireless LAN. Refer to the Addressing Table to configure the wireless LAN. a. Configure WLAN.  Use static addressing on the Internet interface.  Set the router IP and subnet mask.  Use the DHCP Server Settings to configure the router to provide wireless hosts with an IP address.  The starting IP address in the wireless LAN subnet is 10.10.100.15.  The maximum number of users is 75. b. Configure wireless security.  Set the SSID to Branch_WLAN.  Enable WEP security and use 0123456789 as key1. c. Use branch123 as the remote management password. d. Configure WRS PC to access the wireless network that is provided by WLAN. WRS PC uses DHCP to obtain addressing information. Note: It will not be possible for devices to ping WRS PC since WRS PC is behind the WLAN NAT firewall. Step 9: Verify Connectivity. Although these are not scored, the following connectivity tests should be successful.  S1 can ping Branch. S1# S1#ping 10.10.55.1 Type escape sequence to abort.
  • 11. Sending 5, 100-byte ICMP Echos to 10.10.55.1, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 3/4/5 ms S1#ping 10.10.50.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.50.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 3/4/5 ms S1#ping 10.10.40.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.40.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 2/3/5 ms S1#ping 10.10.80.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.80.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 3/4/5 ms  S2 can ping Branch. S2>ping 10.10.55.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.55.1, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 7/7/8 ms S2>ping 10.10.40.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.40.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 7/8/9 ms S2>ping 10.10.80.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.80.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 7/8/9 ms
  • 12. S2>ping 10.10.50.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.50.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 7/7/9 ms  S3 can ping Branch. S3#ping 10.10.55.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.55.1, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 7/7/9 ms S3#ping 10.10.50.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.50.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 7/8/9 ms S3#ping 10.10.40.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.40.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 7/7/9 ms S3#ping 10.10.80.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.10.80.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 7/7/9 ms S3#  Staff 1 can ping Admin. PC>ipconfig IP Address......................: 10.10.40.10 Subnet Mask.....................: 255.255.255.0 Default Gateway.................: 10.10.40.1 PC>ping 10.10.50.10 Pinging 10.10.50.10 with 32 bytes of data:
  • 13. Reply from 10.10.50.10: bytes=32 time=28ms TTL=127 Reply from 10.10.50.10: bytes=32 time=22ms TTL=127 Reply from 10.10.50.10: bytes=32 time=26ms TTL=127 Reply from 10.10.50.10: bytes=32 time=23ms TTL=127 Ping statistics for 10.10.50.10: Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 22ms, Maximum = 28ms, Average = 24ms PC>10  Admin can ping Staff 2. PC>ipconfig IP Address......................: 10.10.50.10 Subnet Mask.....................: 255.255.255.0 Default Gateway.................: 10.10.50.1 PC>ping 10.10.40.11 Pinging 10.10.40.11 with 32 bytes of data: Request timed out. Reply from 10.10.40.11: bytes=32 time=23ms TTL=127 Reply from 10.10.40.11: bytes=32 time=23ms TTL=127 Reply from 10.10.40.11: bytes=32 time=22ms TTL=127 Ping statistics for 10.10.40.11: Packets: Sent = 4, Received = 3, Lost = 1 (25% loss), Approximate round trip times in milli-seconds: Minimum = 22ms, Maximum = 23ms, Average = 22ms PC>  WRS PC can ping Staff 1. ROUTER AND SWITCH CONFIGURATION: BRANCH#show startup-config Using 808 bytes !
  • 14. version 12.4 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname BRANCH ! ! ! ! interface FastEthernet0/0 no ip address duplex auto speed auto ! interface FastEthernet0/0.40 encapsulation dot1Q 40 ip address 10.10.40.1 255.255.255.0 ! interface FastEthernet0/0.50 encapsulation dot1Q 50 ip address 10.10.50.1 255.255.255.0 ! interface FastEthernet0/0.55 encapsulation dot1Q 55 ip address 10.10.55.1 255.255.255.0 ! interface FastEthernet0/0.80 encapsulation dot1Q 80 ip address 10.10.80.1 255.255.255.0 ! interface FastEthernet0/1 no ip address duplex auto speed auto shutdown ! interface Vlan1 no ip address shutdown ! ip classless ! ! ! ! ! ! ! line con 0 line vty 0 4 login ! ! ! end
  • 15. S1#show running-config Building configuration... Current configuration : 1403 bytes ! version 12.2 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname S1 ! ! spanning-tree vlan 1-99 priority 12288 ! interface FastEthernet0/1 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/2 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/3 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/4 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/5 switchport mode trunk ! interface FastEthernet0/6 switchport mode trunk ! interface FastEthernet0/7 ! interface FastEthernet0/8 ! interface FastEthernet0/9 ! interface FastEthernet0/10 ! interface FastEthernet0/11 ! interface FastEthernet0/12 ! interface FastEthernet0/13 ! interface FastEthernet0/14 ! interface FastEthernet0/15 ! interface FastEthernet0/16 !
  • 16. interface FastEthernet0/17 ! interface FastEthernet0/18 ! interface FastEthernet0/19 ! interface FastEthernet0/20 ! interface FastEthernet0/21 ! interface FastEthernet0/22 ! interface FastEthernet0/23 ! interface FastEthernet0/24 ! interface GigabitEthernet1/1 ! interface GigabitEthernet1/2 ! interface Vlan1 no ip address shutdown ! interface Vlan55 ip address 10.10.55.11 255.255.255.0 ! ip default-gateway 10.10.55.1 ! ! line con 0 ! line vty 0 4 login line vty 5 15 login ! ! end S2#show running-config Building configuration... Current configuration : 1591 bytes ! version 12.2 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname S2 ! ! spanning-tree vlan 1-99 priority 16384 ! interface FastEthernet0/1
  • 17. switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/2 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/3 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/4 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/5 switchport access vlan 50 switchport mode access switchport port-security switchport port-security mac-address sticky switchport port-security mac-address sticky 000D.BD88.A1E5 ! interface FastEthernet0/6 switchport access vlan 40 switchport mode access ! interface FastEthernet0/7 ! interface FastEthernet0/8 ! interface FastEthernet0/9 ! interface FastEthernet0/10 ! interface FastEthernet0/11 ! interface FastEthernet0/12 ! interface FastEthernet0/13 ! interface FastEthernet0/14 ! interface FastEthernet0/15 ! interface FastEthernet0/16 ! interface FastEthernet0/17 ! interface FastEthernet0/18 ! interface FastEthernet0/19 ! interface FastEthernet0/20 ! interface FastEthernet0/21 ! interface FastEthernet0/22 ! interface FastEthernet0/23 !
  • 18. interface FastEthernet0/24 ! interface GigabitEthernet1/1 ! interface GigabitEthernet1/2 ! interface Vlan1 no ip address shutdown ! interface Vlan55 ip address 10.10.55.12 255.255.255.0 ! ip default-gateway 10.10.55.1 ! ! line con 0 ! line vty 0 4 login line vty 5 15 login ! ! end S2# S3#show ru S3#show running-config Building configuration... Current configuration : 1369 bytes ! version 12.2 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname S3 ! ! ! interface FastEthernet0/1 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/2 switchport trunk native vlan 55 switchport mode trunk
  • 19. ! interface FastEthernet0/3 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/4 switchport trunk native vlan 55 switchport mode trunk ! interface FastEthernet0/5 ! interface FastEthernet0/6 switchport access vlan 40 switchport mode access ! interface FastEthernet0/7 ! interface FastEthernet0/8 ! interface FastEthernet0/9 ! interface FastEthernet0/10 ! interface FastEthernet0/11 ! interface FastEthernet0/12 ! interface FastEthernet0/13 ! interface FastEthernet0/14 ! interface FastEthernet0/15 ! interface FastEthernet0/16 ! interface FastEthernet0/17 ! interface FastEthernet0/18 ! interface FastEthernet0/19 ! interface FastEthernet0/20 ! interface FastEthernet0/21 ! interface FastEthernet0/22 ! interface FastEthernet0/23 ! interface FastEthernet0/24 ! interface GigabitEthernet1/1 ! interface GigabitEthernet1/2 ! interface Vlan1 no ip address shutdown ! interface Vlan55
  • 20. ip address 10.10.55.13 255.255.255.0 ! ip default-gateway 10.10.55.1 ! ! line con 0 ! line vty 0 4 login line vty 5 15 login ! ! end