Cisco configuration task
LWWN 2013-2014 Case Study
Section A LANs and WANs Scenario
You have been employed as the network administrator at a new local network academy in North Staffordshire. You investigated the current network and
found it to be as shown in Diagram A below.
Diagram A Initial Configuration
You decide that the router-hub topology has some major flaws in its design. In the light of this you suggest to your manager that you should
implement a router-switch configuration so that VLANs can be used. Between the two of you, you work out the topology in Diagram B below.
Diagram B Proposed Configuration
S0/0 (DCE)S0/0 (DTE)
Switch 2Switch 1
The interface utilization is shown in the table below:
VLAN 100VLAN 10VLAN 20Management IP AddressTrunk
Switch 1All remaining portsFa0/5-6Fa0/7-8192.168.99.1/24Fa0/1, Fa0/2
Switch 2All remaining portsFa0/5-6Fa0/7-8192.168.99.2/24Fa0/1
The VLAN addressing scheme is shown in the table below:
VLANAddress RangeDefault Gateway
Diagram C: Logical Diagram
Diagram D: Physical Diagram
Review the following points before you start this assessment:
You need to supply the configuration files for: Stoke router, Stafford router, Switch 1 and Switch 2.
You do not need access to the devices to start on this assessment. The configuration files can be written in a text editor such as Notepad, then cut
and pasted into the devices so that you can test your configuration.
Basic switch configuration
VLAN configuration on Stafford router
Configure VLANs on the switches
Configure VLAN trunking
Configure switch port security
Configure a serial link
Configure addressing scheme for the scenario
Configure PPP (using CHAP)
Configure access control lists
1.0 Configure serial link(1 mark)
Configure a serial link between Stafford and Stoke. The routing protocol to be used is OSPF.
2.0 VLAN Configuration on Stafford(3 marks)
Configure the Stafford Fa0/0 interface to trunk for VLAN 99, VLAN 10, and VLAN 20 with 802.1Q encapsulation.
3.0 Basic Switch Configuration(3 marks)
Use the following IP addresses to configure the switches:
Configure Switch 1 with the VLAN 1 IP address of 192.168.99.1/24.
Configure Switch 2 with the VLAN 1 IP address of 192.168.99.2/24.
Configure both switches with the default gateway address of 192.168.99.254.
4.0 Configure VLANs on the Switches
Use the following values to configure VLANs on Switch 1:(4 marks)
On Switch 1 configure the interfaces Fa0/5 and Fa0/6 on VLAN 10.
On Switch 1 configure the interfaces Fa0/7 and Fa0/8 on VLAN 20.
All other unused interfaces on Switch 1 are in VLAN100.
Use the following values to configure VLANs on Switch 2: (4 marks)
On Switch 2 configure the interfaces Fa0/5 and Fa0/6 on VLAN 10.
On Switch 2 configure the interfaces Fa0/7 and Fa0/8 on VLAN 20.
All other unused interfaces on Switch 2 are in VLAN 100.
5.0 Configure VLAN Trunking(2 marks)
Use the following values to configure VLAN trunking on Switch 1 and 2:
Configure trunking between Switch 1 and Switch 2 with 802.1Q encapsulation using port Fa0/1 on both switches only allowing relevant VLANs.
Configure Switch 1 for trunking between Switch 1 and Stafford with 802.1Q encapsulation using port Fa0/2 only allowing relevant VLANs.
6.0 Configure VTP(6 marks)
Use the following values to configure VTP on Switch 1 and 2:
Configure both Switch 1 and Switch 2 as part of VTP domain Group1.
Configure Switch 1 as the VTP server and Switch 2 as the VTP client.
Create VLAN 10 with the name staff.
Create VLAN 20 with the name student.
Please note: some of the VTP configuration commands may not show when looking at the running-configuration. Therefore to provide proof that these
have been configured please include screen outputs using suitable show commands.
7.0 Configure Switch Port Security(8 marks)
Configure port security on ports Fa0/5 to Fa0/8 inclusive to allow only two hosts. If the port security is violated change the status to protected.
All unused ports are to be assigned to VLAN 100, and shut down.
8.0 Verify Port Security(3 marks)
Use the proper show command to verify the following port security settings:
Port security is enabled.
Maximum MAC addresses
9.0 Verify VLAN configuration(2 marks)
Use suitable show commands to verify the VLAN configuration for switch 1 and 2.
10.0 Router Configuration
Basic configuration of the three routers completed (6 marks)
Addressing scheme as shown in figure B applied across all of the routers (6 marks)
Configure OSPF to operate between the Stafford and Stoke routers using the correct
wildcard masks for the range (4 marks)
Using OSPF to advertise the serial interface to ISP as the default route for the network (2 marks)
Configure PPP between the Stoke and ISP router (2 marks)
Configure PPP CHAP authentication across the link between Stoke and ISP routers using the password of cisco on both (4 marks)
Create DHCP pools on the Stafford router for the VLANs 10 and 20 (4 marks)
Exclude the first 5 addresses of each range (2 marks)
Allocate the correct default-gateway for each range (2 marks)
Allocate the DNS server address of 192.168.X.3 for each range where X is the VLAN
Number (2 marks)
13.0 NAT – Network/Port Address Translation
Translate all valid IP addresses at the Stoke router which are being sent towards ISP. The translation range is 18.104.22.168/30 (8 marks)
On ISP use a static route to return only the 22.214.171.124/30 range to the Stoke router
14.0 Access Control Lists
Only allow devices from the management range 192.168.99.0/24 access to telnet to the routers (6 marks)
Configure the following ACL for the LANs (8 marks)
Deny VLAN 10 access to FTP services
Permit all other VLAN 10 traffic
Deny VLAN 20 access to HTTP services
Permit all other VLAN 20 traffic
VLAN 99 should be allowed access to all locations and protocols
15.0 Verify Connectivity(6 marks)
All routers and switches should be able to ping the interfaces of the other devices. Submit suitable screen dumps showing this.
16.0 Report (25 marks)
You need to supply a report explaining the reasons behind moving to a router- switch configuration, and discussing the advantages and disadvantages
of using VLANs in this scenario (1500 words). Your report needs to include the complete configurations for all your routers and switches.