Student id is 103393570 follow the rules and help me type out each configuration step by step thanks urgent deadline in
Posted: Mon May 02, 2022 12:05 pm
Student id is 103393570 follow the rules and help me type out
each configuration step by step thanks urgent deadline in 3 more
hrs
InLabScenariot_RIP_S2_2021_V1.0.pptx In Lab Scenario 1 RIP Routing Protocol - V1.0 A Network Configuration and Trouble Shooting Scenario Network Topology "The Internet Loopback 0 Server LAN Database Server S0/1/1 S0/1/1 SO/1/0 Tandur (Internal) Router R1 Sedam (Gateway) Router R2 ISP Router R3 S0/110 Loopback o 181.25.0.0/16 External Web Server 1 Loopback 1 22.0.0.0/8 External Web Server 2 Loopback 2 155.2.0.0/16 External Web Server 3 Loopback 3 211.31.8.0/24 External Web Server 4 Internal Serial ISP Link Network Address 201.24.4W.0/30 G0/0/1 External All other web sites etc Internal Trunk for Inter-VLAN Routing RIPv2 Routing Protocol Corporate Network Address 158.VZ.0.0/16 G1/0/11 G1/0/1 Tandur VLAN1 Switch S3 3650 WRS1 G1/0/13 G1/0/24 Wireless Internet Router Port VLAN1 PC1 PC2 IP Wireless VLANXXX VLANYYY address Connection Mobile Wireless PC Ethernet PC VAN PC VM VM If in lab If in lab
How to determine your Network Addresses and VLAN Numbers Rule Set A Network Addresses eg student ld Nine digit Id 123057210 (from Left to right) If Seven digit Id 3057210 then 993057210 (from Left to Right) Rule 1: If the Corporate Network Address is 158.v2.0.0/16 where Vis seventh number and Z is last number in your student ID 103393570 V=2 and Z=0, hence 158.20.0.0/16 is your Corporate Network Address Rule 2: If the ISP Link Address is 201.24.4W.0/30 where W is eighth number in your student ID W=1, hence 201.24.41.0 is your ISP Link Address VLAN Numbers – (Example Only, use your Student ID) eg student ld Nine digit Id 123057210 (from Left to Right) If Seven digit Id 3057210 then 993057210 (from Left to Right) Rule 1: VLAN XXX where XXX are the last three numbers in you student ID Rule 2: VLAN YYY where YYY are the middle three numbers in you student ID Rule 3: IF XXX = YYY then XXX = XXX + 1 Rule 4: VLAN 256, IF XXX or YYY = 256 then 256 - 3 = 253 Appling Rules • Rule 1: VLAN XXX : XXX= 210 hence VLAN210 • Rule 2: VLAN YYY: YYY=057 hence VLAN57 • Rule 3: No need to apply Rule 4: No need to apply 1 .
. Scenario 1 -Tasks 1. Do not configure enable passwords OR line console passwords on router and switches, unless specified by the task 2. Internal Network VLSM Design - Paste in page 7 a) IP VLSM Addressing Scheme and VLAN names and numbers: Refer rules page 6 to determine XXX and YYY VLAN XXX French 600 hosts VLAN YYY English 100 hosts VLAN 256 Hindi 50 hosts (256 may change, refer rules page 5) VLAN 1 18 hosts Internal Serial 2 hosts Sedam Database Server LAN loopback 0 40 hosts b) Document assignment of ip addresses to router interfaces and PC Hosts c) Use the VL SM Calculator 3. Cable Connections - Refer Network Topology Diagram a) Connect Tandur router interface G0/0/1 to Tandur switch port G1/0/11 b) Check routers are connected via serial links c) Connect PC1 to G1/0/13 (In Lab use the patch panel), connect PC2 to G1/0/24 (In Lab use the VAN) 4. Helpful Configurations a) Configure the line console on each router and switch, as shown below: line console 0 logging synchronous (stops system messages overwriting your typing) exec-timeout 00 (ensures you do not return to user executive mode) b) Turn off DNS (Domain Name Service) no ip domain-lookup (ensures if you miss-type a command, the router will not try to resolve the command as a URL web address) 5. Message of the Day (MOTD) Banner Configuration Configure a MOTD Banner, recording your student id, family name and lab time, on all routers and switches, as shown below: banner motd & Welcome to Hostname Your Student Id, Your Family Name, Your Session Time & 6. Device Host Names a) All devices must be configured with a host name eg TandurR1, Tandurs1 etc
Scenario 1 -Tasks 7. Switch Configuration 53 3650 a) Refer to pages 16 to 19 and to your journal and lab exercises from prior unit on Basic Switch and VLAN Configuration b) Check the switch is clean, if NOT then: i) Delete the vlan.dat file to remove old VLANs from the Switch, use - delete vlan.dat ii) Use - erase startup-config then reload c) Create VLAN XXX French, VLAN YYY English, VLAN 256 Hindi (256 may change, refer rules page 6) d) Configure G1/0/11 as a trunk port e) Configure as access ports, only VLAN XXX ports G1/0/13, G1/0/14 and VLAN YYY port G1/0/24 f) Switch Management - configure an ip address on interface VLAN1 and configure a default gateway IP address g) Configure enable password cisco and Line vty with password cisco and login, so the switch can be accessed via Telnet h) Configure Port Security only for VLAN XXX, mac address sticky on ports G1/0/13, G1/0/14 max 4, with violation protect i) If In Lab Kit - Configure a static mac address on G1/0/24 use the MAC address of PC2 j) If Packet Tracer - configure Port Security, mac address sticky on G1/0/24 max 1, with violation shutdown 8. Trouble Shooting VLANS a) To check VLANs created, use - show vlan brief 9. Trouble Shooting Port Security a) To check port security is enabled, use - show port-security b) A table will be displayed showing the security status of the switch ports 10. Network IP Address Configuration a) Configure ALL router serial and loopback interfaces with ip addresses and descriptions b) Tandur Router 1) Refer page 15 and to your journal and lab exercises from prior unit on Basic Inter-VLAN Routing ii) Configure Inter-VLAN routing on GO/0/1 Configure separate sub-interfaces for VLAN 1 (the management VLAN) and VLANs XXX and YYY Configure each sub-interface with an ip address and description c) Configure PC1 and PC2 Hosts with specified VLAN 1) IP address and subnet mask. ii) Default Gateway IP address d) Check default gateway configured on switch to Tandur router, use VLAN1 G0/0/1.1 sub-interface ip address 11. Trouble Shooting Trunking - between Switch and Router a) To check Trunking is activated, on switch(es), use - show interface trunk b) Check correct interface has been configured for trunking! 9
Scenario 1 -Tasks 12. Trouble Shooting Point-to-Point Single Link Testing a) This test is to check that each individual link in the network is working. b) Ping (command) - ensure you can ping from one end of each link to the other: PC to Router in same subnet/VLAN/network. PC to PC in same subnet/VLAN/network. Router to each direct neighbour Router over a serial link. c) Link NOT working ? - Common problems: Physical connection not made. The clock rate is not configured on DCE interface of a serial link. An incorrect IP address or subnet mask is configured on one interface of a link The interface is shutdown. 13. Trouble Shooting Inter-VLAN Routing Test a) This test is to check Inter-VLAN routing is working b) Ping PC1 - VLANXXX to PC2-VLANYYY c) Telnet PC1 to the switch S3 d) Check IP address/Mac address mapping on the router, show arp 14. Routing Protocol Configuration (refer pages 13,14) a) Tandur RIP V2 Configure passive-interface as appropriate to avoid sending unnecessary routing information b) Sedam RIP V2, do not advertise the external network address Configure passive-interface as appropriate to avoid sending unnecessary routing information Configure default route to ISP Router Advertise default route to Tandur Router c) ISP Router Do not configure RIP Only configure a static route (default class B mask) to your internal network Configure loopbacks to simulate 'The Internet 10
Scenario 1 -Tasks 15. Trouble Shooting Routing - Presence of Subnets a) Internal Routers - Use show ip route to display the routing table on each router. - Check all the subnets are present - Check there is a default route b) External Router - Use show ip route to display the routing table: - Check there is static route back to your internal network c) Common problems: Routing protocol is not advertising a subnet An interface is down Static or Default route not configured 16. Trouble Shooting End-to-End Path Testing a) This test is to check that the routing - static and dynamic, is working. b) Ping from PC Hosts in VLAN XXX and VLAN YYY to External Web Servers - The Internet c) Use traceroute to pin point problems. d) Use debug ip icmp on ISP router to check ping request arrives e) Check if a subnet is missing from a routing table, use - show ip route f) End-to-End Path Test Failed ? - Common problems: Default gateway IP address not configured on a PC. PC connected to incorrect interface. Incorrect static route on ISP Subnet not advertised Default route not propagated/Gateway of last resort not set
Scenario 1 -Tasks 17. Wireless Router Configuration a) You will configure a Wireless Router and connect it to the fixed network infrastructure. b) Refer to page 23 and Wireless Supporting Material c) On WRS1 Wireless Router configure: D) Internet Port with VLAN 1 IP address ii) SSID as W<student id> iii) DHCP to provide addresses for Wireless LAN PCs and your Mobile Phone iv) allow inbound ping requests v) Do not configure wireless security d) Connect a straight through UTP cable between Tandur Switch S3 G1/0/1 (port in VLAN1) and Internet Port (in VLAN1) on Wireless Router e) VLAN 1 will carry wireless traffic f) On ISP Router use - debug ip icmp g) Configure a wireless end device to ping the Internet h) From Wireless End Device, Ping the Internet
RIP V2 Configuration Configure on Tandur Router router rip (The routing protocol)) version 2 (Version 2 supports VLSM) network 158.VZ.0.0 (Advertise the internal network) passive-interface G0/0/1.1 (Do not send routing updates to VLAN subnets) passive-interface GO/0/1.XXX passive-interface GO/O/1.YYY Configure on Sedam Router (the gateway router) ip route 0.0.0.0 0.0.0.0 S0/1/1 (Configure the default route to the Internet) router rip version 2 network 158.VZ.0.0 default-information originate (Advertise default route to other internal routers) Configure on ISP Router (RIP is not configured on ISP) ip route 158.v2.0.0 255.255.0.0 S0/1/1 (ISP configure a static route to company's network)
Inter-VLAN Routing Configuration Configure on the required Router interface G0/0/1 description The Physical Interface no shutdown interface G0/0/1.1 description A logical Sub Interface description VLAN 1 VLAN Management encapsulation dot1q 1 ip address <dotted decimal> <subnet mask> interface G0/0/1.<vlan id> description A logical Sub Interface description VLAN <vlan Id> <vlan name> encapsulation dot1q <ylan id> ip address <dotted decima> <subnet mask> etc .....
Switch Configuration Configure VLANS vlan XXX name French vlan YYY name English vlan 256 (256 may change, refer rules page 7) name Hindi Configure IP address for management vlan 1 interface vlan 1 ip address <ip address> <mask> (This allows the switch to be configured remotely via Telnet) Configure Default Gateway ip default-gateway <ip address of router interface> (Use VLAN 1 subinterface IP address)
Switch Configuration Configure a switch ACCESS port (note you can specify a range of switch ports): interface Fa0/3 (or interface range Fa0/3 - 5) switchport access vlan <number> (assigns port to a vlan) switchport mode access (sets port to access, for PCs) switchport port-security (enables port security, do not forget this command) switchport port-security maximum 1 (maximum of 1 mac address(es) can stick) switchport port-security mac-address sticky switchport port-security violation shutdown (shuts down port, default when security turned on) OR switchport port-security violation protect (protects, but does not shut down the port) Configure a static MAC address entry in Mac Address Table mac address-table static AAAA.BBBB.CCC vlan YYY interface Fa0/24 (replace AAAA.BBBB.CCCC with the mac address of the PC)
Switch Configuration Configure a switch TRUNK port on a Switch 2960 Series Switch interface G0/1 switchport mode trunk (sets port to trunk) 3650 Series Switch interface G1/0/11 switchport trunk encapsulation dot1q (must specify 802.1q encapsulation) switchport mode trunk (sets port to trunk) 3560 Series Switch interface Fa0/1 switchport trunk encapsulation dot1q (must specify 802.1q encapsulation) switchport mode trunk (sets port to trunk)
Switch Commands Managing the MAC Address Table · show mac address-table (displays entries in table) ) show mac address-table dynamic (displays only dynamic entries in table) clear mac address-table (deletes all entries from table) clear mac address-table dynamic (deletes only dynamic entries from table) Re-activating a switch port that has been violated . When a violation causes a switch port to block traffic, it must be re-activated This is achieved by doing a shutdown then a no shutdown on the switch port, refer example below: interface Fa0/10 shutdown (wait until shutdown confirmed) no shutdown
each configuration step by step thanks urgent deadline in 3 more
hrs
- Student Id Is 103393570 Follow The Rules And Help Me Type Out Each Configuration Step By Step Thanks Urgent Deadline In 1 (60.95 KiB) Viewed 38 times
- Student Id Is 103393570 Follow The Rules And Help Me Type Out Each Configuration Step By Step Thanks Urgent Deadline In 2 (55.88 KiB) Viewed 38 times
How to determine your Network Addresses and VLAN Numbers Rule Set A Network Addresses eg student ld Nine digit Id 123057210 (from Left to right) If Seven digit Id 3057210 then 993057210 (from Left to Right) Rule 1: If the Corporate Network Address is 158.v2.0.0/16 where Vis seventh number and Z is last number in your student ID 103393570 V=2 and Z=0, hence 158.20.0.0/16 is your Corporate Network Address Rule 2: If the ISP Link Address is 201.24.4W.0/30 where W is eighth number in your student ID W=1, hence 201.24.41.0 is your ISP Link Address VLAN Numbers – (Example Only, use your Student ID) eg student ld Nine digit Id 123057210 (from Left to Right) If Seven digit Id 3057210 then 993057210 (from Left to Right) Rule 1: VLAN XXX where XXX are the last three numbers in you student ID Rule 2: VLAN YYY where YYY are the middle three numbers in you student ID Rule 3: IF XXX = YYY then XXX = XXX + 1 Rule 4: VLAN 256, IF XXX or YYY = 256 then 256 - 3 = 253 Appling Rules • Rule 1: VLAN XXX : XXX= 210 hence VLAN210 • Rule 2: VLAN YYY: YYY=057 hence VLAN57 • Rule 3: No need to apply Rule 4: No need to apply 1 .
. Scenario 1 -Tasks 1. Do not configure enable passwords OR line console passwords on router and switches, unless specified by the task 2. Internal Network VLSM Design - Paste in page 7 a) IP VLSM Addressing Scheme and VLAN names and numbers: Refer rules page 6 to determine XXX and YYY VLAN XXX French 600 hosts VLAN YYY English 100 hosts VLAN 256 Hindi 50 hosts (256 may change, refer rules page 5) VLAN 1 18 hosts Internal Serial 2 hosts Sedam Database Server LAN loopback 0 40 hosts b) Document assignment of ip addresses to router interfaces and PC Hosts c) Use the VL SM Calculator 3. Cable Connections - Refer Network Topology Diagram a) Connect Tandur router interface G0/0/1 to Tandur switch port G1/0/11 b) Check routers are connected via serial links c) Connect PC1 to G1/0/13 (In Lab use the patch panel), connect PC2 to G1/0/24 (In Lab use the VAN) 4. Helpful Configurations a) Configure the line console on each router and switch, as shown below: line console 0 logging synchronous (stops system messages overwriting your typing) exec-timeout 00 (ensures you do not return to user executive mode) b) Turn off DNS (Domain Name Service) no ip domain-lookup (ensures if you miss-type a command, the router will not try to resolve the command as a URL web address) 5. Message of the Day (MOTD) Banner Configuration Configure a MOTD Banner, recording your student id, family name and lab time, on all routers and switches, as shown below: banner motd & Welcome to Hostname Your Student Id, Your Family Name, Your Session Time & 6. Device Host Names a) All devices must be configured with a host name eg TandurR1, Tandurs1 etc
Scenario 1 -Tasks 7. Switch Configuration 53 3650 a) Refer to pages 16 to 19 and to your journal and lab exercises from prior unit on Basic Switch and VLAN Configuration b) Check the switch is clean, if NOT then: i) Delete the vlan.dat file to remove old VLANs from the Switch, use - delete vlan.dat ii) Use - erase startup-config then reload c) Create VLAN XXX French, VLAN YYY English, VLAN 256 Hindi (256 may change, refer rules page 6) d) Configure G1/0/11 as a trunk port e) Configure as access ports, only VLAN XXX ports G1/0/13, G1/0/14 and VLAN YYY port G1/0/24 f) Switch Management - configure an ip address on interface VLAN1 and configure a default gateway IP address g) Configure enable password cisco and Line vty with password cisco and login, so the switch can be accessed via Telnet h) Configure Port Security only for VLAN XXX, mac address sticky on ports G1/0/13, G1/0/14 max 4, with violation protect i) If In Lab Kit - Configure a static mac address on G1/0/24 use the MAC address of PC2 j) If Packet Tracer - configure Port Security, mac address sticky on G1/0/24 max 1, with violation shutdown 8. Trouble Shooting VLANS a) To check VLANs created, use - show vlan brief 9. Trouble Shooting Port Security a) To check port security is enabled, use - show port-security b) A table will be displayed showing the security status of the switch ports 10. Network IP Address Configuration a) Configure ALL router serial and loopback interfaces with ip addresses and descriptions b) Tandur Router 1) Refer page 15 and to your journal and lab exercises from prior unit on Basic Inter-VLAN Routing ii) Configure Inter-VLAN routing on GO/0/1 Configure separate sub-interfaces for VLAN 1 (the management VLAN) and VLANs XXX and YYY Configure each sub-interface with an ip address and description c) Configure PC1 and PC2 Hosts with specified VLAN 1) IP address and subnet mask. ii) Default Gateway IP address d) Check default gateway configured on switch to Tandur router, use VLAN1 G0/0/1.1 sub-interface ip address 11. Trouble Shooting Trunking - between Switch and Router a) To check Trunking is activated, on switch(es), use - show interface trunk b) Check correct interface has been configured for trunking! 9
Scenario 1 -Tasks 12. Trouble Shooting Point-to-Point Single Link Testing a) This test is to check that each individual link in the network is working. b) Ping (command) - ensure you can ping from one end of each link to the other: PC to Router in same subnet/VLAN/network. PC to PC in same subnet/VLAN/network. Router to each direct neighbour Router over a serial link. c) Link NOT working ? - Common problems: Physical connection not made. The clock rate is not configured on DCE interface of a serial link. An incorrect IP address or subnet mask is configured on one interface of a link The interface is shutdown. 13. Trouble Shooting Inter-VLAN Routing Test a) This test is to check Inter-VLAN routing is working b) Ping PC1 - VLANXXX to PC2-VLANYYY c) Telnet PC1 to the switch S3 d) Check IP address/Mac address mapping on the router, show arp 14. Routing Protocol Configuration (refer pages 13,14) a) Tandur RIP V2 Configure passive-interface as appropriate to avoid sending unnecessary routing information b) Sedam RIP V2, do not advertise the external network address Configure passive-interface as appropriate to avoid sending unnecessary routing information Configure default route to ISP Router Advertise default route to Tandur Router c) ISP Router Do not configure RIP Only configure a static route (default class B mask) to your internal network Configure loopbacks to simulate 'The Internet 10
Scenario 1 -Tasks 15. Trouble Shooting Routing - Presence of Subnets a) Internal Routers - Use show ip route to display the routing table on each router. - Check all the subnets are present - Check there is a default route b) External Router - Use show ip route to display the routing table: - Check there is static route back to your internal network c) Common problems: Routing protocol is not advertising a subnet An interface is down Static or Default route not configured 16. Trouble Shooting End-to-End Path Testing a) This test is to check that the routing - static and dynamic, is working. b) Ping from PC Hosts in VLAN XXX and VLAN YYY to External Web Servers - The Internet c) Use traceroute to pin point problems. d) Use debug ip icmp on ISP router to check ping request arrives e) Check if a subnet is missing from a routing table, use - show ip route f) End-to-End Path Test Failed ? - Common problems: Default gateway IP address not configured on a PC. PC connected to incorrect interface. Incorrect static route on ISP Subnet not advertised Default route not propagated/Gateway of last resort not set
Scenario 1 -Tasks 17. Wireless Router Configuration a) You will configure a Wireless Router and connect it to the fixed network infrastructure. b) Refer to page 23 and Wireless Supporting Material c) On WRS1 Wireless Router configure: D) Internet Port with VLAN 1 IP address ii) SSID as W<student id> iii) DHCP to provide addresses for Wireless LAN PCs and your Mobile Phone iv) allow inbound ping requests v) Do not configure wireless security d) Connect a straight through UTP cable between Tandur Switch S3 G1/0/1 (port in VLAN1) and Internet Port (in VLAN1) on Wireless Router e) VLAN 1 will carry wireless traffic f) On ISP Router use - debug ip icmp g) Configure a wireless end device to ping the Internet h) From Wireless End Device, Ping the Internet
RIP V2 Configuration Configure on Tandur Router router rip (The routing protocol)) version 2 (Version 2 supports VLSM) network 158.VZ.0.0 (Advertise the internal network) passive-interface G0/0/1.1 (Do not send routing updates to VLAN subnets) passive-interface GO/0/1.XXX passive-interface GO/O/1.YYY Configure on Sedam Router (the gateway router) ip route 0.0.0.0 0.0.0.0 S0/1/1 (Configure the default route to the Internet) router rip version 2 network 158.VZ.0.0 default-information originate (Advertise default route to other internal routers) Configure on ISP Router (RIP is not configured on ISP) ip route 158.v2.0.0 255.255.0.0 S0/1/1 (ISP configure a static route to company's network)
Inter-VLAN Routing Configuration Configure on the required Router interface G0/0/1 description The Physical Interface no shutdown interface G0/0/1.1 description A logical Sub Interface description VLAN 1 VLAN Management encapsulation dot1q 1 ip address <dotted decimal> <subnet mask> interface G0/0/1.<vlan id> description A logical Sub Interface description VLAN <vlan Id> <vlan name> encapsulation dot1q <ylan id> ip address <dotted decima> <subnet mask> etc .....
Switch Configuration Configure VLANS vlan XXX name French vlan YYY name English vlan 256 (256 may change, refer rules page 7) name Hindi Configure IP address for management vlan 1 interface vlan 1 ip address <ip address> <mask> (This allows the switch to be configured remotely via Telnet) Configure Default Gateway ip default-gateway <ip address of router interface> (Use VLAN 1 subinterface IP address)
Switch Configuration Configure a switch ACCESS port (note you can specify a range of switch ports): interface Fa0/3 (or interface range Fa0/3 - 5) switchport access vlan <number> (assigns port to a vlan) switchport mode access (sets port to access, for PCs) switchport port-security (enables port security, do not forget this command) switchport port-security maximum 1 (maximum of 1 mac address(es) can stick) switchport port-security mac-address sticky switchport port-security violation shutdown (shuts down port, default when security turned on) OR switchport port-security violation protect (protects, but does not shut down the port) Configure a static MAC address entry in Mac Address Table mac address-table static AAAA.BBBB.CCC vlan YYY interface Fa0/24 (replace AAAA.BBBB.CCCC with the mac address of the PC)
Switch Configuration Configure a switch TRUNK port on a Switch 2960 Series Switch interface G0/1 switchport mode trunk (sets port to trunk) 3650 Series Switch interface G1/0/11 switchport trunk encapsulation dot1q (must specify 802.1q encapsulation) switchport mode trunk (sets port to trunk) 3560 Series Switch interface Fa0/1 switchport trunk encapsulation dot1q (must specify 802.1q encapsulation) switchport mode trunk (sets port to trunk)
Switch Commands Managing the MAC Address Table · show mac address-table (displays entries in table) ) show mac address-table dynamic (displays only dynamic entries in table) clear mac address-table (deletes all entries from table) clear mac address-table dynamic (deletes only dynamic entries from table) Re-activating a switch port that has been violated . When a violation causes a switch port to block traffic, it must be re-activated This is achieved by doing a shutdown then a no shutdown on the switch port, refer example below: interface Fa0/10 shutdown (wait until shutdown confirmed) no shutdown