Switching/Wireless PT Practice SBA 172.

16 Set ============================= Note:The password for user EXEC mode is cisco The password for privileged EXEC mode is class Step 1: Connect the Devices. =============================== Use the appropriate cable type to make the following connections: SW_AC2 SW_AC2 SW_AC2 SW_AC2 SW_AC3 FastEthernet FastEthernet FastEthernet FastEthernet FastEthernet 0/1 to PC1FastEthernet 0/11 to PC2FastEthernet 0/19 to SW_AC3 FastEthernet 0/19 0/20 to SW_AC3 FastEthernet 0/20 0/18 to WRSInternet

Step 2: Configure the Device Basics. ================================== a. Configure the following on SW_AC2. The switch name is SW_AC2 ---------------------Switch>enable Switch#configure terminal Switch(config)#hostname SW_AC2 SW_AC2(config)# The privileged EXEC mode uses the following encrypted password:class ---------------------SW_AC2(config)#enable password class Enable Telnet and console line login using the following password:cisco --------------------------SW_AC2(config)#line vty 0 SW_AC2(config-line)#password cisco SW_AC2(config-line)#login SW_AC2(config-line)#exit SW_AC2(config)#line console 0 SW_AC2(config-line)#login SW_AC2(config-line)#password cisco SW_AC2(config-line)#exit Configure the banner message-of-the-day as Authorized access only! -------------------SW_AC2(config)#banner motd #Authorized access only!# SW_AC2(config)# b. To configure the switches for remote management access, create and enable interf ace VLAN 43 on all three switches. ---------------------------------------SW_DS1 ======= SW_DS1(config)#interface vlan 43

SW_DS1(config-if)#ip address 172.16.43.11 255.255.255.0 SW_DS1(config-if)#no shutdown SW_DS1(config-if)#exit SW_DS1(config)#ip default-gateway 172.16.43.1 SW_AC2 ===== SW_AC2(config)#interface vlan 43 SW_AC2(config-if)#ip address 172.16.43.12 255.255.255.0 SW_AC2(config-if)#no shutdown SW_AC2(config-if)#exit SW_AC2(config)#ip default-gateway 172.16.43.1 SW_AC3 ====== SW_AC3(config)#interface vlan 43 SW_AC3(config-if)#ip address 172.16.43.13 255.255.255.0 SW_AC3(config-if)#no shutdown SW_AC3(config-if)#exit SW_AC3(config)#ip default-gateway 172.16.43.1 Step 3: Configure Trunking. =========================== Note:Packet Tracer now supports the use of the range argument for the interface command. For interfaces FastEthernet 0/19 through FastEthernet 0/24 on all three switches : Configure static trunking. ---------------------SW_DS1 ====== SW_DS1(config)#interface range fastEthernet 0/19-24 SW_DS1(config-if-range)#switchport mode trunk SW_DS1(config-if-range)#switchport trunk native vlan 43 SW_DS1(config-if-range)#no shutdown SW_DS1(config-if-range)#exit Assign VLAN 43 as the native VLAN. ------------------------------SW_AC2 ===== SW_AC2(config)#interface range fastEthernet 0/19-24 SW_AC2(config-if-range)#switchport mode trunk SW_AC2(config-if-range)#switchport trunk native vlan 43 SW_AC2(config-if-range)#no shutdown SW_AC2(config-if-range)#exit SW_AC3 ====== SW_AC3(config)#interface range fastEthernet 0/19-24 SW_AC3(config-if-range)#switchport mode trunk SW_AC3(config-if-range)#switchport trunk native vlan 43 SW_AC3(config-if-range)#no shutdown SW_AC3(config-if-range)#exit

Step 4: Configure VTP and VLANs. ============================== a. Step 1: Configure SW_DS1 as VTP server and the following VTP parameters: SW_DS1 is the VTP server. VTP domain name: CCNA VTP password: cisco ----------------------------------SW_DS1 ===== SW_DS1(config)#vtp mode server SW_DS1(config)#vtp domain CCNA SW_DS1(config)#vtp password cisco b. Create and name the following VLANs on SW_DS1. VLAN 10: Student VLAN 20: Faculty VLAN 43: Management VLAN 67: Wireless -----------------------------SW_DS1(config)#vlan 10 SW_DS1(config-vlan)#name Student SW_DS1(config-vlan)#vlan 20 SW_DS1(config-vlan)#name Faculty SW_DS1(config-vlan)#vlan 43 SW_DS1(config-vlan)#name Management SW_DS1(config-vlan)#vlan 67 SW_DS1(config-vlan)#name Wireless SW_DS1(config-vlan)#exit c. Step 2: Configure SW_AC2 and SW_AC3 as VTP clients to participate in the CCNA VT P domain. ---------------------------------SW_AC2 ====== SW_AC2(config)#vtp mode client SW_AC2(config)#vtp domain CCNA SW_AC2(config)#vtp password cisco SW_AC2(config)#end SW_AC3 ======= SW_AC3(config)#vtp mode client SW_AC3(config)#vtp domain CCNA SW_AC3(config)#vtp password cisco SW_AC3(config)#end d. Step3: Verify that VTP is operational. -------------------SW_AC2#show vtp status SW_AC3#show vtp status or SW_AC2#show vlan brief

SW_AC3#show vlan brief Step 5: Configure Interfaces for VLAN Access ========================================== VLAN port assignments on each switch are as follows: a. Step 1: Configure access ports on access layer switches. Configure the appropriate interfaces on SW_AC2 and SW_AC3 for static access. Assign VLANs according to the port assignments table. --------------------------------SW_AC2 ====== SW_AC2(config)#interface range fastEthernet 0/1-17 SW_AC2(config-if-range)#switchport mode trunk SW_AC2(config-if-range)#no shutdown SW_AC2(config-if-range)#exit SW_AC2(config)#interface range fastEthernet 0/1-10 SW_AC2(config-if-range)#switchport mode access SW_AC2(config-if-range)#switchport access vlan 10 SW_AC2(config-if-range)#no shutdown SW_AC2(config-if-range)#exit SW_AC2(config)#interface range fastEthernet 0/11-17 SW_AC2(config-if-range)#switchport mode access SW_AC2(config-if-range)#switchport access vlan 20 SW_AC2(config-if-range)#no shutdown SW_AC2(config-if-range)#exit SW_AC3 ====== SW_AC3(config)#interface range fastEthernet 0/1-18 SW_AC3(config-if-range)#switchport mode trunk SW_AC3(config-if-range)#no shutdown SW_AC3(config-if-range)#exit SW_AC3(config)#interface range fastEthernet 0/1-10 SW_AC3(config-if-range)#switchport mode access SW_AC3(config-if-range)#switchport access vlan 10 SW_AC3(config-if-range)#no shutdown SW_AC3(config-if-range)#exit SW_AC3(config)#interface range fastEthernet 0/11-17 SW_AC3(config-if-range)#switchport mode access SW_AC3(config-if-range)#switchport access vlan 20 SW_AC3(config-if-range)#no shutdown SW_AC3(config-if-range)#exit SW_AC3(config)#interface fastEthernet 0/18 SW_AC3(config-if-range)#switchport mode access SW_AC3(config-if-range)#switchport access vlan 67 SW_AC3(config-if-range)#no shutdown SW_AC3(config-if-range)#exit b. Step 2: Verify trunking and VLAN assignments. ----------------------

SW_AC2#show interface switchport SW_AC3#show interface switchport SW_AC2#show interface trunk SW_AC3#show interface trunk SW_AC2#show vlan brief SW_AC3#show vlan brief Step 6: Configure Spanning Tree. =================================== a. Modify STP root bridge elections. Using a priority of 4096, set SW_DS1 as the root bridge for all VLANs. ---------------------------------------SW_DS1(config)#spanning-tree vlan 1 priority 4096 SW_DS1(config)#spanning-tree vlan 10 priority 4096 SW_DS1(config)#spanning-tree vlan 20 priority 4096 SW_DS1(config)#spanning-tree vlan 43 priority 4096 SW_DS1(config)#spanning-tree vlan 67 priority 4096 SW_DS1(config)#exit Using a priority of 8192, set SW_AC2 as the backup root bridge for all VLANs. -------------------------SW_AC2(config)#spanning-tree vlan 1 priority 8192 SW_AC2(config)#spanning-tree vlan 10 priority 8192 SW_AC2(config)#spanning-tree vlan 20 priority 8192 SW_AC2(config)#spanning-tree vlan 43 priority 8192 SW_AC2(config)#spanning-tree vlan 67 priority 8192 SW_AC2(config)#exit b. Verify the spanning tree election. ------------SW_AC2#show spanning-tree vlan 43 SW_DS1#show spanning-tree vlan 43 Step 7: Configure Inter-VLAN Routing. ====================================== Use the information in the Addressing Table to configure Router1 for inter-VLAN routing. Verify inter-VLAN routing. -------------------------Router1(config)#interface fastEthernet 0/0 Router1(config-if)#no shutdown Router1(config-if)#exit Router1(config-if)#interface fastEthernet 0/0.10 Router1(config-subif)#encapsulation dot1Q 10 Router1(config-subif)#ip address 172.16.10.1 255.255.255.0 Router1(config-subif)#exit Router1(config)#interface fastEthernet 0/0.20 Router1(config-subif)#encapsulation dot1Q 20 Router1(config-subif)#ip address 172.16.20.1 255.255.255.0 Router1(config-subif)#exit

Router1(config)#interface fastEthernet 0/0.43 Router1(config-subif)#encapsulation dot1Q 43 native Router1(config-subif)#ip address 172.16.43.1 255.255.255.0 Router1(config-subif)#exit Router1(config)#interface fastEthernet 0/0.67 Router1(config-subif)#encapsulation dot1Q 67 Router1(config-subif)#ip address 172.16.67.1 255.255.255.0 Router1(config-subif)#end Step 8: Configure Port Security. ===================================== Note: Best practice requires port security on all access ports. However, for thi s practice exercise you will onlyconfigure one port with security. a. Configure SW_AC3 with port security on FastEthernet 0/2. No more than 2 MAC addresses are allowed on the FastEthernet 0/2 port for SW_A C3. Once learned, MAC addresses should be automatically added to the running confi guration. If this policy is violated, the port should be automatically disabled. ------------------------SW_AC3(config)#interface fastEthernet 0/2 SW_AC3(config-if)#switchport port-security SW_AC3(config-if)#switchport port-security maximum 2 SW_AC3(config-if)#switchport port-security mac-address sticky SW_AC3(config-if)#switchport port-security violation shutdown SW_AC3(config-if)#end b. Verify that port security is implemented. ----------------SW_AC3#show port-security address Step 9: Configure the Wireless LAN. ======================================== Refer to the Addressing Table to configure the wireless LAN. a. Configure WRS. --------------see file in CCNA3 Test Step 10: Verify Connectivity. ============================ Although these are not scored, the following connectivity tests should be succe ssful. ----------------SW_DS1 can ping Router1. SW_AC2 can ping Router1. SW_AC3 can ping Router1.

PC1 can ping PC2. PC2 can ping PC3. PC4 can ping PC1.