ESwitching Basic Switching/Wireless PT Practice SBA

A few things to keep in mind while completing this activity: 1. Do not use the browser Back button or close or reload any exam windows during the exam. 2. Do not close Packet Tracer when you are done. It will close automatically. 3. Click the Submit Assessment button to submit your work.

Introduction
In this practice Packet Tracer Practice Skills Based Assement, you will: y y y y y configure VLANs using VTP configure inter-VLAN routing modify STP configure port security add a wireless LAN

Addressing Table
Device Interface Fa0/0.40 Fa0/0.50 Branch Fa0/0.55 Fa0/0.80 Internet WLAN S1 S2 S3 Staff 1 Staff 2 Admin WRS PC Wireless VLAN 55 VLAN 55 VLAN 55 NIC NIC NIC NIC 10.10.55.1 10.10.80.1 10.10.80.10 10.10.100.1 10.10.55.11 10.10.55.12 10.10.55.13 10.10.40.10 10.10.40.11 10.10.50.10 DHCP assigned 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 255.255.255.0 n/a n/a 10.10.80.1 n/a 10.10.55.1 10.10.55.1 10.10.55.1 10.10.40.1 10.10.40.1 10.10.50.1 10.10.100.1 Address 10.10.40.1 10.10.50.1 Subnet Mask 255.255.255.0 255.255.255.0 Default Gateway n/a n/a

Note: The password for user EXEC mode is cisco. The password for privileged EXEC mode is class.

Step 1: Configure the Switches for Remote Access.

Create, enable, and address VLAN 55 as the management interface on all three switches. Use the values found in the addressing table.

Step 2: Configure Trunking.

Note: Packet Tracer now supports the use of the range argument for the interface command.

For interfaces FastEthernet 0/19 through FastEthernet 0/24 on all three switches: y y Configure static trunking. Assign VLAN 55 as the native VLAN.

Step 3: Configure VTP and VLANs.

a. Configure S1 as VTP server and the following VTP parameters: y y y S1 is the VTP server. VTP domain name: BRANCH VTP password: vtpbranch

b. Create and name the following VLANs on S1. y y y y VLAN 40: Staff VLAN 50: Admin VLAN 55: Management VLAN 80: Wireless

c. Configure S2 and S3 as VTP clients to participate in the BRANCH VTP domain. d. Verify that VTP is operational.

Step 4: Configure Interfaces for VLAN Access

VLAN port assignments on each switch are as follows: Device S2, S3 S2, S3 S3 Ports Fa0/1 0/10 Fa0/11 0/17 Fa0/18 Assignment 40 50 80

a. Configure access ports on access layer switches. y y Configure the appropriate interfaces on S2 and S3 for access mode. Assign VLANs according to the port assignments table.

b. Verify trunking and VLAN assignments.

Step 5: Configure Spanning Tree.

a. Modify STP root bridge elections. y y Using a priority of 12288, set S1 as the root bridge for all VLANs. Using a priority of 16384, set S2 so that it will become the root for all VLANs if S1 fails.

b. Verify the spanning tree election.

Step 6: Configure Inter-VLAN Routing.

y y Use the information in the Addressing Table to configure Branch for inter-VLAN routing. Be sure to designate the native VLAN. Verify inter-VLAN routing.

Step 7: Configure Port Security.

Note: Best practice requires port security on all access ports. However, for this practice exercise you will only configure one port with security. a. Configure S3 with port security on FastEthernet 0/2. y y y y Enable port security. No more than two MAC addresses are allowed on the FastEthernet 0/2 port for S3. Once learned, MAC addresses should be automatically added to the running configuration. If this policy is violated, the port should be automatically disabled.

b. Verify that port security is implemented.

Step 8: Configure the Wireless LAN.

Refer to the Addressing Table to configure the wireless LAN. a. Configure WLAN. y y y y y Use static addressing on the Internet interface. Set the router IP and subnet mask. Use the DHCP Server Settings to configure the router to provide wireless hosts with an IP address. The starting IP address in the wireless LAN subnet is 10.10.100.15. The maximum number of users is 75.

b. Configure wireless security. y y Set the SSID to Branch_WLAN. Enable WEP security and use 0123456789 as key1.

c. Use branch123 as the remote management password. d. Configure WRS PC to access the wireless network that is provided by WLAN. WRS PC uses DHCP to obtain addressing information. Note: It will not be possible for devices to ping WRS PC since WRS PC is behind the WLAN NAT firewall.

Step 9: Verify Connectivity.

Although these are not scored, the following connectivity tests should be successful. y y y y y y S1 can ping Branch. S2 can ping Branch. S3 can ping Branch. Staff 1 can ping Admin. Admin can ping Staff 2. WRS PC can ping Staff 1.

Version 1.0 Created in Packet Tracer 5.3.2.0027 and Marvel 1.0.1 All contents are Copyright 1992 - 2011 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.