I.
Global Configuration
1. Assign the appropriate names to each of the devices based on the Layer 2 diagram
Router>enable
Router#conf t
Router(config)#hostname R1_ISP
2. Disable the DNS lookup feature on all devices
R1_ISP(config)#no ip domain-lookup
3. Assign "s" as the secret password
R1_ISP(config)#enable secret s
4. Direct the Cisco IOS to encrypt any passwords stored in clear-text.
R1_ISP(config)#service password-encryption
Console Port
1. Enter line console configuration mode
R1_ISP(config)#line console 0
2. Configure the console port on all devices to log input synchronously
R1_ISP(config-line)#logging synchronous
3. Set the password to "c"
R1_ISP(config-line)#password c
4. Configure idling timeout to No timeout
R1_ISP(config-line)#exec-timeout ?
<0-35791> Timeout in minutes
R1_ISP(config-line)#exec-timeout 0 ?
<0-2147483> Timeout in seconds
<cr>
R1_ISP(config-line)#exec-timeout 0 0
VTY Ports
1. Allow 5 concurrent sessions of remote access to all devices. /Allow 5 telnet sessions at one
time.
R1_ISP(config-line)#exit
R1_ISP(config)#line vty 0 4
2. Configure the vty ports to log input synchronously
R1_ISP(config-line)#logging synchronous
3. Set the password to "v"
R1_ISP(config-line)#password v
4. Configure idling timeout to 40 minutes 20 seconds
R1_ISP(config-line)#exec-timeout 40 20
R1_ISP(config-line)#end
Verify and Save Configs
1. Verify the previous steps using proper "show" command
R1_ISP#show run
2. Save the configuration on R1
R1_ISP#copy running-config startup-config
II.
VTP Configuration
1. Configure RSW1 to VTP Server mode.
RSW1#configure terminal
RSW1(config)#vtp mode server
2. Configure RSW2 and RSW3 to VTP Client mode.
RSW2#conf t
RSW2(config)#vtp mode client
Setting device to VTP CLIENT mode.
RSW3#conf t
RSW3(config)#vtp mode client
Setting device to VTP CLIENT mode.
3. Configure examA for the vtp domain name and passA as the vtp password on all switches.
RSW1(config)#vtp domain examA
Changing VTP domain name from NULL to examA
RSW1(config)#vtp password passA
Setting device VLAN database password to passA
RSW1(config)#exit
RSW2(config)#vtp dom examA
Changing VTP domain name from NULL to examA
RSW2(config)#vtp pass passA
Setting device VLAN database password to passA
RSW2(config)#exit
RSW3(config)#vtp dom examA
Changing VTP domain name from NULL to examA
RSW3(config)#vtp pass passA
Setting device VLAN database password to passA
RSW3(config)#exit
4. Verify previous steps using proper "show" commands.
RSW1#show vtp status
RSW1#sh vtp password
RSW2#show vtp status
RSW2#sh vtp password
RSW3#sh vtp status
RSW3#sh vtp pass
VLAN Trunking
1. Shutdown the following ports:
1. RSW1 Fa1/1
2. RSW2 Fa1/11-12
3. RSW3 Fa1/11-12
RSW1#conf t
RSW1(config)#int f1/1
RSW1(config-if)#shutdown
RSW1(config-if)#end
RSW2#conf t
RSW2(config)#int range f1/11 12
RSW2(config-if-range)#shutdown
RSW2(config-if-range)#end
RSW3#conf t
RSW3(config)#int range f1/11 12
RSW3(config-if-range)#shut
RSW3(config-if-range)#end
2. Verify prior step using the proper "show" command.
RSW1#show ip interface brief
RSW2#show ip interface brief
RSW3#show ip interface brief
3. Configure VLAN trunking using 802.1q on the following ports:
0. RSW1 Fa1/3, Fa1/9-10, Fa1/13-14
1. RSW2 Fa1/9-10
2. RSW3 Fa1/13-14
RSW1#conf t
RSW1(config)#interface range f1/3 , f1/9 10 , f1/13 14
RSW1(config-if-range)#switchport trunk encapsulation dot1q
RSW1(config-if-range)#switchport mode trunk
RSW1(config-if-range)#end
RSW2#conf t
RSW2(config)#int range f1/9 10
RSW2(config-if-range)#switchport trunk encapsulation dot1q
RSW2(config-if-range)#switchport mode trunk
RSW2(config-if-range)#end
RSW3#conf t
RSW3(config)#int range f1/13 14
RSW3(config-if-range)#switchport trunk encapsulation dot1q
RSW3(config-if-range)#switchport mode trunk
RSW3(config-if-range)#end
4. Verify prior step using the proper "show" commands.
RSW1#show interfaces trunk
Port Mode Encapsulation Status Native vlan
Fa1/3 on 802.1q trunking 1
Fa1/9 on 802.1q trunking 1
Fa1/10 on 802.1q trunking 1
Fa1/13 on 802.1q trunking 1
Fa1/14 on 802.1q trunking 1
<output omitted>
RSW2#show interfaces trunk
Port Mode Encapsulation Status Native vlan
Fa1/9 on 802.1q trunking 1
Fa1/10 on 802.1q trunking 1
<output omitted>
RSW3#show interfaces trunk
Port Mode Encapsulation Status Native vlan
Fa1/13 on 802.1q trunking 1
Fa1/14 on 802.1q trunking 1
<output omitted>
III.
VLAN Configuration
1. Create VLANs according to the Layer 2/3 Diagram
2. Name some of the VLANs as follows
1. VLAN 5 = SalesDept
2. VLAN15 = WebServers
3. VLAN25 = FTPServers
RSW1#conf t
RSW1(config)#vlan 5
RSW1(config-vlan)#name SalesDept
RSW1(config-vlan)#vlan 15
RSW1(config-vlan)#name WebServers
RSW1(config-vlan)#vlan 25
RSW1(config-vlan)#name FTPServers
RSW1(config-vlan)#vlan 10,20,30,35,40,45,50,55
RSW1(config-vlan)#end
RSW1#sh vlan-switch
3. Assign VLANs to appropriate switch ports according to the Physical Diagram and Layer 2/3
Diagram
RSW3#conf t
RSW3(config)#int f1/3
RSW3(config-if)#switchport mode access
RSW3(config-if)#switchport access vlan 40
RSW3(config-if)#end
RSW1#conf t
RSW1(config)#int f1/2
RSW1(config-if)#switch mode access
RSW1(config-if)#switch access vlan 10
RSW1(config-if)#int f1/3
RSW1(config-if)#switch trunk encap dot1q
RSW1(config-if)#switch mode trunk
RSW1(config-if)#end
(the f1/3 configuration above should have been configured in the
Checkpoint 2 lab,
but it doesn't hurt to re-enter it)
RSW2#conf t
RSW2(config)#int f1/2
RSW2(config-if)#switchport mode access
RSW2(config-if)#switchport access vlan 45
RSW2(config-if)#end
4. Verify VLAN and port assignments
RSW1#sh vlan-s
RSW2#sh vlan-s
RSW3#sh vlan-s
5. Assign IPv4 addresses for each FastEthernet interface, Switch Virtual Interface (SVI) and
loopback.
Verification
6. Ensure the appropriate devices can ping.
Spanning Tree
7. Configure portfast on the following edge ports
1. RSW1 Fa1/2
2. RSW2 Fa1/2
3. RSW3 Fa1/3
RSW1#conf t
RSW1(config)#int f1/2
RSW1(config-if)#spanning-tree portfast
RSW1(config-if)#end
%Warning: portfast should only be enabled on ports connected to a single
host.
Connecting hubs, concentrators, switches, bridges, and other devices
connecting to
this interface when portfast is enabled, can cause temporary spanning tree
loops.
Use with CAUTION
%Portfast has been configured on FastEthernet1/2 but will only
have effect when the interface is in a non-trunking mode.
RSW2#conf t
RSW2(config)#int f1/2
RSW2(config-if)#span portfast
RSW2(config-if)#end
%Warning: portfast should only be enabled on ports connected to a single
host.
Connecting hubs, concentrators, switches, bridges, and other devices
connecting to
this interface when portfast is enabled, can cause temporary spanning tree
loops.
Use with CAUTION
%Portfast has been configured on FastEthernet1/2 but will only
have effect when the interface is in a non-trunking mode.
RSW3#conf t
RSW3(config)#int f1/3
RSW3(config-if)#span portf
RSW3(config-if)#end
%Warning: portfast should only be enabled on ports connected to a single
host.
Connecting hubs, concentrators, switches, bridges, and other devices
connecting to
this interface when portfast is enabled, can cause temporary spanning tree
loops.
Use with CAUTION
%Portfast has been configured on FastEthernet1/2 but will only
have effect when the interface is in a non-trunking mode.
8. Use the show spanning-tree interface <interface> command at Privilege EXEC mode to verify that the
ports are in the portfast mode.
RSW1#show spanning-tree interface f1/2
Port 43 (FastEthernet1/2) of VLAN10 is forwarding
Port path cost 19, Port priority 128, Port Identifier 128.43.
Designated root has priority 32768, address c298.7929.0004
Designated bridge has priority 32768, address c298.7929.0004
Designated port id is 128.43, designated path cost 0
Timers: message age 0, forward delay 0, hold 0
Number of transitions to forwarding state: 1
BPDU: sent 98, received 0
The port is in the portfast mode
RSW2#show span int f1/2
Port 43 (FastEthernet1/2) of VLAN45 is forwarding
Port path cost 19, Port priority 128, Port Identifier 128.43.
Designated root has priority 32768, address c298.7929.0009
Designated bridge has priority 32768, address c299.0ab4.0009
Designated port id is 128.43, designated path cost 19
Timers: message age 0, forward delay 0, hold 0
Number of transitions to forwarding state: 1
BPDU: sent 113, received 0
The port is in the portfast mode
RSW3#show span int f1/3
Port 44 (FastEthernet1/3) of VLAN40 is forwarding
Port path cost 19, Port priority 128, Port Identifier 128.44.
Designated root has priority 32768, address c298.7929.0008
Designated bridge has priority 32768, address c29a.0aaa.0008
Designated port id is 128.44, designated path cost 19
Timers: message age 0, forward delay 0, hold 0
Number of transitions to forwarding state: 1
BPDU: sent 141, received 0
The port is in the portfast mode
IV.
LAN Interface Configuration
1. Assign IPv4 addresses for each FastEthernet interface, Switch Virtual Interface (SVI) and
loopbacks.
On R2_Gateway
R2_Gateway#conf t
R2_Gateway(config)#int f1/0
R2_Gateway(config-if)#ip add 10.1.1.2 255.255.255.0
R2_Gateway(config-if)#no shut
R2_Gateway(config-if)#int f3/0
R2_Gateway(config-if)#ip add 45.1.1.2 255.255.255.0
R2_Gateway(config-if)#no shut
R2_Gateway(config-if)#end
R2_Gateway#show ip int brief
On R3_DMZ
R3_DMZ#conf t
R3_DMZ(config)#int loopback 1
R3_DMZ(config-if)#ip add 3.3.3.33 255.255.255.255
R3_DMZ(config-if)#int loop2
R3_DMZ(config-if)#ip add 3.3.3.34 255.255.255.255
R3_DMZ(config-if)#int lo3
R3_DMZ(config-if)#ip add 3.3.3.35 255.255.255.255
R3_DMZ(config-if)#int lo4
R3_DMZ(config-if)#ip add 3.3.3.36 255.255.255.255
Let's try this out on R3's F1/0 interface and sub-interfaces. First, bring up the main interface,
F1/0.
R3_DMZ(config-if)#int f1/0
R3_DMZ(config-if)#no shut
Next, create the subinterface f1/0.30
R3_DMZ config-if)#int f1/0.30
R3_DMZ(config-subif)#encapsulation dot1q 30
R3_DMZ(config-subif)#ip add 30.1.1.3 255.255.255.0
Next, create the subinterface f1/0.2
R3_DMZ(config-subif)#int f1/0.20
R3_DMZ(config-subif)#encap dot 20
R3_DMZ(config-subif)#ip add 20.1.1.3 255.255.255.0
Navigate to the configuration mode for R3s F3/0 interface
R3_DMZ(config-subif)#int f3/0
R3_DMZ(config-if)#ip add 40.1.1.3 255.255.255.0
R3_DMZ(config-if)#no shut
R3_DMZ(config-if)#end
R3_DMZ#show ip int brief
on RSW1
RSW1#conf t
RSW1(config)#int vlan 5
RSW1(config-if)#ip add 5.1.1.11 255.255.255.0
RSW1(config-if)#int vlan 10
RSW1(config-if)#ip add 10.1.1.11 255.255.255.0
RSW1(config-if)#int vlan 15
RSW1(config-if)#ip add 15.1.1.11 255.255.255.0
RSW1(config-if)#int vlan 20
RSW1(config-if)#ip add 20.1.1.11 255.255.255.0
RSW1(config-if)#end
RSW1#sh ip int br
Continue with RSW2.
RSW2#conf t
RSW2(config)#int vlan 30
RSW2(config-if)#ip add 30.1.1.12 255.255.255.0
RSW2(config-if)#int vlan 35
RSW2(config-if)#ip add 35.1.1.12 255.255.255.0
RSW2(config-if)#int vlan 45
RSW2(config-if)#ip add 45.1.1.12 255.255.255.0
RSW2(config-if)#int vlan 50
RSW2(config-if)#ip add 50.1.1.12 255.255.255.0
RSW2(config-if)#int vlan 55
RSW2(config-if)#ip add 55.1.1.12 255.255.255.0
RSW2(config-if)#end
RSW2#sh ip int br
Interface IP-Address OK? Method Status Protocol
<output omitted for brevity>
Vlan1 unassigned YES NVRAM up up
Vlan30 30.1.1.12 YES manual up up
Vlan35 35.1.1.12 YES manual up up
Vlan45 45.1.1.12 YES manual up up
Vlan50 50.1.1.12 YES manual up up
Vlan55 55.1.1.12 YES manual up up
On to RSW3.
RSW3#conf t
RSW3(config)#int vlan 25
RSW3(config-if)#ip add 25.1.1.13 255.255.255.0
RSW3(config-if)#int vlan 40
RSW3(config-if)#ip add 40.1.1.13 255.255.255.0
RSW3(config-if)#end
RSW3#sh ip int br
Interface IP-Address OK? Method Status Protocol
<output omitted for brevity>
Vlan1 unassigned YES NVRAM up up
Vlan25 25.1.1.13 YES manual up up
Vlan40 40.1.1.13 YES unset up up
2. Ensure the appropriate devices can ping.
RSW1#ping 20.1.1.3
RSW1#ping 10.1.1.2
R2_Gateway#ping 45.1.1.12
RSW2#ping 30.1.1.3
R3_DMZ#ping 40.1.1.13
Frame-Relay
1. Enable frame encapsulation on serial 0/0 of R1 and R2
R2_Gateway#conf t
R2_Gateway(config)#int s0/0
R2_Gateway(config-if)#encapsulation frame-relay
R2_Gateway(config-if)#no shut
2. Configure point-to-point network (Frame-Relay point-to-point subinterfaces)
between R1 and R2
R2_Gateway(config-if)#int s0/0.1 p
R2_Gateway(config-subif)#ip add 12.1.1.2 255.255.255.252
R2_Gateway(config-subif)#frame-relay interface-dlci 201
R2_Gateway(config-fr-dlci)#end
3. Enable frame encapsulation on the main interface of serial 0/0 on R2 and bring the interface up.
R2_Gateway#conf t
R2_Gateway(config)#int s0/0
R2_Gateway(config-if)#encapsulation frame-relay
R2_Gateway(config-if)#no shut
4. Configure point-to-point network (Frame-Relay point-to-point subinterface) on R2 and assign
the appropriate IP address and DLCI number for the interface.
R2_Gateway(config-if)#int s0/0.1 p
R2_Gateway(config-subif)#ip add 12.1.1.2 255.255.255.252
R2_Gateway(config-subif)#frame-relay interface-dlci 201
R2_Gateway(config-fr-dlci)#end
5. Verify connectivity.
R1_ISP#ping 12.1.1.2
!!!!!
R2_Gateway#ping 12.1.1.1
!!!!!
Point-to-Point Protocol (PPP)
1. Enable PPP encapsulation on serial 0/2 of R1 and R2
R1_ISP#conf t
R1_ISP(config)#interface serial 0/2
R1_ISP(config-if)#encapsulation ppp
2. Assign IP addresses for each PPP encapsulated interface.
R1_ISP(config-if)#ip add 21.1.2.1 255.255.255.252
3. Enable PPP authentication using Challenge-Handshake Authentication Protocol (CHAP)
R1_ISP(config-if)#ppp authentication chap
4. Bring up the serial 0/2 interface on R1 and R2.
R1_ISP(config-if)#no shut
R1_ISP(config-if)#exit
5. Configure username and password for authentication on R1 and R2. Use LWP as the password.
R1_ISP(config)#username R2_Gateway password LWP
R1_ISP(config)#end
On R2
Enable Point-to-Point Protocol encapsulation on serial 0/2 of R2.
R2_Gateway#conf t
R2_Gateway(config)#interface serial 0/2
R2_Gateway(config-if)#encapsulation ppp
Assign IP addresse for R2s PPP encapsulated interface.
R2_Gateway(config-if)#ip add 21.1.2.2 255.255.255.252
Enable PPP authentication using Challenge-Handshake Authentication Protocol (CHAP)
R2_Gateway(config-if)#ppp authentication chap
Bring up the serial 0/2 interface.
R2_Gateway(config-if)#no shut
R2_Gateway(config-if)#exit
Configure username and password for authentication on R2. Use LWP as the password.
R2_Gateway(config)#username R1_ISP password LWP
R2_Gateway(config)#end
6. Verify connectivity
R1_ISP#ping 21.1.2.2
!!!!!
R2_Gateway#ping 21.1.2.1
!!!!!
V.
