http://www.scribd.com/doc/58279801/ESwitching-PT-Practice-SBA-2011 Step 1: Connect the Devices.

Use the appropriate cable type to make the followin g connections: SW_AC2 SW_AC2 SW_AC2 SW_AC2 SW_AC3 FastEthernet FastEthernet FastEthernet FastEthernet FastEthernet 0/1 to PC1FastEthernet 0/11 to PC2FastEthernet 0/19 to SW_AC3 FastEthernet 0/19 0/20 to SW_AC3 FastEthernet 0/20 0/18 to WRSInternet

Step 2: Configure the Device Basics. a. Configure the following on SW_AC2. The switch name is SW_AC2 Switch>en Switch#conf t Switch(config)#hostname SW_AC2 SW_AC2(config)# SW_AC2(config)#enable password class SW_AC2(config)#line vty 0 SW_AC2(config-line)#password cisco SW_AC2(config-line)#line console 0 SW_AC2(config-line)#password cisco SW_AC2(config-line)#exit SW_AC2(config)#banner motd #Authorized access only!# SW_AC2(config)# b.To configure the switches for remote management access, create and enable inte rface VLAN 43 on all three switches. SW_DS1(config)#interface vlan 43 SW_DS1(config-if)#ip address 172.16.43.11 255.255.255.0 SW_DS1(config-if)#no shutdown SW_DS1(config-if)#exit SW_DS1(config)#ip default-gateway 172.16.43.1 SW_AC2(config)#interface vlan 43 SW_AC2(config-if)#ip address 172.16.43.12 255.255.255.0 SW_AC2(config-if)#no shutdown SW_AC2(config-if)#exit SW_AC2(config)#ip default-gateway 172.16.43.1 SW_AC3(config)#interface vlan 43 SW_AC3(config-if)#ip address 172.16.43.13 255.255.255.0 SW_AC3(config-if)#no shutdown SW_AC3(config-if)#exit SW_AC3(config)#ip default-gateway 172.16.43.1 Step 3: Configure Trunking. For interfaces FastEthernet 0/19 through FastEtherne t 0/24 on all three switches: Configure static trunking. Assign VLAN 43 as the native VLAN. SW_DS1(config)#interface range fastEthernet 0/19-24 SW_DS1(config-if-range)#switchport mode trunk SW_DS1(config-if-range)#switchport trunk native vlan 43 SW_DS1(config-if-range)#no shutdown

SW_DS1(config-if-range)#end SW_AC2(config)#interface range fastEthernet 0/19-24 SW_AC2(config-if-range)#switchport mode trunk SW_AC2(config-if-range)#switchport trunk native vlan 43 SW_AC2(config-if-range)#no shutdown SW_AC2(config-if-range)#end SW_AC3(config)#interface range fastEthernet 0/19-24 SW_AC3(config-if-range)#switchport mode trunk SW_AC3(config-if-range)#switchport trunk native vlan 43 SW_AC3(config-if-range)#no shutdown SW_AC3(config-if-range)#end

Step 4: Configure VTP and VLANs. a. Step 1: Configure SW_DS1 as VTP server and the following VTP parameters: SW_DS1 is the VTP server. VTP domain name: CCNA VTP password: cisco SW_DS1(config)#vtp mode server SW_DS1(config)#vtp domain CCNA SW_DS1(config)#vtp password cisco b. Create and name the following VLANs on SW_DS1. VLAN VLAN VLAN VLAN 10: 20: 43: 67: Student Faculty Management Wireless Student 20 Faculty 43 Management 67 Wireless

SW_DS1(config)#vlan 10 SW_DS1(config-vlan)#name SW_DS1(config-vlan)#vlan SW_DS1(config-vlan)#name SW_DS1(config-vlan)#vlan SW_DS1(config-vlan)#name SW_DS1(config-vlan)#vlan SW_DS1(config-vlan)#name SW_DS1(config-vlan)#end

c. Step 2: Configure SW_AC2 and SW_AC3 as VTP clients to participate in the CCNA VTP domain. SW_AC2(config)#vtp mode client SW_AC2(config)#vtp domain CCNA SW_AC2(config)#vtp password cisco SW_AC2(config)#end SW_AC3(config)#vtp mode client SW_AC3(config)#vtp domain CCNA SW_AC3(config)#vtp password cisco SW_AC3(config)#end d. Step3: Verify that VTP is operational.

SW_AC2#show vtp status SW_AC2#show vlan brief SW_AC3#show vtp status SW_AC3#show vlan brief Step 5: Configure Interfaces for VLAN Access a. Step 1: Configure access ports on access layer switches. SW_AC2(config)#interface range fastEthernet 0/1-17 SW_AC2(config-if-range)#switchport mode trunk SW_AC2(config-if-range)#no shutdown SW_AC2(config-if-range)#exit SW_AC2(config)#interface range fastEthernet 0/1-10 SW_AC2(config-if-range)#switchport access vlan 10 SW_AC2(config-if-range)#no shutdown SW_AC2(config-if-range)#exit SW_AC2(config)#interface range fastEthernet 0/11-17 SW_AC2(config-if-range)#switchport access vlan 20 SW_AC2(config-if-range)#no shutdown SW_AC2(config-if-range)#exit SW_AC3(config)#interface range fastEthernet 0/1-18 SW_AC3(config-if-range)#switchport mode trunk SW_AC3(config-if-range)#no shutdown SW_AC3(config-if-range)#exit SW_AC3(config)#interface range fastEthernet 0/1-10 SW_AC3(config-if-range)#switchport access vlan 10 SW_AC3(config-if-range)#no shutdown SW_AC3(config-if-range)#exit SW_AC3(config)#interface range fastEthernet 0/11-17 SW_AC3(config-if-range)#switchport access vlan 20 SW_AC3(config-if-range)#no shutdown SW_AC3(config-if-range)#exit SW_AC3(config)#interface fastEthernet 0/18 SW_AC3(config-if-range)#switchport access vlan 67 SW_AC3(config-if-range)#no shutdown SW_AC3(config-if-range)#exit b. Step 2: Verify trunking and VLAN assignments. SW_AC2#show interface switchport SW_AC2#show interface trunk SW_AC2#show vlan brief SW_AC3#show interface switchport SW_AC3#show interface trunk SW_AC3#show vlan brief Step 6: Configure Spanning Tree. a. Modify STP root bridge elections. SW_DS1(config)#spanning-tree vlan 1 priority 4096 SW_DS1(config)#spanning-tree vlan 10 priority 4096 SW_DS1(config)#spanning-tree vlan 20 priority 4096

SW_DS1(config)#spanning-tree vlan 43 priority 4096 SW_DS1(config)#spanning-tree vlan 67 priority 4096 SW_AC2(config)#spanning-tree SW_AC2(config)#spanning-tree SW_AC2(config)#spanning-tree SW_AC2(config)#spanning-tree SW_AC2(config)#spanning-tree vlan vlan vlan vlan vlan 1 priority 8192 10 priority 8192 20 priority 8192 43 priority 8192 67 priority 8192

b. SW_AC2#show spanning-tree vlan 43 Step 7: Configure Inter-VLAN Routing. Router1(config)#interface fastEthernet 0/0 Router1(config-if)#no shutdown Router1(config-if)#exit Router1(config-if)#interface fastEthernet 0/0.10 Router1(config-subif)#encapsulation dot1Q 10 Router1(config-subif)#ip address 172.16.10.1 255.255.255.0 Router1(config-subif)#exit Router1(config)#interface fastEthernet 0/0.20 Router1(config-subif)#encapsulation dot1Q 20 Router1(config-subif)#ip address 172.16.20.1 255.255.255.0 Router1(config-subif)#exit Router1(config)#interface fastEthernet 0/0.43 Router1(config-subif)#encapsulation dot1Q 43 native Router1(config-subif)#ip address 172.16.43.1 255.255.255.0 Router1(config-subif)#exit Router1(config)#interface fastEthernet 0/0.67 Router1(config-subif)#encapsulation dot1Q 67 Router1(config-subif)#ip address 172.16.67.1 255.255.255.0 Router1(config-subif)#end Step 8: Configure Port Security. SW_AC3(config)#interface fastEthernet 0/2 SW_AC3(config-if)#switchport port-security SW_AC3(config-if)#switchport port-security maximum 2 SW_AC3(config-if)#switchport port-security mac-address sticky SW_AC3(config-if)#switchport port-security violation shutdown SW_AC3(config-if)#exit SW_AC3#show port-security address