CCNA DISCOVERY III: INTRODUCING ROUTING AND SWITCHING IN AN ENTERPRISE SKILLS EVALUATION Objectives This exercise seek to check

the skills of the CCNA 3 students in the following concepts Basic router configuration VLSM Dynamic routing using EIGRP Route redistribution VLANs and VTP NAT ACLs WAN encapsulation PPP and authentication

Setting up the network

i. ii. Add three 1841 routers. On each of the routers, install the WIC-2T smart serial on Slot 0. Ensure the workspace looks like this

CCNA DISCOVERY III SKILLS EVALUATION JUNE 2012

Page 1

Basic Router Configurations

NOTE: Enable the passwords on console and vty lines using the password above. You might want to suspend this until the end of the exercise to avoid logging in during your configurations.

Serial Connections and PPP configurations

Follow the connections given below. The LSK router is the one that provides clocking of 64000 for the other two routers.

Because of security concerns over the WAN links, it is suggested that PPP be used as the encapsulation with CHAP authentication using the password ccna3ppppass.

Switches
Add 4 2950-24 Swithes to the work place as follows: Routers must be connected on the serial inks already.

CCNA DISCOVERY III SKILLS EVALUATION JUNE 2012

Page 2

Basic Switch configuration

Network Device Connections

Using the appropriate cables connect the devices according to the diagram below. Look out for the interfaces to which the connections are done.

IP Addressing Scheme.
The Ndola network has been segmented in two subnets implemented as VLANs over the two Switches. VLAN 10 is the Sales VLAN and VLAN 20 is the Admin VLAN. The following is a table of the complete IP addressing requirements of the LANs available. Complete the table using VLSM.

CCNA DISCOVERY III SKILLS EVALUATION JUNE 2012

Page 3

END NODES
Add the end nodes to the workspace and connect them using the appropriate cables to the specified interfaces of the network devices as below:

IP ADDRESSING POLICY.
The IP address for the enterprise is 192.168.0.0/24 The enterprise is using the following IP addressing scheme. All router interfaces get the first usable address of the subnet to which it is attached. Servers get the last address, statically, in the subnet. Other hosts get IP addresses using the DHCP server, which is the router to which the LAN switch is connected. Using the basic IP addressing policy above i. Configure the routers with the IP addresses from the table above. ii. Enable DHCP on the ND and LST routers, using the following DHCP pool names. o ND: pool VLAN10 and pool VLAN20 o LST: pool LST

ROUTING
i. ii. iii. Configure a static default route on LSK to point to f0/1 (where the ISP will be connected) Configure routing using EIGRP 10 on all the three routers. Let ND send an EIGRP summarized address to the LSK router. Using the redistribute command, configure EIGRP to advertise the gateway of last resort to the other routers
Page 4

CCNA DISCOVERY III SKILLS EVALUATION JUNE 2012

VLANS & VTP

i. ii. iii. iv. Configure inter-VLAN routing, using subinterfaces on the ND router. Put the appropriate interfaces in trunking mode on the two switches. ND-Root switch should be the STP Root Bridge and VTP server. VTP parameters are given in the table above. ND-client operates in the VTP client mode.

Port Membership
On both switches, i. ports from 1 to 12, except trunk ports are in the VLAN 10 network and ii. ports 13 to 24 are in the VLAN 20 network.

Access Control Lists [bonus points]*

All devices should reach each other in the network, but the ND and LST end nodes can only access the http service on the LSK server. Once well configured: A ping to the server from any of the nodes should be unsuccessful. The browser can access the web pages on the server from any of the PCs. All PCs should reach each other.

Network Address Translation

To the network, add the fourth router closer to the LSK router. This is our ISP router as follows: ISP

CCNA DISCOVERY III SKILLS EVALUATION JUNE 2012

Page 5

Apply the following configurations on router 3. hostname ISP interface Loopback0 ip address 172.16.1.1 255.255.255.255 interface FastEthernet0/0 ip address 199.99.9.1 255.255.255.252 ip route 200.20.0.0 255.255.255.248 FastEthernet0/0

Internet Connection Configurations

i. Configure the appropriate IP address on the fast Ethernet port of LSK connected to ISP. o [Hint: Ensure you are able to ping 172.16.1.1 from LSK before you proceed] The ISP has sold you the following public IP address block 200.20.0.0 255.255.255.248. Configure NAT on LSK to allow all the nodes in the network to get access to the Internet. o The public pool of address should be called INET-ACCESS and o the access-list 10 for the translatable internal addresses

ii.

Your network should look something like below at this point

Take note of the LED on the links. They are all green. Pings 172.16.1.1 from the three PCs should be successful.

CCNA DISCOVERY III SKILLS EVALUATION JUNE 2012

Page 6