Beruflich Dokumente
Kultur Dokumente
This publication is protected under the US Copyright Act of 1976 and all other
applicable international, federal, state and local laws, and all rights are reserved,
including resale rights: you are not allowed to give or sell this lab book to anyone
else. If you received this publication from anyone other than
www.configurethenetwork.com or http://shawnmoorecisco.blogspot.com, you've
received a pirated copy. Please contact us via e-mail at
configthenet@hotmail.com and notify us of the situation.
Please note that much of this publication is based on personal experience and
anecdotal evidence. Although the author has made every reasonable attempt to
achieve complete accuracy of the content in this lab book, he assumes no
responsibility for errors or omissions. Also, you should use this information as
you see fit, and at your own risk. Your particular lab equipment may not be
exactly suited to the examples illustrated here; in fact, it's likely that they won't be
the same, and you should adjust your use of the information and
recommendations accordingly.
Any trademarks, service marks, product names or named features are assumed
to be the property of their respective owners, and are used only for reference.
There is no implied endorsement if we use one of these terms.
Finally, use your head. Nothing in this lab book is intended to replace common
sense, legal, medical or other professional advice, and is meant to inform and
entertain the reader. So have fun with the Configure the Network Series, and get
your stuff done.
www.configurethenetwork.com
2
About the Author:
Welcome, my name is Shawn Moore and I’m the author of the lab series
Configure the Network. I decided to create this eBook to help future CCNA’s
solidify their command, theory, and problem solving knowledge. I also created
this eBook because I figured it would be plain fun to lab possible scenarios of
different CCNA topics that may happen in the real world! My goal is to help you,
the reader think about what happens when you mix the world of networking and
the world of business together.
I actually started my Cisco journey in high school where we practiced
creating simple two router labs with real equipment. While we were able to
successfully connect the two routers together with routing protocols such as RIP,
I never understood the reasons why I would use a dedicated router over a simple
DSL connection. As time went on I graduated from High School and started
immediately in the world of IT thanks to an internship that had turned into a part
time job. It wasn’t until then that I realized that companies utilize a lot of data that
needs to be not only reliable, but also fast and secure as well. This is when it all
clicked that a dedicated router device would run circles around a simple DSL
connection with a simple switch.
Like many IT professionals I didn’t start off configuring Cisco devices, I
dealt mainly with desktop and server support. I always liked Network Engineering
ever since I had my first taste of it in high school. With this I decided to pursue
my Network Engineering dreams and knew that the CCNA would be the path that
would help guide me there. I am now currently CCNA certified working in the
field of networking as I hoped. However like many other Network Engineers I’m
constantly studying for the next certification. The CCNP is the next step for me
and you can follow my current progress at http://shawnmoorecisco.blogspot.com
www.configurethenetwork.com
3
Contents:
I. Introduction 5
1. Configure the Network
2. CN Technologies
II. CN Task 1 6
1. Configure Client’s Cisco Switch
III. CN Task 2 9
1. Design and Configure Client’s SOHO Switch Network
2. Implement and Verify Switch Security Measures
IV. CN Task 3 12
1. Configure Client’s Cisco Router
V. CN Task 4 14
1. Configure Small Business Client’s LAN Network
2. Create DHCP Solution for the LAN Network
VI. CN Task 5 17
1. Develop LAN Network for College Campus Buildings
2. Provide Access to other Campus Buildings Using RIP
VII. CN Task 6 20
1. Configure Client’s T1 WAN Link
2. Change WAN Link for Multi-Vendor Use
3. Install Multilink Connection for Redundancy
VIII. CN Task 7 23
1. Build Cisco Network for Medium Business Client
IX. Acknowledgements and Additional Resources 26
www.configurethenetwork.com
4
Configure the Network Series
CN Technologies
So you’ve finally landed that dream job, a network engineer with a very
well respected IT Firm in your local area! The name of this company is called CN
Technologies which provides IT consultation for over 300 businesses across the
country and even across the world. After reviewing your impressive resume they
have offered you a position as a network engineer consultant. Since this is a
smaller sized business you are expected to wear many hats and will be assigned
to do simple tasks from configuring a switch to developing a complete network.
You will receive bigger projects over time as you demonstrate that you are
capable to handle and complete assigned tasks given to you. Best of luck to you,
this is a fast-paced environment so remember to work through the labs at a
steady pace (very important for the CCNA exam).
5
CN Task 1 - Configure Client’s Cisco Switch
www.configurethenetwork.com
6
Now that you’ve physically connected your devices, we need you to configure
the following:
(Logical Lab Reference)
D. Create the ability to SSH into this switch using the following information:
username: GFI password: EnSw1tch
Domain name: gfidigital.com
Make sure that SSH version 2 is used
I. Set the GFI_Switch Fast Ethernet interface 0/1 speed to 100 Mbps
www.configurethenetwork.com
7
J. The Fast Ethernet Interfaces 0/2 through 0/8 will need to be configured as
strictly access ports
K. The Fast Ethernet Interfaces 0/9 through 0/10 will need to be assigned for
VLAN 2
This task is complete when you have successfully assigned a hostname, setup
and configured access passwords, created a banner login, assigned required IP
addresses, configured interface settings, and have saved the running
configuration to the startup configuration.
www.configurethenetwork.com
8
CN Task 2 - Design and Configure Client’s SOHO Switch
Network
Good job on configuring the switch, GFI was very pleased to find that this
switch was basically plug-and-play for them when they powered on their switch.
Now we have another task for you. Our existing client Mid-America Insurance
has a remote branch office that recently doubled in size. They are currently
using DSL but now need two additional switches to support the new networking
devices this client’s just purchased. View the network diagram below and
implement the following requests:
(Note: for your lab you only need to physically connect two Cisco Switches)
Network Diagram
www.configurethenetwork.com
9
(Logical Lab Reference)
A. Connect the two switches together physically using the fa0/8 port
B. Assign one switch the hostname MAISwitch1 and the other switch
MAISwitch2
www.configurethenetwork.com
10
Part 2 - Implement Security Measures
This task complete when both switches have been configured with their correct
hostnames, access passwords, IP address settings, security measures, and
saved to the start-up configuration.
www.configurethenetwork.com
11
CN Task 3 – Configure Client’s Cisco Router
A. Console into this device and assign the hostname Zanco and encrypt all
access passwords
www.configurethenetwork.com
12
D. SSH version 2 needs to be configured on this router with the following
information:
Username: admin password: Secret1!
Domain name: Zanco.com
F. Assign the first available serial interface (most likely s0/0) the IP address
72.31.254.2 /30 and no shut the interface for WAN access
G. For the interface fa0/0, assign the IP address 192.168.1.254 /24 and no shut
the interface
I. Create the following static IP addresses and have them go out the s0/0
interface:
10.1.2.0 255.255.255.0
10.1.3.0 255.255.255.0
10.1.4.0 255.255.255.0
This task is complete when all access settings are configured, interfaces
assigned, and static IP addresses have been allocated.
www.configurethenetwork.com
13
CN Task 4 - Configure Small Business Client’s LAN Network
www.configurethenetwork.com
14
(Logical Lab Reference)
A. Assign the hostname Encore_R1 to the first router and assign the hostname
Encore_R2 to the second router
B. Assign the hostname Encore_SW1 to the first switch and assign the
hostname Encore_SW2 to the second switch
E. Set the serial interface with the DCE clock rate to 64000
15
I. Assign the IP address 192.168.1.254 /24 to VLAN 1 for management access
on Encore_SW1. Assign the IP address 192.168.3.254 /24 to VLAN 1 on
Encore_SW2 for management access.
J. Provide SSH access on all 4 devices; create and document usernames and
passwords for access at your discretion
(If you decide to complete part 2, then this will not be needed)
L. Define static routes to allow for the store 1 LAN to reach the store 2 LAN
(Note: This section was optional, DHCP configuration is NOT apart of the
CCNA exam requirements. However DHCP configuration is common on real
networks.)
This lab is complete once you are able to ping from Encore_SW1 to
Encore_SW2 successfully.
www.configurethenetwork.com
16
CN Task 5 - Develop LAN Network for College Campus Buildings
www.configurethenetwork.com
17
(Logical Lab Reference)
C. Configure and document enable and console passwords for each device
E. All DCE serial interfaces will need to be configured with the clock rate 64000
18
Part 2 - Provide Access to other Campus Buildings Using RIP
G. Configure all three campus building routers to use the routing protocol RIP
with the following preferences:
RIP Version 2 should be configured on all routers
RIP shouldn’t automatically summarize IP networks
H. Create the ability to telnet to all 3 routers, document and assign all username
and password information
(Hint: use the ip host command to map names to IP addresses i.e. ip host
Cbuilding_1 172.16.1.1)
This lab is complete when you are able to ping every other routers fast Ethernet
interfaces and the ability to telnet to any router via their hostname has been
configured.
www.configurethenetwork.com
19
CN Task 6 - Configure Client’s T1 WAN Link
The community college has reported that their network is a lot more
scalable and “hands off” since we introduced a routing protocol into their network.
Your next task is to create a point-to-point T1 connection for the company Lexco
Steelworks. They have two locations about 200 miles apart; however sharing
important data between the two has been very difficult. We have been selected
for the task to create a reliable solution for this company. Your next task is to
install a redundant T1 connection between the two sites. A network diagram has
been including below along with the following requirements:
20
(Logical Lab Reference)
A. Configure the hostnames STL_LEX and MOB_LEX per the lab reference
C. Configure the ability to SSH into both routers, document usernames and
passwords used
www.configurethenetwork.com
21
Part 3 - Install Multilink Connection for Redundancy (Optional)
G. Bundle the 2 serial interfaces on each router into the multilink group 1
(While configuring PPP Multilink isn’t a CCNA topic, knowing what a PPP
multilink is something you should know for the exams)
(Notice that the prefix /31 or 255.255.255.254 is used, this is possible thanks
to CIDR (Classless Inter Domain Routing. This is a common mask for point-to-
point links in the real world)
This lab is complete once you are able to ping across the PPP multilink
connection.
www.configurethenetwork.com
22
CN Task 7 - Build Cisco Network for Medium Business Client
The PPP T1 connection that you’ve designed has been working perfectly
for Lexco’s needs, great job! We landed a new contract build out a new network
for the growing florist company called the Flowers Inc. This business has 4
locations throughout the local area. While the customer has specific
requirements, you are allowed to design the network anyway you would like.
View the current location diagram of all 4 shops and the requirements below,
design the network as you see fit:
www.configurethenetwork.com
23
(Logical Lab Reference)
Requirements:
A. Configure all 4 shop routers with hostnames, enable passwords, and console
access credentials
B. Flowers Inc. has an internal network administrator who will be responsible for
the Cisco routers once the initial design is complete. The network administrator
requested that he would like to have SSH access and prevent telnet access to
all 4 routers. The network admin should be able to SSH into all 4 routers via
hostname rather than having to remember each routers IP address.
C. The local ISP has assigned Flowers Inc. with the public IP address
70.246.128.27 /24. Create IP subnets for the 4 point-to-point connections
between these four shops.
(Hint: To accomplish this task you will need to break the given /24 mask into
smaller subnets)
www.configurethenetwork.com
24
D. All serial connections should be configured to use PPP instead of the default
HDLC protocol.
E. This business would like to eliminate the need to administer these routers as
much as possible. Instead of configuring static routes to each site, use a dynamic
routing protocol to establish connections between all four sites.
F. The main shop (Shop 1) will provide a gateway to a remote Flowers Inc. site
that’s not located in the current metro area (163.45.4.1). Configure the Shop 2,
3, and 4 routers with a default route to Shop 1. Configure Shop 1 with a lo0 IP
address 163.45.4.1 /24 (this simulates the remote site location)
G. Configure the routers to use a Class C private IP address for all of its LAN
interfaces.
Note: remember that the following are private IP address ranges that aren’t
allowed to be routed over the internet:
Class A: 10.0.0.0 – 10.255.255.255
Class B: 172.16.0.0 – 172.31.255.255
Class C: 192.168.0.0 – 192.168.255.255
This lab is complete once all shops can communicate via a dynamic routing
protocol, all routers can ping the remote Flowers Inc. location, and all security
measures have been implemented (PPP authentication is optional).
25
Acknowledgements
Additional Resources
There are many great IT certification forums out there, my personal favorite is
www.techexams.net. They provide great supplemental learning about not just
Cisco certifications, but other standard IT certifications as well.
If you enjoyed this free Cisco lab book, you can purchase the full version at
www.configurethenetwork.com which features the following:
www.configurethenetwork.com
26