NET 126 Winston Salem State University CCNA Routing and Switching Worksheet

Determine the IP Addressing Scheme to Assign

Determine the IP addresses that you will use for the required interfaces on the three routers, three switch VLANs, and three hosts.

Configure Routers

Configure Routers with the following:

• Configure the router host names, as seen in the graphic.
• Prevent the routers from attempting to resolve command line entries to IP addresses. ( Think about it )
• Prevent device status messages from interrupting command line entries at the device console.
• Secure the router console, terminal lines, and privilege exec mode.
• Prevent all passwords from being viewed in clear text in the device configuration file.
• Configure a message-of-the-day banner.
• Enable and implement SSH.

Configure the Router Physical Interfaces

Configure the interfaces of the routers for full connectivity with the following:

• Describe the operational serial interfaces. (May use L2 ports instead)
• DCE settings where appropriate. Use a rate of 128000. (Not needed with L2 Ethernet cards)

Configure static and default routing

Configure the following static routes:

• In the Accounting router, manually configure a default route to the next hop.
• Use static routes only for a network the is not advertised in OSPF

Configure VLANs and Trunking

Configure IT-SW1, IT-SW2, and IT-SW3 with VLANs and trunk ports as follows:

• There should be at least three VLANs in the IT domain
• Configure names for the VLANs.
• Configure the appropriate ports that link the switches and the router as functioning trunk ports.
• Assign the switch ports to hosts as access ports
• The management interfaces of both switches should configured to be reachable by hosts on other networks.
• Configure all unused switch ports as access ports, and shutdown the unused ports.
• Add dynamic port security.

Configure DHCP

Gateway router should be configured as a DHCP server that provides addressing to the hosts attached to IT-SW1 and IT-SW2. IT should be set as a DHCP Relay Agent. The requirements are as follows:

• Addresses .1 to .20 should be reserved for static assignment from the pool.
• The first address in the network will be assigned to the router interface attached to the network.
• Use a DNS server address of 192.168.18.100. This server has not yet been added to the network, but the address must be configured. Domain name must be net126-final.com
• Ensure that hosts in each LAN are able to communicate with host AC on the remote network.

Configure NAT

Configure NAT to translate internal private addresses into public addresses for the Internet. The requirements are:

a. Configure static NAT to host AC.

• Configure the correct interfaces to perform this NAT translation.

b.Configure NAT with overload, or PAT.

• Accounting LAN hosts (not visible on the topology) should be permitted to use the PAT address to
• access the Internet.
• Use a source list number of 1.

Configure Access Control Lists

You will configure two access control lists to limit device access on Accounting. You should use the any and host keywords in the ACL statements as required. The ACL requirements are:

a. Restrict access to the vty lines on Accounting:

• Create a named extended ACL using the name MANAGE. Be sure that you use this name exactly as it appears in these instructions (case and spelling).
• Allow only the WAN_ADMIN Host to access the vty lines of Accounting.
• No other Internet hosts (including Internet hosts not visible in the topology) should be able to access the vty lines of Accounting.
• Your solution should consist of a single ACL statement.

b. Allow outside access to the host AC while controlling other traffic from the outside. Create the ACL as directed below:

• Use access list number 101.
• First, allow WAN_ADMIN Host full access to all network hosts and devices.
• Then, allow outside hosts to access host AC over HTTP only.
• Allow ICMP traffic from WAN_ADMIN and LAN_ADMIN only to host AC.
• Your ACL should be placed in the most efficient location possible to conserve network bandwidth and device processing resources.

Configure Router-on-a-Stick Inter-VLAN Routing.

Configure IT to provide routing between the VLANs configured on the switches. As follows:

• Use the VLAN numbers for the required interface numbers.
• Use the first addresses in the VLAN networks for the interfaces.

Test and Troubleshoot Connectivity.

Verify communication of WAN-ADMIN, LAN_ADMIN, and AC through the use of ping. Ensure your ACLs are functioning as intended.