Ccna

Zoom Technologies® 1

Name: ______________________ Faculty:_____________________ Batch: ______________________

Branch:_____________________

CCNA

Cisco Certified Network Associate Lab Guide

ZOOM Techn

ologie

s


Lab completion report

Name:_________________________ Batch:_________________________

LAB DATE Student Sig Lab Coordinator Sig Remarks

Initial

WAN Int

Static

RIP

EIGRP

OSPF

Access List

NAT

Frame

Relay

VLAN

VTP

Inter-VLAN

Port Security

Sign Of the Faculty _________________________ Imp Note: After completing the lab on every session take the sign

of the lab coordinator, course completion certificate will not be issued otherwise.

ZOOM Techn

ologie

s


ZOOM Techn

ologie

s


Lab 1 - INITIAL ROUTER CONFIGURATION

User mode:

Router >

Router > enable

Show commands:

Router # show running-config

Router # show startup-config

Router # show version

Router # show flash

Moving to Global configuration mode:

Router # configure terminal

Router(config) #

Assigning Hostname to Router

Rotuer(config)#Hostname Hyderabad

Assigning ip address to Ethernet interface:

Hyderabad (config) # interface Ethernet 0

Hyderabad (config-if) # ip address 192.168.1.1 255.255.255.0

Hyderabad (config-if) # no shut

Assigning Telnet password:

Hyderabad (config) # line vty 0 4

Hyderabad (config-line) #login

Hyderabad (config-line) #password zoom

Hyderabad (config-line) #exit

Hyderabad (config) #exit

Assigning console password:

Hyderabad (config) # line con 0

Hyderabad (config-line) # login

Hyderabad (config-line) # password ccna

Hyderabad (config-line) # exit

Hyderabad (config) # exit

Assigning Auxiliary password:

Hyderabad (config) # line aux 0

Hyderabad (config-line) # login

Hyderabad (config-line) # password cisco

Hyderabad (config-line) # exit

Hyderabad (config) # exit

Assigning enable password:

Hyderabad (config) # enable password cisco

ZOOM Techn

ologie

s


Hyderabad (config) # enable secret zoom

Checking the Changes in running-config

Hyderabad # show running-config

Hyderabad # show startup-config

Commands to save the configuration:

Hyderabad # copy running-config startup-config

( OR )

Hyderabad # write memory

( OR )

Hyderabad # wr

Checking the startup-config:

Hyderabad # show startup-config

Check the following if you have completed in the labs

1. Establish Telnet session to the Router

2. Configure hostname to router.

3. Configuring Ethernet interface of the Router

4. Password protection to the Telnet session

5. Password protection to the Console session

6. Password protection to the Auxiliary session

7. Setting up privilege mode Password.

8. Context sensitive help

9. Display the contents of Running-Configuration

10.Display the contents of Startup-configuration

11.Saving the Configuration

12.Establishing a console session to the Router

Important Note Please don’t forget to fill in the Lab Completion Report after the lab and take the signature of the lab coordinator as Course completion certificate will not be issued otherwise.

ZOOM Techn

ologie

s


Lab 2 - WAN INTERFACE CONFIGURATION:

ON CHE:

CHE# configure terminal

CHE(config)# interface serial 0

CHE(config-if)# ip address 172.16.0.1 255.255.0.0

CHE(config-if)# no shutdown

CHE(config-if)# encapsulation hdlc

CHE(config-if)# exit

CHE(config)# exit

ON HYD:

HYD # configure terminal

HYD (config) # interface serial 1

HYD(config-if)#ip address 172.16.0.2 255.255.0.0

HYD(config-if)#no shutdown

HYD(config-if)#clock rate 64000

HYD(config-if)#encapsulation hdlc

HYD(config-if)#^z

HYD# configure terminal

HYD(config) #interface serial 0

HYD(config-if)#ip address 172.17.0.1 255.255.0.0

HYD(config-if)#no shutdown

HYD(config-if)#encapsulation hdlc

HYD(config-if)#clock rate 64000

HYD(config-if)#^z

ON BAN:

BAN# configure terminal

BAN(config)#interface serial 1

BAN(config-if)#ip address 172.17.0.2 255.255.0.0

BAN(config-if)#no shutdown

BAN(config-if)#encapsulation hdlc

BAN(config-if)#^z

E0 192.168.2.1/24

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8

172.16.0.1/16 S0

172.17.0.1/16 S0

E0 192.168.1.1/24

HYD CHE

S1 172.16.0.2/16 S1

172.17.0.2/16 BAN

N

BAN

E0 10.0.0.1/8

LAN - 192.168.2.0/24

ZOOM Techn

ologie

s


Fill the Blanks before Starting your configuration

Router Name:_________________

ROUTER # configure terminal

ROUTER (config) # interface serial _____

ROUTER (config-if) # ip address ___________________ ___________________

ROUTER (config-if) # no shutdown

ROUTER (config-if) # clock rate 64000

ROUTER (config-if) # encapsulation hdlc

ROUTER (config-if) # exit

ROUTER (config) # interface serial _____

ROUTER (config-if) # ip address ___________________ ___________________




ROUTER (config-if) # exit ZOOM Techn

ologie

s


Show commands:

Serial interface troubleshooting

Router # show interfaces s 0

1. Serial 0 is up , line protocol is up (connectivity is fine)

2. Serial 0 is administratively down, line protocol is down

(No Shutdown has to be given on the local router serial interface)

3. Serial 0 is up, line protocol is down

(Encapsulation mismatch or clock rate has to be given on DCE)

4. Serial 0 is down, line protocol is down

(Serial interface on the remote router has to be configure)

Router # show controllers s 0

(To know whether the cable connected to the serial interface is DCE or DTE)

ZOOM Techn

ologie

s


Lab 3.1 - STATIC ROUTING

AREA 0 ON CHE :

CHE # config terminal

CHE(config) # ip routing CHE(config) # ip route 10.0.0.0 255.0.0.0 172.16.0.2

ON HYD :

HYD # config terminal

HYD(config) # ip routing HYD(config) # ip route 192.168.1.0 255.255.255.0 172.16.0.1 HYD(config) # ip route 192.168.2.0 255.255.255.0 172.17.0.2

ON BAN:

BAN # config terminal BAN(config) # ip routing BAN(config) # ip route 10.0.0.0 255.0.0.0 172.17.0.1

Show commands:

ROUTER # show ip route

Debug commands:

ROUTER # debug ip routing

ROUTER # debug ip packet

E0

192.168.2.1/24

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8

172.16.0.1/16 S0

172.17.0.1/16 S0

E0 192.168.1.1/24

HYD CHE

S1 172.16.0.2/16 S1

172.17.0.2/16 BAN

N

BAN

E0 10.0.0.1/8

LAN - 192.168.2.0/24

ZOOM Techn

ologie

s



Router Name:_________________


ROUTER(config) # interface serial 0

ROUTER(config-if) # ip address ___________ _____________

ROUTER(config-if) # no shutdown

ROUTER(config-if) # clock rate 64000

ROUTER(config-if) # encapsulation hdlc

ROUTER(config-if) # exit


ROUTER(config-if) # ip address ___________ _____________





ROUTER(config) #

ROUTER(config) # ip routing

ROUTER(config) # ip route _________________ ___________________ _________

ROUTER(config) # ip route _________________ ___________________ _________ ZOOM Techn

ologie

s


Lab 3.2 - STATIC ROUTING

AREA 0 ON CHE :

CHE # config terminal CHE(config) # ip routing

CHE(config) # ip route 10.0.0.0 255.0.0.0 172.16.0.2 CHE(config) # ip route 192.168.2.0 255.255.255.0 172.16.0.2 CHE(config) # ip route 172.17.0.0 255.255.0.0

172.16.0.2

ON HYD :

HYD # config terminal HYD(config) # ip routing

HYD(config) # ip route 192.168.1.0 255.255.255.0 172.16.0.1 HYD(config) # ip route 192.168.2.0 255.255.255.0 172.17.0.2

ON BAN:

BAN # config terminal

BAN(config) # ip routing BAN(config) # ip route 10.0.0.0 255.0.0.0 172.17.0.1 BAN(config) # ip route 192.168.1.0 255.255.255.0 172.17.0.1 BAN(config) # ip route 172.16.0.0 255.255.0.0

172.17.0.1

Show commands:


E0 192.168.2.1/24

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8

172.16.0.1/16 S0

172.17.0.1/16 S0

E0 192.168.1.1/24

HYD CHE

S1 172.16.0.2/16 S1

172.17.0.2/16 BAN

N

BAN

E0 10.0.0.1/8

LAN - 192.168.2.0/24

ZOOM Techn

ologie

s


Lab 3.3: Default Routing

Router Name:_________________



ROUTER(config-if) # ip address _________________________





ROUTER(config) #


ROUTER(config) # ip route 0.0.0.0 0.0.0.0 _____ ____

CHE E0 192.168.1.1

172.16.0.1

S0

ON CHE :

CHE # config terminal CHE(config) # ip routing CHE(config) # ip route 0.0.0.0 0.0.0.0 s0

Show commands:


ZOOM Techn

ologie

s


1. Assign the IP address and make the serial interface

administratively up.

2. Understanding the importance of extended ping command.

3. Understanding the importance of debug IP packet command.

4. Understanding the routing table.

5. Adding a static route by defining the next hop address.

6. Adding a static route by defining the exit interface.

7. Adding a default route.

ZOOM Techn

ologie

s


Lab 4 - RIP:

AREA 0

ON CHE:

CHE#config terminal CHE(config)#ip routing CHE(config)#router rip CHE(config-router)# network 192.168.1.0 CHE(config-router) # network 172.16.0.0 CHE(config-router) #^z

CHE#

ON HYD :

HYD # config terminal HYD(config) # ip routing HYD(config) # router rip HYD(config-router) # network 10.0.0.0 0

HYD(config-router) # network 172.16.0.0 HYD(config-router) # network 172.17.0.0 HYD(config-router) # ^z HYD#

ON BAN:


BAN(config) # ip routing BAN(config) # router rip BAN(config-router) # network 192.168.2.0 BAN(config-router) # network 172.17.0.0 BAN(config-router) # ^z BAN#

Show commands:

HYD # show ip route

HYD # show ip protocols

Debug commands:

HYD # debug ip rip

HYD# terminal monitor

E0 192.168.2.1/24

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8

172.16.0.1/16 S0

172.17.0.1/16 S0

E0 192.168.1.1/24

HYD CHE

S1 172.16.0.2/16 S1

172.17.0.2/16 BAN

N

BAN

E0 10.0.0.1/8

LAN - 192.168.2.0/24

ZOOM Techn

ologie

s



Router Name:_________________


ROUTER (config) # interface serial 0

ROUTER (config-if) # ip address ____________ ___________






ROUTER (config-if) # ip address ____________ ___________





ROUTER(config) #


ROUTER(config) # router rip

ROUTER(config-router) # network ________________


ROUTER(config-router) # network________________

ROUTER(config-router) # ^z

ROUTER#

ZOOM Techn

ologie

s


1. Enabling RIP Protocol process on the respective networks

2. Understanding the RIP protocol routes in the routing table

3. Understanding the RIP updates using debug IP RIP command

4. Check the A.D usage with RIP and Static

ZOOM Techn

ologie

s


Lab 5 - EIGRP

AREA 0

ON CHE:

CHE # config terminal

CHE(config) # ip routing

CHE(config) # router eigrp 10

CHE(config-router)# network 192.168.1.0

CHE(config-router)# network 172.16.0.0

CHE(config-router)# exit

CHE(config) # exit

ON HYD:

HYD # config terminal

HYD(config) # ip routing

HYD(config) # router eigrp 10

HYD(config-router)#network 10.0.0.0



HYD(config-router)#exit

HYD(config) # exit

ON BAN:


BAN(config) # ip routing

BAN(config) # router eigrp 10

BAN(config-router)#network 192.168.2.0

BAN(config-router)#network 172.17.0.0

BAN(config-router)#exit

BAN(config)#exit

Show commands:

HYD # show ip route

HYD # show ip protocols

Show commands:

HYD # show ip eigrp topology [all]

HYD # show ip eigrp neighbor HYD # show ip eigrp neighbor details

E0 192.168.2.1/24

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8

172.16.0.1/16 S0

172.17.0.1/16 S0

E0 192.168.1.1/24

HYD CHE

S1 172.16.0.2/16 S1

172.17.0.2/16 BAN

N

BAN

E0 10.0.0.1/8

LAN - 192.168.2.0/24

ZOOM Techn

ologie

s



Router Name:_________________



ROUTER (config-if) # ip address ___________ ____________






ROUTER (config-if) # ip address ___________ ____________





ROUTER(config) #


ROUTER(config) # router eigrp _______



ROUTER(config-router) # network________________


ROUTER#

ZOOM Techn

ologie

s


1. Configuration of EIGRP

2. Verify Neighbor table

3. Verify topology table (FD/AD)

4. Verify the routing table

ZOOM Techn

ologie

s


Lab 6 - OSPF

AREA 0

CHE

ON CHE:

CHE # config terminal CHE(config) # ip routing

CHE(config) # router ospf 5 CHE(config-router)#network 192.168.1.0 0.0.0.255 area 0 CHE(config-router)#network 172.16.0.0 0.0.255.255 area 0 CHE(config-router) #^z CHE#

ON HYD:

HYD # config terminal HYD(config) # ip routing

HYD(config) # router ospf 3 HYD(config-router)# network 10.0.0.0 0.255.255.255 area 0 HYD(config-router)# network 172.16.0.0 0.0.255.255 area 0 HYD(config-router)# network 172.17.0.0 0.0.255.255 area 0 HYD(config-router)# ^z

HYD #

ON BAN:

BAN # config terminal BAN(config) # ip routing

BAN(config) # router ospf 3 BAN(config-router)#network 192.168.2.0 0.0.0.255 area 0 BAN(config-router)#network 172.17.0.0 0.0.255.255 area 0 BAN(config-router)#^z BAN#

Show commands:

Router # show ip route

Router # show ip ospf database Router # show ip ospf neighbors

AREA 0

BAN

N

BAN

Debug commands:

Router # debug ip ospf adj

Router # debug ip ospf hello

Router # debug ip ospf packets Router # debug ip ospf events

E0 192.168.2.1/24

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8

172.16.0.1/16 S0

172.17.0.1/16 S0

E0 192.168.1.1/24

HYD CHE

S1 172.16.0.2/16 S1

172.17.0.2/16 BAN

N

BAN

E0 10.0.0.1/8

LAN - 192.168.2.0/24

ZOOM Techn

ologie

s


Fill in the Blanks before starting your configuration

Router Name:_________________



ROUTER (config-if) # ip address ______________ _________






ROUTER (config-if) # ip address ______________ _________





ROUTER(config) #


ROUTER(config) # router OSPF ____

ROUTER(config-router) # network _________ _______ area _____




ROUTER#

ZOOM Techn

ologie

s


1. Configuration of OSPF

2. Automatic selection process of router-id

3. Debugging and understanding the functioning of hello packet

4. Debugging and understanding the adjacency formation

5. Verification of OSPF database

6. Verification of OSPF Neighbor table

7. Election of DR/BDR

ZOOM Techn

ologie

s


Lab 7 - STANDARD ACCESS-LIST:

SCENARIO 1:

Only 192.168.2.0 should communicate with

192.168.1.0

ON CHE:

CHE #config terminal

CHE (config) # access-list 1 permit

192.168.2.0 0.0.0.255

CHE (config) # int e0

CHE (config-if) # ip access-group 1 out

CHE (config-if) # exit

CHE (config) # exit

CHE # show ip access-list

Note: Use the command prompt of a PC try

to ping the filtered ip address

SCENARIO 2:

Configuration of an access-list on HYD that

administrative access through Telnet is

possible only from 10.0.0.10

ON HYD:

HYD #config terminal

HYD (config) # access-list 1 permit

10.0.0.10 0.0.0.0

HYD (config) # line vty 0 4

HYD (config-line) # ip access-class in

HYD (config-line) # exit

HYD (config) # exit

HYD # show ip access-list

SCENARIO 3:

Configuration of an standard access-list on

Bangalore Ethernet 0 in the outbound

direction denying 10.0.0.10

ON BAN:

BAN #config terminal

BAN (config) # access-list 1 deny 10.0.0.10

0.0.0.0

BAN (config)#access-list 1 permit any

BAN (config)#interface Ethernet 0

BAN (config-if) # ip access-group 1 out

BAN (config-if) # exit

BAN (config) # exit

E0 192.168.2.1/24

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8

172.16.0.1/16 S0

172.17.0.1/16 S0

E0 192.168.1.1/24

HYD CHE

S1 172.16.0.2/16 S1

172.17.0.2/16 BAN

N

BAN

E0 10.0.0.1/8

LAN - 192.168.2.0/24

ZOOM Techn

ologie

s


SCENARIO :3

Configuration of an extended access-list BAN serial 1 in inbound direction.

Deny HTTP from Chen LAN to Bang LAN.

Permit all other service from any network.

On BAN:

BAN#configure terminal BAN (config)#access-list 111 deny tcp 192.168.1.0

0.0.0.255 192.168.2.0 0.0.0.255 eq 80

BAN (config)#access-list 111 permit ip any any BAN (config)#interface serial 1 BAN (config-if)#ip access-group 111 in BAN (config-if)^z BAN # sh ip access-list

SCENARIO :1

Configuration of an extended access-list HYD Ethernet 0 in outbound direction.

Allow only FTP service to be access from Bang

LAN

On HYD:

HYD#configure terminal HYD (config)#access-list 101 permit tcp 192.168.2.0

0.0.0.255 10.0.0.10 0.0.0.0 eq ftp

HYD (config)#interface ethernet 0 HYD (config-if)#ip access-group 101 out HYD (config-if)#exit HYD (config)#

HYD # sh ip access-list

SCENARIO :2 Configuration of an extended access-list CHESerial 0 in inbound direction

deny PING (Echo) from Bang LAN to Chen LAN permit all other services.

On CHE:

CHE#configure terminal

CHE (config)#access-list 110 deny icmp 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255 echo CHE (config)#access-list 110 permit ip any any CHE (config)#interface serial 0

CHE (config-if)#ip access-group 110 in CHE (config-if)^z CHE # sh ip access-list

Lab 8 - EXTENDED ACCESS-LIST:

`

E0 192.168.2.1/24

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8

172.16.0.1/16 S0

172.17.0.1/16 S0

E0 192.168.1.1/24

HYD CHE

S1 172.16.0.2/16 S1

172.17.0.2/16 BAN

N

BAN

E0 10.0.0.1/8

LAN - 192.168.2.0/24

ZOOM Techn

ologie

s


1. Configure any routing protocol (e.g. RIP) & check the

communication

2. Configure Standard access-list on CHE Ethernet 0 in the out

bound direction, permitting only 192.168.2.0

3. Configure an access-list on HYD that administrative access

through Telnet is possible only from 10.0.0.10

4. Configure an access-list on BAN Ethernet 0 in the outbound direction, denying 10.0.0.10 host only

5. Configuration an access-list on CHE serial 0 in the inbound direction, deny ping request from 192.168.2.0 to

192.168.1.0 and permitting any other services.

6. Configuration of an extended access-list on HYD Ethernet 0 in the outbound direction permitting only FTP service from

the network 192.168.2.0 to 10.0.0.10

7. Configuration of an extended access-list on BAN serial 1 in

inbound direction denying HTTP from 192.168.1.0 to 192.168.2.0 and permitting other traffic from any network to 192.168.2.0 network.

ZOOM Techn

ologie

s


LAB 9: FRAME RELAY

S1.1

172.16.0.2/16

172.17.0.1/16

S1.2

S0.1

172.16.0.1/16 S0.2

172.19.0.1/16

S1.1

172.19.0.2/16

172.18.0.2/16

S1.2

S0.2

172.18.0.1/16

S0.1

172.17.0.2/16

DLCI

500 DLCI

400

DLCI

200 DLCI

700

DLCI

800

DLCI

600 DLCI

300

DLCI

100

BAN

CHE

AREA 0

BOM

<

GOA

ZOOM Techn

ologie

s


CONFIGURATION ON CHE:

CHE# CHE# config terminal

CHE(config)# interface serial 0 CHE(config-if)# no ip address CHE(config-if)# no shut CHE(config-if)# encapsulation frame-relay CHE(config-if)#frame-relay lmi-type cisco CHE(config-if)# exit

CHE(config)# interface serial 0.1 point-to-point

CHE(config-if)#ip address 172.16.0.1 255.255.0.0 CHE(config-if)#frame-relay interface-dlci 200 CHE(config-if-dlci)#exit CHE(config-if)#exit CHE(config)# interface serial 0.2 point-to-point CHE(config-if)#ip address 172.19.0.1 255.255.0.0

CHE(config-if)#frame-relay interface-dlci 700 CHE(config-if-dlci)#exit CHE(config-if)#exit CHE(config)#^z CHE#

Show commands:

ROUTER# show frame-relay pvc ROUTER# show frame-relay map ROUTER # show ip route

CONFIGURATION ON BAN:

BAN# BAN # config terminal BAN (config)# interface serial 1 BAN (config-if)# no ip address BAN (config-if)# no shut BAN (config-if)# encapsulation frame-relay

BAN (config-if)#frame-relay lmi-type cisco BAN (config-if)# exit BAN (config)# interface serial 1.1 point-to-point

BAN (config-if)#ip address 172.16.0.2 255.255.0.0 BAN (config-if)#frame-relay interface-dlci 100 BAN (config-if-dlci)#exit

BAN (config-if)#exit BAN (config)# interface serial 1.2 point-to-point BAN (config-if)#ip address 172.17.0.1 255.255.0.0 BAN (config-if)#frame-relay interface-dlci 300 BAN (config-if-dlci)#exit BAN (config-if)#exit BAN (config)#^z

BAN # CONFIGURATION ON BOM:

BOM# BOM # config terminal BOM(config)# interface serial 1 BOM(config-if)# no ip address BOM(config-if)# no shut BOM(config-if)# encapsulation frame-relay

BOM(config-if)#frame-relay lmi-type cisco BOM(config-if)# exit BOM(config)# interface serial 1.1 point-to-point

BOM(config-if)#ip address 172.19.0.2 255.255.0.0 BOM(config-if)#frame-relay interface-dlci 800 BOM(config-if-dlci)#exit

BOM(config-if)#exit BOM(config)# interface serial 1.2 point-to-point BOM(config-if)#ip address 172.18.0.2 255.255.0.0 BOM(config-if)#frame-relay interface-dlci 600 BOM(config-if-dlci)#exit BOM(config-if)#exit BOM(config)#^z

BOM#

CONFIGURATION ON GOA:

GOA# GOA # config terminal GOA(config)# interface serial 0 GOA(config-if)# no ip address GOA(config-if)# no shut GOA(config-if)# encapsulation frame-relay GOA(config-if)#frame-relay lmi-type cisco

GOA(config-if)# exit GOA(config)# interface serial 0.1 point-to-point

GOA(config-if)#ip address 172.17.0.2 255.255.0.0 GOA(config-if)#frame-relay interface-dlci 400 GOA(config-if-dlci)#exit GOA(config-if)#exit

GOA(config)# interface serial 0.2 point-to-point GOA(config-if)#ip address 172.18.0.1 255.255.0.0 GOA(config-if)#frame-relay interface-dlci 500 GOA(config-if-dlci)#exit GOA(config-if)#exit GOA(config)#^z GOA#

ZOOM Techn

ologie

s


1. Configuration of the frame-relay encapsulations

2. Observation of the status of PVCs

3. Verification of the frame relay map

4. Configure static routing on Frame relay and check communication

5. Verification of the routing tables

ROUTER#

ROUTER# config terminal

ROUTER(config)# interface serial ____

ROUTER(config-if)# no ip address

ROUTER(config-if)# no shut

ROUTER(config-if)# encapsulation frame-relay

ROUTER(config-if)#frame-relay lmi-type cisco

ROUTER(config-if)# exit

ROUTER(config)# interface serial ____.___ point-to-point

ROUTER(config-if)#ip address ____________ ____________

ROUTER(config-if)#frame-relay interface-dlci _____

ROUTER(config-if-dlci)#exit

ROUTER(config-if)#exit

ROUTER(config)# interface serial ___.____ point-to-point

ROUTER(config-if)#ip address ____________ ____________

ROUTER(config-if)#frame-relay interface-dlci _____

ROUTER(config-if-dlci)#exit

ROUTER(config-if)#exit

ROUTER(config)#^z

ROUTER# ZOOM Techn

ologie

s


Lab 10 - VLAN

ON 192.168.20.50

VLAN CREATION:

2950 # config terminal

2950(config) # vlan 10

2950(config-vlan) # name sales


2950(config-vlan) # name mkt

ASSIGNING MEMBERSHIP TO THE PORTS:

2950(config) # interface range fa0/1 -2

2950(config-if) # switchport mode access

2950(config-if) # switchport access vlan 10

2950(config-if) # exit

2950(config)#interface range fa0/4 - 5

2950(config)# switchport access vlan 20

TRUNKING:


2950(config) #interface fa0/24

2950(config-if) # switchport mode trunk

2950(config-if) # switchport trunk allowed vlan all


2950(config) # exit

ON 192.168.20.51

VLAN CREATION:



2950(config-vlan) # name sales


2950(config-vlan) # name mkt

ASSIGNING MEMBERSHIP TO THE PORTS:

2950(config) # interface range fa0/13 - 14

2950(config-if) # switchport mode access

2950(config-if) # switchport access vlan 10


2950(config)#interface range fa0/16 - 17

2950(config)# switchport access vlan 20

TRUNKING:


2950(config) #interface fa0/24

2950(config-if) # switchport mode trunk

2950(config-if) # switchport trunk allowed vlan all


2950(config) # exit

ZOOM Techn

ologie

s


Lab 11 - Inter-VLAN

switch# configure terminal

switch(config)#vlan 10

switch(config-vlan)# name Sales

switch(config-vlan)# exit

switch(config)# vlan 20

switch(config-vlan)# name Marketting

switch(config-vlan)# exit

switch(config)# interface range fa0/1 - 2

switch(config-if-range)# switchport mode access

switch(config-if-range)# switchport access vlan 10

switch(config-if-range)# exit

switch(config)# interface range fa0/5 - 6

switch(config-if-range)# switchport mode access

switch(config-if-range)# switchport access vlan 20

switch(config-if-range)# exit

switch(config)# interface fa0/10

switch(config-if)# switchport mode trunk

switch(config-if)# switchport trunk allowed vlan all switch(config-if)# exit

router#configure terminal

router(config)# interface ethernet 0

router(config-if)# no ip address

router(config-if)# no shutdown

router(config-if)# exit

router(config)# interface ethernet 0.1

router(config-if)# encapsulation dot1q 10

router(config-if)# ip address 192.168.1.1

255.255.255.0


router(config)# interface ethernet 0.2

router(config-if)# encapsulation dot1q 20

router(config-if)# ip address 192.168.2.1

255.255.255.0


router(config)# no ip routing router(config)# ip routing ZOOM Techn

ologie

s


1. Verification of MAC address table

2. Creation of VLAN

3. Assigning the hosts to a VLAN

4. Configure Trunking between switches

5. Created Sub-interfaces on Router

6. Changed sub-interface encapsulation to dot1q

7. Configuration of encapsulation for the trunk link

8. Inter-VLAN communication through an external router.

9. Understanding the concepts of VTP modes

Server mode

Client mode

Transparent mode

ZOOM Techn

ologie

s


Lab 12 - Port Security

Switch(config-if)#Switchport port-security

Switch(config-if)#Switchport port-security maximum <value>

Switch(config-if)#Switcport port-security mac-address <mac-address> Switch(config-if)#Switchport port-security violation{protect|restrict|shutdown}

ZOOM Techn

ologie

s


Lab 13 – NAT Configuration

Configuration of PAT


CHE(config)# interface s0

CHE(config-if)#ip address 202.1.0.18

255.255.255.248

CHE(config-if)#no shutdown

CHE(config-if)#encapsulation ppp

CHE(config-if)#ip nat outside

CHE(config-if)#exit

CHE(config)#interface Ethernet 0

CHE(config-if)#ip nat inside

CHE(config-if)#exit

CHE(config)#access-list 10 permit 192.168.1.0

0.0.0.255

CHE(config)#ip nat inside source list 10

interface serial 0 overload

CHE(config)#exit

CHE#

Configuration of Static NAT


CHE(config)# interface s0

CHE(config-if)#ip address 202.1.0.18

255.255.255.248

CHE(config-if)#no shutdown

CHE(config-if)#encapsulation ppp

CHE(config-if)#ip nat outside

CHE(config-if)#exit

CHE(config)#interface Ethernet 0

CHE(config-if)#ip nat inside

CHE(config-if)#exit

CHE(config)#ip nat inside source static 192.168.1.10 202.1.0.19

Show Commands

CHE# show ip nat translation

CHE# debug ip nat

ZOOM Techn

ologie

s


Check the following if you have completed the lab

1. Configure and verify Static Nat

2. Configure and verify Port Address Translation

3. Check the Nat table

4. Configure and verify PAT

5. Debugging of NAT

ZOOM Techn

ologie

s

Documents

Ccna