ESwitching Basic Switching/Wireless
PT Practice SBA
A few things to keep in mind while
completing this activity:
1.Do not use the browser Back button or close or reload any Exam windows during the exam.
2.Do not close Packet Tracer when you are done. It will close automatically.
3.Click the Submit Assessment button to submit your work.
1.Do not use the browser Back button or close or reload any Exam windows during the exam.
2.Do not close Packet Tracer when you are done. It will close automatically.
3.Click the Submit Assessment button to submit your work.
Introduction
In
this practice Packet Tracer Skills Exam, you will:
·
configure VLANs using VTP
·
configure inter-VLAN routing
·
modify ST
·
configure port securit
·
add a wireless LAN
Addressing Table
Note: The password
for user EXEC mode is cisco. The password for privileged EXEC mode isclass
Step 1:
Connect the Devices.
Use the appropriate cable type
to make the following connections:
·
SW_AC2 FastEthernet 0/1 to
PC1FastEthernet
·
SW_AC2 FastEthernet 0/11 to
PC2FastEthernet
·
SW_AC2 FastEthernet 0/19 to SW_AC3 FastEthernet
0/19
·
SW_AC2 FastEthernet 0/20 to SW_AC3
FastEthernet 0/20
·
SW_AC3 FastEthernet 0/18 to
WRSInternet
(cek jenis kabel yang sesuai,biasany
sudah terhubung dengan kabel yang sesuai)
Sekarang masuk ke step selanjutnya
Sekarang masuk ke step selanjutnya
Step2:
Configure the Device Basics.
a. Configure the following on
SW_AC2.
The switch name is SW_AC2
Switch>enable
Switch#configure terminal
Enter configuration
commands, one per line. End with CNTL/Z.
Switch(config)#hostname
SW_AC2SW_AC2(config)#
The privileged EXEC mode uses the
following encrypted password: class
SW_AC2(config)#enable password class
Enable Telnet and console line login
using the following password: cisco
SW_AC2(config)#line vty 0
SW_AC2(config-line)#password
cisco
SW_AC2(config-line)#exit
SW_AC2(config)#line console 0
SW_AC2(config-line)#login% Login
disabled on line 0, until 'password' is set
SW_AC2(config-line)#password
ciscoSW_AC2(config-line)#exit
Configure the banner
message-of-the-day as Authorized access only!
SW_AC2(config)#banner motd #
Enter TEXT message. End
with the character '#'.
Authorized access only!#
SW_AC2(config)#
b.To configure the switches
for remote management access, create and enable interface VLAN 43 on all
threeswitches.
SW_DS1(config)#interface vlan 43
SW_DS1(config-if)#ip address
172.16.43.11 255.255.255.0
SW_DS1(config-if)#no shutdown
SW_DS1(config-if)#exit
SW_DS1(config)#ip default-gateway
172.16.43.1
SW_AC2(config)#interface vlan 43
SW_AC2(config-if)#ip address
172.16.43.12 255.255.255.0
SW_AC2(config-if)#no shutdown
SW_AC2(config-if)#exit
SW_AC2(config)#ip default-gateway
172.16.43.1SW_AC3(config)#interface vlan 43
SW_AC3(config-if)#ip address
172.16.43.13 255.255.255.0
SW_AC3(config-if)#no shutdown
SW_AC3(config-if)#exit
SW_AC3(config)#ip default-gateway 172.16.43.1
SW_AC3(config)#
Step 3:
Configure Trunking.
Note: Packet Tracer now
supports the use of the range argument for
the interface command. For interfaces FastEthernet 0/19 through
FastEthernet 0/24 on all three switches:
·
Configure static trunking.
·
Assign VLAN 43 as the native
VLAN.
SW_DS1(config)#interface range
fastEthernet 0/19-24
SW_DS1(config-if-range)#switchport
mode trunk
SW_DS1(config-if-range)#switchport
trunk native vlan 43
SW_DS1(config-if-range)#no
shutdown
SW_DS1(config-if-range)#end
SW_AC2(config)#interface range
fastEthernet 0/19-24
SW_AC2(config-if-range)#switchport
mode trunk
SW_AC2(config-if-range)#switchport trunk
native vlan 43
SW_AC2(config-if-range)#no shutdown
SW_AC2(config-if-range)#end
SW_AC3(config)#interface range
fastEthernet 0/19-24
SW_AC3(config-if-range)#switchport
mode trunk
SW_AC3(config-if-range)#switchport
trunk native vlan 43
SW_AC3(config-if-range)#no
shutdown
SW_AC3(config-if-range)#end
Step 4:
Configure VTP and VLANs.
a.Step 1: Configure SW_DS1 as VTP
server and the following VTP parameters:
·
SW_DS1 is the VTP server.
·
VTP domain name:CCNA
·
VTP password: cisco
SW_DS1(config)#vtp mode
server Setting device to VTP SERVER mode.
SW_DS1(config)#vtp domain
CCNAChanging VTP domain name from NULL to CCNA
SW_DS1(config)#vtp password
ciscoSetting device VLAN database password to cisco
b.Create and name the following
VLANs on SW_DS1.
VLAN 10: Student
VLAN 20: Faculty
VLAN 43: Management
VLAN 67: Wireless
SW_DS1(config)#vlan 10
SW_DS1(config-vlan)#name
Student
SW_DS1(config-vlan)#vlan 20
SW_DS1(config-vlan)#name
Faculty
SW_DS1(config-vlan)#vlan 43
SW_DS1(config-vlan)#name
Management
SW_DS1(config-vlan)#vlan 67
SW_DS1(config-vlan)#name
Wireless
SW_DS1(config-vlan)#end
c.Step 2: Configure SW_AC2 and
SW_AC3 as VTP clients to participate in the CCNA VTP domain.
SW_AC2(config)#vtp mode
clientSetting device to VTP CLIENT mode.
SW_AC2(config)#vtp domain CCNADomain
name already set to CCNA.
SW_AC2(config)#vtp password cisco
Setting device VLAN database
password to cisco
SW_AC2(config)#end
SW_AC3(config)#vtp mode
clientSetting device to VTP CLIENT mode.
SW_AC3(config)#vtp domain CCNADomain
name already set to CCNA.
SW_AC3(config)#vtp password ciscoSetting
device VLAN database password to cisco
SW_AC3(config)#end
d.Step3: Verify that VTP is
operational.
SW_AC2#show vtp status
SW_AC3#show vtp status
or
SW_AC2#show vlan brief
SW_AC3#show vlan brief
Step 5:
Configure Interfaces for VLAN Access
VLAN port assignments on each switch
are as follows
Step 1: Configure access ports on
access layer switches.
Configure the appropriate interfaces
on SW_AC2 and SW_AC3 for static access.
Assign VLANs according to the port
assignments table.
SW_AC2(config)#interface range
fastEthernet 0/1-17
SW_AC2(config-if-range)#switchport
mode trunk
SW_AC2(config-if-range)#no shutdown
SW_AC2(config-if-range)#exit
SW_AC2(config)#interface range
fastEthernet 0/1-10
SW_AC2(config-if-range)#switchport
access vlan 10
SW_AC2(config-if-range)#no shutdown
SW_AC2(config-if-range)#exit
SW_AC2(config)#interface range
fastEthernet 0/11-17
SW_AC2(config-if-range)#switchport
access vlan 20
SW_AC2(config-if-range)#no
shutdownSW_AC2(config-if-range)#exit====================================================
SW_AC3(config)#interface range
fastEthernet 0/1-18
SW_AC3(config-if-range)#switchport
mode trunk
SW_AC3(config-if-range)#no
shutdown
SW_AC3(config-if-range)#exit
SW_AC3(config)#interface range
fastEthernet 0/1-10
SW_AC3(config-if-range)#switchport
access vlan 10
SW_AC3(config-if-range)#no
shutdown
SW_AC3(config-if-range)#exit
SW_AC3(config)#interface range
fastEthernet 0/11-17
SW_AC3(config-if-range)#switchport
access vlan 20
SW_AC3(config-if-range)#no
shutdown
SW_AC3(config-if-range)#exit
SW_AC3(config)#interface
fastEthernet 0/18
SW_AC3(config-if-range)#switchport
access vlan 67
SW_AC3(config-if-range)#no
shutdown
SW_AC3(config-if-range)#exit
b. Step 2: Verify trunking
and VLAN assignments.
SW_AC2#show interface
switchport
SW_AC3#show interface
switchport
SW_AC2#show interface trunk
SW_AC3#show interface trunk
SW_AC2#show vlan brief
SW_AC3#show vlan brief
Step 6:
Configure Spanning Tree.
a. Modify STP root bridge
elections.
Using a priority of 4096, set
SW_DS1 as the root bridge for all VLANs
SW_DS1(config)#spanning-tree vlan
1 priority 4096
SW_DS1(config)#spanning-tree vlan
10 priority 4096
SW_DS1(config)#spanning-tree vlan
20 priority 4096
SW_DS1(config)#spanning-tree vlan
43 priority 4096
SW_DS1(config)#spanning-tree vlan
67 priority 4096
Using a priority of 8192, set
SW_AC2 as the backup root bridge for all VLANs
SW_AC2(config)#spanning-tree vlan
1 priority 8192
SW_AC2(config)#spanning-tree vlan
10 priority 8192
SW_AC2(config)#spanning-tree vlan
20 priority 8192
SW_AC2(config)#spanning-tree
vlan 43 priority 8192
SW_AC2(config)#spanning-tree vlan
67 priority 8192
b.Verify the spanning tree
election.
SW_AC2#show spanning-tree vlan 43
Step 7: Configure Inter-VLAN Routing.
Use the information in the
Addressing Table to configure Router1 for inter-VLAN routing. Verify
inter-VLAN routing.
Router1(config)#interface
fastEthernet 0/0
Router1(config-if)#no shutdown
Router1(config-if)#exit
Router1(config-if)#interface
fastEthernet 0/0.10
Router1(config-subif)#encapsulation
dot1Q 10
Router1(config-subif)#ip address
172.16.10.1 255.255.255.0
Router1(config-subif)#exit
Router1(config)#interface
fastEthernet 0/0.20
Router1(config-subif)#encapsulation
dot1Q 20
Router1(config-subif)#ip address
172.16.20.1 255.255.255.0
Router1(config-subif)#exit
Router1(config)#interface
fastEthernet 0/0.43
Router1(config-subif)#encapsulation
dot1Q 43
Router1(config-subif)#ip address
172.16.43.1 255.255.255.0
Router1(config-subif)#exit
Router1(config)#interface
fastEthernet 0/0.67
Router1(config-subif)#encapsulation
dot1Q 67
Router1(config-subif)#ip address
172.16.67.1 255.255.255.0
Router1(config-subif)#end
Step 8: Configure Port
Security.
Note: Best practice requires port security on all access
ports. However, for this practice exercise you will only configure one
port with security.
a.Configure SW_AC3 with port security
on FastEthernet 0/2.
-No more than 2 MAC addresses are
allowed on the FastEthernet 0/2 port for SW_AC3.
-Once learned, MAC addresses
should be automatically added to the running configuration.
-If this policy is violated,
the port should be automatically disabled.
SW_AC3(config)#interface
fastEthernet 0/2
SW_AC3(config-if)#switchport
port-security
SW_AC3(config-if)#switchport
port-security maximum 2
SW_AC3(config-if)#switchport
port-security mac-address sticky
SW_AC3(config-if)#switchport
port-security violation shutdown
SW_AC3(config-if)#exit
b.Verify that port security is
implemented
SW_AC3#show port-security address
df
xfdfd
Step 9:
Configure the Wireless LAN.
Refer to the Addressing Table
to configure the wireless LAN.
a.Configure WRS.
-Use static addressing on the
Internet interface.
-Set the router IP and subnet mask.
-Configure the router to allow
wireless hosts to use DHCP.
-The first host address is the
10th host address in the Wireless LAN subnet.
-The maximum number of hosts is 25.
