German Jordanian University
Computer Networks — Fall 2025/2026
Packet Tracer Assignment
Network Design and Implementation Report
Submitted by: [Group Members Names]
Date: June 2026
Weight: 10%
1. Introduction
This report documents the design and implementation of a computer network topology using
Cisco Packet Tracer. The network consists of two separate subnets connected through a
central router (R1), which also functions as a DHCP server. The assignment covers IP
addressing, DHCP configuration, inter-network connectivity, SSH security, and device
hardening.
The two networks implemented are [Link]/24 (left side) and [Link]/24 (right
side), interconnected via router R1 acting as the gateway for both subnets.
2. Network Topology
The network topology includes the following devices and interconnections:
Device Type Role Network
R1 Cisco 2911 Router Gateway + DHCP Server Both networks
R2 Cisco 2911 Router DHCP Client [Link]/24
SW1 Cisco 2960-24TT Access Switch [Link]/24
SW2 Cisco 2960-24TT Access Switch [Link]/24
SW3 Cisco 2960-24TT Access Switch [Link]/24
PC1 PC-PT DHCP Client [Link]/24
PC2 (Admin) PC-PT Admin Workstation [Link]/24
Server0 Server-PT Static Host [Link]/24
2.1 Physical Connections
From Device Interface To Device Interface
PC1 Fa0 SW1 Fa0/1
SW1 Fa0/2 SW2 Fa0/3
SW2 Fa0/1 PC2 Fa0
SW2 Fa0/3 R1 Gig0/0
R1 Gig0/1 SW3 Fa0/1
SW3 Fa0/2 Server0 Fa0
SW3 Fa0/3 R2 Fa0/3
3. IP Addressing Scheme
The network uses two subnets with /24 prefix length. Static IP addresses are assigned to
infrastructure devices, while end-user devices (PC1, PC2, R2) receive their addresses
dynamically via DHCP.
Device Interface IP Address Subnet Mask Assignment
R1 Gig0/0 [Link] [Link] Static
R1 Gig0/1 [Link] [Link] Static
SW1 VLAN 1 [Link] [Link] Static
SW2 VLAN 1 [Link] [Link] Static
SW3 VLAN 1 [Link] [Link] Static
PC1 Fa0 [Link]+ [Link] DHCP
PC2 Fa0 [Link]+ [Link] DHCP
R2 Fa0/3 [Link]+ [Link] DHCP
Server0 Fa0 [Link] [Link] Static
* DHCP addresses start from .11 as the first 10 addresses are excluded for static assignment.
4. DHCP Configuration
Router R1 is configured as the DHCP server for both subnets. Two DHCP pools are created:
one for the [Link]/24 network (LAN1) and one for the [Link]/24 network
(LAN2). The first 10 addresses in each subnet are excluded from dynamic assignment to
reserve them for static infrastructure devices.
DHCP Configuration Commands on R1:
ip dhcp excluded-address [Link] [Link]
ip dhcp excluded-address [Link] [Link]
ip dhcp pool LAN1
network [Link] [Link]
default-router [Link]
dns-server [Link]
ip dhcp pool LAN2
network [Link] [Link]
default-router [Link]
PC1, PC2, and R2 are configured as DHCP clients. Upon connecting to the network, they
automatically receive an IP address, subnet mask, default gateway, and DNS server from R1.
5. Device Configuration
5.1 Router R1 — Full Configuration
R1 serves as the central router and DHCP server. Key configurations include interface IP
addressing, DHCP pools, SSH access, and security hardening.
hostname R1
banner motd #Authorized Access Only - R1#
enable secret class
service password-encryption
interface GigabitEthernet0/0
ip address [Link] [Link]
no shutdown
interface GigabitEthernet0/1
ip address [Link] [Link]
no shutdown
line console 0
password cisco
login
ip domain-name [Link]
crypto key generate rsa (1024 bits)
ip ssh version 2
username admin secret cisco123
line vty 0 4
transport input ssh
login local
5.2 Router R2 — DHCP Client
R2 acts as a DHCP client, receiving its IP address dynamically from R1 via the LAN2 pool.
hostname R2
banner motd #Authorized Access Only - R2#
enable secret class
service password-encryption
interface FastEthernet0/3
ip address dhcp
no shutdown
line console 0
password cisco
login
ip domain-name [Link]
crypto key generate rsa (1024 bits)
ip ssh version 2
username admin secret cisco123
line vty 0 4
transport input ssh
login local
5.3 Switches (SW1, SW2, SW3)
All three switches are configured with management IP addresses on VLAN 1, a default gateway
pointing to R1, SSH remote access, console password, banner message, and password
encryption.
! Example: SW1
hostname SW1
banner motd #Authorized Access Only - SW1#
enable secret class
service password-encryption
interface vlan 1
ip address [Link] [Link]
no shutdown
ip default-gateway [Link]
line console 0
password cisco
login
ip domain-name [Link]
crypto key generate rsa (1024 bits)
ip ssh version 2
username admin secret cisco123
line vty 0 4
transport input ssh
login local
! SW2: VLAN 1 IP = [Link]
! SW3: VLAN 1 IP = [Link] / default-gateway = [Link]
6. Security Configuration
Security is applied consistently across all network devices. The following measures were
implemented:
Security Measure Configuration Applied To
Enable Secret enable secret class All routers & switches
Console Password password cisco / login All routers & switches
SSH v2 Access ip ssh version 2 All routers & switches
SSH Credentials username admin secret cisco123 All routers & switches
VTY Lines transport input ssh / login local All routers & switches
Banner MOTD Authorized Access Only All routers & switches
Password Encryption service password-encryption All routers & switches
SSH was chosen over Telnet because it encrypts all traffic including passwords, making it the
industry-standard protocol for secure remote device management. The RSA key size of 1024
bits is the minimum required by Cisco IOS to enable SSH version 2.
7. Connectivity Testing
After completing all configurations, connectivity was verified using the ping command from
PC1. The following tests were performed and all returned successful results (0% packet loss):
Source Destination IP Address Result
PC1 R1 (LAN1 gateway) [Link] Success
PC1 SW1 management [Link] Success
PC1 SW2 management [Link] Success
PC1 R1 (LAN2 gateway) [Link] Success
PC1 Server0 [Link] Success
PC1 SW3 management [Link] Success
PC2 PC1 [Link] Success
SSH access was also tested by connecting from PC1 to R1 using the command: ssh -l
admin [Link]. The connection was established successfully and the banner
message was displayed upon login.
8. Conclusion
This assignment successfully demonstrated the design and implementation of a multi-subnet
network topology using Cisco Packet Tracer. The network was built with two subnets
([Link]/24 and [Link]/24) interconnected through a central router R1.
Key achievements of this assignment include: correct IP addressing across all devices,
functional DHCP service providing dynamic addressing to PC1, PC2, and R2, full end-to-end
connectivity verified through ping tests, and comprehensive security configuration including
SSH access, console passwords, enable secret, banner messages, and password encryption
on all network devices.
This exercise reinforced practical understanding of network fundamentals including subnetting,
routing, DHCP operation, and Cisco IOS security features commonly used in real-world
enterprise networks.
German Jordanian University — Computer Networks — Fall 2025/2026