lOMoARcPSD|47766823
Case study Instructions
Routing & Switching Essentials (University of Technology Sydney)
Scan to open on Studocu
Studocu is not sponsored or endorsed by any college or university
Downloaded by Ssendi Samuel ([Link]@[Link])
lOMoARcPSD|47766823
31277 Case Study Instructions
Topology
Addressing Table
Device Name Interface/Default Gateway IP address/prefix
Internet G0/0 [Link]/30
S0/1/1 [Link]/30
R1 G0/0 [Link]/29
[[R1N ame]
[[R1N ame]]G0/0
S0/1/0 [Link]/30
S0/1/1 [Link]/30
R2 G0/0.10 [Link]/27
[[R2N ame]]
G0/0.20 [Link]/26
G0/0.99 [Link]/29
G0/1 [Link]/29
Downloaded by Ssendi Samuel ([Link]@[Link])
lOMoARcPSD|47766823
R3 G0/0 [Link]/29
[[R3N ame]]
G0/1 [Link]/29
Page 1 of 7
Device Name Interface/Default Gateway IP address/prefix
[[ R4 Nam S0/1/0 [Link]/30
[[R4N ame]]
S0/1/1 [Link]/30
[[R4N ame]]
S0/0/0 [Link]/30
R5 G0/0 [Link]/28
[[R5N ame]]
S0/1/0 [Link]/30
[[R5N ame]]
S0/1/1 [Link]/30
R6 G0/0 [Link]/25
[[R6N ame]]
G0/1
[[R6N ame]]
S0/1/0 [Link]/30
[[R6N ame]]
S0/1/1 [Link]/30
Sw1 VLAN 99 [Link]/29
Default Gateway [Link]/29
Host A1 NIC VLAN 10 DHCP
Host A2 NIC VLAN 20 [Link]/26
Default Gateway [Link]/26
Host B NIC [Link]/29
Default Gateway [Link]/29
Host C NIC DHCP
Host D NIC [Link]/25
Default Gateway [Link]/25
Mobile Host Wireless NIC DHCP
External Host NIC [Link]/30
Introduction
Downloaded by Ssendi Samuel ([Link]@[Link])
lOMoARcPSD|47766823
You will practice and be assessed on the following skills:
VLSM IP addressing
Basic device configurations
Configuration of static routing
Configuration of OSPFv2 routing
Customization of OSPF.
Configuration of VLAN and Inter-VLAN routing
Configuration of DHCP
Configuration of WLAN
Configuration of static NAT.
Configuration of dynamic NAT with PAT.
Configuration of various types of ACLs.
Instructions
Part 1: VLSM IP addressing
a. Use the IP address range [Link]/24 for Branch and [Link]/24 for HQ. Left hand side of the
internal network is Branch, right hand side of the internal network is HQ.
b. Design the addresses for all internal subnets with VLSM, conserve as much addresses as possible.
Number of hosts in each LANs are as follows:
• Branch LAN-A: VLAN 10: 25 hosts
• Branch LAN-A: VLAN 20: 35 hosts
• Branch LAN-A: VLAN 99: 4 hosts
• Branch LAN-B: 4 hosts
• HQ LAN-C: 10 hosts
• HQ LAN-D: 100 hosts
Note: WAN links should be considered when you design your IP addressing. WAN links between Branch and HQ
can use either Branch or HQ’s address range. Wireless Router uses static IP address for the Internet port to R6.
Note: Follow the WLAN part for the HQ LAN-E addresses design.
c. Assign the first valid host address in each subnet to the Default Gateway.
d. Assign the 2nd valid host address in each subnet to the Host PC or Switch.
e. Some IP addresses that are pre-defined or marked as DHCP. Enter the IP addresses in your design to
blanks the IP address table above.
Part 2: Construct the network
Step 1: Basics.
a. Choose suitable routers, switches and end devices, add interfaces to the devices if needed. b.
Cable the devices.
c. Configure device name.
d. Configure IP addresses on the interfaces following the IP addressing table. Configure default gateway where
needed.
Downloaded by Ssendi Samuel ([Link]@[Link])
lOMoARcPSD|47766823
Note: Some interfaces should be changed to obtain IP address from DHCP after implementing DHCP. e.
Disable DNS lookup on the routers.
Step 2: Configure Routers (R1, R2, and R3) on Branch
a. Assign class as the privileged EXEC encrypted password.
b. Assign cisco as console password, enable login and enable synchronization with the debug and Cisco IOS
software output and prevents these messages from interrupting your keyboard input.
c. Assign cisco as vty password, enable login and enable synchronization with the debug and Cisco IOS
software output and prevents these messages from interrupting your keyboard input.
d. Encrypt the clear text passwords.
e. Create a banner that warns anyone accessing the device that unauthorized access is prohibited. f.
Enable SSH on R3, create a user with username admin and secret adminpass.
Part 3: Configure Static Routing to and from Internet
Configure static routing between Internet and R1 with the next hop IP address. Ensure ALL internal
addresses (including translated) are routed.
Note: your static routing may need to be revised after implementing NAT.
Part 4: Configure OSPF
Step 1: Activate OSPF.
Use process ID 10 for OSPF activation on all routers.
a. Activate OSPF by configuring the interfaces of the network devices in the Branch and HQ networks, where
required.
b. Activate OSPF using network statements and inverse masks on the routers.
Step 2: Configure router IDs.
Configure router IDs on the multiaccess network routers as follows:
R1: [Link]
R2: [Link]
R3: [Link]
You will need to restart the OSPF process after changing the router IDs.
Step 3: Customise OSPF operation.
a. Configure router R1 with the highest OSPF interface priority so that it will always be the designated router of the
multiaccess network.
b. On router R1, configure a default route to the Internet with the next hop IP address. c.
Automatically distribute the default route to all routers in the network.
d. Configure OSPF so that routing updates are not sent into networks where OSPF updates are not
required.
Part 5: Configure VLAN and Inter-VLAN Routing
Step 1: Configure VLANs on Sw1
a. Configure VLANs: VLAN 10, 20 and 99, with names, students, staff and management respectively b.
Configure trunk link to allow eligible VLANs and with native VLAN 99.
Downloaded by Ssendi Samuel ([Link]@[Link])
lOMoARcPSD|47766823
c. Assign access ports to VLAN 10 and 20, design your own VLAN and interfaces mapping. Describe your
design in your report.
Step 2: Configure Inter-VLAN Routing on R2
a. Configure subinterfaces.
b. Assign IP addresses to the subinterfaces according to your design in Part 1.
c. Use the VLAN number as the subinterface ID
Part 6: Configure NAT
In this part of the skills assessment, you will configure static and dynamic NAT at the network edge.
Step 1: Configure static NAT
Configure static NAT to translate the address of the Host D on HQ LAN D to the External Host using the
public address [Link]. Verify that the translations are occurring.
Step 2: Configure dynamic PAT.
a. Create access list 1 to allow all addresses in the networks in Branch LAN-A, including VLAN 10 and VLAN
20.
b. Create a NAT pool named POOL-1. It should use address in the range [Link]-
[Link].
c. Configure NAT to dynamically use the addresses in the pool for all traffic entering and exiting the company
network. Remember that it is likely that more than three hosts will be accessing traffic on the Internet.
Verify that the translations are occurring.
Part 7: Configure ACLs
Configure access control lists to meet the following requirements. All ACLs should be placed in the most
efficient location possible according to the guidelines specified in the curriculum.
a. Create a named standard access list to explicitly prevent all external traffic accessing the SSH lines on R3.
Name the list VTY-BLOCK. All addresses on the Branch LAN-B network only should be allowed to access
the VTY lines.
b. Create a numbered standard ACL to prevent all hosts on HQ LAN-D from accessing HQ LAN-C. Use 10 as the
number for the list.
Part 8: Configure DHCP
Step 1: Configure R4 as DHCP server
a. Configure a DHCP address pool for Branch LAN-A VLAN 10, with the addresses designed in Part 1, use pool
name POOL_LAV10, exclude the first 5 valid host addresses, set Host A as obtaining address from DHCP.
b. Configure a DHCP address pool for HQ LAN-C, with the addresses designed in Part 1, use pool name
POOL_LC, exclude the first 5 valid host addresses, set Host C as obtaining address from DHCP.
Step 2: Configure DHCP relay agent
a. Choose the routers that can should be the DHCP relay agents for Branch LAN-A VLAN 10 and HQ LAN C.
b. Configure DHCP relay agents to forward all DHCP requests to the R4 DHCP server. Choose the suitable
interfaces for Branch LAN-A VLAN 10 and HQ LAN-C to configure the IP helper addresses.
Part 9: Configure WLAN
Step 1: Configure Internet Port (Port to R6)
Downloaded by Ssendi Samuel ([Link]@[Link])
lOMoARcPSD|47766823
Configure the Internet port of the Wireless Router following the IP addresses designed in Part 1.
Step 2: Configure DHCP on Wireless Router
a. Use the DHCP pool [Link]/24, excluding the first 5 host addresses.
b. Use the first valid host address as the Default Gateway.
c. Set the maximum number of users as 100.
Step 3: Configure Wireless basics and security
a. Configure the Wireless SSID to LANE for only 2.4GHz
b. Use WPA2 for the security mode
c. AES for the encryption method
d. Use password cisco. You can choose another password, please note it in your report e.
Configure the Mobile host to connect to Wireless Router
Part 10: Test Connectivity and troubleshoot
Test connectivity and troubleshoot if needed. Save the file in .pkt file.
Report:
Report should include the following sections:
• Problem Statement
• Project Task Allocation: Task allocation for each member in the group
• Project Weekly schedule and completion: Project plan (weekly) and completion in each week • Project Design
and Implementation: Design ideas and considerations, details in your implementations • Discussion and
Troubleshooting: Problems that you have encountered in the project and the solutions you used to solve them
Marking criteria:
Criteria Pts:10
Report: Problem Statement 1 pts
Report: Project Task Alloca琀椀on 1 pts
Report: Project Weekly schedule and comple琀椀on 1 pts
Report: Project Design and Implementa琀椀on 1 pts
Report: Discussions and Troubleshoo琀椀ng 1 pts
PT: Part 1 IP addressing 0.5 pts
PT: Part 2 Network model and connec琀椀ons 0.5 pts
PT: Part 3 Sta琀椀c Rou琀椀ng 0.5 pts
PT: Part 4 OSPF 0.5 pts
Downloaded by Ssendi Samuel ([Link]@[Link])
lOMoARcPSD|47766823
PT: Part 5 VLAN and Inter-VLAN Rou琀椀ng 0.5 pts
PT: Part 6 NAT 0.5 pts
PT: Part 7 ACL 0.5 pts
PT: Part 8 DHCP 0.5 pts
PT: Part 9 WLAN 0.5 pts
PT: Part 10 Connec琀椀vity 0.5 pts
Downloaded by Ssendi Samuel ([Link]@[Link])