0% found this document useful (0 votes)
13 views39 pages

Network Configuration and Security Setup

Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
13 views39 pages

Network Configuration and Security Setup

Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Configure emailing service, FTP, DNS, HTTP (web server), DHCP, IoT, 802.

11i protocol,
port security, ssh, telnet, ospf, ACL, frame relay and ensure internetworking, in addition
create a cluster and name it The internet.
IP addresses used;
1. [Link]
2. [Link]
3. [Link]
4. [Link]
5. [Link]
6. [Link]
7. [Link]
8. [Link]
9. [Link]
10. [Link]
11. [Link]
Topology

Inside a cluster
Data Bases IP addressing Configuration
IP address: [Link] /29
Note: DBC = Database Centre

Class C Subnetting
VLSM Table
Block size CIDR Mask IP address Valid IP address Subnets
1 /32 255 1 -1 256
2 /31 254 2 0 128
4 /30 252 4 2 64
8 /29 248 8 6 32
16 /28 240 16 14 16
32 /27 224 32 30 8
64 /26 192 64 62 4
128 /25 128 128 126 2
0 /24 0 256 254 1

DBC 3
Mask: [Link]
IP address: [Link] - [Link] /29
default gateway: [Link]

DBC 2
Mask: [Link]
IP address: [Link] - [Link] /29
default gateway: [Link]

DBC 1
Mask: [Link]
IP address: [Link] - [Link] /29
default gateway: [Link]
Database Switch Configurations
DBC 3 commands
en
conf t
banner motd *This is a Database Centre 3*
hostname DBC-3

enable secret protectme@allcost

line con 0
password dbc3
login

service password-encryption

vlan 100
name DBC3-Security

int g0/1
switchport mode trunk
switchport trunk allowed vlan 100

int g1/1
switchport mode access
switchport access vlan 100
switchport port-security
switchport port-security mac-address 0050.0FC8.D9D7
switchport port-security maximum 1
switchport port-security violation restrict

int g2/1
switchport mode access
switchport access vlan 100
switchport port-security
switchport port-security mac-address 00E0.F90E.8626
switchport port-security maximum 1
switchport port-security violation restrict
int g3/1
switchport mode access
switchport access vlan 100
switchport port-security
switchport port-security mac-address 0005.5EE5.6221
switchport port-security maximum 1
switchport port-security violation restrict

int g4/1
shut
switchport mode access
switchport access vlan 100

int g5/1
shut
switchport mode access
switchport access vlan 100

int g6/1
shut
switchport mode access
switchport access vlan 100

int g7/1
shut
switchport mode access
switchport access vlan 100

int g8/1
switchport mode access
switchport access vlan 100
switchport port-security
switchport port-security mac-address 0060.3E04.967E
switchport port-security maximum 1
switchport port-security violation restrict
int g9/1
switchport mode access
switchport access vlan 100
switchport port-security
switchport port-security mac-address 000D.BD1E.D371
switchport port-security maximum 1
switchport port-security violation restrict

end
wr memory
reload

DBC 2 commands

en
conf t
banner motd *This is a Database Centre 2*
hostname DBC-2

enable secret protectme@allcost

line con 0
password dbc2
login

service password-encryption

vlan 110
name DBC2

int g0/1
switchport mode trunk
switchport trunk allowed vlan 110

int range f0/3-24


switchport mode access
switchport access vlan 110
shut
int f0/1
switchport mode access
switchport access vlan 110
switchport port-security
switchport port-security mac-address 0001.9720.AB79
switchport port-security maximum 1
switchport port-security violation restrict

int f0/2
switchport mode access
switchport access vlan 110

switchport port-security
switchport port-security mac-address 000B.BEC2.47DB
switchport port-security maximum 1
switchport port-security violation restrict

end
wr memory
reload

DBC 1 commands

en
conf t
banner motd *This is a Database Centre 1*
hostname DBC-1

enable secret protectme@allcost

vlan 120
name DBC1

int g0/1
switchport mode trunk
int range f0/1-2
switchport mode access
switchport access vlan 120

int range fa0/3-24


switchport mode access
switchport access vlan 120
shut
end
wr memory
reload

Main Router and MTN ISP configuration


IP address: [Link] /8
Main router ip address: [Link] /8
MTN ISP IP address: [Link] /8

DBC Router
en
conf t
hostname Main-Router
banner motd "This is the Main Router"

enable secret protectme@allcost

line con 0
password mainrouter
login

service password-encryption

int g2/0.100
encapsulation dot1q 100
ip address [Link] [Link]
int g2/0
no shut

int g0/0.110
encapsulation dot1q 110
ip address [Link] [Link]
int g0/0
no shut

int g1/0.120
encapsulation dot1q 120
ip address [Link] [Link]
int g1/0
no shut
end
wr memory

Main Router OSPF Configuration

en
conf t
router ospf 1
network [Link] [Link] area 0
network [Link] [Link] area 0
network [Link] [Link] area 0
network [Link] [Link] area 0
end
wr memory

KMU Switch Configuration


KMU Admin Switch

en
conf t
hostname KMU-Admin
banner motd *This is KMU Administration Switch*
enable secret protectme@allcost

line con 0
password kmuadmin
login

service password-encryption

vlan 59
name Admin

int g0/1
switchport mode trunk
switchport trunk allowed vlan 59

int g0/2
switchport mode access
switchport access vlan 59

switchport port-security
switchport port-security mac-address 0060.2FE6.C8E6
switchport port-security violation restrict
switchport port-security maximum 1

int range fa0/1-24


switchport mode access
switchport access vlan 59

switchport port-security
switchport port-security mac-address sticky
switchport port-security violation restrict
switchport port-security maximum 1

end
wr memory

KMU Student Switch

en
conf t
hostname KMU-SS
banner motd *This is KMU Student Switch*

enable secret protectme@allcost

line con 0
password kmustudent
login

service password-encryption

vlan 141
name Student

int g0/2
switchport mode trunk
switchport trunk allowed vlan 141

int g0/1
switchport mode access
switchport access vlan 141

int range fa0/1-24


switchport mode access
switchport access vlan 141
Shut
end
wr memory

KMU CICT Switch


en
conf t
hostname KMU-CICT
banner motd *This is KMU CICT Switch*

enable secret protectme@allcost

line con 0
password kmucict
login

service password-encryption

vlan 99
name kmucict

int g0/1
switchport mode trunk
switchport trunk allowed vlan 99

int g0/2
switchport mode access
switchport access vlan 99

int range fa0/1-24


switchport mode access
switchport access vlan 99
line vty 0 15
password 000
login
transport output ssh
transport output telnet
ip domain-name KMU-CICT
crypto key generation rsa
1024

Int vlan 99
Ip address [Link] [Link]
Ip ssh version 2

end
wr memory

Class B Subnetting
Blocksize CIDR Mask IP address Valid IP
1 /24 255 256 254
2 /23 254 512 510
4 /22 252 1024 1022
8 /21 248 2048 2046
16 /20 240 4096 4094
32 /19 224 8192 8190
64 /18 192 16384 16384
128 /17 128 32768 32766
0 /16 0 65536 65534

Note: We didn’t include the number of subnets because they are just the same as for those in
the previous VLSM table.
Students /19
2^y - 2 value for y = 32 - 19 = 13
2^13 - 2
8192 - 2
8190 valid IP hosts
Mask: [Link]
IP address: [Link] - [Link] /19
default gateway: [Link]
CICT /21
2^y - 2 value for y = 32 - 21 = 11
2^11 - 2
2048 - 2
2046 valid IP hosts
Mask: [Link]
IP address: [Link] - [Link] /21
default gateway: [Link]

Admin /27
2^y - 2 value for y = 32 - 27 = 5
2^5 - 2
32 - 2
30 valid IP hosts
Mask: [Link]
IP address: [Link] - [Link] /27
default gateway: [Link]

Liquid KMU Router

en
conf t
host KMU-R

line con 0
password kmur
login

enable secret protectme@allcost

service password-encryption

int g0/0.99
encapsulation dot1q 99
ip address [Link] [Link]
int g0/0
no shut

int g0/1.59
encapsulation dot1q 59
ip address [Link] [Link]
int g0/1
no shut

int g0/2.141
encapsulation dot1q 141
ip address [Link] [Link]

ip dhcp pool student


network [Link] [Link]
default-router [Link]
dns-server [Link]
int g0/2
no shut

int se0/0/1
encapsulation frame-relay
frame-relay map ip [Link] 24 broadcast
frame-relay map ip [Link] 22 broadcast
frame-relay map ip [Link] 23 broadcast

router ospf 1
network [Link] [Link] area 0
network [Link] [Link] area 0
network [Link] [Link] area 0
network [Link] [Link] area 0
end
wr memory

MTN ISP Router

en
conf t
int se0/0
encapsulation frame-relay
router ospf 1
network [Link] [Link] area 0
network [Link] [Link] area 0
network [Link] [Link] area 0
network [Link] [Link] area 0
end
wr memory

AIRTEL ISP Router

en
conf t
int se0/1/0
encapsulation frame-relay
router ospf 1
network [Link] [Link] area 0
network [Link] [Link] area 0
network [Link] [Link] area 0
network [Link] [Link] area 0
end
wr memory

Zamtel ISP Router

en
conf t
int se0/2/0
encapsulation frame-relay
router ospf 1
network [Link] [Link] area 0
network [Link] [Link] area 0
network [Link] [Link] area 0
network [Link] [Link] area 0
end
wr memory

Lusaka Mobile city Configuration


Switch

en
conf t
vlan 2
name Mobile-city
int range fa0/1-24
switchport mode access
switchport access vlan 2
end
wr memory

Router

en
conf t
int g0/1.2
encapsulation dot1q 2
ip address [Link] [Link]
ip dhcp pool mobile-city
network [Link] [Link]
default-router [Link]
dns-server [Link]

int g0/1
no shut
router ospf 1
network [Link] [Link] area 0
network [Link] [Link] area 0

end
wr memory

Chinsali configuration
MTN router
En
Conf t
Router ospf 1
Network [Link] [Link] area 0
Network [Link] [Link] area 0
Do wr
802.11i protocol configuration
Wireless Router IP Setup

The server will handle DHCP and authentication on behalf of the wireless.
The highlighted ip address below is for the server
Wireless Router IP assigning

Wireless Router Authentication Setup

Shared secret cmc is the password that will be shared with the server.
The highlighted ip address above is for the server
Wireless Router DHCP Service Disabling

DON’T FORGET TO SAVE AT THE BOTTOM!!!!!!!!!!!!!!!!!


Server Authentication Setup
CLIENT REQUEST SETUP FOR AUTHENTICATION
SERVER DHCP SERVICE SETUP
FTP SETUP
ACCESSING FTP
Mr Chishala PC logging
Mr Chishala PC File Uploading

Note: You create a text file first using Text Editor, save (Ctrl + S) and
name it
When you want to download a file from FTP server
ftp> get [Link]
This is the application to use, you can find it on Desktop.
DNS Setup
Domain Name Server, this is used to resolve a name into an ip
Name, give a name that will be used in the URL
Address, ip address for server that will be hidden with the name you
have chosen.
Let’s look for the ip address for Facebook with the nslookup
command
EMAIL SERVICE SETUP

Application used
Found on desktop

EMAIL ACCOUNT CREATING

Don’t forget to save after creating an account!!!!!!


Note: if you didn’t setup a dns server, on the server information
incoming and outgoing mail server put the ip address for the server
providing the email service.
Let’s try sending an email to Clement
Let’s try to query an email
To query click on the receive option below
HTTP SERVER /Web Server Configuration
Edit the [Link] and put your own html codes e.g the one we used we got from our
school student portal
Let’s try to access our school website

Note: if you didn’t set a dns server, in the url put the ip address for
the server providing http service.
Internet of Things (IoT) setup
Server setup
How to create an account

You click on Sign up now


Fill Account Information

The username and password you create you will be using it to sign in an Internet of
Things(IoT) devices to be managed by the server e.g. Internet of Things (IoT) setup
How to add an ethernet port to an Iot device

Click on the advanced option


The selected in blue is a fast ethernet and the red highlighted is a gigabit ethernet port.
You chose any of your choice

Sign in IoT device

If it says refresh it means it has been signed in to be managed by the server.


How to create conditions

These conditions are used to control the interaction between the IoT devices

Below is a list of signed devices

Click on the highlighted to setup conditions

Below are conditions set to control interactions

To test the interaction, hold Alt key and move the cursor across the MD device.
Frame-Relay
Below is a mapping configuration

You might also like