PRACTICAL -1
Install & Test Network Interface Card.
Practical -2 and 3
Aim: Demonstration of different types of UTP cables.
Practical 4.
Install Windows 2003/Windows 2008 Network operating System
Practical – 5
Install & Configure File Server on Microsoft Server 2012
PRACTICAL -6
Aim: - study Install & Test Router, Repeater and Bridge.
PRACTICAL -7
learning objectives
student understand the work HTTP
student understand the work DNS
student understand the work FTP
PRACTICAL -8
Aim: - study Install & Test Router, Repeater and Bridge.
PRACTICAL -9
learning objectives
student Understand the different values of IP numbers.
student Understand the different subnets
Configure as below instruction and attached the design and testing output.
nable RIPV2 routing on the WAN links between R1, R2 & R3
In the IP routing lab, you enabled the RIP (version 2) routing process between R3 & R4;
now you will expand this to include R1 & R2, along with the new WAN links previously
created. Complete IP routing configuration as follows:
•
Complete the remainder of RIP routing on R3 as follows:
o
o
o
o
o
•
Enter global configuration mode on R3 by using the configure terminal
or config t commands
Enter RIP configuration mode using the command router rip
Add both WAN interfaces to the process by entering the command
network [Link] (this is the major network/Class B address that both
S0/0/0 and S0/1/0 both use)
Exit configuration mode using the end command
Save your configuration using the write memory (or wr mem) command
Configure RIP V2 routing on R2 using these steps:
o
Enter global configuration mode on R2 by using the configure terminal
or config t commandso
o
o
o
o
o
o
•
Configure RIP V2 routing on R1 using these steps:
o
o
o
o
o
o
o
o
•
Enter RIP configuration mode using the command router rip
Set the RIP version to 2 with the command version 2
Disable automatic summarization with the command no auto-summary
Add both WAN interfaces to the process by entering the command
network [Link] (this is the major network/Class B address that
S0/0/0 uses)
Add the remaining interfaces to the process with the commands
network [Link] and network [Link]
Exit configuration mode using the end command
Save your configuration using the write memory (or wr mem) command
Enter global configuration mode on R1 by using the configure terminal
or config t commands
Enter RIP configuration mode using the command router rip
Set the RIP version to 2 with the command version 2
Disable summarization using the command no auto-summary
Add both WAN interfaces to the process by entering the command
network [Link] (this is the major network/Class B address that both
S0/0/0 and S0/1/0 use)
Add the remaining interfaces to the process with the commands
network [Link] and network [Link]
Exit configuration mode using the end command
Save your configuration using the write memory (or wr mem) command
Verify RIP routing on R1 with these instructions:o
o
o
First, verify that RIP is operating by issuing the command show ip
protocols (this should generate about a page of output)
Verify that the following addresses appear as gateways: [Link],
[Link], [Link]
Display the IP routing table using the show ip route command (should
be nearly identical to what is displayed above
Network Address Translation Configuration
As the Internet experienced rapid growth, the number of publicly routable IP address
began to deplete, giving rise to conservation mechanisms. Two of the major techniques
introduced were the creation of private address ranges (RFC 1918) and Network
Address Translation (NAT, which translates private address to one or more public
addresses). In this lab, you will configure Port Address Translation (the translation of
many private addresses to a single external address) on R4, for connection to the
Internet. Create this process using the following steps:
1.1.12. Define the addresses to translate using access control lists
In order for NAT to function, the router needs to know what addresses it needs
to perform translation on. Access lists (sometimes called access control lists)
can identify ranges of addresses, in this case based on source addresses (these
are called standard access-lists). Configure this on R4 as follows:•
•
•
•
•
•
•
•
access-list 1 permit host [Link] (identical to [Link] [Link];
specifies an exact binary match. Masks for access lists as inverse and called
wildcards masks. You get the wildcard mask by subtracting 255 from each
octet, which would yield the mask [Link] in this case)
access-list 1 permit host [Link] (Loopback 0 address of R2)
access-list 1 permit host [Link] (Loopback 0 address of R3)
access-list 1 permit host [Link] (Loopback 0 address of R4)
access-list 1 permit [Link] [Link] (LAN Interface of R1)
access-list 1 permit [Link] [Link] (LAN Interface of R2)
access-list 1 permit [Link] [Link] (LAN Interface of R3 & R4)
access-list 1 permit [Link] [Link] (WAN Private Line between R1 & R3)
1.1.13. Identify the interfaces used in the NAT Process
NAT also has to understand which interfaces contain the private addresses (or
addresses to translate from; these addresses were identified in the access-list)
Configure this on R4 as follows:
•
Inside Interfaces: These interfaces contain the addresses that will be translated.
In some cases these addresses may be on devices farther inside the network.
The command to enable this is ip nat inside. Use this commands on these
interfaces:
o
o
•
Loopback 0
Fa0/0
Outside Interface: These interfaces contain one or more global addresses that
the addresses are translated to. The command to enable this is ip nat outside.
Use this on interface Fa0/1
1.1.14. Specify the NAT inside-to-outside mapping
The final step to configuring NAT/PAT on a Cisco router involves mapping the
source addresses from the access-list to outside address(es) or interface(s).
Configure this on R4 in global configuration mode using the command ip nat
inside source list 1 interface Fa0/1 overload. The meaning of the individual
statements is decoded here:
•
•
ip nat inside source: Indicates that the translation process begins with the
addresses on the inside of the network (identified in the access-list)
list 1: Indicates that the addresses to be translated are contained in standard
access list 1 (standard access-lists uses the numerical identifiers 1-99, though
they can be created by name as well). Another source keyword (static) ties
address/port translation in a fixed manner to a single address/port•
•
interface Fa0/1: Specifies that the IP address on the outside interface (in this
case/ Fa0/1) will serve as the translation point. A pool of addresses can be used
instead of the interface by using the pool keyword
overload: Specifies that the single IP address of the outside interface will be
used in the translation process, and that Port Address Translation will take place
1.1.15. Test the NAT/PAT configuration using an extended ping
To ensure that the NAT process is working correctly, you need to generate
traffic from one of the inside addresses to an outside address. Creating traffic
sourced from another device inside the network (R1, R2, R3, etc.) can work, but
for the sake of simplicity, you will use R4. Create the traffic as follows:
•
In privileged exec mode, create an extended ping with the ping command, using
the following options:
o
o
o
o
o
o
o
o
o
Protocol: IP
Target IP address: [Link]
Repeat count: 5
Datagram size: 100
Timeout in seconds: 2
Extended commands: Yes
Source address or interface: [Link]
Type of service: 0
Set DF bit in header: Noo
o
o
o
•
Validate reply data: No
Data pattern: 0xABCD
Loose, strict, record, timestamp, verbose: None
Sweep range of sizes: No
Verify translation using the show ip nat translations command, yielding output
similar to the illustration aboveFinal Device Configurations
Final Router Configurations
Once you have completed all of the lab exercises in this document, you may view your
own router configurations and compare those to the master configurations here:
1.1.16. R1
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
hostname R1
enable secret cisco
ip ssh version 2
ip domain-name [Link]
spanning-tree mode pvst
interface Loopback0
ip address [Link] [Link]
interface FastEthernet0/0
description LAN Interface
ip address [Link] [Link]
duplex auto
speed auto
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
interface Serial0/0/0
ip address [Link] [Link]
encapsulation frame-relay
interface Serial0/1/0
ip address [Link] [Link]
interface Vlan1
no ip address
shutdownrouter rip
version 2
network [Link]
network [Link]
network [Link]
no auto-summary
ip classless
line con 0
password cisco
privilege level 15
line aux 0
line vty 0 4
password cisco
login
transport input ssh
line vty 5 15
password cisco
login
transport input ssh
end
1.1.17. R2
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
hostname R2
enable secret cisco
username icnd1 password 0 cisco
ip ssh version 2
spanning-tree mode pvst
interface Loopback0
ip address [Link] 255.255.255.0interface FastEthernet0/0
description LAN
ip address [Link] [Link]
duplex auto
speed auto
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
interface Serial0/0/0
ip address [Link] [Link]
encapsulation frame-relay
interface Serial0/1/0
no ip address
shutdown
interface Vlan1
no ip address
shutdown
router rip
version 2
network [Link]
network [Link]
network [Link]
no auto-summary
ip classless
no run
line con 0
password cisco
privilege level 15
line aux 0
line vty 0 4
password cisco
login local
transport input telnet
line vty 5 15
password ciscologin local
transport input telnet
end
1.1.18. R3
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
hostname R3
enable secret cisco
spanning-tree mode pvst
interface Loopback0
ip address [Link] [Link]
interface FastEthernet0/0
description LAN
ip address [Link] [Link]
duplex auto
speed auto
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
interface Serial0/0/0
ip address [Link] [Link]
encapsulation frame-relay
interface Serial0/1/0
ip address [Link] [Link]
interface Vlan1
no ip address
shutdown
router rip
version 2
network 10.0.0.0network [Link]
network [Link]
no auto-summary
ip classless
line con 0
password cisco
privilege level 15
line aux 0
line vty 0 4
password cisco
login
transport input telnet
line vty 5 15
password cisco
login
transport input telnet
end
1.1.19. R4
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
hostname R4
enable secret cisco
spanning-tree mode pvst
interface Loopback0
ip address [Link] [Link]
ip nat inside
interface FastEthernet0/0
description LAN
ip address [Link] [Link]
ip nat inside
duplex auto
speed autointerface FastEthernet0/1
ip address [Link] [Link]
ip nat outside
duplex auto
speed auto
interface Vlan1
no ip address
shutdown
router rip
version 2
network [Link]
network [Link]
no auto-summary
ip nat inside source list 1 interface FastEthernet0/1 overload
ip classless
ip route [Link] [Link] [Link]
access-list 1 permit host [Link]
access-list 1 permit host [Link]
access-list 1 permit host [Link]
access-list 1 permit host [Link]
access-list 1 permit [Link] [Link]
access-list 1 permit [Link] [Link]
access-list 1 permit [Link] [Link]
access-list 1 permit [Link] [Link]
access-list 1 permit [Link] [Link]
line con 0
password cisco
privilege level 15
line aux 0
line vty 0 4
password cisco
login
transport input telnet
line vty 5 15
password cisco
login
transport input telnet
end1.1.20. Internet Router
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
hostname Internet
license udi pid CISCO2911/K9 sn FTX1524USNH
spanning-tree mode pvst
interface Loopback0
ip address [Link] [Link]
interface Loopback1
ip address [Link] [Link]
interface Loopback2
ip address [Link] [Link]
interface Loopback3
ip address [Link] [Link]
interface Loopback4
ip address [Link] [Link]
interface GigabitEthernet0/0
ip address [Link] [Link]
duplex auto
speed auto
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
shutdown
interface GigabitEthernet0/2
no ip address
duplex auto
speed auto
shutdown
interface Vlan1
no ip address
shutdownip classless
ip route [Link] [Link] [Link]
line con 0
line aux 0
line vty 0 4
login
end
Final Switch Configurations
Once you have completed all of the lab exercises in this document, you may view your
own switch configurations and compare those to the master configurations here:
1.1.21. SW1
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
hostname SW1
enable secret cisco
spanning-tree mode pvst
interface FastEthernet0/1
switchport mode trunk
interface FastEthernet0/2
shutdown
interface FastEthernet0/3
shutdown
interface FastEthernet0/4
shutdown
interface FastEthernet0/5
shutdown
interface FastEthernet0/6
shutdowninterface FastEthernet0/7
shutdown
interface FastEthernet0/8
shutdown
interface FastEthernet0/9
shutdown
interface FastEthernet0/10
shutdown
interface FastEthernet0/11
switchport access vlan 11
switchport mode access
switchport port-security
interface FastEthernet0/12
shutdown
interface FastEthernet0/13
shutdown
interface FastEthernet0/14
shutdown
interface FastEthernet0/15
shutdown
interface FastEthernet0/16
shutdown
interface FastEthernet0/17
shutdown
interface FastEthernet0/18
shutdown
interface FastEthernet0/19
shutdown
interface FastEthernet0/20
shutdown
interface FastEthernet0/21
shutdowninterface FastEthernet0/22
shutdown
interface FastEthernet0/23
shutdown
interface FastEthernet0/24
shutdown
interface GigabitEthernet1/1
shutdown
interface GigabitEthernet1/2
shutdown
interface Vlan1
ip address [Link] [Link]
ip default-gateway [Link]
line con 0
password cisco
privilege level 15
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
end
1.1.22. SW2
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
hostname SW2
enable secret cisco
spanning-tree mode pvstinterface FastEthernet0/1
interface FastEthernet0/2
interface FastEthernet0/3
interface FastEthernet0/4
interface FastEthernet0/5
interface FastEthernet0/6
interface FastEthernet0/7
interface FastEthernet0/8
interface FastEthernet0/9
interface FastEthernet0/10
interface FastEthernet0/11
interface FastEthernet0/12
interface FastEthernet0/13
interface FastEthernet0/14
interface FastEthernet0/15
interface FastEthernet0/16
interface FastEthernet0/17
interface FastEthernet0/18
interface FastEthernet0/19
interface FastEthernet0/20
interface FastEthernet0/21
interface FastEthernet0/22
interface FastEthernet0/23
interface FastEthernet0/24interface GigabitEthernet1/1
interface GigabitEthernet1/2
interface Vlan1
ip address [Link] [Link]
ip default-gateway [Link]
line con 0
password cisco
privilege level 15
line vty 0 4
password cisco
login
transport input telnet
line vty 5 15
password cisco
login
transport input telnet
end
1.1.23. SW3
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
hostname SW3
enable secret cisco
spanning-tree mode pvst
interface FastEthernet0/1
interface FastEthernet0/2
interface FastEthernet0/3
interface FastEthernet0/4
interface FastEthernet0/5interface FastEthernet0/6
interface FastEthernet0/7
interface FastEthernet0/8
interface FastEthernet0/9
interface FastEthernet0/10
interface FastEthernet0/11
interface FastEthernet0/12
interface FastEthernet0/13
interface FastEthernet0/14
interface FastEthernet0/15
interface FastEthernet0/16
interface FastEthernet0/17
interface FastEthernet0/18
interface FastEthernet0/19
interface FastEthernet0/20
interface FastEthernet0/21
interface FastEthernet0/22
interface FastEthernet0/23
interface FastEthernet0/24
interface GigabitEthernet0/1
interface GigabitEthernet0/2
interface Vlan1
ip address [Link] [Link]
ip classless
line con 0password cisco
privilege level 15
line aux 0
line vty 0 4
password cisco
login
transport input telnet
privilege level 15
line vty 5 15
password cisco
login
transport input telnet
end