CCNA Discovery 2: Routing Practice Lab
Objectives:




Implement a LAN/ WAN Network Configuration with Static, Default and Dynamic Routing
Configure Wireless Networking
Configure Switch Port Security
Verify device configurations and network connectivity
Background / Preparation
You have been hired to implement a new Network Solution for the VR Gaming Company, who has recently purchased some
upgraded equipment. The company will require a WAN connection its ISP through an 1841 ISR Router. The company needs to divide
its internal network into 2 different LAN Subnets: a wired LAN (LAN 1) and a wireless LAN (LAN 2). Each will connect to the 1841 ISR
Router. The wired lan (LAN 1) connects through a 2960 switch, and will require port security to be enabled. The 1841 Router will
need to act as a DHCP server for this LAN. The wireless LAN (LAN 2) connects through a Linksys WRT300N wireless router. The
wireless router will need to be configured as a DHCP for the wireless LAN, and will need security enabled.
Network Diagram
Web Server:
172.17.0.10 /16
S 0/0: DCE
10.1.1.1 /24
VR Gaming Network
S 0/0/0: DTE
10.1.1.2 /24
Fa 0/1:
192.168.10.129 /26
Subnet 2: 192.168.10.128 /26
Fa 0/0:
192.168.10.65 /26
Subnet 1: 192.168.10.64 /26
Internet Interface:
192.168.10.130 /26
VLAN 1:
192.168.10.66 /26
LAN Gateway:
192.168.3.1 /24
PC 2: Wireless
DHCP Client
Range 192.128.10.129 – 192.168.222
Device
Customer Router
ISP Router
Linksys Wireless
Interface
S 0/0/0 (DTE)
Fa 0/0
Fa 0/1
S 0/0
(DCE)
Fa 0/0
L0
Internet (WAN)
LAN (Internal Gateway)
PC 1: Wired
DHCP Client
Range 192.128.10.65 – 192.168.126
IP Address
10.1.1.2
192.168.10.65
192.168.10.129
10.1.1.1
172.17.0.1
172.16.8.1
192.168.10.130
192.168.3.1
Subnet Mask
/24
/26
/26
/24
/24
/24
/26
/24
IP Addressing Scheme
 The Company LAN has been assigned the Network Address 192.168.10.0 /24
 The network address has been subnetted to create 2 subnets: 192.168.10.64 /26 and 192.168.10.128 /26
o 2 Bits were borrowed from the Network address to create 2 usable subnets
 22 = 4 total subnets (2 bits borrowed)
 22 -2 = 2 usable subnets
o Each subnet supports 62 host addresses
 26 = 64 total host addresses per subnet (6 host bits left)
 26 -2 = 62 usable host addresses per subnet
o The custom subnet mask is: 255.255.255.192
 Default subnet mask for Class C is 255.255.255.0
 Custom Subnet Mask is 255.255.255.11000000 (borrow 2 bits from host field)
 Subnet 1: 192.168.10.64 /26 will be assigned to LAN1 (wired)
o The 1st Available IP Address in this subnet (192.168.10.65) will be assigned to the Fa 0/0 interface on the
Customer Router
o The 2ndt Available IP Address in this subnet (192.168.10.66) will be assigned to the vlan1 interface on
the Switch
 Subnet 2: 192.168.10.128 /26 will be assigned to LAN2 (wireless)
o The 1st Available IP Address in this subnet (192.168.10.129) to the Fa 0/1 interface on the Customer
Router
o Assign the 2nd Available IP Address in this subnet 192.168.10.130) to the Linksys Wireless Router’s
Internet Interface (WAN interface)
o Assign the static IP Address of 192.168.3.1 /24 to the Linksys Wireless Router’s LAN Interface (LAN
gateway)
o The wireless clients will obtain Private IP addresses from the DHCP server on the Linksys Router (use the
range 192.168.3.100 to 192.168.3.149)
o The Linksys will use NAT/PAT to convert internal wireless client addresses to the external Internet
address.
 The WAN Link between the ISP Router and the 1841 Customer Router uses the network 10.1.1.0 /24
o The ISP Router’s S 0/0 Interface has been already assigned the IP address: 10.1.1.1 /24
o Assign the next available IP address in this network (10.1.1.2 /24) to the S 0/0/0 Interface on the
Customer Router
Subnetting Scheme:
Subnet
Subnet Address
Host IP Address Range
Broadcast Address
0 - unusable
192.168.10.0
192.168.10.1 - 192.168.10.62
192.168.10.63
1
192.168.10.64
192.168.10.65 - 192.168.10.126
192.168.10.127
2
192.168.10.128
192.168.10.129-192.168.10.222
192.168.10.223
3 - unusable
192.168.10.224
192.168.10.225-192.168.10.254
192.168.10.255
Step 1: Connect Devices: Using the Physical Topology Diagram, Connect all devices in the Topology
 Connect a Console Cable from PC1 (wired host on LAN1) to the Customer Router
 Connect the customer Router’s Fa 0/0 Interface to Port Fa 0/1 on the Switch
 Connect PC1 to Port Fa 0/10 on the Switch
 Connect the Customer Router’s Fa 0/1 interface to the Internet Port on the Linksys wireless router
 Connect the Customer Router’s S 0/0/0 interface to the ISP Router’s S 0/0 interface (the ISP router will provide
the clock rate)
Step 2: Configure the 1841 customer router:
Use the checklist below to assist in configuring the 1841 customer router
a) Configure the Router Hostname: VRGaming
b) Configure Passwords
o Console: cisco
o Enable Secret: class
o Vty lines: cisco
o Enable password encryption
c) Configure a message of the day banner: Welcome to VRGaming
d) Configure a DNS Host entry for the ISP router
o Add all 3 IP addresses for the ISP router
o AnyCompany1(config)# ip host ISP 10.1.1.1 172.16.8.1 172.17.0.1
e) Configure Interface Fa 0/0
o IP Address: 192.168.10.65
o Subnet Mask: 255.255.255.192
o Description: Link to wired LAN
f) Configure Interface Fa 0/1
o IP Address: 192.168.10.129
o Subnet Mask: 255.255.255.192
o Description: Link to wireless LAN
g) Configure the WAN Interface Serial 0/0/0
o IP Address: 10.1.1.2
o Subnet Mask: 255.255.255.0
o WAN encapsulation method: ppp
 #encapsulation ppp
o Description: Link to ISP
h) Configure Rip v. 2 and add the subnet addresses for the 2 connected LANs
o #router rip
o #version 2
o #network 192.168.10.64
o #network 192.168.10.128
i) Configure a Static Route to the private wireless LAN connected to the Linksys Wireless Router
o The private wireless LAN is on network 192.168.3.0 /24
o Use the fa 0/1 interface as the Exit Interface
o #ip route 192.168.3.0 255.255.255.0 fa 0/1
j) Configure a Default Route to the ISP router, using the next hop address of the ISP router (10.1.1.1)
o #ip route 0.0.0.0 0.0.0.0 10.1.1.1
k) Configure a DHCP Pool for LAN 1
o Pool Name: LAN1
 #ip dhcp pool LAN1
o Network: use the 1st usable subnet for the Address Range (the one assigned to the wired LAN)
 #network 192.168.10.64 255.255.255.192
o Default-Gateway: configure the router’s Fa 0/0 address as the default gateway for the DHCP pool
 #default-router: 192.168.10.65
o
Excluded Addresses: exclude the 1st and 2nd IP addresses in the subnet from the DHCP range because
they are assigned to the router’s Fa 0/0 interface and the Switch
 #ip dhcp excluded-address 192.168.10.65
 #ip dhcp excluded-address 192.168.10.66
Step 3: Configure the Linksys Wireless Router
a)
b)
c)
d)
e)
f)
Internal LAN Gateway IP address: 192.168.3.1 /24
DHCP address range: 192.168.3.100 through 192.168.3.149
Security settings: WEP – abcde12345
Service Set Identifier (SSID): VRGaming
Internet Connection Type: Static IP
Internet Interface IP Settings:
a. IP Adress: 192.168.10.130
b. Subnet Mask: 255.255.255.192
c. Default Gateway: 192.168.10.129
d. DNS server: leave the DNS server IP address set to the default
g) Remote Management: Go to the Administration Tab and enable Remote Management
Step 4: Configure the host PCs as DHCP clients
 Configure each PC to obtain their IP addresses automatically via DHCP
Step 5: Configure the Switch
a) Login to the Switch
b) Configure the Switch Hostname: SW_1
c) Configure the Passwords:
o Console: cisco
o Enable Secret: class
 Vty lines: cisco
 Enable service password-encryption
d) Configure vlan 1 with the 2nd available IP address in the subnet assigned to LAN 1 and turn it on
 SW1#config t
 SW1(config)#int vlan 1
 SW1(config-if)#ip address 192.168.10.66 255.255.255.192
 SW1(config-if)#no shutdown
e) Configure the default gateway for the switch (use the IP address of the Customer Router’s Fa 0/0 int)
 SW1(config)#ip default-gateway 192.168.10.65
f) Ping from PC1 to the Switch to verify connectivity
 Ping 192.168.10.65
Step 6: View the Switch MAC Address Table
a) Display the mac-address-table on the switch to learn the MAC address of PC 1
 Write down the MAC address for PC1 here:
Example:
Step 7: Configure Sticky MAC Address port security
a) Shut down the port to which the wired host (PC 1) is attached
 SW1(config)# int fa 0/10
 SW1(config-if)# shutdown
b) Put the Port in Access Mode
 SW1(config-if)# switchport mode access
c) Enable Port Security
 SW1(config-if)# switchport port-security
d) Configure a maximum address of 1
 SW1(config-if)# switchport port-security maximum 1
e) Enable Sticky MAC Address Learning
 SW1(config-if)# switchport port-security mac-address sticky
f) Turn the Port back on
 SW1(config-if)# no shutdown
Step 8: Verify Connectivity
a) Ping from PC1 to it’s Default Gateway
b) Allow some time to pass
c) View the Switch Running-Config File to see the MAC address that the switch learned
 S1# Show run
 Is the MAC address for PC1 the one that was learned on port fa 0/10? __________
Example:
Step 9: Display the port security
a) Verify the Port Security Settings:
 S1# show port-security interface Fa0/10
 Port Security:
 Port Status:
 Violation Mode:
 Maximum MAC Addresses:
 Sticky MAC Addresses:
 Last Source Address:
Example:
Step 10: Verify, Troubleshoot and Document network connectivity
 Complete the following Verification Tests
 If any problems are encountered, list them
 List any troubleshooting commands or techniques used
Configuration Verification and Connectivity Checklist
Verification
PC1
 Verify IP Address, Subnet Mask, Default Gateway
 Ping the Switch (192.168.10.66)
 Ping the Default Gateway
 Ping the ISP Router’s Loopback Address (172.16.8.1)
 Ping the Web Server (172.17.0.10)
PC 2
 Verify IP Address, Subnet Mask, Default Gateway
 Ping the Default Gateway
 Ping the Customer Router
 Ping PC 1
 Ping the ISP Router’s Loopback Address (172.16.8.1)
 Ping the Web Server (172.17.0.10)
Wireless Router - Login to the GUI from PC2’s Browser
 Verify LAN IP Address and Mask
 Verify Internet IP Address, Mask and Default Gateway
Customer Router
 Ping the Wireless Router
 Ping the ISP Router’s Loopback Address (172.16.8.1)
 Ping the Web Server (172.17.0.10)
 Show the Running Configuration File (show run)
 Display the Routing Table (show ip route)
 Display the status of each interface and its IP address (show
ip interface brief)
 Display the configuration of RIP (show ip protocols)
Customer Switch
 Display the running configuration file (show run)
 Display the port-security settings for int fa 0/10 (show portsecurity int fa 0/10)
 Display the mac-address-table (show mac-address-table)
If Results are not successful, list any
troubleshooting tools used and problems found
Problems Found:
Techniques used to troubleshoot:
Problems Found:
Techniques used to troubleshoot:
Problems Found:
Techniques used to troubleshoot:
Problems Found:
Commands used to troubleshoot:
Problems Found:
Commands used to troubleshoot: