Routing and Switching. Cisco Networking Academy Routing and Switching Essentials CSCO 1860 Case Study

Transcription

1 Routing and Switching Cisco Networking Academy Routing and Switching Essentials CSCO 1860 Case Study

2 O Overview and Objectives This case study allows students to build and configure a complex network using skills gained throughout the course. This case study is not a trivial task. To complete it as outlined with all required documentation will be a significant accomplishment. The case study scenario describes the project in general terms, and will explain why the network is being built. Following the scenario, the project is broken into a number of phases, each of which has a detailed list of requirements. It is important to read and understand each requirement to make sure that the project is completed accurately. The following tasks are required to complete this case study: Set up the physical layout of the network using the diagram and accompanying narrative Correctly configure single-area OSPF Correctly configure s and 80.1q trunking Correctly configure routing Correctly configure DHCP Correctly configure NAT Create and apply access control lists (ACL S) on the appropriate routers and interfaces Verify/test and document that all devices are operational and functioning according to the scenario guidelines Provide detailed documentation in a prescribed form as listed in the deliverables sections

3 Scenario s A company needs a network to be designed and implemented; the company has locations in four cities. All of the locations will be connected using leased-line serial links. The company has previously used RIP version ; however, all four locations will use OSPF routing process. Also, default static route must be used to access the internet. One location,, has a large and complex LAN. Due to the size and complexity, the company wants to create s to control broadcasts, enhance security, and logically group users. The company also wants to use private addresses throughout the Autonomous System, DHCP over most of the LAN segments, and NAT implemented for connectivity. The company also wishes to limit access to Web traffic while allowing multiple protocols (not all) within its own WAN. Although private addresses (RFC 1918) will be used, the company appreciates efficiency and address conservation in design. To minimize wasted address space, they have requested VLSM to be used when appropriate.

4 Phase 1: Addressing the WAN & LAN s Use the following instructions to complete Phase 1: Use for internal addressing with IP subnet zero enabled. Apply /0 subnets on all serial interfaces, using the last available subnet. Assign an appropriately sized subnet for the LAN, which has about 900 devices: - : 0 devices (Management ) - : 1 - : 50 hosts - : 500 hosts Assign the appropriately sized subnets: - The has - The has - The has 00 devices. Document all of the addressing in tables. Addresses will be assigned dynamically to hosts; refer to the DHCP section of this document for details.

5 Phase : Configuring Default Routes & OSPF Routing s Use the following instructions to complete Phase : Configure each router with a hostname and required passwords. Configure each interface on all routers documented in Phase 1. Configure OSPF on all Routers (,,, and ). Configure a Default Route on and redistribute the route into the OSPF network. Verify that the,,, and routers have connectivity through Layers 1-7. Capture and save the four router configuration files. Edit the text files, and include comments at the top of each file documenting the following: Your name The date CCNA Case Study Phase The router name that corresponds to each file. This document will serve as deliverable for phase

6 Phase : Configuring s s Use the following instructions to complete Phase : 1. Apply the basic switch configuration Hostname and passwords. Configure the Local Area Network switch as follows: Create and name three Data and one Management for a total of s. - : Management (Native) - : HR - : R&D - : Production. Assign ports: - Ports 1- to trunk mode (80.1Q) - Ports to - Ports -7 to - Ports 8-11 to - Ports 1-15 to - Disable all unused ports Connect of the router to port 1 Connect one workstation per. Configure the workstations IP automatically. This documentation will serve as the deliverable item for Phase

7 Phase : Configuring ACLs s Use the following instructions to complete Phase : 1. Configure an Extended ACL to filter traffic. The ACL should: Deny the FTP and HTTP access to (HR network); allow all other traffic to all destinations within the Autonomous System.. Configure a Standard ACL to filter traffic. The ACL should: Permit the HR ( ) users to access the while denying all others.. Configure a Reflexive ACL On the Router. The ACL should: Allow IP traffic for TCP and ICMP sessions originating from the inside (established sessions) while denying IP traffic for sessions originating outside the network.. Use an ACL to control VTY access on the router only. The ACL should: Allow telnet session to the router from the Management ( ) only; telnet from other networks should be denied Document the ACL configuration a chart. This will serve as the deliverable item for Phase.

8 Phase 5: Configuring DHCP s DHCP Services DHCP should provide services to the following LANs hosts:, s, and LANs DHCP should pass the following parameters to the hosts: IP address, Subnet Mask and Default Gateway The router will perform DHCP. Configure the using the DHCP pools documented in Phase 1. Configure DHCP services on the router as follows: and sub-interfaces with the first useable address. Configure the DHCP pools on the router. Exclude the first 10 IP addresses from each pool (to be used for printers and servers) Connect a workstation to on and s - on the router. Configure the workstation to obtain its IP address automatically. Recapture and save the router configuration file. Edit the text file, and include comments at the top documenting the following: Your name The date CCNA Case Study Phase 5 router This documentation will serve as the deliverable item for Phase 5

9 Phase 6: NAT s Use the following instructions to complete Phase : 1. The router will perform NAT. Configure the router as follows: Define the NAT pool. The pool consists of public network address. Exclude first 10 addresses from this pool (to be use for servers, when required). Define an access control list, which will translate for all internal () addresses, and deny all other traffic. Establish dynamic source translation, specifying the NAT pool and the ACL defined in the previous steps. Specify the inside and the outside NAT interfaces. Change the default NAT timeout value to 10 seconds. Document the NAT configuration in a chart; it will serve as the deliverable item for Phase.. Connect a workstation to s port to an ISP server. Configure this workstation as follows: Configure the IP address and subnet mask as /8. Configure the default gateway.. Configure the workstation to act as a web server. Create a simple web page that will tell users that they have reached the ISP.

10 Phase 7: Verification and Testing s Use the following instructions to complete Phase 5: 1. Verify communication between various hosts in the network. Troubleshoot and fix any problems in the network until it works properly. Document the results of the tests in a table.. Recapture and save the router configuration files for all four routers. Edit the text files, and include comments at the top of each file documenting the following: Your name The date CCNA Case Study Final Router Configuration The router name that corresponds to each file. This documentation, along with the completed tables from Phase 1, Phase, Phase, Phase, Phase 5, Phase 6, and Phase 7, will serve as the final deliverable item for the case study.