Part 1: IP addressing

1. Design an IPv4 Address Scheme

You have been given the following IP address/subnet mask.
IP Address 172.16.0.0
Subnet Mask 255.255.0.0
2. Design an IP addressing scheme for London network based on the following requirements.
Subnet # Hosts
Subnet A 60
Subnet B 20

3. The router (London) should uses the first usable IP address while the host computers should use
the second IP address in the subnet. The switch should use the last IP address.
4. Set the IPV6 address of the London router:
o G0/0
 2001:ABCD:A::1/64
 FE80::1 link-local
o G0/1
 2001:ABCD:B::1/64
 FE80::1 link-local
5. Set the IPv4 address of the following routers:
o London
 S0/0/0 – 200.20.20.2/30
o New York_Main
 S0/0/0 - 10.1.1.1/30
 S0/0/1 – 10.1.2.1 /30
o New_YorkA
 S0/0/1 – 10.1.2.2/30
 G0/1 – 10.50.0.1/16
o New_YorkB
 S0/0/0 – 10.1.1.2/30
 G0/1 – 10.60.0.1/16

Part 2: Basic Configuration

1. Set the basic configuration of the London Router
1. Disable DNS lookup
2. Set the router name
3. Set the domain name to finalskills.com
4. Encrypt the privileged exec password ciscoenpass
5. Set the console access password to ciscoconpass
6. Set the telnet access password to ciscovtypass
7. Set the minimum length for passwords
8. Create an administrative user in the local database using an encrypted password.
o Username – admin
o Password - ciscoadminpass
9. Set login on VTY lines to use local database
10. Set VTY lines to accept ssh connections
11. Encrypt the clear text passwords
12. Set the MOTD Banner to “Unauthorized access is prohibited”
2. Set the basic configuration for SW_SubnetA and SW_SubnetB
1. Configure the management interface (SVI)
a. SW_SubnetA = 172.16.0.62/26
b. SW_SubnetB = 172.16.0.94/27
2. Encrypt privileged exec password ciscoenpass
3. Set the console access password ciscoconpass
4. Set the telnet access password ciscovtypass
Set the basic configuration for SW_1 to SW_5
1. Set the hostname. The hostname is also the name included in the topology
2. Encrypt privileged exec password ciscoenpass
3. Set the console access password ciscoconpass
4. Set the telnet access password ciscovtypass

3. Do the following in the New York Main Router

1. Configure sub interfaces for VLANs 5, 10, 20, 30 and 40.
2. Configure intervlan and assign the 1 st usable IP address in each VLAN to the router

4. Do the following for SW_1, SW_2 and SW_3

 1. Create the VLAN database

2. Assign the management IP address. Use 4th, 5th, and 6th useable IP in MGT VLAN for SW_1,
SW_2 and SW_3 respectively.
3. Assign the default-gateway 10.10.10.1
4. Configure truck interfaces. Use VLAN 88 as native VLAN.
5. Configure all other ports as access ports.
6. Assign access ports to proper VLAN
7. Shutdown all unused ports.
5. Do the following for SW_4 and SW_5:
1. Create the VLAN database
VLAN 60 – SiteA (SW_5)
VLAN 50 – SiteB(SW_4)
2. Assign the management IP address. Use 2 nd usable subnet IP in the subnet.
3. Assign the default-gateway 10.50.0.1 (SW_4) and 10.60.0.1 (SW_5).
4. Configure all ports as access ports.
5. Assign access ports to proper VLAN
6. Shutdown all unused ports.

Part 3: Static and Dynamic Routing

1. Configure a default route in London to ISP r.
2. Configure a default route in New_York_Main to ISP
3. Configure all router with single area OSPF . Use the network address and wildcard mask.
4. Propagate the default route in New_York_Main to other routers

Part 4: Configure DHCP and NAT

 1. Configure DHCP server (New_York_Main)
6. Reserve the first 10 IP addresses in all VLANS for static configurations
7. Configure a DHCP pool for all VLANs in the Main branch
8. Configure the following routers as a relay agent for the related network
 New_YorkA
 New_YorkB
 Check your configuration by setting the IP address of the PCs connected to New_YorkA and
New_YorkB to DHCP.
2. Configure Static and Dynamic NAT
 Allow all hosts inside London network to access internet using the public IP of the London router
 Redirect all HTTP request from outside to the internal web server (inside local IP address =
10.10.5.2, inside Global IP address = 88.77.77.10)

 Allow all hosts inside New_York network to access internet using the public IP of the
New_York_Main router

Part 5: Configure Access Control Lists (ACLs)

1. Configure a named access list to only allow administrator (MGT VLAN) to telnet to all routers and
switches.
2. Create and apply an ACL to allow internal users to access internet except InetWeb3.

Part 6: LAN Redundancy and Link Aggregation

1. Configure Spanning Tree .
 Configuration tasks for SW_01, SW_02 and SW_03 include the following:
o Configure Rapid PVST+.
o Configure SW_02 as primary root bridge for all VLANS
o Configure PortFast and BPDU Guard on the interfaces connected to PCs/Servers
in SW_01, SW_02 & SW_03

2. Configure EtherChannel.
 Configure the links between SW_01 and SW_03 as a LACP EtherChannel
 Interface range f0/21–22 – Channel 1, both on

3. Configure a proper native VLAN in all EtherChannels

Part 7: Configure GRE VPN

1. Configure a GRE VPN Tunnel between London and New York network

New_York_Main

ip address 10.1.3.1/30

London

ip address 10.1.3.2/30

2. Create a static route to New York Main and London branch