Download PNETLab Platform

PNETLAB Store
PNETLab.com

LAB – Configuration Static Router with AD

* Topology:

Objectives

- Build the network and configuration basic Cisco Router

- Configuration Gateway for all vlan at Router
- Configuration Trunking / Access at Switch Layer02
- Configuration allow all traffic access internet of all VLAN.
Download PNETLab Platform
PNETLAB Store
PNETLab.com

Table information detail

Lab hand-on Step-by-step:

Step 1: Start all Device

Menu > Setup Nodes > Start all nodes

1|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com

Step 2: Verify status of devices, Device need have “Blue” color as picture

2|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com
>>>>> Configuration Router <<<<<
Step 3: because first setup, so Router Cisco question to you about initial configuration dialog. You should
be type “no” bypass this step.
Step 4: You must be basic configuration for Router as following:
Command
Router>
Router> enable
Router# configuration terminal
Router(config)# hostname RX
RX (config)# banner motd #
This is Router #
RX (config)# enable password cisco123enable
RX (config)# service password-encryption
RX (config)# line con 0
RX (config-line)# password cisco
RX (config-line)# login
RX (config-line)# exit
RX (config)# line vty 0 4
RX (config-line)# transport in all
RX (config-line)# password cisco123telnet
RX (config-line)# login
RX (config-line)# exit
Step 5: IP configuration for Router
RX (config)#
RX (config)# interface eth0/0
RX (config-if)# description #Connection to ISP#
RX (config-if)# ip address 172.16.1.2
255.255.255.252
RX (config-if)# no shutdown
RX (config-if)# ip nat outside
Detail
// User mode
// moving to Privilege mode
// moving to global config
// config hostname from Router to RX
// config banner message of the day is “This is
Router 1
// set password login from user mode to Privilege
mode
// request Router use service password encryption
// configuration line console
// set password login from console
// apply password into line console
// exit configuration line console
// configuration line vty
// set method access into router via line vty
// set password login from live vty
// apply password on line vty
// exit configuration line vty
// Privilege mode
// configuration interface ethernet
// Add a description on interface
// Set ip address for interface
// active interface
// Set interface as Outside Zone
3|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com

RX (config-if)# exit // exit configuration

RX (config)#
RX (config)# interface eth0/1.10
RX (config-if)# description #Connection to
VLAN 10#
RX (config-if)# encapsulation dot1Q 10
RX (config-if)# ip address 10.0.10.1
255.255.255.0
RX (config-if)# ip nat inside
RX (config-if)# no shutdown
RX (config-if)# exit
RX (config)# interface eth0/0.20
RX (config-if)# description #Connection to
VLAN 20#
RX (config-if)# encapsulation dot1Q 20
RX (config-if)# ip address 10.0.20.1
255.255.255.0
RX (config-if)# ip nat inside
RX (config-if)# no shutdown
RX (config-if)# exit
RX (config)# write
// configuration sub interface
// Add a description on interface
// Set Sub-interface working with VLAN10
// set ip address for interface
// set interface as Inside Zone
// active interface
// exit configuration
// configuration sub interface
// Add a description on interface
// Set Sub-interface working with VLAN30
// set ip address for interface
// set interface as Inside Zone
// active interface
// exit configuration
// Save running-config to startup-config

*** Configuration Access Control List for access internet ***

RX (config)# access-list 1 permit any // Configuration access list permit all vlan

*** Configuration NAT policy allow ipv4 private connect internet via ip connected with ISP ***

RX (config)# ip nat inside source list 1 interface // Configuration NAT

ethernet 0/0 overload
RX (config)# write // Save running-config to startup-config

4|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com

Step 6: Verify configuration of Interface

- type command “show ip int brief” and [Enter]

Step 7: Configuration for Switch:

Switch> enable // moving to Privilege mode

Switch#
Switch# configuration terminal
Switch# vlan database
Switch (vlan)# vlan 10 name IT
Switch (vlan)# vlan 20 name HR
Switch (vlan)# exit
// Privilege mode
// moving to global config
// moving to vlan database of switch
// add vlan 10 into vlan database
// add vlan 20 into vlan database
// exit vlan mode

Verify VLAN

- type command “show vlan”

Switch# // Privilege mode

Switch# configuration terminal
Switch (config)# interface ethernet 0/0
Switch (config)# description #Connection to
Router#
Switch (config)# switchport trunk
encapsulation dot1q
Switch (config)# switchport mode trunk
// moving to global config
// configuration interface ethernet
// Add a description on interface
// Set interface working with trunk Dot1Q
// Set interface working with trunk mode

5|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com

Verify configuration of Interface Trunk

- type command “show interface trunk”

Switch (config)# interface ethernet 0/1 // configuration interface ethernet

Switch (config-if)# description #Connection to
VLAN10#
Switch (config-if)# switchport mode access
Switch (config-if)# switchport access vlan 10
Switch (config-if)# exit
Switch (config)#
Switch (config)# interface ethernet 0/2
Switch (config-if)# description #Connection to
VLAN20#
Switch (config-if)# switchport mode access
Switch (config-if)# switchport access vlan 20
Switch (config-if)# exit
Switch (config)#
// Add a description on interface
// Set interface working with access mode
// Set Vlan 10 into interface
// exit config interface mode
// configuration interface ethernet
// Add a description on interface
// Set interface working with access mode
// Set Vlan 20 into interface
// exit config interface mode

Verify VLAN port access

- type command “show vlan”

6|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com

>>>>> TestCase<<<<<

Result:

- Desktop-IT can ping success to Gateway

- Desktop-HR can ping success to Gateway

- Desktop-IT and Desktop-HR can ping success between.

7|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com

- Desktop-IT and Desktop-HR can ping to Internet with any ip public

- Desktop-IT and Desktop-HR can access interface via web brower

8|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com

- Review connect on Router with “show ip nat translations” command

DONE

**** Goodluck ****

9|Page