ITNE3008 Advanced Switching Assessment Answer

Objective

This group assessment assesses your understanding on configuring and troubleshooting advanced switching topics. In this project, students will build a switched network in packet tracer and configure VLANs, VTP, STP and wireless connectivity. You also need to propose what security features you can implement on the network in order to protect it from attackers.

Please read the scenario carefully and implement the topology in Packet Tracer. You need to complete all tasks to receive full mark in this assignment. Remember that in each step, you need to configure switches/ routers or verify the existing configuration on a specific device. To accomplish the tasks, you need to take screenshots of your configuration and paste them in your report. When “check results” is mentioned in a task, you need to use the appropriate “show” command to verify the configuration related to that task and take a screenshot of it.

Remember that all your screenshots should include your student ID as the hostname of switches/routers (e.g. Switch3-S1234).

• Please provide screenshots in a correct order and use headings to specify the respected completed task.
• This assignment carries 20% weightage in your final grade and the due date is by the end of Week 12. 

Topology and Addressing Table

Figure 1 Network Topology

Table 1 Addressing table

Task 1: Configure and Verify Basic Device Configurations

Step 1. Configure basic commands.

Configure each switch with the basic commands to apply the following.

• Hostnames
• Banner
• Enable secret password
• Line configurations
• Service encryption
• Switch default gateways

Step 2. Configure the management VLAN interface on S1, S2, and S3.

Create and enable interface VLAN 99 on each switch. Use the given addressing table for address configuration.

Step 3. Check results.

Task 2: Configure VTP

Step 1. Configure the VTP mode on all three switches. Configure S1 as the server. Configure S2 and S3 as clients.

Step 2. Configure the VTP domain name on all three switches. Use VITLAB as the VTP domain name.

Step 3. Configure the VTP domain password on all three switches. Use cisco as the VTP domain password.

Step 4. Check results.

Task 3: Configure Trunking

Step 1. Configure trunking on S1, S2, and S3.

Configure the appropriate interfaces in trunking mode and assign VLAN 99 as the native VLAN.

Step 2. Check results.

Task 4: Configure VLANs

Step 1. Create the VLANs on S1.

Create and name the following VLANs on S1 only. VTP advertises the new VLANs to S2 and S3.

• VLAN 10: Faculty/Staff
• VLAN 20: Students
• VLAN 88: Wireless (Guest)
• VLAN 99: Management & Default

Step 2. Verify that VLANs have been sent to S2 and S3.

Use the appropriate commands to verify that S2 and S3 now have the VLANs you created on S1. It may take a few minutes for Packet Tracer to simulate the VTP advertisements.

Step 3. Check results.

Task 5: Assign VLANs to Ports

Step 1. Assign VLANs to access ports on S2 and S3. Assign the PC access ports to VLANs:

• VLAN 10: PC1
• VLAN 20: PC2

Assign the wireless router access ports to VLAN 88.

Step 2. Verify VLAN implementation.

Use the appropriate commands to verify your VLAN implementation.

Step 3. Check results.

Task 6: Configure STP

Step 1. Ensure that S1 is the root bridge for all spanning tree instances. Use 4096 priority.

Step 2. Verify that S1 is the root bridge.

Step 3. Check results.

Task 7: Configure Router-on-a-Stick Inter-VLAN Routing

Step 1. Configure sub interfaces.

Configure the Fa0/1 sub interfaces on R1 using the information from the addressing table.

Step 2. Check results.

Task 8: Configure Wireless Connectivity

Step 1. Configure IP addressing for WRS2 and WRS3.

Configure LAN settings and then static addressing on the Internet interfaces for both WRS2 and WRS3 using the addresses from the topology.

Step 2. Configure wireless network settings:

• The SSIDs for the routers are WRS2_LAN and WRS3_LAN, respectively. The SSID names are case sensitive.
• The WEP for both is 12345ABCDE. This key is case sensitive.

Step 3. Configure the wireless routers for remote access. Configure the administration password as cisco123.

Step 4. Configure PC3 and PC4 to access the network using DHCP. PC3 connects to WRS2_LAN, and PC4 connects to WRS3_LAN.

Step 5. Verify remote access capability.

Step 6. Check results.

Task 9: Verify End-to-End Connectivity

Step 1. Verify that PC1 and WEB/TFTP Server can ping each other.

Step 2. Verify that PC1 and PC2 can ping each other.

Step 3. Verify that PC3 and PC1 can ping each other. Step 4. Verify that PC3 and PC2 can ping each other. Step 5. Verify that PC4 and PC1 can ping each other. Step 6. Verify that PC4 and PC2 can ping each other.

Task 10: Propose a Security Solution

You have been asked to propose a security solution for the given network. Using the concepts and methods discussed in this unit, discuss about the security features that you can implement on this network and how they protect the network from different kinds of attacks.