10.4.4 Lab – Build a Switch and Router Network (Answers)
S1# show sdm prefer
Use the following commands to assign the dual-ipv4-and-ipv6 template as the default SDM template.
S1# configure terminal S1(config)# sdm prefer dual-ipv4-and-ipv6 default S1(config)# end S1# reload
Required Resources
1 Router (Cisco 4221 with Cisco IOS XE Release 16.9.4 universal image or comparable) (Cisco 4221 with Cisco IOS XE Release 16.9.4 universal image or comparable)
1 Switch (Cisco 2960 with Cisco IOS Release 15.2(2) lanbasek9 image or comparable)
2 PCs (Windows with a terminal emulation programme, such as Tera Term) (Windows with a terminal emulation program, such as Tera Term)
Console cables to configure the Cisco IOS devices via the console ports
Ethernet cables as shown in the topology
Note: The Gigabit Ethernet interfaces on Cisco 4221 routers are autosensing and an Ethernet straight-through cable may be used between the router and PC-B. If using another model Cisco router, it may be necessary to use an Ethernet crossover cable.
Instructor Note: If Tera Term is not installed on the PC, it can be downloaded from the following link: \shttps://ttssh2.osdn.jp/ \sInstructor Note: A USB driver must be installed prior to connecting a Microsoft Windows-based PC to a Cisco IOS device with a USB cable. The driver may be obtained on www.cisco.com with the corresponding Cisco IOS device. The USB driver can be downloaded from the following link:
Click here
Instructor Note: You must have a valid Cisco Connection Online (CCO) account to download the USB driver file.
Instructions
Section 1: Configure the Topology and Initialize Devices
Step 1: Connect the network in the topology depicted.
a. Connect the devices shown in the topology diagram, as well as any required cables.
b. Ensure that all devices in the topology are powered on.
Step 2: Reload and initialise the router and switch.
If the router or switch's configuration files were previously saved, initialise and reload these devices to their default settings.
Configure Devices and Verify Connectivity in Part 2
Part 2 will setup the network's structure and fundamental parameters such as interface IP addresses, device access, and passwords. Consult the Error! The reference source could not be located. and omission! The reference source could not be located. at the start of this lab for information on the device's name and address.
Assign static IP addresses to the PC interfaces in Step 1.
a. On PC-A, configure the IP address, subnet mask, and default gateway.
b. On PC-B, configure the IP address, subnet mask, and default gateway.
c. From a command prompt window on PC-A, ping PC-B.
Note: If pings fail, the Windows Firewall may need to be disabled.
Why were the pings ineffective?
Because the router interfaces (default gateways) have not been set yet, Layer 3 traffic between subnets is not routed.
Step 2: Configure the router.
a. Console into the router and enable privileged EXEC mode.
Router> enable
b. Enter configuration mode.
Router# config terminal
c. Assign a device name to the router.
Router(config)# hostname R1
d. Disable DNS lookup to prevent the router from attempting to translate incorrectly entered commands as though they were host names.
R1(config)# no ip domain lookup
e. Assign class as the privileged EXEC encrypted password.
R1(config)# enable secret class
f. Assign cisco as the console password and enable login.
R1(config)# line console 0 R1(config-line)# password cisco R1(config-line)# login
g. Assign cisco as the VTY password and enable login.
R1(config)# line vty 0 4 R1(config-line)# password cisco R1(config-line)# login
h. Encrypt the plaintext passwords.
R1(config)# service password-encryption
i. Create a banner that warns anyone accessing the device that unauthorized access is prohibited.
R1(config)# banner motd $ Authorized Users Only! $
j. Configure and activate both interfaces on the router.
R1(config)# interface g0/0/0 R1(config-if)# ip address 192.168.0.1 255.255.255.0 R1(config-if)# ipv6 address 2001:db8:acad::1/64 R1(config-if)# ipv6 address FE80::1 link-local R1(config-if)# no shutdown R1(config-if)# exit R1(config)# interface g0/0/1 R1(config-if)# ip address 192.168.1.1 255.255.255.0 R1(config-if)# ipv6 address 2001:db8:acad:1::1/64 R1(config-if)# ipv6 address fe80::1 link-local R1(config-if)# no shutdown R1(config-if)# exit
k. Configure an interface description for each interface indicating which device is connected to it.
R1(config)# interface g0/0/1 R1(config-if)# description Connected to F0/5 on S1 R1(config-if)# exit R1(config)# interface g0/0/0 R1(config-if)# description Connected to Host PC-B R1(config-if)# exit
l. To enable IPv6 routing, enter the command ipv6 unicast-routing.
R1(config)# ipv6 unicast-routing
m. Save the running configuration to the startup configuration file.
R1(config)# exit R1# copy running-config startup-config
n. Set the clock on the router.
R1# clock set 15:30:00 27 Aug 2019
Note: Use the question mark (?) to help with the correct sequence of parameters needed to execute this command.
o. Ping PC-B from a command prompt window on PC-A.
Note: If pings are not successful, the Windows Firewall may need to be turned off.
Were the pings successful? Explain.
Yes. The router is routing the ping traffic across the two subnets. The default settings for the 2960 switch will automatically turn up the interfaces that are connected to devices.
Step 3: Configure the switch.
In this step, you will configure the hostname, the VLAN 1 interface and its default gateway.
a. Console into the switch and enable privileged EXEC mode.
Switch> enable
b. Enter configuration mode.
Switch# config terminal
c. Assign a device name to the switch.
Switch(config)# hostname S1
d. Disable DNS lookup to prevent the router from attempting to translate incorrectly entered commands as though they were host names.
S1(config)# no ip domain-lookup
e. Configure and activate the VLAN interface on the switch S1.
S1(config)# interface vlan 1 S1(config-if)# ip address 192.168.1.2 255.255.255.0 S1(config-if)# no shutdown S1(config-if)# exit
f. Configure the default gateway for the switch S1.
S1(config)# ip default-gateway 192.168.1.1 S1(config-if)# exit
g. Save the running configuration to the startup configuration file.
Step 4: Verify connectivity end-to-end connectivity.
a. From PC-A, ping PC-B.
b. From S1, ping PC-B.
All the pings should be successful.
Part 3: Display Device Information
In Part 3, you will use show commands to retrieve interface and routing information from the router and switch.
Step 1: Display the routing table on the router.
a. Use the show ip route command on the router R1 to answer the following questions.
R1# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is not set
192.168.0.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.0.0/24 is directly connected, GigabitEthernet0/0/0
L 192.168.0.1/32 is directly connected, GigabitEthernet0/0/0
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, GigabitEthernet0/0/1
L 192.168.1.1/32 is directly connected, GigabitEthernet0/0/1
What code is used in the routing table to indicate a directly connected network?
The C designates a directly connected subnet. An L designates a local interface. Both answers are correct.
How many route entries are coded with a C code in the routing table?
2
What interface types are associated to the C coded routes?
Answers may vary depending of router type, but on the 4221 the correct answer is G0/0/0 and G0/0/1.
b. Use the show ipv6 route command on router R1 to display the IPv6 routes.
R1# show ipv6 route
IPv6 Routing Table - default - 5 entries
Codes: C - Connected, L - Local, S - Static, U - Per-user Static route
B - BGP, R - RIP, H - NHRP, I1 - ISIS L1
I2 - ISIS L2, IA - ISIS interarea, IS - ISIS summary, D - EIGRP
EX - EIGRP external, ND - ND Default, NDp - ND Prefix, DCE - Destination
NDr - Redirect, RL - RPL, O - OSPF Intra, OI - OSPF Inter
OE1 - OSPF ext 1, OE2 - OSPF ext 2, ON1 - OSPF NSSA ext 1
ON2 - OSPF NSSA ext 2, la - LISP alt, lr - LISP site-registrations
ld - LISP dyn-eid, lA - LISP away, le - LISP extranet-policy
a - Application
C 2001:DB8:ACAD::/64 [0/0]
via GigabitEthernet0/0/0, directly connected
L 2001:DB8:ACAD::1/128 [0/0]
via GigabitEthernet0/0/0, receive
C 2001:DB8:ACAD:1::/64 [0/0]
via GigabitEthernet0/0/1, directly connected
L 2001:DB8:ACAD:1::1/128 [0/0]
via GigabitEthernet0/0/1, receive
L FF00::/8 [0/0]
via Null0, receive
Step 2: Display interface information on the router R1.
a. Use the show ip interface g0/0/1 to answer the following questions.
R1# show ip interfaces g0/0/1
GigabitEthernet0/0/1 is up, line protocol is up
Hardware is ISR4321-2x1GE, address is a0e0.af0d.e141 (bia a0e0.af0d.e141)
Description: Connectd to F0/5 on S1
Internet address is 192.168.1.1/24
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive not supported
Full Duplex, 100Mbps, link type is auto, media type is RJ45
output flow-control is off, input flow-control is off
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:19, output hang never
Last clearing of "show interface" counters never
Input queue: 0/375/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
4579 packets input, 637737 bytes, 0 no buffer
Received 1092 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 2863 multicast, 0 pause input
700 packets output, 115187 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
What is the operational status of the G0/0/1 interface?
GigabitEthernet0/0/1 is up, line protocol is up
What is the Media Access Control (MAC) address of the G0/1 interface?
Answers will vary but will appear in the form of: xxxx.xxxx.xxxx, where each x will be replaced with a hexadecimal number.
How is the Internet address displayed in this command?
Internet address is 192.168.1.1/24.
b. For the IPv6 information, enter the show ipv6 interface interface command.
R1# show ipv6 interface g0/0/1
GigabitEthernet0/0/1 is up, line protocol is up
IPv6 is enabled, link-local address is FE80::1
No Virtual link-local address(es):
Description: Connectd to F0/5 on S1
Global unicast address(es):
2001:DB8:ACAD:1::1, subnet is 2001:DB8:ACAD:1::/64
Joined group address(es):
FF02::1
FF02::2
FF02::1:FF00:1
MTU is 1500 bytes
ICMP error messages limited to one every 100 milliseconds
ICMP redirects are enabled
ICMP unreachables are sent
ND DAD is enabled, number of DAD attempts: 1
ND reachable time is 30000 milliseconds (using 30000)
ND advertised reachable time is 0 (unspecified)
ND advertised retransmit interval is 0 (unspecified)
ND router advertisements are sent every 200 seconds
ND router advertisements live for 1800 seconds
ND advertised default router preference is Medium
Hosts use stateless autoconfig for addresses.
Step 3: Display a summary list of the interfaces on the router and switch.
There are several commands that can be used to verify an interface configuration. One of the most useful of these is the show ip interface brief command. The command output displays a summary list of the interfaces on the device and provides immediate feedback to the status of each interface.
a. Enter the show ip interface brief command on the router R1.
R1# show ip interface brief Interface IP-Address OK? Method Status Protocol GigabitEthernet0/0/0 192.168.0.1 YES manual up up GigabitEthernet0/0/1 192.168.1.1 YES manual up up Serial0/1/0 unassigned YES unset up up Serial0/1/1 unassigned YES unset up up
b. To see the IPv6 interface information, enter the show ipv6 interface brief command on R1.
R1# show ipv6 interface brief
GigabitEthernet0/0/0 [up/up]
FE80::1
2001:DB8:ACAD::1
GigabitEthernet0/0/1 [up/up]
FE80::1
2001:DB8:ACAD:1::1
Serial0/1/0 [up/up]
unassigned
Serial0/1/1 [up/up]
unassigned
GigabitEthernet0 [down/down]
Unassigned
c. Enter the show ip interface brief command on the switch S1.
S1# show ip interface brief Interface IP-Address OK? Method Status Protocol Vlan1 192.168.1.2 YES NVRAM up up FastEthernet0/1 unassigned YES unset down down FastEthernet0/2 unassigned YES unset down down FastEthernet0/3 unassigned YES unset down down FastEthernet0/4 unassigned YES unset down down FastEthernet0/5 unassigned YES unset up up FastEthernet0/6 unassigned YES unset up up FastEthernet0/7 unassigned YES unset down down FastEthernet0/8 unassigned YES unset down down FastEthernet0/9 unassigned YES unset down down FastEthernet0/10 unassigned YES unset down down FastEthernet0/11 unassigned YES unset down down FastEthernet0/12 unassigned YES unset down down FastEthernet0/13 unassigned YES unset down down FastEthernet0/14 unassigned YES unset down down FastEthernet0/15 unassigned YES unset down down FastEthernet0/16 unassigned YES unset down down FastEthernet0/17 unassigned YES unset down down FastEthernet0/18 unassigned YES unset down down FastEthernet0/19 unassigned YES unset down down FastEthernet0/20 unassigned YES unset down down FastEthernet0/21 unassigned YES unset down down FastEthernet0/22 unassigned YES unset down down FastEthernet0/23 unassigned YES unset down down FastEthernet0/24 unassigned YES unset down down GigabitEthernet0/1 unassigned YES unset down down GigabitEthernet0/2 unassigned YES unset down down
Reflection Questions
- If the G0/0/1 interface was administratively unavailable, what interface configuration command would you use to bring it back online?
R1(config-if)
There will be no closure - What would happen if you set the router's interface G0/0/1 with the wrong IP address 192.168.1.2?
PC-A would be incapable of pinging PC-B. This is because PC-B is connected to a different network than PC-A, requiring these packets to be routed via the default-gateway router. PC-A is set to utilise the default-gateway router's IP address of 192.168.1.1, but this address is not allocated to any device on the LAN. Any packets that must be routed via the default-gateway will never reach their intended destination.
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.
Device Configs
Router R1
R1# show run Building configuration... Current configuration : 1891 bytes ! version 16.9 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption platform qfp utilization monitor load 80 no platform punt-keepalive disable-kernel-core ! hostname R1 ! boot-start-marker boot-end-marker ! ! vrf definition Mgmt-intf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! enable secret 5 $1$p0xR$As48VJNq0LYFoJ4ct11XE0 ! no aaa new-model ! no ip domain lookup ! login on-success log ! subscriber templating ! ipv6 unicast-routing multilink bundle-name authenticated ! license udi pid ISR4321/K9 sn FDO20411MAB license accept end user agreement license boot level appxk9 license boot level securityk9 no license smart enable diagnostic bootup level minimal ! spanning-tree extend system-id ! redundancy mode none ! interface GigabitEthernet0/0/0 description Connect to Host PC-B ip address 192.168.0.1 255.255.255.0 negotiation auto ipv6 address FE80::1 link-local ipv6 address 2001:DB8:ACAD::1/64 ! interface GigabitEthernet0/0/1 description Connectd to F0/5 on S1 ip address 192.168.1.1 255.255.255.0 negotiation auto ipv6 address FE80::1 link-local ipv6 address 2001:DB8:ACAD:1::1/64 ! interface Serial0/1/0 no ip address ! interface Serial0/1/1 no ip address ! interface GigabitEthernet0 vrf forwarding Mgmt-intf no ip address negotiation auto ! ip forward-protocol nd no ip http server ip http secure-server ip tftp source-interface GigabitEthernet0 ! control-plane ! banner motd ^C Authorized Users Only! ^C ! line con 0 password 7 104D000A0618 logging synchronous login transport input none stopbits 1 line aux 0 stopbits 1 line vty 0 4 password 7 00071A150754 login ! end
Switch S1
S1# show run brief Building configuration... Current configuration : 1778 bytes ! version 15.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname S1 ! boot-start-marker boot-end-marker ! ! no aaa new-model system mtu routing 1500 ! no ip domain-lookup ! crypto pki trustpoint TP-self-signed-3167005056 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-3167005056 revocation-check none rsakeypair TP-self-signed-3167005056 ! ! crypto pki certificate chain TP-self-signed-3167005056 certificate self-signed 01 ! spanning-tree mode rapid-pvst spanning-tree extend system-id ! vlan internal allocation policy ascending ! interface FastEthernet0/1 ! interface FastEthernet0/2 ! interface FastEthernet0/3 ! interface FastEthernet0/4 ! interface FastEthernet0/5 ! interface FastEthernet0/6 ! interface FastEthernet0/7 ! interface FastEthernet0/8 ! interface FastEthernet0/9 ! interface FastEthernet0/10 ! interface FastEthernet0/11 ! interface FastEthernet0/12 ! interface FastEthernet0/13 ! interface FastEthernet0/14 ! interface FastEthernet0/15 ! interface FastEthernet0/16 ! interface FastEthernet0/17 ! interface FastEthernet0/18 ! interface FastEthernet0/19 ! interface FastEthernet0/20 ! interface FastEthernet0/21 ! interface FastEthernet0/22 ! interface FastEthernet0/23 ! interface FastEthernet0/24 ! interface GigabitEthernet0/1 ! interface GigabitEthernet0/2 ! interface Vlan1 ip address 192.168.1.2 255.255.255.0 ! ip default-gateway 192.168.1.1 ip http server ip http secure-server ! line con 0 line vty 0 4 login line vty 5 15 login ! end
Comments
Post a Comment