Lab 4-1: Small Enterprise Class Lab

Lab Goals

Build the following in Packet Tracer:

---

VLAN Assignments

VLAN Name	VLAN #	Net/Mask	Default Gateway	PC IP Addresses
West Clinic	100	192.168.10.0/24	192.168.10.1	192.168.10.3
West Admin	110	192.168.11.0/24	192.168.11.1	192.168.11.3
Central Clinic	200	192.168.20.0/24	192.168.20.1	192.168.20.3
Central Admin	210	192.168.21.0/24	192.168.21.1	192.168.21.3
East Clinic	300	192.168.30.0/24	192.168.30.1	192.168.30.3
East Admin	310	192.168.31.0/24	192.168.31.1	192.168.31.3
Backbone (future)	50	192.168.50.0/24

---

Tips/How-Tos

Cisco- Save Configuration

Configuration changes take effect immediately on Cisco - but they are not saved! If you reboot without saving, the config will be lost.

To save the current configuration, the command is:

• copy running-configuration startup-configuration or
• copy run start

Cisco Config Tips

“show run” will show your entire configuration

• If in configuration mode, "do show run" will do the same thing

To delete a configuration setting/line: just add “no” in front and retype the line

---

Major Steps:

Configure your group’s MLS (MultiLayer Switch):

Set hostname to proper name (e.g. “hostname West-MLS”)

Needs layer 3 (ip routing)

Turns on routing on multilayer switches:

(config)#ip routing

Define appropriate VLANs (no GUI - so need to do from CLI)

#config terminal

(config)#vlan ##

(config-vlan)#name (name)

Create appropriate VLAN interfaces to act as the default gateway for the Distribution Area VLANs

(config)#interface vlan ##

(config-if)#ip address (Address) (MAC/Mask)

no shutdown

NOTE: This only needs to be set on the router-switch acting as the gateway for the vlan

Configure trunk ports to the edge switches

• Before setting switchport trunk mode, you need to configure the “encapsulation”
• On each trunk port, “switchport trunk encapsulation dot1q”
• • This defines how the packets are “tagged”

Router>enable

#config terminal

(config-if)#int fa0/(num)

(config-subif)#switchport trunk encapsulation dot1q

switchport mode trunk

Save Configuration:

copy running-configuration startup-configuration

( or )

copy run start

Connect Multi-layer switches with copper cross-over on Gigabit Ethernet (ensure they are on trunk)

Configure North and South edge switches

Set hostname to proper name (e.g. “hostname North-West-Wing-SW”)

Define appropriate VLANs

North West Wing: Clinic

100

South West Wing: Admin

110

North Central Wing: Clinic

200

South Central Wing: Admin

210

North East Wing: Clinic

300

South East Wing: Admin

310

Assign access ports so that there are interfaces for both VLANs on switch

Configure Trunk Ports

Save Configuration

Attach PC’s to edge switches

Use Foster workstations booted to Kali

Set the proper IP and Subnet Mask

Ex:

West Clinic:

192.168.10.3

255.255.255.0

192.168.10.1

West Admin:

192.168.11.3

255.255.255.0

192.168.11.1

Central Clinic:

192.168.20.3

255.255.255.0

192.168.20.1

Central Admin:

192.168.21.3

255.255.255.0

192.168.21.1

East Clinic:

192.168.30.3

255.255.255.0

192.168.30.1

Admin Clinic:

192.168.31.3

255.255.255.0

192.168.31.1

---

Troubleshooting:

Was having trouble with sending packets as there was no connection. I forgot to define vlans on the 2960 switches and assign them the appropriate vlans to the PC ports.

Changed the ports from trunk to access

For example, on the North West:

---

Deliverables

Deliverable - Clinic PC on North can ping Admin PC on South

• Screenshot / Photos

---

Used Resources:

How to configure VLAN and interVLAN Routing in Packet Tracer