Lab2 1.md - Snowboundport37/champlain GitHub Wiki

Tech Journal Entry - Lab 2-1 Subnet Design

Lab Overview

This lab implemented a hierarchical network design for a school environment using VLSM (Variable Length Subnet Masking) with the base network 10.12.0.0/16 (birth day = 12). The network consists of Core and Edge layers with 7 VLANs supporting different user groups.

Network Topology and Device Placement

Physical Infrastructure

  • Core Layer: East-Core-Switch-01 (3560-24PS), West-Core-Switch-01 (3560-24PS)
  • Edge Layer: East-Edge-01, East-Edge-02, West-Edge-01, West-Edge-02 (all 2960-24TT)
  • Inter-Core Connection: GigabitEthernet 0/1 crossover cable between core switches
  • Edge-to-Core Connections: FastEthernet 0/1 on edge switches to FastEthernet 0/1-2 on core switches

Device Connections and Configurations

East-Edge-01 Switch

Connected Devices:

  • FacStaff-01: Port Fa0/4, IP 10.12.11.10/24, Gateway 10.12.11.1
  • FacStaff-02: Port Fa0/5, IP 10.12.11.11/24, Gateway 10.12.11.1
  • Student-01: Port Fa0/13, IP 10.12.8.10/23, Gateway 10.12.8.1
  • Student-02: Port Fa0/14, IP 10.12.8.11/23, Gateway 10.12.8.1

Switch Configuration:

enable
configure terminal
vlan 100
name FacStaff
vlan 110
name Student
exit
interface range fastethernet 0/4-12
switchport mode access
switchport access vlan 100
exit
interface range fastethernet 0/13-20
switchport mode access
switchport access vlan 110
exit
interface fastethernet 0/1
switchport mode trunk
switchport trunk allowed vlan 100,110,130,140
exit

East-Edge-02 Switch

Connected Devices:

  • FacStaff-03: Port Fa0/4, IP 10.12.11.12/24, Gateway 10.12.11.1
  • FacStaff-04: Port Fa0/5, IP 10.12.11.13/24, Gateway 10.12.11.1
  • Student-03: Port Fa0/13, IP 10.12.8.12/23, Gateway 10.12.8.1
  • Student-04: Port Fa0/14, IP 10.12.8.13/23, Gateway 10.12.8.1
  • Lab1-01: Port Fa0/21, IP 10.12.12.10/26, Gateway 10.12.12.1
  • Lab1-02: Port Fa0/22, IP 10.12.12.11/26, Gateway 10.12.12.1

Switch Configuration:

enable
configure terminal
vlan 100
name FacStaff
vlan 110
name Student
vlan 130
name Lab1
exit
interface range fastethernet 0/4-12
switchport mode access
switchport access vlan 100
exit
interface range fastethernet 0/13-20
switchport mode access
switchport access vlan 110
exit
interface range fastethernet 0/21-24
switchport mode access
switchport access vlan 130
exit
interface fastethernet 0/1
switchport mode trunk
switchport trunk allowed vlan 100,110,130,140
exit

West-Edge-01 Switch

Connected Devices:

  • FacStaff-05: Port Fa0/4, IP 10.12.11.14/24, Gateway 10.12.11.1
  • Student-05: Port Fa0/13, IP 10.12.8.14/23, Gateway 10.12.8.1

Switch Configuration:

enable
configure terminal
vlan 100
name FacStaff
vlan 110
name Student
exit
interface range fastethernet 0/4-12
switchport mode access
switchport access vlan 100
exit
interface range fastethernet 0/13-20
switchport mode access
switchport access vlan 110
exit
interface fastethernet 0/1
switchport mode trunk
switchport trunk allowed vlan 100,110,130,140
exit

West-Edge-02 Switch

Connected Devices:

  • FacStaff-06: Port Fa0/4, IP 10.12.11.15/24, Gateway 10.12.11.1
  • Student-06: Port Fa0/13, IP 10.12.8.15/23, Gateway 10.12.8.1
  • Lab2-01: Port Fa0/21, IP 10.12.12.75/26, Gateway 10.12.12.65

Switch Configuration:

enable
configure terminal
vlan 100
name FacStaff
vlan 110
name Student
vlan 140
name Lab2
exit
interface range fastethernet 0/4-12
switchport mode access
switchport access vlan 100
exit
interface range fastethernet 0/13-20
switchport mode access
switchport access vlan 110
exit
interface range fastethernet 0/21-24
switchport mode access
switchport access vlan 140
exit
interface fastethernet 0/1
switchport mode trunk
switchport trunk allowed vlan 100,110,130,140
exit

Core Switch Configurations

East-Core-Switch-01 (Routing Switch)

Function: Primary router for inter-VLAN routing and gateway services

Configuration:

enable
configure terminal
vlan 100
name FacStaff
vlan 110
name Student
vlan 130
name Lab1
vlan 140
name Lab2
exit
interface range fastethernet 0/1-2
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 100,110,130,140
exit
interface gigabitethernet 0/1
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 100,110,130,140
exit
ip routing
interface vlan 100
ip address 10.12.11.1 255.255.255.0
no shutdown
exit
interface vlan 110
ip address 10.12.8.1 255.255.254.0
no shutdown
exit
interface vlan 130
ip address 10.12.12.1 255.255.255.192
no shutdown
exit
interface vlan 140
ip address 10.12.12.65 255.255.255.192
no shutdown
exit

West-Core-Switch-01 (Layer 2 Switch)

Function: Forwards traffic between West edge switches and East core switch

Configuration:

enable
configure terminal
vlan 100
name FacStaff
vlan 110
name Student
vlan 130
name Lab1
vlan 140
name Lab2
exit
interface range fastethernet 0/1-2
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 100,110,130,140
exit
interface gigabitethernet 0/1
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 100,110,130,140
exit

VLAN Design and IP Addressing Scheme

Complete Subnet Allocation Table

VLAN VLAN_NAME Hosts Needed Network Netmask Router Address
1 Management 250 10.12.10.0/24 255.255.255.0 10.12.10.1
100 FacStaff 200 10.12.11.0/24 255.255.255.0 10.12.11.1
110 Student 450 10.12.8.0/23 255.255.254.0 10.12.8.1
130 StuLab1 35 10.12.12.0/26 255.255.255.192 10.12.12.1
140 StuLab2 35 10.12.12.64/26 255.255.255.192 10.12.12.65
200 StuWireless 900 10.12.0.0/22 255.255.252.0 10.12.0.1
210 FSWireless 650 10.12.4.0/22 255.255.252.0 10.12.4.1

Device IP Assignments

VLAN 100 (FacStaff) - 10.12.11.0/24

  • FacStaff-01: 10.12.11.10 (East-Edge-01 Fa0/4)
  • FacStaff-02: 10.12.11.11 (East-Edge-01 Fa0/5)
  • FacStaff-03: 10.12.11.12 (East-Edge-02 Fa0/4)
  • FacStaff-04: 10.12.11.13 (East-Edge-02 Fa0/5)
  • FacStaff-05: 10.12.11.14 (West-Edge-01 Fa0/4)
  • FacStaff-06: 10.12.11.15 (West-Edge-02 Fa0/4)

VLAN 110 (Student) - 10.12.8.0/23

  • Student-01: 10.12.8.10 (East-Edge-01 Fa0/13)
  • Student-02: 10.12.8.11 (East-Edge-01 Fa0/14)
  • Student-03: 10.12.8.12 (East-Edge-02 Fa0/13)
  • Student-04: 10.12.8.13 (East-Edge-02 Fa0/14)
  • Student-05: 10.12.8.14 (West-Edge-01 Fa0/13)
  • Student-06: 10.12.8.15 (West-Edge-02 Fa0/13)

VLAN 130 (Lab1) - 10.12.12.0/26

  • Lab1-01: 10.12.12.10 (East-Edge-02 Fa0/21)
  • Lab1-02: 10.12.12.11 (East-Edge-02 Fa0/22)

VLAN 140 (Lab2) - 10.12.12.64/26

  • Lab2-01: 10.12.12.75 (West-Edge-02 Fa0/21)

Commands Reference

1. Navigating Cisco Switch/Router Modes

Mode Identification and Navigation

# User EXEC Mode (Switch>)
Switch>

Privileged EXEC Mode (Switch#)


Switch> enable
Switch#


Global Configuration Mode (Switch(config)#)


Switch# configure terminal
Switch(config)#


Interface Configuration Mode (Switch(config-if)#)


Switch(config)# interface fastethernet 0/1
Switch(config-if)#


VLAN Configuration Mode (Switch(config-vlan)#)


Switch(config)# vlan 100
Switch(config-vlan)#

Mode Recognition

  • User EXEC: Prompt shows >
  • Privileged EXEC: Prompt shows #
  • Global Config: Prompt shows (config)#
  • Interface Config: Prompt shows (config-if)#
  • VLAN Config: Prompt shows (config-vlan)#

2. Creating VLANs on Switch

VLAN Creation Commands

Switch# configure terminal
Switch(config)# vlan 100
Switch(config-vlan)# name FacStaff
Switch(config-vlan)# vlan 110
Switch(config-vlan)# name Student
Switch(config-vlan)# exit

Verification Commands

Switch# show vlan brief
Switch# show vlan

3. Setting Access and Trunk Ports

Access Port Configuration

# Single port configuration
Switch(config)# interface fastethernet 0/4
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 100
Switch(config-if)# exit

Trunk Port Configuration

# For multilayer switches (3560 series)
Switch(config)# interface fastethernet 0/1
Switch(config-if)# switchport trunk encapsulation dot1q
Switch(config-if)# switchport mode trunk
Switch(config-if)# switchport trunk allowed vlan 100,110,130,140
Switch(config-if)# exit

For basic switches (2960 series)


Switch(config)# interface fastethernet 0/1
Switch(config-if)# switchport mode trunk
Switch(config-if)# switchport trunk allowed vlan 100,110,130,140
Switch(config-if)# exit

4. Configure Interfaces in Ranges

Range Configuration Examples

# FacStaff ports on all edge switches
Switch(config)# interface range fastethernet 0/4-12
Switch(config-if-range)# switchport mode access
Switch(config-if-range)# switchport access vlan 100
Switch(config-if-range)# exit

Student ports on all edge switches


Switch(config)# interface range fastethernet 0/13-20
Switch(config-if-range)# switchport mode access
Switch(config-if-range)# switchport access vlan 110
Switch(config-if-range)# exit


Lab ports configuration


Switch(config)# interface range fastethernet 0/21-24
Switch(config-if-range)# switchport mode access
Switch(config-if-range)# switchport access vlan 130
Switch(config-if-range)# exit

Network Testing and Verification

Connectivity Tests Performed

  1. Same VLAN, Same Switch: FacStaff-01 → FacStaff-02 ✓
  2. Same VLAN, Different Switches: FacStaff-01 → FacStaff-05 ✓
  3. Inter-VLAN Routing: FacStaff-01 → Student-01 ✓
  4. Cross-Campus Inter-VLAN: Lab1-01 → Lab2-01 ✓

Verification Commands Used

show vlan brief
show interfaces status
show interfaces trunk
show ip interface brief
show ip route
show running-config
ping [destination IP]

Key Implementation Challenges and Solutions

Challenge 1: Trunk Encapsulation

Issue: Core switches required trunk encapsulation configuration Solution: Added switchport trunk encapsulation dot1q before trunk mode

Challenge 2: Physical Connectivity

Issue: Many devices were not physically connected to switches Solution: Systematically connected all devices using appropriate cable types

Challenge 3: Inter-VLAN Routing

Issue: Initial confusion about which switch handles routing Solution: Configured East-Core as the primary router with VLAN interfaces

Lessons Learned

Network Design Principles

  • Physical connectivity must be established before logical configuration
  • Hierarchical design separates routing (core) from switching (edge) functions
  • VLSM allows efficient IP address space utilization
  • Consistent port assignments simplify network management

Configuration Best Practices

  • Use interface ranges for bulk configuration efficiency
  • Configure trunk ports before connecting switches
  • Test connectivity incrementally (Layer 1 → Layer 2 → Layer 3)
  • Maintain consistent naming conventions across all devices
  • Document all IP assignments and port mappings

Troubleshooting Methodology

  1. Verify physical layer connectivity
  2. Check VLAN assignments and memberships
  3. Confirm trunk configurations and allowed VLANs
  4. Validate IP addressing and default gateways
  5. Test routing functionality with ping commands

Conclusion

This lab successfully demonstrated the implementation of a hierarchical VLAN design using VLSM principles. The network supports 15 end devices across 4 VLANs with full inter-VLAN routing capabilities. The systematic approach to configuration and testing ensured reliable network operation across both East and West campus segment

Champlain College - Andrei Gorlitsky's Academic Wiki

Welcome to my GitHub Wiki! This is where I document my entire Champlain College experience, including assignments, notes, and everything I've learned across all courses until I graduate.

This wiki serves as a central hub for my academic journey, showcasing my growth and knowledge in cybersecurity and beyond.

For more information about Champlain College, visit:
Champlain College

© Andrei Gorlitsky 2025 - Champlain College

⚠️ **GitHub.com Fallback** ⚠️