CCNA

Cisco Certified
Network Associate
Lab Guide

Name: ______________________
Faculty:_____________________
Batch: ______________________
Branch:_____________________

Zoom Technologies® 1
Lab completion report
Name:_________________________
Batch:_________________________
LAB DATE Student Sig Lab Coordinator Sig Remarks

Initial

WAN Int

Static

RIP

EIGRP

OSPF
Access
List
NAT
Frame
Relay
VLAN

VTP
Inter-
VLAN
Port
Security

Sign Of the Faculty _________________________

Imp Note: After completing the lab on every session take the sign
of the lab coordinator, course completion certificate will not be
issued otherwise.

Zoom Technologies® 2
Zoom Technologies® 3
 Lab 1 - INITIAL ROUTER CONFIGURATION

User mode:
Router >
Router > enable

Show commands:
Router # show running-config
Router # show startup-config
Router # show version
Router # show flash
Moving to Global configuration mode:
Router # configure terminal
Router(config) #

Assigning Hostname to Router

Rotuer(config)#Hostname Hyderabad
Assigning ip address to Ethernet interface:
Hyderabad (config) # interface Ethernet 0
Hyderabad (config-if) # ip address 192.168.1.1 255.255.255.0
Hyderabad (config-if) # no shut

Assigning Telnet password:

Hyderabad (config) # line vty 0 4
Hyderabad (config-line) #login
Hyderabad (config-line) #password zoom
Hyderabad (config-line) #exit

Assigning console password:

Hyderabad (config) # line con 0
Hyderabad (config-line) # login
Hyderabad (config-line) # password ccna
Hyderabad (config-line) # exit

Assigning Auxiliary password:

Hyderabad (config) # line aux 0
Hyderabad (config-line) # login
Hyderabad (config-line) # password cisco
Hyderabad (config-line) # exit

Assigning enable password:

Hyderabad (config) # enable password cisco
Hyderabad (config) # enable secret zoom

Zoom Technologies® 4
Checking the Changes in running-config
Hyderabad # show running-config
Hyderabad # show startup-config

Commands to save the configuration:

Hyderabad # copy running-config startup-config

( OR )
Hyderabad # write memory
( OR )
Hyderabad # wr

Checking the startup-config:

Hyderabad # show startup-config

Check the following if you have completed in the labs

1. Establish Telnet session to the Router

2. Configure hostname to router.

3. Configuring Ethernet interface of the Router

4. Password protection to the Telnet session

5. Password protection to the Console session

6. Password protection to the Auxiliary session

7. Setting up privilege mode Password.

8. Context sensitive help

9. Display the contents of Running-Configuration

10.Display the contents of Startup-configuration

11.Saving the Configuration

12.Establishing a console session to the Router

Important Note
Please don’t forget to fill in the Lab Completion Report after the lab and take the signature of the lab
coordinator as Course completion certificate will not be issued otherwise.

Zoom Technologies® 5
 Lab 2 - WAN INTERFACE CONFIGURATION:

172.16.0.1/16 172.17.0.1/16
S0 S0

HYD S1
CHE S1
172.16.0.2/16
E0 172.17.0.2/16 BAN
E0 E0
192.168.1.1/24 10.0.0.1/8 BAN
192.168.2.1/24
N

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8 LAN - 192.168.2.0/24

ON CHE: ON HYD: ON BAN:

CHE# configure terminal HYD # configure terminal BAN# configure terminal

CHE(config)# interface serial 0 HYD (config) # interface serial 1 BAN(config)#interface serial 1
CHE(config-if)# ip address 172.16.0.1 255.255.0.0 HYD(config-if)#ip address 172.16.0.2 255.255.0.0 BAN(config-if)#ip address 172.17.0.2 255.255.0.0
CHE(config-if)# no shutdown HYD(config-if)#no shutdown BAN(config-if)#no shutdown
CHE(config-if)# encapsulation hdlc HYD(config-if)#clock rate 64000 BAN(config-if)#encapsulation hdlc
CHE(config-if)# exit HYD(config-if)#encapsulation hdlc BAN(config-if)#^z
CHE(config)# exit HYD(config-if)#^z
HYD# configure terminal
HYD(config) #interface serial 0
HYD(config-if)#ip address 172.17.0.1 255.255.0.0
HYD(config-if)#no shutdown
HYD(config-if)#encapsulation hdlc
HYD(config-if)#clock rate 64000
HYD(config-if)#^z

Zoom Technologies® 6
Fill the Blanks before Starting your configuration

Router Name:_________________

ROUTER # configure terminal

ROUTER (config) # interface serial _____
ROUTER (config-if) # ip address ___________________ ___________________
ROUTER (config-if) # no shutdown
ROUTER (config-if) # clock rate 64000
ROUTER (config-if) # encapsulation hdlc
ROUTER (config-if) # exit
ROUTER (config) # interface serial _____
ROUTER (config-if) # ip address ___________________ ___________________
ROUTER (config-if) # no shutdown
ROUTER (config-if) # encapsulation hdlc
ROUTER (config-if) # clock rate 64000
ROUTER (config-if) # exit

Zoom Technologies® 7
 Show commands:

Serial interface troubleshooting

Router # show interfaces s 0

1. Serial 0 is up , line protocol is up (connectivity is fine)

2. Serial 0 is administratively down, line protocol is down

(No Shutdown has to be given on the local router serial interface)

3. Serial 0 is up, line protocol is down

(Encapsulation mismatch or clock rate has to be given on DCE)

4. Serial 0 is down, line protocol is down

(Serial interface on the remote router has to be configure)

Router # show controllers s 0

(To know whether the cable connected to the serial interface is DCE or DTE)

Zoom Technologies® 8
 Lab 3.1 - STATIC ROUTING

172.16.0.1/16 172.17.0.1/16
S0 S0

HYD S1
CHE S1
172.16.0.2/16
E0 172.17.0.2/16 BAN
E0 E0
192.168.1.1/24 10.0.0.1/8 BAN
192.168.2.1/24
N

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8 LAN - 192.168.2.0/24

ON CHE : ON HYD : ON BAN:

AREA 0
CHE # config terminal HYD # config terminal BAN # config terminal
CHE(config) # ip routing HYD(config) # ip routing BAN(config) # ip routing
CHE(config) # ip route 10.0.0.0 255.0.0.0 172.16.0.2 HYD(config) # ip route 192.168.1.0 255.255.255.0 BAN(config) # ip route 10.0.0.0 255.0.0.0 172.17.0.1
172.16.0.1
HYD(config) # ip route 192.168.2.0 255.255.255.0
172.17.0.2

Show commands: Debug commands:

ROUTER # show ip route ROUTER # debug ip routing

ROUTER # debug ip packet

Zoom Technologies® 9
Fill the Blanks before Starting your configuration

Router Name:_________________
ROUTER # configure terminal
ROUTER(config) # interface serial 0
ROUTER(config-if) # ip address ___________ _____________
ROUTER(config-if) # no shutdown
ROUTER(config-if) # clock rate 64000
ROUTER(config-if) # encapsulation hdlc
ROUTER(config-if) # exit
ROUTER(config) # interface serial 1
ROUTER(config-if) # ip address ___________ _____________
ROUTER(config-if) # no shutdown
ROUTER(config-if) # encapsulation hdlc
ROUTER(config-if) # clock rate 64000
ROUTER(config-if) # exit
ROUTER(config) #
ROUTER(config) # ip routing
ROUTER(config) # ip route _________________ ___________________ _________
ROUTER(config) # ip route _________________ ___________________ _________

Zoom Technologies® 10
 Lab 3.2 - STATIC ROUTING

172.16.0.1/16 172.17.0.1/16
S0 S0

HYD S1
CHE S1
172.16.0.2/16
E0 172.17.0.2/16 BAN
E0 E0
192.168.1.1/24 10.0.0.1/8 BAN
192.168.2.1/24
N

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8 LAN - 192.168.2.0/24

ON CHE : ON HYD : ON BAN:

CHE # config terminal HYD # config terminal BAN # config terminal

CHE(config) # ip routing HYD(config) # ip routing BAN(config) # ip routing
CHE(config) # ip route 10.0.0.0 255.0.0.0 172.16.0.2 HYD(config) # ip route 192.168.1.0 255.255.255.0 BAN(config) # ip route 10.0.0.0 255.0.0.0 172.17.0.1
CHE(config) # ip route 192.168.2.0 255.255.255.0 172.16.0.1 BAN(config) # ip route 192.168.1.0 255.255.255.0
172.16.0.2 HYD(config) # ip route 192.168.2.0 255.255.255.0 172.17.0.1
CHE(config) # ip route 172.17.0.0 255.255.0.0 172.17.0.2 BAN(config) # ip route 172.16.0.0 255.255.0.0
172.16.0.2 172.17.0.1

Show commands:

ROUTER # show ip route

Zoom Technologies® 11
 Lab 3.3: Default Routing

172.16.0.1
S0

CHE
E0
192.168.1.1

ON CHE :

CHE # config terminal

CHE(config) # ip routing
CHE(config) # ip route 0.0.0.0 0.0.0.0 s0

Show commands:

ROUTER # show ip route

Router Name:_________________
ROUTER # configure terminal
ROUTER(config) # interface serial 0
ROUTER(config-if) # ip address _________________________
ROUTER(config-if) # no shutdown
ROUTER(config-if) # clock rate 64000
ROUTER(config-if) # encapsulation hdlc
ROUTER(config-if) # exit
ROUTER(config) #
ROUTER(config) # ip routing
ROUTER(config) # ip route 0.0.0.0 0.0.0.0 _____ ____

Zoom Technologies® 12
 1. Assign the IP address and make the serial interface

administratively up.

2. Understanding the importance of extended ping command.

3. Understanding the importance of debug IP packet command.

4. Understanding the routing table.

5. Adding a static route by defining the next hop address.

6. Adding a static route by defining the exit interface.

7. Adding a default route.

Zoom Technologies® 13
 Lab 4 - RIP:

172.16.0.1/16 172.17.0.1/16
S0 S0

HYD S1
CHE S1
172.16.0.2/16
E0 172.17.0.2/16 BAN
E0 E0
192.168.1.1/24 10.0.0.1/8 BAN
192.168.2.1/24
N

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8 LAN - 192.168.2.0/24

ON CHE: ON HYD : ON BAN:

CHE#config terminal HYD # config terminal BAN # config terminal

CHE(config)#ip routing HYD(config) # ip routing BAN(config) # ip routing
CHE(config)#router rip HYD(config) # router rip BAN(config) # router rip
CHE(config-router)# network 192.168.1.0 HYD(config-router) # network 10.0.0.0 0 BAN(config-router) # network 192.168.2.0
CHE(config-router) # network 172.16.0.0 HYD(config-router) # network 172.16.0.0 BAN(config-router) # network 172.17.0.0
AREA 0
CHE(config-router) #^z HYD(config-router) # network 172.17.0.0 BAN(config-router) # ^z
CHE# HYD(config-router) # ^z BAN#
HYD#

Show commands: Debug commands:

HYD # show ip route HYD # debug ip rip

HYD # show ip protocol HYD# terminal monitor

Zoom Technologies® 14
Fill the Blanks before Starting your configuration

Router Name:_________________
ROUTER # configure terminal
ROUTER (config) # interface serial 0 ROUTER(config) #
ROUTER (config-if) # ip address ____________ ___________ ROUTER(config) # ip routing
ROUTER (config-if) # no shutdown ROUTER(config) # router rip
ROUTER (config-if) # clock rate 64000 ROUTER(config-router) # network ________________
ROUTER (config-if) # encapsulation hdlc ROUTER(config-router) # network ________________
ROUTER (config-if) # exit ROUTER(config-router) # network________________
ROUTER (config) # interface serial 1 ROUTER(config-router) # ^z
ROUTER (config-if) # ip address ____________ ___________ ROUTER#
ROUTER (config-if) # no shutdown
ROUTER (config-if) # encapsulation hdlc
ROUTER (config-if) # clock rate 64000
ROUTER (config-if) # exit

Zoom Technologies® 15
 1. Enabling RIP Protocol process on the respective networks

2. Understanding the RIP protocol routes in the routing table

3. Understanding the RIP updates using debug IP RIP command

4. Check the A.D usage with RIP and Static

Zoom Technologies® 16
 Lab 5 - EIGRP
172.16.0.1/16 172.17.0.1/16
S0 S0

HYD S1
CHE S1
172.16.0.2/16
E0 172.17.0.2/16 BAN
E0 E0
192.168.1.1/24 10.0.0.1/8 BAN
192.168.2.1/24
N

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8 LAN - 192.168.2.0/24

ON CHE: ON HYD: ON BAN:

CHE # config terminal HYD # config terminal BAN # config terminal

CHE(config) # ip routing HYD(config) # ip routing BAN(config) # ip routing
CHE(config) # router eigrp 10 HYD(config) # router eigrp 10 BAN(config) # router eigrp 10
CHE(config-router)# network 192.168.1.0 HYD(config-router)#network 10.0.0.0 BAN(config-router)#network 192.168.2.0
CHE(config-router)# network 172.16.0.0 HYD(config-router)#network 172.16.0.0 BAN(config-router)#network 172.17.0.0
CHE(config-router)# exit HYD(config-router)#network 172.17.0.0 BAN(config-router)#exit
CHE(config) AREA
# exit 0 HYD(config-router)#exit BAN(config)#exit
HYD(config) # exit

Show commands: Show commands:

HYD # show ip route HYD # show ip eigrp topology

HYD # show ip protocols HYD # show ip eigrp neighbor
HYD # show ip eigrp neighbor detail

Zoom Technologies® 17
Fill the Blanks before Starting your configuration

Router Name:_________________

ROUTER # configure terminal ROUTER(config) #

ROUTER (config) # interface serial 0 ROUTER(config) # ip routing
ROUTER (config-if) # ip address ___________ ____________ ROUTER(config) # router eigrp _______
ROUTER (config-if) # no shutdown ROUTER(config-router) # network ________________
ROUTER (config-if) # clock rate 64000 ROUTER(config-router) # network ________________
ROUTER (config-if) # encapsulation hdlc ROUTER(config-router) # network________________
ROUTER (config-if) # exit ROUTER(config-router) # ^z
ROUTER (config) # interface serial 1 ROUTER#
ROUTER (config-if) # ip address ___________ ____________
ROUTER (config-if) # no shutdown
ROUTER (config-if) # encapsulation hdlc
ROUTER (config-if) # clock rate 64000
ROUTER (config-if) # exit

Zoom Technologies® 18
 1. Configuration of EIGRP

2. Verify Neighbor table

3. Verify topology table (FD/AD)

4. Verify the routing table

Zoom Technologies® 19
 Lab 6 - OSPF

AREA 0

172.16.0.1/16 172.17.0.1/16
S0 S0

HYD S1
CHE BAN
172.16.0.2/16 CHE S1
BAN
E0 172.17.0.2/16 BAN
E0 E0
192.168.1.1/24 10.0.0.1/8 BAN
N
192.168.2.1/24
N

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8 LAN - 192.168.2.0/24

ON CHE: ON HYD: ON BAN:

CHE # config terminal HYD # config terminal BAN # config terminal

CHE(config) # ip routing HYD(config) # ip routing BAN(config) # ip routing
CHE(config) # router ospf 5 HYD(config) # router ospf 3 BAN(config) # router ospf 3
CHE(config-router)#network 192.168.1.0 0.0.0.255 area 0 HYD(config-router)# network 10.0.0.0 0.255.255.255 area 0 BAN(config-router)#network 192.168.2.0 0.0.0.255 area 0
CHE(config-router)#network 172.16.0.0 0.0.255.255 area 0 HYD(config-router)# network 172.16.0.0 0.0.255.255 area 0 BAN(config-router)#network 172.17.0.0 0.0.255.255 area 0
CHE(config-router) #^z HYD(config-router)# network 172.17.0.0 0.0.255.255 area 0 BAN(config-router)#^z
CHE# HYD(config-router)# ^z BAN#
AREA 0 HYD #

Show commands: Debug commands:

Router # debug ip ospf adj
Router # show ip route Router # debug ip ospf hello
Router # show ip ospf database Router # debug ip ospf packet
Router # show ip ospf neighbors Router # debug ip ospf event

Zoom Technologies® 20
 Fill in the Blanks before starting your configuration

Router Name:_________________

ROUTER # configure terminal

ROUTER (config) # interface serial 0 ROUTER(config) # router OSPF ____
ROUTER (config-if) # ip address ______________ _________ ROUTER(config-router) # network _________ _______ area _____
ROUTER (config-if) # no shutdown ROUTER(config-router) # network _________ _______ area _____
ROUTER (config-if) # clock rate 64000 ROUTER(config-router) # network _________ _______ area _____
ROUTER (config-if) # encapsulation hdlc ROUTER(config-router) # ^z
ROUTER (config-if) # exit ROUTER#
ROUTER (config) # interface serial 1
ROUTER (config-if) # ip address ______________ _________
ROUTER (config-if) # no shutdown
ROUTER (config-if) # encapsulation hdlc
ROUTER (config-if) # clock rate 64000
ROUTER (config-if) # exit
ROUTER(config) #
ROUTER(config) # ip routing
Zoom Technologies® 21
 1. Configuration of OSPF

2. Automatic selection process of router-id

3. Debugging and understanding the functioning of hello packet

4. Debugging and understanding the adjacency formation

5. Verification of OSPF database

6. Verification of OSPF Neighbor table

7. Election of DR/BDR

Zoom Technologies® 22
Lab 7 - STANDARD ACCESS-LIST:
172.16.0.1/16 172.17.0.1/16
S0 S0

HYD S1
CHE S1
172.16.0.2/16
E0 172.17.0.2/16 BAN
E0 E0
192.168.1.1/24 10.0.0.1/8 BAN
192.168.2.1/24
N

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8 LAN - 192.168.2.0/24

SCENARIO 1: SCENARIO 2: SCENARIO 3:

Only 192.168.2.0 should communicate with Configuration of an access-list on HYD that Configuration of an standard access-list on
192.168.1.0 administrative access through Telnet is Bangalore Ethernet 0 in the outbound
possible only from 10.0.0.10 direction denying 10.0.0.10
ON CHE:
ON HYD: ON BAN:
CHE #config terminal
CHE (config) # access-list 1 permit
HYD #config terminal BAN #config terminal
192.168.2.0 0.0.0.255
HYD (config) # access-list 1 permit BAN (config) # access-list 1 deny 10.0.0.10
CHE (config) # int e0
10.0.0.10 0.0.0.0 0.0.0.0
CHE (config-if) # ip access-group 1 out
HYD (config) # line vty 0 4 BAN (config)#access-list 1 permit any
CHE (config-if) # exit
HYD (config-line) # access-class 1 in BAN (config)#interface Ethernet 0
CHE (config) # exit
HYD (config-line) # exit BAN (config-if) # ip access-group 1 out
HYD (config) # exit BAN (config-if) # exit
CHE # show ip access-list
BAN (config) # exit
HYD # show ip access-list
Note: Use the command prompt of a PC try
to ping the filtered ip address

Zoom Technologies® 23
 Lab 8 - EXTENDED ACCESS-LIST:
172.16.0.1/16 172.17.0.1/16
S0 S0

HYD S1
CHE S1
172.16.0.2/16
E0 172.17.0.2/16 BAN
E0 E0
192.168.1.1/24 10.0.0.1/8 BAN
192.168.2.1/24
N

LAN - 192.168.1.0/24 LAN – 10.0.0.0/8 LAN - 192.168.2.0/24

`
SCENARIO :2 SCENARIO :1 SCENARIO :3
Configuration of an extended access-list Configuration of an extended access-list Configuration of an extended access-list
CHESerial 0 in inbound direction HYD Ethernet 0 in outbound direction. BAN serial 1 in inbound direction.
deny PING (Echo) from Bang LAN to Chen LAN Allow only FTP service to be access from Bang Deny HTTP from Chen LAN to Bang LAN.
permit all other services.
LAN Permit all other service from any network.
On CHE: On BAN:
On HYD:
BAN#configure terminal
CHE#configure terminal HYD#configure terminal BAN (config)#access-list 111 deny tcp 192.168.1.0
CHE (config)#access-list 110 deny icmp HYD (config)#access-list 101 permit tcp 192.168.2.0 0.0.0.255 192.168.2.0 0.0.0.255 eq 80
192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255 0.0.0.255 10.0.0.10 0.0.0.0 eq ftp BAN (config)#access-list 111 permit ip any any
echo HYD (config)#interface ethernet 0 BAN (config)#interface serial 1
CHE (config)#access-list 110 permit ip any any HYD (config-if)#ip access-group 101 out BAN (config-if)#ip access-group 111 in
CHE (config)#interface serial 0 HYD (config-if)#exit BAN (config-if)^z
CHE (config-if)#ip access-group 110 in HYD (config)#
CHE (config-if)^z BAN # sh ip access-list
HYD # sh ip access-list
CHE # sh ip access-list

Zoom Technologies® 24
 1. Configure any routing protocol (e.g. RIP) & check the
communication

2. Configure Standard access-list on CHE Ethernet 0 in the out

bound direction, permitting only 192.168.2.0

3. Configure an access-list on HYD that administrative access

through Telnet is possible only from 10.0.0.10

4. Configure an access-list on BAN Ethernet 0 in the outbound

direction, denying 10.0.0.10 host only

5. Configuration an access-list on CHE serial 0 in the inbound

direction, deny ping request from 192.168.2.0 to
192.168.1.0 and permitting any other services.

6. Configuration of an extended access-list on HYD Ethernet 0

in the outbound direction permitting only FTP service from
the network 192.168.2.0 to 10.0.0.10

7. Configuration of an extended access-list on BAN serial 1 in

inbound direction denying HTTP from 192.168.1.0 to
192.168.2.0 and permitting other traffic from any network
to 192.168.2.0 network.

Zoom Technologies® 25
LAB 9: FRAME RELAY

Zoom Technologies® 26
CONFIGURATION ON CHE: CONFIGURATION ON BAN: CONFIGURATION ON BAN:
HYD#conf t BAN#
CHE# HYD(config)#frame-relay switching
CHE# config terminal HYD(config)#int s0 BAN # config terminal
HYD(config-if)#no ip address BAN (config)# interface serial 1
CHE(config)# interface serial 0 HYD(config-if)#no shutdown
CHE(config-if)#ip address 172.16.0.1 255.255.0.0 HYD(config-if)#encapsulation frame-relay BAN (config-if)#ip address 172.16.0.2 255.255.0.0
HYD(config-if)#clockrate 64000 BAN (config-if)# no shut
CHE(config-if)# no shut HYD(config-if)#frame-relay lmi-type cisco
CHE(config-if)# encapsulation frame-relay HYD(config-if)#frame-relay intf-type dce BAN (config-if)# encapsulation frame-relay
HYD(config-if)#frame-relay route 200 interface s1 100 BAN (config-if)#frame-relay lmi-type cisco
CHE(config-if)#frame-relay lmi-type cisco HYD(config-if)#exit
CHE(config-if)#frame-relay interface-dlci 100 HYD(config)#int s1 BAN (config-if)#frame-relay interface-dlci 200
HYD(config-if)#no ip address BAN (config-if)# exit
CHE(config-if)# exit HYD(config-if)#no shutdown
HYD(config-if)#encapsulation frame-relay BAN (config)#^z
HYD(config-if)#frame-relay lmi-type cisco BAN #
HYD(config-if)#frame-relay intf-type dce
HYD(config-if)#clockrate 64000
HYD(config-if)#frame-relay route 100 interface s0 200
HYD(config-if)#exit
HYD(config)#^Z
HYD#

Show commands:

ROUTER# show frame-relay pvc

ROUTER# show frame-relay map
ROUTER # show ip route

Zoom Technologies® 27
 1. Configuration of the frame-relay encapsulations

2. Observation of the status of PVCs

3. Verification of the frame relay map

4. Configure static routing on Frame relay and check communication

5. Verification of the routing tables

ROUTER#
ROUTER# config terminal
ROUTER(config)# interface serial ____
ROUTER(config-if)# ip address ___________________ ___________________
ROUTER(config-if)# no shut
ROUTER(config-if)# encapsulation frame-relay
ROUTER(config-if)#frame-relay lmi-type cisco
ROUTER(config-if)#frame-relay interface-dlci _____
ROUTER(config-if-dlci)#exit
ROUTER(config-if)#^z
ROUTER#

Zoom Technologies® 28
 Lab 10 - VLAN

ON 192.168.20.50 ON 192.168.20.51

VLAN CREATION: VLAN CREATION:

2950 # config terminal 2950 # config terminal

2950(config) # vlan 10 2950(config) # vlan 10
2950(config-vlan) # name sales 2950(config-vlan) # name sales
2950(config) # vlan 20 2950(config) # vlan 20
2950(config-vlan) # name mkt 2950(config-vlan) # name mkt

ASSIGNING MEMBERSHIP TO THE PORTS: ASSIGNING MEMBERSHIP TO THE PORTS:

2950(config) # interface range fa0/1 -2 2950(config) # interface range fa0/13 - 14

2950(config-if) # switchport mode access 2950(config-if) # switchport mode access
2950(config-if) # switchport access vlan 10 2950(config-if) # switchport access vlan 10
2950(config-if) # exit 2950(config-if) # exit
2950(config)#interface range fa0/4 - 5 2950(config)#interface range fa0/16 - 17
2950(config)# switchport access vlan 20 2950(config)# switchport access vlan 20

TRUNKING: TRUNKING:
2950 # config terminal 2950 # config terminal
2950(config) #interface fa0/24 2950(config) #interface fa0/24
2950(config-if) # switchport mode trunk 2950(config-if) # switchport mode trunk
2950(config-if) # switchport trunk allowed vlan all 2950(config-if) # switchport trunk allowed vlan all
2950(config-if) # exit 2950(config-if) # exit
2950(config) # exit 2950(config) # exit

Zoom Technologies® 29
 Lab 11 - Inter-VLAN

switch# configure terminal router#configure terminal

switch(config)#vlan 10 router(config)# interface ethernet 0
switch(config-vlan)# name Sales router(config-if)# no ip address
switch(config-vlan)# exit router(config-if)# no shutdown
switch(config)# vlan 20 router(config-if)# exit
switch(config-vlan)# name Marketting router(config)# interface ethernet 0.1
switch(config-vlan)# exit router(config-if)# encapsulation dot1q 10
switch(config)# interface range fa0/1 - 2 router(config-if)# ip address 192.168.1.1
switch(config-if-range)# switchport mode access 255.255.255.0
switch(config-if-range)# switchport access vlan 10 router(config-if)# exit
switch(config-if-range)# exit router(config)# interface ethernet 0.2
switch(config)# interface range fa0/5 - 6 router(config-if)# encapsulation dot1q 20
switch(config-if-range)# switchport mode access router(config-if)# ip address 192.168.2.1
switch(config-if-range)# switchport access vlan 20 255.255.255.0
switch(config-if-range)# exit router(config-if)# exit
switch(config)# interface fa0/10 router(config)# no ip routing
switch(config-if)# switchport mode trunk router(config)# ip routing
switch(config-if)# switchport trunk allowed vlan all
switch(config-if)# exit

Zoom Technologies® 30
 1. Verification of MAC address table

2. Creation of VLAN

3. Assigning the hosts to a VLAN

4. Configure Trunking between switches

5. Created Sub-interfaces on Router

6. Changed sub-interface encapsulation to dot1q

7. Configuration of encapsulation for the trunk link

8. Inter-VLAN communication through an external router.

9. Understanding the concepts of VTP modes

Server mode

Client mode

Transparent mode

Zoom Technologies® 31
 Lab 12 - Port Security

Switch(config-if)#Switchport port-security
Switch(config-if)#Switchport port-security maximum <value>
Switch(config-if)#Switcport port-security mac-address <mac-address>
Switch(config-if)#Switchport port-security violation{protect|restrict|shutdown}

Zoom Technologies® 32
 Lab 13 – NAT Configuration

Configuration of PAT Configuration of Static NAT

CHE# configure terminal CHE# configure terminal

CHE(config)# interface s0 CHE(config)# interface s0
CHE(config-if)#ip address 202.1.0.18 CHE(config-if)#ip address 202.1.0.18
255.255.255.248 255.255.255.248
CHE(config-if)#no shutdown CHE(config-if)#no shutdown
CHE(config-if)#encapsulation ppp CHE(config-if)#encapsulation ppp
CHE(config-if)#ip nat outside CHE(config-if)#ip nat outside
CHE(config-if)#exit CHE(config-if)#exit
CHE(config)#interface Ethernet 0 CHE(config)#interface Ethernet 0
CHE(config-if)#ip nat inside CHE(config-if)#ip nat inside
CHE(config-if)#exit CHE(config-if)#exit
CHE(config)#access-list 10 permit 192.168.1.0 CHE(config)#ip nat inside source static
0.0.0.255 192.168.1.10 202.1.0.19
CHE(config)#ip nat inside source list 10
interface serial 0 overload
CHE(config)#exit
CHE#

Show Commands
CHE# show ip nat translation

CHE# debug ip nat

Zoom Technologies® 33
 Check the following if you have completed the lab

1. Configure and verify Static Nat

2. Configure and verify Port Address Translation

3. Check the Nat table

4. Configure and verify PAT

5. Debugging of NAT

Zoom Technologies® 34