Basic Switch configuration: SW_AC2(config)#hostname SW_AC2 SW_AC2(config)#enable secret class SW_AC2(config)#line console 0 SW_AC2(config-line)#password cisco SW_AC2(config-line)#login SW_AC2(config-line)#exit SW_AC2(config)#line

vty 0 15 SW_AC2(config-line)#password cisco SW_AC2(config-line)#login SW_AC2(config-line)#exit SW_AC2(config)#banner motd #Authorized access only!# hostname SW_AC2 enable secret class line console 0 password cisco login exit line vty 0 15 password cisco login exit Step1: Configure switches for remote management: SW_AC2(config)#inteface vlan 43 SW_AC2(config-if)#ip address 172.16.43.12 255.255.255.0 SW_AC2(config-if)#no shutdown SW_AC2(config-if)#exit SW_AC2(config)#ip default-gateway 172.16.43.1 Step2: Configure Trunking. Note : Packet tracer now supports the use of the range argument for the interfac e command For interfaces FastEthernet 0/19 through FastEthernet 0/24 on all switches: -configure static trunking -Assigne VLAN 43 as the native VLAN SW_AC2(config)#interface range FastEthernet 0/19-24 SW_AC2(config-if-range)#switchport mode trunk SW_AC2(config-if-range)#switchport trunk native vlan 43 SW_AC2(config-if-range)#no shutdown SW_AC2(config-if-range)#end Step 3: Configure VTP and VLANs. - Configure SW_DS1 as VTP server and the following VTP parameters: (ONLY SW_DS1) --SW_DS1 is the VTP server. --VTP domain name: CCNA --VTP password: cisco -Create and name the following VLANs on SW_DS1.(ONLY SW_DS1) --VLAN 10: Student --VLAN 20: Faculty

--VLAN 43: Management --VLAN 67: Wireless -Configure SW_AC2 and SW_AC3 as VTP clients to participate in the CCNA VTP domai n. SW_AC2(config)#vtp mode client SW_AC2(config)#vtp domain CCNA SW_AC2(config)#vtp password cisco -Verify that VTP is operational. SW_AC2#show vtp status SW_AC2#show vlan brief

Step 4: Configure Interfaces for VLAN Access VLAN port assignments on each switch are as follows: Device Ports Assignment SW_AC2, SW_AC3 Fa0/1 0/10 10 SW_AC2, SW_AC3 Fa0/11 0/17 20 SW_AC3 Fa0/18 67 a. e. b. Assign VLANs according to the port assignments table. Verify trunking and VLAN assignments. Configure access ports on access layer switches. Configure the appropriate interfaces on SW_AC2 and SW_AC3 for access mod

Step 5: Configure Spanning Tree. a. Modify STP root bridge elections. Using a priority of 4096, set SW_DS1 as the root bridge for all VLANs. Using a priority of 8192, set SW_AC2 so that it will become the root for all VLANs if SW_DS1 fails. b. Verify the spanning tree election. Step 6: Configure Inter-VLAN Routing. Use the information in the Addressing Table to configure Router1 for inter-VLAN routing. Be sure to designate the native VLAN. Verify inter-VLAN routing. Step 7: Configure Port Security. Note: Best practice requires port security on all access ports. However, for thi s practice exercise you will only configure one port with security. a. Configure SW_AC3 with port security on FastEthernet 0/2. Enable port security. No more than two MAC addresses are allowed on the FastEthernet 0/2 port for SW_AC3. Once learned, MAC addresses should be automatically added to the running configuration. If this policy is violated, the port should be automatically disabled. b. Verify that port security is implemented. Step 8: Configure the Wireless LAN. Refer to the Addressing Table to configure the wireless LAN. a. Configure WRS.

Use static addressing on the Internet interface. Set the router IP and subnet mask. Use the DHCP Server Settings to configure the router to provide wireless hosts with an IP address. The starting IP address in the wireless LAN subnet is 172.16.100.10. The maximum number of users is 25. b. Configure wireless security. Set the SSID to WRS_LAN. Enable WEP security and use 12345ABCDE as key1. c. Use cisco123 as the remote management password. d. Configure PC4 to access the wireless network that is provided by WRS. PC4 uses DHCP to obtain addressing information. Note: It will not be possible for devices to ping PC4 since PC4 is behind the WR S NAT firewall. Step 9: Verify Connectivity. Although these are not scored, the following connectivity tests should be succes sful. SW_DS1 can ping Router1. SW_AC2 can ping Router1. SW_AC3 can ping Router1. PC1 can ping PC2. PC2 can ping PC3. PC4 can ping PC1.

Step 5: Configure Interfaces for VLAN Access a. Step 1: Configure access ports on access layer switches -configure appropriate interfaces on SW_AC2 and SW_AC3 or static acces -assign VLANs to the port assignments table SW_AC2(config)#interface range FastEthernet 0/1-10 SW_AC2(config-if-range)#switchport mode access SW_AC2(config-if-range)#switchport access vlan 10 SW_AC2(config-if-range)#no shutdown SW_AC2(config-if-range)#exit SW_AC2(config)#interface range FastEthernet 0/11-17

SW_AC2(config-if-range)#switchport mode trunk SW_AC2(config-if-range)#no shutdown SW_AC2(config-if-range)#exit SW_AC2(config)#interface range FastEthernet 0/11-17 SW_AC2(config-if-range)#switchport mode access vlan 20 SW_AC2(config-if-range)#switchport access vlan 20 SW_AC2(config-if-range)#no shutdown SW_AC2(config-if-range)#exit b Verify spanning tree selection SW_AC2#show spanning-tree vlan 43

SW_AC2(config)#spanning-tree vlan 10 root secondary SW_AC2(config)#spanning-tree vlan 20 root secondary SW_AC2(config)#spanning-tree vlan 43 root secondary