Supplemental

Labs
 LAB 1: OFFICE LAN
NAME:

Objective
In this laboratory exercise, you will begin wiring your own computer network. To be-
gin the exercise, you will need to complete the following:
Assemble your network team. Record the names of all team members on this
sheet.
Determine the IP address for each computer in your network. Examples of IP
addresses that can be used are provided in Table 1. Your instructor will assign
you to a LAN and the accompanying IP address.

TABLE 1 Suggested IP Addresses

LAN 1 LAN 2 LAN 3 LAN 4

102.123.83.10 128.123.83.20 122.124.16.30 115.91.4.40
102.123.83.11 128.123.83.21 122.124.16.31 115.91.4.41
102.123.83.12 128.123.83.22 122.124.16.32 115.91.4.42
102.123.83.13 128.123.83.23 122.124.16.33 115.91.4.43
102.123.83.14 128.123.83. 24 122.124.16.34 115.91.4.44
102.123.83.15 128.123.83.25 122.124.16.35 115.91.4.45

All computers should be connected so that each computer in each LAN can com-
municate with the other computers within its LAN.

Network Equipment Required

UTP patch cables
Switch / Hub
Host computers
WireShark Protocol Analyzer software

Required Tasks
1. Document devices connected to the office LAN.
2. Interconnect hosts/make connections from host computer to switch/hub.
3. Verify link lights when making the network connections.
4. Use the ipconfig/all command to view the MAC address.
5. Configure the host IP address.
6. Verify connectivity/ping hosts.

Procedure
1. Prepare a drawing similar to Figure 1. You are to create the Office LAN draw-
ing with Microsoft Visio. You will do this outside of Lab and turn it in next

2 Supplemental Labs
 week in lab. Your network must contain at least three computers. For students
who dont have Microsoft Visio, you can use PowerPoint or any other drawing
tool to create your network documentation.

List the MAC and IP addresses assigned to your networking devices.

MAC Address
IP Address

CAT6
cable

CAT6 CAT6
cable cable
2
Switch
MAC Address Printer
IP Address MAC Address
IP Address

MAC Address
IP Address

FIGURE 1 The office LAN topology for this laboratory exercise.

2. Configure the IP address for each computer in your LAN. You will need to fol-
low the steps provided in your book to configure the IP address for your computer.
3. Use the ping command to verify that you can see all the other computers on your
network. This requires that you know the IP addresses for each computer on your
network. Record the findings from using the ping command to verify network
connectivity.

Assignment (Required)
Submit your office LAN network drawing to the instructor on the date specified. Your
drawing must show the host computers, the MAC addresses, the IP addresses, and the
network topology (for example, star).Submit your drawing and memo to the instructor.

LAB 1: OFFICE LAN 3

 The Ping Utility
Usage:
ping [-t] [-a] [-n count] [-l size] [-f] [-i TTL] [-v TOS] [-r count] [-s
count] [-j host-list] [-k host-list] [-w timeout]

Options:
-t: Ping the specified host until stopped; to stop, type Control-C.
-a: Resolve addresses to hostnames.
-n count: Number of echo requests to send.
-l size: Send buffer size.
-f: Set Dont Fragment flag in packet.
-i TTL: Time To Live.
-v TOS: Type Of Service.
-r count: Record route for count hops.
-s count: Timestamp for count hops.
-j host-list: Loose source route along host-list.
-k host-list: Strict source route along host-list.
-w timeout: Timeout in milliseconds to wait for each reply.

4 Supplemental Labs
LAB 2: UNSHIELDED TWISTED PAIR (UTP)
NAME:

Objective
The objective of this lab is for the student to gain an understanding of the following:
Learn how to make RJ-45 patch cables
Explore how to test the patch cables
Learn how to make RJ-45 crossover cables
Explore how to test the crossover cables
Explore how to test the LANs horizontal cabling
Review the steps for terminating twisted-pair cable presented in Chapter 2 prior to
starting the lab. Also make sure you know which tools and test equipment you have
available in the lab.

Test Equipment Required

UTP cable termination kit
Fluke MicroScanner2 cable verifier
Twisted-pair cable
RJ-45 plugs

Required Tasks

Note
Have the instructor initial that you have completed each task!

LAB 2: UNSHIELDED TWISTED PAIR (UTP) 5

 1. Refer to Figure 1 for this task. Make one patch cable ~ 3ft. (terminate both
ends). Your cable must be wired for T568A. _____

1
2
3
4
5 # T568A COLOR
6 1 White-Green
7
8 2 Green
3 White-Orange
4 Blue
5 White-Blue
6 Orange
1 7 White-Brown
2
3 8 Brown
4
5
6
7
8

FIGURE 1 Figure for Task 1.

2. Make one crossover cable ~3ft. (terminate both ends). The wire map for a
crossover cable is provided in Figure 2. _____

6 Supplemental Labs
 A B
1 1
2 2
3 3
4 4
5 5
6 6
7 7
8 8

FIGURE 2 Wire map for a crossover cable.

3. Test the patch cable and the crossover cables to verify that they have been prop-
erly assembled. _____

Note
This step requires the use of a cable tester.

Assignment
Your boss wants to know if a UTP cable that is wired as follows will work.
1-3
2-6
3-1
4-7
5-8
6-2
7-4
8-5
Prepare a memo to your boss commenting on his question. Justify your answer.
This is not a yes/no question. Explain your answer in detail. You will submit your
memo to your instructor. Remember, treat this as a memo to your boss.

LAB 2: UNSHIELDED TWISTED PAIR (UTP) 7

 LAB 3: WIRELESS NETWORKING
NAME:

Objective
The objective of this lab exercise will be for the student to gain experience conduct-
ing a wireless networking site survey.
The objective is for each group to propose a wireless networking solution for
the space specified by the instructor. Verify that you can establish a link (by pinging)
with another laptop in your network. Also, demonstrate this by downloading the
shared file on the instructors computer. Make sure the instructors lab is on the same
network.

Required
Each group will create a floor plan of the area being surveyed. Use this to log mea-
surements for wireless availability. You may place access points at any available con-
nection point with an electrical outlet or with a network connection. You can assume
that a Power over Ethernet connection is available.
Each group is required to prepare a technical report for their instructor regarding
the findings of the wireless networking survey. Your report must include the following:
A memo to your boss that describes the task assigned to you, the findings of
your site survey, and your recommendation(s)
A drawing (8 1/2"11") of the proposed locations of the access points
A list of the wireless networking equipment and estimated cost for providing
wireless networking to the surveyed area
The original floor plan you used to conduct the site survey

This assignment is due ______________.

8 Supplemental Labs
LAB 4: SUBNETTING
NAME:

In this lab exercise you are to answer each of the nine subnetting questions. Have your
instructor verify the answer to each question before proceeding to the next question.
This will help to ensure you are following the correct steps to solve the problems.
1. A host computer is assigned the IP address 192.168.12.8 and a subnet mask of
255.255.255.192. The host sends a packet to another host with an IP address of
192.168.12.65. Is the destination IP address in the same subnet as
192.168.12.8? Explain your answer.

2. The subnet mask 255.255.255.224 is applied to a packet with a destination IP

address of 192.168.12.135. What subnet is the packet sent to?

3. The subnet mask 255.255.255.0 is applied to the following IP address. What

subnet is the packet sent to?
a. 10.20.35.12

LAB 4: SUBNETTING 9
 b. 10.50.35.6

c. 192.168.12.8

4. Given an IP address of 193.10.10.0, answer the following questions if the num-

ber of subnets created is four.
a. Determine the network address and the broadcast address for each sub-
net in the table that follows.
Network Address Broadcast Address
st
1 subnet
2nd subnet
3rd subnet
4th subnet

b. Determine the subnet mask.

c. Determine the number of usable hosts per subnet.

5. Given a network IP address of 211.123.83.0, answer the following questions if

eight subnets are to be created. The eight subnets include the network and
broadcast address.
a. Determine the network address and the broadcast address for each
subnet in the table that follows.
Network Address Broadcast Address
st
1 subnet
2nd subnet
3rd subnet
4th subnet
5th subnet
6th subnet
7th subnet
8th subnet

b. Determine the subnet mask.

c. Determine the number of hosts per subnet.

10 Supplemental Labs
6. Fill in the blanks for the table shown below given the information provided.
# Mask Bits Subnet Mask #Subnets # Hosts/Subnet
2 255.255.255.192 4 62
3
4
5
6

7. Fill in the blank cells based on the information provided.

Network Class *CIDR Subnet Mask #Subnets # Hosts/
Address Subnet
128.123.0.0 B /30 255.255.255.252 16384 2
135.45.0.0 /25
193.10.10.0 /28
211.123.83.0 /26
10.0.0.0 /13
32.0.0.0 /20
204.204.5.0 /28
/27
156.35.0.0 /21
116.0.0.0 /14
145.23.0.0 /29
199.12.1.0 /30
15.0.0.0 /29

*CIDR = Classless Inter-Domain Routing

8. A network address of 192.168.6.0 and a subnet mask of 255.255.254.0 can be

written in CIDR as what?

9. A CIDR block contains the following subnets with IP address of:

192.168.68.0/22
192.168.69.0/22
192.168.70.0/22
192.168.71.0/22

LAB 4: SUBNETTING 11
 Are there any problems with this group of subnets in the CIDR block? Show
your work.

12 Supplemental Labs
LAB 4A: SUPPLEMENTAL SUBNETTING EXERCISE
NAME:

1. A host computer with an IP address of 192.168.12.5 using a subnet mask of

255.255.255.0 pings a computer with an IP address of 192.168.12.83. What
happens to the data packet?
a. The packet is sent to the gateway address.
b. The packet is sent to the 127.0.0.1 address.
c. The destination for the data packet is in the same LAN.
d. The packet is sent to the 192 subnet.
e. None of these answers are correct.
2. A host computer with an IP address of 172.16.29.23 using a subnet mask of
255.255.255.0 pings a computer with an IP address of 172.16.29.83. What hap-
pens to the data packet?
a. The packet is sent to the gateway.
b. The packet is sent to the 255.255.255.0 subnet.
c. The packet is sent out as a broadcast.
d. The packet stays in the LAN.
e. None of these answers are correct.
3. A host computer with an IP address of 192.168.12.5 using a /24 subnet mask
pings a computer with an IP address of 192.168.12.102. What happens to the
data packet?
a. The packet stays in the LAN.
b. The destination for the data packet is in the 192.168.12.12 subnet; there-
fore, the data packet is sent to the gateway.
c. The destination for the data packet is in the 192.168.0.0 subnet; therefore,
the data packet is sent to the gateway.
d. The destination for the data packet is in the 192.168.0.1 subnet; therefore,
the data packet is sent to the gateway.
e. None of these answers are correct.
4. A host computer with an IP address of 128.123.168.12 using a subnet mask of
255.255.192.0 pings a computer with an IP address of 192.168.35.102. What
happens to the data packet?
a. The data packet is sent to the 192 subnet.
b. The data packet is sent to the gateway.
c. The destination IP address is a broadcast address; therefore, an ARP re-
quest is performed to determine the destination MAC address.
d. The data packet is sent to the gateway using an IP address of
128.123.168.250.
e. None of these answers are correct.
5. A host computer with an IP address of 10.10.20.5 using a subnet mask of
255.255.192.0 pings a computer with an IP address of 10.10.10.5. What hap-
pens to the data packet?
a. The data packet is sent to the gateway.
b. The data packet is sent to 10.10.20.192.

LAB 4A: SUPPLEMENTAL SUBNETTING EXERCISE 13

 c. The 10.10.10.5 is not in the same LAN; therefore, the data packet is sent
out as a broadcast.
d. The data packet is sent to the 127.0.0.1 network.
e. None of these answers are correct.
6. A computer with an IP address of 172.16.25.8 using a subnet mask of
255.255.255.224 pings an IP address of 172.16.25.52. What happens to the data
packet?
a. The data packet is sent to the gateway.
b. The data packet is sent to the loop-back interface.
c. This destination IP address is a broadcast address for the .32 subnet so
there will not be a reply.
d. The host at 172.16.25.52 will reply four times if the gateway IP address
has not been configured.
e. None of these answers are correct.
7. A subnet mask of 255.255.255.240 is applied to a packet with a destination of
172.16.123.213. Which subnet is the packet sent to?
a. The data packet is sent to the 172.16.112.0 subnet.
b. The data packet is sent to the 172.16.0.0 subnet.
c. The data packet is sent to the 172.16.252.0 subnet.
d. The data packet is sent to the 172.16.123.208 subnet.
e. All of the above are correct because this is a broadcast.
8. A /30 subnet mask is applied to a packet with a destination of 172.16.123.245.
Which subnet is the packet sent to?
a. The data packet is sent to the 172.16.0.0 subnet.
b. This is the broadcast address for the 172.16.123.240 subnet. The packet
is discarded.
c. The packet is sent to the 172.16.123.244 subnet.
d. The packet is sent to the gateway and then routed to the 172.16.123.0 net-
work.
e. None of these answers are correct.
9. A subnet mask of 255.255.255.192 is applied to a packet with a destination of
172.16.98.155. Which subnet is the packet sent to?
a. The packet is sent to the 172.16.98.128 subnet.
b. The packet is sent to the 172.16.98.0 subnet.
c. The packet is sent to the 172.168.98.192 subnet.
d. The packet is sent to the 172.168.98.64 subnet.
e. The packet is sent to the 172.168.128.0 subnet.
10. A data packet is sent to 24.0.0.5 using a subnet mask of 255.255.255.255. What
happens to the data packet?
a. This is a multicast address using a subnet mask of 255.255.255.255;
therefore, the data packet is sent directly to the networking device with a
multicast IP address of 224.0.0.5.
b. The data packet is sent directly to the networking device with an IP ad-
dress of 24.0.0.5.
c. The data packet will be discarded.
d. The 24.0.0.5 IP address is a broadcast address for the 24.0.0.0 network;
therefore, an ARP request will be issued to determine the destination
MAC address.
e. None of these answers are correct.

14 Supplemental Labs
LAB 5: BASIC ROUTER CONFIGURATION
AND THE COMMAND-LINE INTERFACE
NAME:

Overview
The overall objective of this laboratory exercise is to gain experience with basic Cisco
router configuration commands and gain an introductory understanding of the fol-
lowing:
Operating in Ciscos Privileged mode
Configuring the routers FastEthernet interface
Configuring the computers network interface
Troubleshooting the router interface

Topology

S1

Gi0/1

Fa0/0 Fa0/3 Fa0/1

R1 SW1
Fa0/2 PC1

PC2

FIGURE 1 The network topology for this lab.

Key Concepts
The following concepts, terms, commands, and steps should have been mastered in
this exercise.
1. Steps to enter the routers privileged EXEC mode (Router#)
2. Use of the following commands to verify their operation in Cisco IOS:

LAB 5: BASIC ROUTER CONFIGURATIONAND THE COMMAND-LINE INTERFACE 15

 ?,show flash, show version [sh ver], show history [sh hist], show interfaces
[sh int], configure terminal [conf t], interface FastEthernet [interface num-
ber], [int fa0/0]
3. What happens when you press the up arrow key on your keyboard
4. How to change the hostname of the router
5. How to configure the routers enable secret
6. How to set the vty password
7. The steps for configuring the IP address for FastEthernet interface 0/0 [Fa0/0]
on your router
8. Use of the no shut command to enable the router interface
9. Use of the sh ip int brief command to verify that the interface has been con-
figured
10. Use of the ping command to verify network connectivity
11. Use of the ipconfig /all command

Reference Tables
For convenience, Table 1 provides the IP address and mask of all necessary interfaces
used to complete the lab.

TABLE 1 Computer IP Addresses, Subnet Masks, and Gateway

Address for Lab CP-1

Computer IP Address Subnet Mask Gateway Address

PC1 10.10.20.1 255.255.255.0 10.10.20.250
PC2 10.10.20.2 255.255.255.0 10.10.20.250
S1 10.10.20.3 255.255.255.0 10.10.20.250
FA 0/0 10.10.20.250 255.255.255.0

Detailed Lab Steps

Task # 1
1. Use the following commands to verify their operation in Cisco IOS.
a. What happens when you enter a?at the Router# prompt?

b. What information is displayed when you enter show flash at the Router#
prompt?

c. Which command can you use to view the routers uptime?

d. How long has the router been up?

e. Which version of the Cisco IOS Software is running on this simulator?

16 Supplemental Labs
 f. Which command can you use to view the past entries on this router?

g. What happens when you press the up/down keys on your keyboard?

2. Change the hostname of the router to RouterA. List the command sequence re-
quired to accomplish this task.

3. Configure the enable secret on the router to be ciscopress. List the command
sequence required to accomplish this task.

4. Set the console password on the router to ciscopress and enable login. List the
command sequence required to accomplish this task.

5. Set the vty password on the router to ciscopress and enable login. List the
command sequence required to accomplish this task.

6. Configure the gateway address for FastEthernet0/0 interface on RouterA.

Use the IP address 10.10.20.250 and a subnet mask of 255.255.255.0. What
does 0/0 mean relative to the FastEthernet interface?

7. Use the no shut command to enable the FastEthernet 0/0 interface. What does
the shut command do?

8. Use the sh ip int brief command to verify that the FastEthernet interface has
been configured and the routers status and protocol are both up and up. Once
you have completed the configuration, verify that each computer in the LAN
can ping the other computers. Also verify that each computer can ping the
routers gateway IP address [10.10.20.250]. If any of the assigned IP addresses
fail to generate a reply, troubleshoot and correct the problem(s) until all inter-
faces can ping each other.

LAB 5: BASIC ROUTER CONFIGURATIONAND THE COMMAND-LINE INTERFACE 17

 Task #2 Configuration List
In this task you are to issue the show running-configuration command from the
RouterA# prompt.
The following table provides a partial list of the items displayed when you is-
sue the command show running-configuration [sh run]. Your task is to define each
item and its purpose. You may need to go to the Cisco website (www.cisco.com) and
look up what each of these commands means.

Output What it Means

Building configuration

Current configuration
!

Version 12.4

service timestamps debug datetimemsec

service timestamps log datetimemsec

18 Supplemental Labs
LAB 6: BASIC SWITCH CONFIGURATION
AND THE COMMAND-LINE INTERFACE
NAME:

Objective
The overall objective of this laboratory exercise is to gain experience with basic Cisco
switch configuration commands using the CCNA 640-802 Network Simulator and
gain an introductory understanding of the following:
Operating in the Ciscos Privileged mode
Configuring the switch ports
Configuring the computers network interface
Troubleshooting the switch interface

Topology

S1

Gi0/1

Fa0/0 Fa0/3 Fa0/1

R1 SW1
Fa0/2 PC1

PC2

FIGURE 1 The network topology for this lab.

Key Concepts
The following concepts, terms, commands, and steps should have been mastered in
this exercise.
1. Steps to enter the switchs privileged EXEC mode (switch#)

LAB 6: BASIC SWITCH CONFIGURATION AND THE COMMAND-LINE INTERFACE 19

 2. Use of the following commands to verify their operation in Cisco IOS:
?, show flash, show version [sh ver], show history [sh hist], show interfaces
[sh int], configure terminal [conf t], interface FastEthernet [interface num-
ber], [int fa 0/0], interface GigabitEthernet [interface number], [int gi 0/1],
interface [vlan number], int [vlan 1]
3. What happens when you press the up arrow key on your keyboard
4. How to change the hostname of the switch
5. How to configure the switchs enable secret
6. How to set the vty password
7. The steps for configuring the IP address for FastEthernet interface 0/0 [Fa0/0]
on your switch
8. Use of the no shut command to enable the VLAN interface
9. Use of the sh vlan brief command to verify that the interfaces have been con-
figured
10. Use of the ping command to verify network connectivity
11. Use of the ipconfig /all command
12. The steps for verifying the entries into the switchs mac address table
13. The steps for configuring the switch port settings
14. The steps for configuring the default-gateway for the switch

Reference Tables
For convenience, Table 1 provides the IP addresses and masks of all necessary inter-
faces to complete the lab.

TABLE 1 Computer IP Addresses, Subnet masks, and Gateway

Address for Lab 1

Computer IP Address Subnet Mask Gateway Address

PC1 192.168.21.8 255.255.255.240 192.168.21.1
PC2 192.168.21.6 255.255.255.240 192.168.21.1
S1 192.168.21.5 255.255.255.240 192.168.21.1
SwitchA 192.168.21.10 255.255.255.240 192.168.21.1
R1-Fa0/0 192.168.21.1 255.255.255.240

Passwords are all set to ciscopress.

Detailed Lab Steps

Task #1
1. Configure the IP address settings for the router (R1) and the computers PC1,
PC2, and S1 for the network provided in Figure 1. Use the IP addresses pro-
vided in Table 1.

20 Supplemental Labs
2. Configure switch 1 (SW1) to operate in the network using the IP address, sub-
net mask, and gateway address specified in Table 1.

3. Which command is used to enter the switchs Privileged mode? List the prompt
and the command.

4. Use the following commands to verify their operation in Cisco IOS.

a. What happens when you enter a ? at the switch# prompt?
.
b. What information is displayed when you enter show flash at the switch$
prompt?

LAB 6: BASIC SWITCH CONFIGURATION AND THE COMMAND-LINE INTERFACE 21

 c. Which command can you use to view the switchs uptime?

d. How long has the switch been up?

e. Which version of the Cisco IOS software is running on this simulator?

f. Which command can you use to view the past entries on this switch?

g. What happens when you press the up/down keys on your keyboard?

h. What is the command for listing the switchs current configuration?

i. How many FastEthernet interfaces does the switch have?

j. How many Gigabit interfaces does the switch have?

5. Enter the Privileged mode and change the hostname of the switch to SwitchA.
List the command sequence required to accomplish this task. Indicate both the
prompt and the command.

6. Configure the enable secret on the switch to be ciscopress. List the command
sequence required to accomplish this task. Indicate both the prompt and the
command.

7. Set the console password on the switch to ciscopress and enable login. List the
command sequence required to accomplish this task. Indicate both the prompt
and the command.

22 Supplemental Labs
 8. Set the vty password on the switch to ciscopress and enable login. List the
command sequence required to accomplish this task. Indicate both the prompt
and the command.

9. Enter port configuration mode for interface FastEthernet 0/1. Configure the
switch port for 100Mbps, full duplex using the speed 100 and duplex full com-
mands.

10. Configure the range of switch ports to 100Mbps and full duplex using the speed
100 and duplex full commands. After configuring the speed and duplex, en-
able all the switch ports. List two commands that can be used to verify that the
switch ports are configured and enabled.

11. Use the proper command to shut down the FastEthernet 0/5 interface on
SwitchA. List the command sequence required to accomplish this task. Use the
proper command to display the status of the interface, and indicate both the
prompt and the command.

12. Configure layer 3 access to the switch for VLAN 1 on SwitchA. Use the IP ad-
dress 192.168.21.10 and a subnet mask of 255.255.255.240. Enable the inter-
face. What does VLAN 1 represent?

LAB 6: BASIC SWITCH CONFIGURATION AND THE COMMAND-LINE INTERFACE 23

 13. Set the default gateway for the SwitchA and the default management for
VLAN 1 to 192.168.21.1. List the command sequence required to accomplish
this task. Indicate both the prompt and the command.

14. Use the show interface VLAN 1 command. What information is displayed?
Do you have to use the no shut command to enable the VLAN 1 interface?

15. Verify that the PCs (PC1 and PC2) have a network connection with the switch.
Which command and which IP address did you use to verify network connec-
tivity?

24 Supplemental Labs
16. Use the proper command to view the switchs MAC address table. Which com-
mands can be used to view the static or dynamic MAC addresses? Which com-
mand can be used to view the MAC addresses assigned to VLAN 1? List the
prompt and command used for each case.

LAB 6: BASIC SWITCH CONFIGURATION AND THE COMMAND-LINE INTERFACE 25

 17. How many MAC addresses are displayed? Are these static or dynamic MAC
addresses?

18. Use the sh vlan brief command to verify that the interfaces on the switch have
been properly configured. After you have completed the configuration, verify
that each computer in the LAN can ping the other computers. Also verify that
each computer can ping the routers gateway IP address [192.168.21.1]. If any
of the assigned IP addresses fail to generate a reply, troubleshoot and correct
the problem(s) until all interfaces can ping each other.

Task #2 Configuration List

The following table provides a partial list of the items displayed when you issue the
command show running-configuration [sh run] on a switch. Your task is to define
each item and its purpose. You might need to go to the Cisco website
(www.cisco.com) and look up what each of these commands means.

26 Supplemental Labs
 Output What It Means
no service pad

service timestamps
debug uptime

service timestamps log uptime

no service password-encryption
system mtu routing 1500

ip subnet-zero

no file verify auto

spanning-tree mode pvst

spanning-tree extend system-id

Vlan internal allocation

policy ascending

R1 Running Configuration

LAB 6: BASIC SWITCH CONFIGURATION AND THE COMMAND-LINE INTERFACE 27

 LAB 7: CONFIGURING STATIC ROUTES
NAME:

Overview
The overall objective of this lab is to configure static routes on two routers so that
there is a network connection between the computers in the two LANs. You will have
to configure the computers IP address, the gateway address, and the IP addresses for
the appropriate router interfaces. This will require that the serial connection between
routers be configured and enabled. In addition, you will also configure static routing
between the two networks.

Topology

S0/0/0
R1 S0/0/1 R2
Fa0/0 Fa0/0

Fa0/11 Fa0/1
SW1 SW2
Fa0/1 Fa0/2

PC1 PC2

FIGURE 1 The network topology for this lab.

Key Concepts
The following concepts, terms, commands, and steps should have been mastered in
this laboratory exercise. Verify your understanding of the material before taking the
lab quiz.
1. How to set the clock rate for the router
2. Which router controls the clock rate, DCE, and DTE
3. How you configure the IP address, subnet mask, and default gateway for the
computers in your LAN
4. How the gateway address for your LAN router is configured
5. The steps for configuring the hostname for your router
6. The steps for configuring the router interfaces IP addresses and subnet masks

28 Supplemental Labs
 7. The commands for configuring a static route from your LAN router to the ad-
jacent LAN router
8. Understanding the two commands that can be used to verify that the routes are
configured on the router
9. Using the computers in your LAN to ping the computers in the adjacent LAN
10. Using the proper command in the router to trace the route from your router to
a host in the other LAN
11. Using the command to make a Telnet connection to your router
12. Using the router command that displays the network routes stored in your
routers routing table
13. Using the command to save your router configuration to NVRAM
14. Using the proper command to verify the routing protocol being used
15. Using two commands that can be used to display the routing protocol

Reference Tables
For convenience, Table 1 provides the IP addresses and mask necessary for all inter-
faces used to complete this lab.

TABLE 1 Computer IP Addresses, Subnet Masks, and Gateway

Address for Lab 2

Computer/ IP Address Subnet Mask Gateway

Interface R1 Address
PC1 192.168.20.1 255.255.255.0 192.168.20.250
R1-Fa0/0 192.168.20.250 255.255.255.0
R1-S0/0/0 10.10.100.1 255.255.255.0

Computer/ IP Address Subnet Mask Gateway

InterfaceR2 Address
PC2 172.16.75.65 255.255.255.0 172.16.75.250
R2-Fa0/0 172.16.75.250 255.255.255.0
R2-S0/0/1 10.10.100.2 255.255.255.0

Detailed Lab Steps

Task#1
Configure a static route to the adjacent LAN, LAN-A to LAN-B. Use the IP ad-
dresses provided in Table 1. You will be asked to verify that the computers in your
LAN can ping the neighbor LAN. Note that a serial interface is being used to inter-
connect the LANs. You are configuring routing for both a 192.168.20.0 and
172.16.75.0 networks. A subnet mask of 255.255.255.0 is being used. Use 1536000
for the clock rate on the serial link (DCE interface).
1. Configure the gateway address for your LAN routers (R1 and R2) according to
the addresses provided in Table 1. You will also need to enable the interfaces.
List the commands used to configure the IP addresses, the subnet mask for your
gateway, and the command used to enable the interface.

LAB 7: CONFIGURING STATIC ROUTES 29

 2. Configure the hostname for your routers (R1 should be renamed the LAN-A
and R2 should be renamed LAN-B). List the router prompt and command used
to configure the routers hostname.

3. Configure the router interfaces serial IP addresses and subnet masks accord-
ing to the addresses specified in Table 1. Use the proper command to verify that
the interfaces are properly configured. Set the clock rate on the serial interface
interconnecting the two routers to 1536000. List the prompts and the com-
mands used to accomplish this task.

30 Supplemental Labs
4. Configure static routes from the LAN-A router to the LAN-B router and from
LAN-B router to back to the LAN-A router. Use two commands to verify that
the routes are configured. List the commands used.

5. What does Gateway of last resort is not set mean?

6. Use the computers in each LAN to ping the computers in the adjacent LAN.

LAB 7: CONFIGURING STATIC ROUTES 31

 7. Use the proper command to trace the route from a PC in LAN-A to a host in
the LAN-B. Your trace should pass through two routers. List the command used
and record the trace information. How many hops did you record?

8. Use the command to open up Telnet connectivity to the LAN-A router. Set the
vty password to ciscopress and enable remote login. List the commands used
to establish the Telnet connection.

9. Use the router command that lists the network routes stored in the LAN-A
routers routing table. List the routes. Are all the routes defined for your net-
work?

10. Use the command to save your router configuration to the startup configuration.
Which command did you use? Use the proper command to verify that the con-
figuration has been saved to NVRAM. Which command did you use?

32 Supplemental Labs
 11. Which command is used to verify the routing protocol being used? List two
router commands.

Task#2
Observe the statuses and protocol states for the serial interfaces. If the routers are
properly configured, then explain what could cause the following conditions.
1. Serial 0/0/0 is up; line protocol is up.

2. Serial 0/0/0 is down; line protocol is down (DTE mode).

3. Serial 0/0/0 is up; line protocol is down (DTE mode).

4. Serial 0/0/0 is up; line protocol is down (DCE mode).

LAB 7: CONFIGURING STATIC ROUTES 33

 5. Serial 0/0/0 is administratively down; line protocol is down.

Task #3 Configuration List

In this task you are to issue the show running-configuration command from the
LANA# prompt.
The following table provides a partial list of the items displayed when you is-
sue the command show running-configuration [sh run]. Your task is to define each
item and its purpose. You might need to go to the Cisco website (www.cisco.com)
and look up what each of these commands means.

Output What it means

no service password-encryption

boot-start-marker

boot-end-marker

enable secret 5 $1$KXED$S08d)

zG3x3aiaeFjy7nCP

no aaa new-model

resource policy

34 Supplemental Labs
LAB 8: CONFIGURING RIPV2 ROUTING
NAME:

Overview
The overall objective of this lab is to configure RIP routing between two routers so
that a routed network connection exists between computers in the two LANs. You
will have to configure the computers IP address, the gateway address, and the IP ad-
dresses for the appropriate router interfaces. This will require that the serial connec-
tion between routers be configured and enabled.

Topology

S0/0/0
R1 S0/0/1 R2
Fa0/0 Fa0/0

Fa0/11 Fa0/1
SW1 SW2
Fa0/1 Fa0/2

PC1 PC2

FIGURE 1 The network topology for this lab.

Key Concepts
The following concepts, terms, commands, and steps should have been mastered in
this laboratory exercise.
1. How to set the clock rate for the router
2. How to determine which router controls the clock rate, DCE, and DTE
3. How to configure the IP address, subnet mask, and default gateway for the com-
puters in your LAN
4. How the gateway address for your LAN router is defined
5. The steps for configuring the hostname for your router
6. The steps for configuring the router interfaces IP addresses and subnet masks
7. The commands for configuring RIP routing from LAN-A to LAN-B

LAB 8: CONFIGURING RIPV2 ROUTING 35

 8. Two commands that can be used to verify that the routes are configured on the
router
9. The steps to use the computers in your LAN to ping the computers in the adja-
cent LAN
10. Use of the proper command to trace the route from a PC in LAN-A to the host
in the connected LAN-B
11. Use of the proper command to trace the route from your router in LAN-A to the
host computer in LAN-B
12. Use of the command to make a Telnet connection to your router and the steps
to enable a Telnet connection to the router
13. Use of the router command that displays the network routes stored in your
routers routing table
14. Use of the command to save your router configuration to NVRAM

Reference Tables
For convenience, Table 1 provides the IP address and mask of all necessary interfaces
used to complete the lab.

TABLE 1 The Computer IP Addresses, Subnet Masks, and Gateway

Address for Lab 3

Computer/ IP Address Subnet Mask Gateway Address

Interface - R1
PC1 10.10.12.1 255.255.255.0 10.10.12.250
R1-Fa0/0 10.10.12.250 255.255.255.0
R1-S0/0/0 10.20.200.1 255.255.255.0

Computer/ IP Address Subnet Mask Gateway Address

Interface R2
PC2 10.10.30.65 255.255.255.0 10.10.30.250
R2-Fa0/0 10.10.30.250 255.255.255.0
R2-S0/0/1 10.20.200.2 255.255.255.0

Detailed Lab Steps

Task # 1
In this lab, you will configure a RIP V2 route to the adjacent LANsLAN-A to
LAN-Bbased on the network topology provided in Figure 1. You are to use the IP
addresses provided in Table 1. You will be asked to verify that computers in your
LAN can ping the neighbor LAN. You are configuring routing for both a 10.10.12.0
and 10.10.30.0 networks. A subnet mask of 255.255.255.0 is being used. Note that a
serial interface is being used to interconnect the LANs. Use 56000 for the clock rate
on the serial link (DCE interface). The enable secret and line console 0 password
should be set to ciscopress.

36 Supplemental Labs
1. Configure the gateway address for your LAN routers according to the addresses
listed in Table 1. List the prompt and the command used to configure the gate-
way address and subnet mask on each of the routers.

2. Configure the hostname for your routers; R1 should be renamed the LAN-A
and R2 should be renamed LAN-B. List the router prompt and command used
to configure the routers hostname.

3. Configure the router IP addresses and subnet masks for both the serial inter-
faces on both the LAN-A and LAN-B routers. You will also need to enable the
serial interfaces. Use the proper command to verify that the interfaces are prop-
erly configured. List the router prompt and commands used to accomplish this
task.

LAB 8: CONFIGURING RIPV2 ROUTING 37

 4. Configure a RIP V2 route for both the LAN-A and LAN-B routers. Use two
commands to verify that the routes are configured. List the router prompt and
command used to accomplish this.

38 Supplemental Labs
5. Use the computers in each LAN to ping the computers in the adjacent LAN,
PC1-PC2, PC2-PC1. List the router prompt and command used to accomplish
this.

6. Use the proper command to trace the route from a PC in LAN-A to a host in
LAN-B. Your trace should pass through two routers. List the router prompt and
command used, and record the trace information. How many hops did you
record?

LAB 8: CONFIGURING RIPV2 ROUTING 39

 7. Use the command to make a Telnet connection from the LAN-A router to the
LAN-B router. Set the VTY password to ciscopress on the LAN-B router, and
enable remote login. List the prompts and the commands used to establish the
Telnet connection. Which IP address did you use? Repeat this so that a Telnet
connection is established from LAN-B router to the LAN-A router.

8. Use the router command that lists the network routes stored in LAN-A routers
routing table. List the prompt, the command used, and the available routes. Are
all the routes defined for your network? What does it mean to say that the
Gateway of last resort is not set?

9. Use the command to save your router configuration to the startup configuration
on the LAN-A router. Which command did you use? Use the proper command
to verify the configuration has been saved to NVRAM. Which command did
you use?

40 Supplemental Labs
Task#2
In this task, you are to observe the status and protocol states for the FastEthernet in-
terfaces provided and see whether the routers are properly configured; then you must
explain what could cause the following conditions.
10.
Interface status protocol
fastethernet 0/0 up up

11.
Interface status protocol
fastethernet 0/0 administratively down down

12.
Interface status protocol
fastethernet 0/0 administratively down up

13.
Interface status protocol
fastethernet 0/0 down down

Task #3: Configuration List

The following is a partial list of the items displayed when you issue the command
show running-configuration [sh run] on a router. Your task is to define each item
and its purpose. You might need to go to the Cisco website (www.cisco.com) and look
up what each of these commands means.
14.
Interface FastEthernet 0/0

What does 0/0 indicate? What is the difference between FastEthernet and
Ethernet?

LAB 8: CONFIGURING RIPV2 ROUTING 41

 15.
ip address 10.10.20.0 255.255.255.224

How many host IP addresses are available in each subnet using this subnet
mask?

16.
shutdown

What is the purpose of this command when it is applied to an interface?

17.
router rip

What is the purpose of this command, and from which prompt is this command
issued?

18.
version 2

What is the purpose of using this command, and from which prompt is this
command issued?

19.
network 10.0.0.0

What is the purpose of this command, and from which prompt is this command
issued?

20.
ip http server

What is the purpose of this command, and from which prompt is this command
issued?

42 Supplemental Labs
21. What is the purpose of the following command?
no ip http secure-server

LAB 8: CONFIGURING RIPV2 ROUTING 43

 LAB 9: STATIC AND RIP ROUTING
NAME:

Objective
The objective of this lab is for the student to demonstrate that she can configure both
static and RIP routes. Use the reload command to clear your router before you begin.

Required
Configure a static route and then a RIP route to the adjacent LAN. Use the IP ad-
dresses provided. The procedures for configuring static and RIP routes were provided
in class. Verify that the computers in your LAN can ping your neighbor LAN. Before
you begin, issue the reload command to clear the settings on your router. Connect a
V.35 serial interface cable from your LAN to the adjacent LAN. You will be using the
Serial interfaces when interconnecting the LANs. The network you are to use is listed
on the marker board. Use 56000 for the clock rate on the serial link (DCE interface).

Note
For this exercise you will need to log all of your activity. You are asked at the end of the
lab assignment to prepare a group report.

1. Configure the IP address, subnet mask, and default gateway for the computers
in your LAN. Configure all computers, and record the IP addresses of the com-
puters in your LANs.
LAN:

IP Address:

Subnet Mask:

Gateway:

LAN:

IP Address:

Subnet Mask:

Gateway:
2. Record sufficient information from the router as you complete the configura-
tion steps to show that you have completed steps 37. This documentation
should provide sufficient information to show that the router interfaces are
properly configured, a routing protocol has been configured for routing data
packets to the adjacent network, and network connectivity has been established
with the adjacent LAN.

Note
Begin Step 10 after Static/RIP routing has been properly configured for your LAN.

44 Supplemental Labs
3. Configure the gateway address for your LAN routers. Record the addresses and
subnet mask for your gateway.

4. Configure the hostname for your routers (LAN-A, LAN-B, LAN-C, LAN-D);
then select the appropriate name. List the router prompt and command used to
configure the routers hostname.

5. Configure the router interfaces IP addresses and subnet masks. Use the proper
command to verify that the interfaces are properly configured. List the com-
mand used.

6. Configure a route (static /RIP) from your LAN router to the adjacent LAN
router. Use two commands to verify that the routes are configured. List the
commands used.

7. Use the computers in your LAN to ping the computers in the adjacent LAN.

8. Use the proper command to trace the route from a PC in your LAN to a host in
the adjacent LAN. Your trace should pass through two routers. List the com-
mand used and record the trace information. How many hops did you record?
Proceed to Step 10 if RIP routing has been configured.

LAB 9: STATIC AND RIP ROUTING 45

 9. Repeat Steps 18 for configuring RIP routing. Reload your routers before
proceeding.

10. Use the router command that lists the network routes stored in your routers
routing table. List the routes. Are all of the routes defined for your network?

46 Supplemental Labs
11. Use the command to save your router configuration to NVRAM. Which com-
mand did you use? Use the proper command to verify the configuration has
been saved to NVRAM. Which command did you use?

12. Which command is used to verify the routing protocol being used? List two
router commands.

13. Submit a hardcopy of the router information recorded for Static and RIP rout-
ing. Edit your capture so that you are displaying only the results that answer
Steps 38 for Static/RIP and that answer Steps 1012 after RIP has been con-
figured. Submit only one copy per LAN group. Make sure the document is easy
to read and each LAN group members name is on the document.

LAB 9: STATIC AND RIP ROUTING 47

 LAB 10: STATIC VLAN CONFIGURATION
NAME:

Objective
The overall objective of this laboratory exercise is to gain experience with the basic
steps for configuring a static VLAN on a Cisco switch. In this exercise, you will cre-
ate two VLANsFinance and Officeand assign switch ports to each VLAN. You
are to configure the switch (SW1) so that server (S1) and computer (PC2) are as-
signed to VLAN 2, the Finance VLAN. You will also configure the switch so that
computer (PC1) is assigned to VLAN 3, the Office VLAN. The IP addresses used in
this exercise will all be configured as part of a 192.168.X.X network. Configure
switches and the computers to operate in the network using the IP addresses, subnet
mask, and gateway address specified in Table 1 and 2. You will gain an understand-
ing of the following:
Operating in the Ciscos Privileged mode
Configuring and assigning names to VLANs
Assign ports to VLANs
Verifying port assignments
Troubleshooting the switch interface and VLAN assignments

Topology

S1

Gi0/1

Fa0/0 Fa0/3 Fa0/1

R1 SW1
Fa0/2 PC1

PC2

FIGURE 1 The network topology for this lab.

48 Supplemental Labs
Key Concepts
The following concepts, terms, commands, and steps should have been mastered in
this exercise:
1. The steps to enter the switchs privileged EXEC mode (switch#)
2. The steps for configuring the IP address for the VLAN1 interface on your
switch
3. Use of the no shut command to enable the VLAN interface
4. Use the sh vlan brief command to verify that the interfaces have been config-
ured
5. Use of the ping command to verify network connectivity
6. The steps for verifying the entries into the switchs MAC address table
7. The steps for configuring the switch port settings
8. The steps for configuring the default-gateway for the switch
9. The steps for configuring the VLAN interfaces
10. Use of the show vlan command to verify that the VLANs have been created
11. The steps for assigning ports to the VLANs

Reference Tables
For convenience, Table 1 and Table 2 provide the IP addresses and masks for all the
necessary interfaces to complete this lab.

TABLE 1 The IP Addresses, Subnet Masks, and VLAN Assignments

for Lab 2

Computer/ IP Address Subnet Mask Gateway Address

ServerSW1
S1 192.168.1.1 255.255.255.192 192.168.1.62
PC2 192.168.2.1 255.255.255.192 192.168.2.62
PC1 192.168.3.1 255.255.255.192 192.168.3.62
VLAN1 192.168.1.61 255.255.255.192 192.168.1.62

TABLE 2 Router R1 Subinterface Settings for Lab 2

R1 Fa 0/0.1 192.168.1.62 255.255.255.192

R1 Fa 0/0.2 192.168.2.62 255.255.255.192
R1 Fa0/0.3 192.168.3.62 255.255.255.192

Passwords for switch (S1) and router (R1):

Console password: ciscopress
Privileged EXEC mode password: ciscopress
Enable secret: ciscopress

LAB 10: STATIC VLAN CONFIGURATION 49

 Detailed Lab Steps
Task #1
1. Your first task is to configure the IP address for VLAN1. The IP address is pro-
vided in Table 1. Enable the VLAN1 interface. List the command sequence re-
quired to accomplish this task. Indicate both the prompt and the command.

2. Next, configure the IP addresses for the computers (PC1 and PC2), for the
server (S1), and for the router (R1). When you have completed this task, verify
that you have network connectivity from the switch SW1 to the computers and
server. List the command sequence required to accomplish this task.

3. Next, use the command that displays the current VLAN interface information.

4. Which ports currently belong to the default VLAN?

5. How many VLANs are set up by default on the switch? List the VLANs.

6. In the next step, you are to create two VLANs, VLAN2 (Finance) and VLAN3
(Office). List the command sequence required to create the VLANs, and assign
names to each VLAN.

50 Supplemental Labs
 7. Verify that the two new VLANs have been created. List the command sequence re-
quired to accomplish this task.

8. Which ports are currently assigned to VLANs 2 and 3?

9. Issue the commands that assign the ports connecting S1, PC1, and PC2 to their respec-
tive VLANs.

10. Use the proper command to verify that the switch ports have been properly assigned.
List the command sequence required to accomplish this task.

LAB 10: STATIC VLAN CONFIGURATION 51

 11. Use the command to list the MAC addresses learned by SW1. Which interfaces
are associated with the MAC addresses of S1, PC1, and PC2, and which VLAN
number is listed for each entry?

Task #2: Configuration List

The following table provides a partial list of the items displayed when you issue the
command show running-configuration [sh run] on a switch. Your task is to define
each item and its purpose. You may need to go to the Cisco website (www.cisco.com)
and look up what each of these commands means.

Output What it Means

switchport mode trunk

no aaa new-model
encapsulation dot1q 1 native

encapsulation dot1q 2

switchport mode access

switchport access vlan 2

ip default-gateway 192.168.1.62

line vty 0 4

line vty 5 15

52 Supplemental Labs
LAB 11: WINDOWS SECURITY FIREWALL
NAME:

Objective
The overall objective of this laboratory exercise is to gain experience with the basic
steps for configuring a personal firewall on Windows 7 operating system. In this ex-
ercise you will learn to create an inbound firewall rule and outbound firewall rule. The
inbound firewall rule will allow only a ping packet from server (S1). The outbound
firewall rule will block any web traffic from computer PC1 and computer PC2. Con-
figure the computers to operate in the network using the IP addresses, subnet mask,
and gateway address specified in Table 1. You will gain an understanding of the fol-
lowing:
Configuring the Windows firewall
Configuring the Windows advanced firewall features
Specific protocols and their network ports

Reference Tables
For convenience, Table 1 provides the IP addresses and masks for all the necessary
computers to complete this lab.

TABLE 1 The IP Addresses, Subnet Masks, and Gateway

Computer/ IP Address Subnet Mask Gateway Address

ServerSW1
S1 192.168.1.1 255.255.255.192 192.168.1.62
PC2 192.168.2.1 255.255.255.192 192.168.2.62
PC1 192.168.3.1 255.255.255.192 192.168.3.62

Detailed Lab Steps

1. Configure the IP addresses for computers PC1 and PC2 and for server S1.

LAB 11: WINDOWS SECURITY FIREWALL 53

 FIGURE 1 IP address, subnet mask, gateway configuration example for network devices.

2. Generally, Windows 7 firewall is enabled by default. Turn off the Windows fire-
wall on PC1 and PC2. Then, verify that you have network connectivity between
the server and the computers using the ping command. List the command se-
quence required to accomplish this task.

3. In the next step, you need to ensure that the Windows firewall is enabled. List
the step sequence required to verify the firewall status and to enable the firewall.

54 Supplemental Labs
4. By default, Windows 7 does not allow the ping request. Verify the ping con-
nectivity to PC1 and PC2. List the command sequence and result.

5. Create a new inbound firewall rule called Ping Request to allow only server
S1 to ping PC1 and PC2. Make sure the correct protocol is selected for ping.
List the command sequence and steps required to accomplish this task.

6. Verify the firewall rule Ping Request by initiating the Ping from S1 to PC1
and PC2. Then, initiate the Ping from PC1 to PC2 and vice versa. Explain the
results.

LAB 11: WINDOWS SECURITY FIREWALL 55

 7. Create a new outbound firewall rule called Web Filtering. This rule is block
any web traffic initiated from PC1 and PC2. Be sure to block both unsecure and
secure web traffic. Make sure the correct protocol and its associated ports are
selected for web traffic. List the command sequence and steps required to ac-
complish this task.

8. Verify the firewall rule Web Filtering by initiating any web session from PC1
and PC2. Record the result.

56 Supplemental Labs