Routing, Switching, and Trunking Lab

 


This lab explores basic configurations to practice routing, switching, and trunking, we practice in this some known networking concepts like DHCP agent relay, VTP domains, 802.1Q encapsulation

you can download the lab at thekeithbarker.com under the name "Cisco PT DHCP, Routing, Switching 2020-04-07" 

extract the files, open the ".pkt" file and follow along with me 

Lab Objective: 

  • PCs 1,3 in VLAN 10, Subnet 10.16.0.0 /24
  • PCs 2,4 in VLAN 20, Subnet 172.16.0.0/24
  • DHCP assigned addresses for PCs
  • DHCP/Web server in VLAN 777, Subnet 192.168.1.0/24, using .100
  • Default G/W is .1 in each subnet
  • Verify if clients can ping each other
  • Verify if clients can open the web page of the server at TheKeithBarker.com


First configuration on our switches

configuration terminal
no ip domain-lookup
line console 0 
logging synchronous
no exec-timeout
privilege level 15
spanning-tree mode rapid-pvst
spann portfast default
end 
write


Create trunks & VTP domain 

  • Sw1
conf t
vtp domain axa
int range fa 0/11, fa 0/22, g0/1
switch mode trunk
end

  • Sw2
conf t
vtp domain axa
int range fa 0/11, fa 0/22, g0/2
switch mode trunk
end

  • Sw3
conf t
vtp domain axa
int range g0/1-2
sw trunk encapsulation dot1q 



Create the VLANs on one switch (VTP will copy them to the other switches)

conf t
vlan 10
vlan 20
vlan 777


Configure access ports 

  • Sw1
configure terminal 
int fa0/1 
switchport mode access
switchport access vlan 10
int fa0/2
switchport mode access
switchport access vlan 20

  • Sw2
conf t 
int fa0/3 
switchport mode access
switchport access vlan 10
int fa0/4 
switchport mode access
switchport access vlan 20
int fa0/5
switchport mode access
switchport access vlan 777


Configure DHCP Server

verify the Server's IP address
Desktop > IP Configuration > 192.168.1.100/24 


Create the DHCP pools

Services > DHCP > turn the service ON > VLAN10 pool > fill all information > Add


same for the VLAN20 pool


Configure routing with SVI (Switch virtual interface) on Sw3 (L3 Switch)

conf t
interface vlan 10 
ip add 10.16.0.1 255.255.255.0
interface vlan 20
ip add 172.16.0.1 255.255.255.0
interface vlan 777
ip add 192.168.1.1 255.255.255.0
end 
sh ip int br




try to ping those Gateway addresses


if you try to make the PCs request DHCP it won't work now, we need another configuration

Configure Sw3 to act like a DHCP relay agent 

int vlan 10 
ip helper-address 192.168.1.100
int vlan 20
ip helper-address 192.168.1.100
end

Ask for DHCP addresses and open the web page at TheKeithBarker.com

go to any PC > Config > check DHCP box


go to any PC > Desktop > Web Browser > type TheKeithBarker.com



Congratulations, you completed the Lab






Comments

Post a Comment

Popular posts from this blog

OpenVas: Vulnerability Scanning | Installation Guide

Image
  Introduction: OpenVAS is a vulnerability scanner that analyzes endpoints and web apps to uncover and detect flaws. Corporations frequently employ it as part of their mitigation strategies to initially identify any weaknesses in their operational or testing servers and apps. This isn't an ultimate solution, but it can assist in the elimination of any common weaknesses that may have sneaked through the gaps. Installation: There are three methods to install GreenBone openVas: 1- Install from Kali/OpenVas repositories:  This way varies in difficulty because of the needed configurations, you can simply install it with apt. sudo apt-get update -y &&  sudo apt-get upgrade -y &&  sudo apt-get dist-upgrade -y sudo apt-get install openvas sudo gvm-setup sudo gvm-check-setup 2- Install from source (Manually): This way is not the best for beginners due to prerequisite installations and error handling can be challenging. github.com/greenbone/openvas-scanner 3- Run from docker:
Read more

Nmap | TryHackMe Walkthrough

Image
  An in-depth look at scanning with Nmap, a powerful network scanning tool. This room was created by DarkStar  and  MuirlandOracle , as it provides a great way to learn and start practicing nmap. I encourage you to give it a try by yourself since the hands-on practice will give you more understanding of the topic (take advantage of the manual page man nmap ). Task2: What networking constructs are used to direct traffic to the right application on a server? Ports How many of these are available on any network-enabled computer? 65535 [Research] How many of these are considered "well-known"? (These are the "standard" numbers mentioned in the task) 1024 Task3: What is the first switch listed in the help menu for a 'Syn Scan' (more on this later!)? -sS Which switch would you use for a "UDP scan"? -sU If you wanted to detect which operating system the target is running on, which switch would you use? -O Nmap provides a switch to detect the version of the
Read more

Azure Sentinel: Use Microsoft's SIEM to map global attacks

Image
 in this tutorial, we will display attacks from all over the globe on a world map using Microsoft cloud SIEM (Security Information and Event Management) this is a step-by-step guided lab so it will be a long tutorial. Project steps this project needs multiple stages to be completed, when you finish this guide you will be able to: create and configure a Virtual Machine using Azure configure a cloud network security group and create firewall rules create and configure a Logs Analytics Workspace collect data from Virtual Machines into Azure get familiar with PowerShell scripting and APIs use (KQL) Kusto Query Language (the Azure data exporter language)  Let's get started First of all, go ahead and create a free Azure account at  https://azure.microsoft.com/en-us/free/   When you're done with that go to your dashboard at  https://portal.azure.com/ Ps: Just a quick note before we begin, you will notice in Azure as in GCP or AWS that the search bar is your b
Read more