• Topology

Note: Do not use 2960 switches. You must select the 3560 model switch in Packet Tracer as shown below. 2960s will not support IPv6 in Packet Tracer.

Assessment Objectives

Part 1: Configure Basic Device Settings

Part 2: Configure Network Infrastructure Settings (VLANs, Trunking, Etherchannel)

Part 3: Configure Host Support

Part 4: Test and Verify IPv4 and IPv6 End-to-End Connectivity

Scenario

In this Skills Assessment (SA) you will configure the devices in a small network. You must configure a router, switch and PCs to support both IPv4 and IPv6 connectivity for supported hosts. Your router and switch must also be managed securely. You will configure inter-VLAN routing, DHCP, Etherchannel, and port-security.

• Required Resources

1 Router (Cisco 4331)

2 Switches (Cisco 3560)

2 PCs

Console cables to configure the Cisco IOS devices via the console ports

Ethernet cables as shown in the topology

VLAN Table

VLAN	VLAN Name
2	Bikes
3	Trikes
4	Management
5	Parking
6	Native

Addressing Table

Device / Interface	IP Address / Prefix	Default Gateway
R1 G0/0/1.2	10.19.8.1 /26	N/A
R1 G0/0/1.2	2001:db8:acad:a::1 /64	N/A
R1 G0/0/1.3	10.19.8.65 /27	N/A
R1 G0/0/1.3	2001:db8:acad:b::1 /64	N/A
R1 G0/0/1.4	10.19.8.97 /29	N/A
R1 G0/0/1.4	2001:db8:acad:c::1 /64	N/A
R1 G0/0/1.6	N/A	N/A
R1 Loopback0	209.165.201.1 /27	N/A
R1 Loopback0	2001:db8:acad:209::1 /64	N/A
S1 VLAN 4	10.19.8.98 /29	10.19.8.97
S1 VLAN 4	2001:db8:acad:c::98 /64	N/A
S1 VLAN 4	fe80::98	N/A
S2 VLAN 4	10.19.8.99 /29	10.19.8.97
S2 VLAN 4	2001:db8:acad:c::99 /64	N/A
S2 VLAN 4	fe80::99	N/A
PC-A NIC	DHCP for IPv4 address	DHCP for IPv4 default gateway
PC-A NIC	2001:db8:acad:a::50 /64	fe80::1
PC-B NIC	DHCP for IPv4 address	DHCP for IPv4 default gateway
PC-B NIC	2001:db8:acad:b::50 /64	fe80::1

Note: There is no interface on the router supporting VLAN 5.

Instructions

Configure Basic Device Settings

Configure R1.

Configuration tasks for R1 include the following:

Task	Specification
Disable DNS lookup
Router name	R1
Domain name	ccna-lab.com
Encrypted privileged EXEC password	ciscoenpass
Console access password	ciscoconpass
Set the minimum length for passwords	10 characters
Create an administrative user in the local database	Username: admin Password: admin1pass
Set login on VTY lines to use local database
Set VTY lines to accept SSH connections only
Encrypt the clear text passwords
Configure an MOTD Banner
Enable IPv6 Routing
Configure Interface G0/0/1 and sub interfaces	Set the description Set the IPv4 address Set the IPv6 Link Local Address as fe80::1 Set the IPv6 address Activate Interface
Configure the Loopback0 interface	Set the description Set the IPv4 address Set the IPv6 address Set the IPv6 Link Local Address as fe80::1
Generate an RSA crypto key	1024 bits modulus

Configure S1 and S2.

Configuration tasks for the switches include the following:

Task	Specification	S1	S2
Disable DNS lookup
Switch name	S1 or S2, as appropriate
Domain name	ccna-lab.com
Encrypted privileged EXEC password	ciscoenpass
Console access password	ciscoconpass
Create an administrative user in the local database	Username: admin Password: admin1pass
Set login on VTY lines to use local database
Set VTY lines to accept SSH connections only
Encrypt the clear text passwords
Configure an MOTD Banner
Generate an RSA crypto key	1024 bits modulus
Configure Management Interface (SVI)	Set the Layer 3 IPv4 address Set the Ipv6 Link Local Address as FE80::98 for S1 and FE80::99 for S2 Set the Layer 3 IPv6 address
Configure Default Gateway	Configure the default gateway as 10.19.8.97 for IPv4

Enter score here.

Configure Network Infrastructure Settings (VLANs, Trunking, EtherChannel)

Configure S1.

Configuration tasks for S1 include the following:

Task	Specification
Create VLANs	VLAN 2, name Bikes VLAN 3, name Trikes VLAN 4, name Management VLAN 5, name Parking VLAN 6, name Native
Create 802.1Q trunks that use the native VLAN 6	Interfaces F0/1, F0/2, and F0/5
Create a Layer 2 EtherChannel port group that uses interfaces F0/1 and F0/2	Use the LACP protocol for negotiation
Configure host access port for VLAN 2	Interface F0/6
Configure port-security on access ports	Allow 3 MAC addresses
Secure all unused interfaces	Assign to VLAN 5, Set to access mode, add a description, and shutdown

Configure S2.

Configuration tasks for S2 include the following:

Task	Specification
Create VLANs	VLAN 2, name Bikes VLAN 3, name Trikes VLAN 4, name Management VLAN 5, name Parking VLAN 6, name Native
Create 802.1Q trunks that use the native VLAN 6	Interfaces F0/1 and F0/2
Create a Layer 2 EtherChannel port group that uses interfaces F0/1 and F0/2	Use the LACP protocol for negotiation
Configure host access port for VLAN 3	Interface F0/18
Configure port-security on access ports	Allow 3 MAC addresses
Secure all unused interfaces	Assign to VLAN 5, Set to access mode, add a description, and shutdown

Configure Host Support

Configure R1

Configuration Tasks for R1 include the following

Task	Specification
Configure Default Routing	Create a default routes for IPv4 and IPv6 that direct traffic to interface Loopback 0
Configure IPv4 DHCP for VLAN 2	Create a DHCP pool for VLAN 2, consisting of the last 10 addresses in the subnet only. Assign the domain name ccna-a.net and specify the default gateway address as the router interface address for the subnet involved
Configure IPv4 DHCP for VLAN 3	Create a DHCP pool for VLAN 3, consisting of the last 10 addresses in the subnet only. Assign the domain name ccna-b.net and specify the default gateway address as the router interface address for the subnet involved

Configure host computers.

Configure the host computers PC-A and PC-B to use DHCP for IPv4 and statically assign the IPv6 GUA and Link Local addresses. After configuring each host computer, record the host network settings with the ipconfig /all command.

PC-A Network Configuration
Description	blank
Physical Address	blank
IP Address	blank
Subnet Mask	blank
Default Gateway	blank
IPv6 Default Gateway	blank

PC-B Network Configuration
Description	blank
Physical Address	blank
IP Address	blank
Subnet Mask	blank
Default Gateway	blank
IPv6 Default Gateway	blank

Test and Verify End-to-End Connectivity

Use the ping command to test IPv4 and IPv6 connectivity between all network devices.

Note: If pings to host computers fail, temporarily disable the computer firewall and retest.

Use the following table to methodically verify connectivity with each network device. Take corrective action to establish connectivity if a test fails:

From	To	Protocol	IP Address	Ping Results
PC-A	R1, G0/0/1.2	IPv4	10.19.8.1	blank
PC-A	R1, G0/0/1.2	IPv6	2001:db8:acad:a::1	blank
PC-A	R1, G0/0/1.3	IPv4	10.19.8.65	blank
PC-A	R1, G0/0/1.3	IPv6	2001:db8:acad:b::1	blank
PC-A	R1, G0/0/1.4	IPv4	10.19.8.97	blank
PC-A	R1, G0/0/1.4	IPv6	2001:db8:acad:c::1	blank
PC-A	S1, VLAN 4	IPv4	10.19.8.98	blank
PC-A	S1, VLAN 4	IPv6	2001:db8:acad:c::98	blank
PC-A	S2, VLAN 4	IPv4	10.19.8.99.	blank
PC-A	S2, VLAN 4	IPv6	2001:db8:acad:c::99	blank
PC-A	PC-B	IPv4	IP address will vary.	blank
PC-A	PC-B	IPv6	2001:db8:acad:b::50	blank
PC-A	R1 Loop0	IPv4	209.165.201.1	blank
PC-A	R1 Loop0	IPv6	2001:db8:acad:209::1	blank
PC-B	R1 Loop0	IPv4	209.165.201.1	blank
PC-B	R1 Loop0	IPv6	2001:db8:acad:209::1	blank
PC-B	R1, G0/0/1.2	IPv4	10.19.8.1	blank
PC-B	R1, G0/0/1.2	IPv6	2001:db8:acad:a::1	blank
PC-B	R1, G0/0/1.3	IPv4	10.19.8.65	blank
PC-B	R1, G0/0/1.3	IPv6	2001:db8:acad:b::1	blank
PC-B	R1, G0/0/1.4	IPv4	10.19.8.97	blank
PC-B	R1, G0/0/1.4	IPv6	2001:db8:acad:c::1	blank
PC-B	S1, VLAN 4	IPv4	10.19.8.98	blank
PC-B	S1, VLAN 4	IPv6	2001:db8:acad:c::98	blank
PC-B	S2, VLAN 4	IPv4	10.19.8.99.	blank
PC-B	S2, VLAN 4	IPv6	2001:db8:acad:c::99	blank