CCNP Building Multilayer Switched Networks (BCMSN 642-812) Lab Portfolio (Cisco Networking Academy)

Description

Table of Contents

Hardware and Software 2

Chapter 6: Wireless LANs 3

Step 1 Getting Connected 5

Step 2 Deleting vlan.dat 5

Step 3 Erasing the startup-config File 6

Step 4 Reloading 6

Step 5 Ready for Configuration 9

Step 1 Clearing an Isolated Switch 10

Step 2 Deleting vlan.dat 10

Step 3 Erasing the startup-config File 10

Step 4 Relearning VLANs from a Server 11

Step 5 Eliminating Relearned VLANs 12

Step 6 VTP Mode Transparent 13

Scenario: VLAN Trunking and Domains 14

Step 1 Preparing the Switch 14

Step 2 VLAN 1 15

Step 3 show vlan 15

Step 4 VTP Modes 17

Step 5 VTP Domains 18

Step 6 Dynamic Auto Trunking 19

Step 7 show interface Commands 21

Step 8 Switchport Mode Commands 23

Step 9 show vtp status 25

Step 10 VLAN Database 26

Step 11 Switchport Access VLAN 28

Step 12 Naming VLANs 29

Step 13 Preparation for the Next Lab 30

Scenario: How Spanning Tree Prevents Loops 31

Step 1 Basic Configurations 31

Step 2 BPDUs 32

Step 3 show spanning tree 32

Step 4 Diagraming Spanning Tree 36

Challenge: A New Root for Spanning Tree 36

Scenario: Logically Removing Bridging Loops 37

Step 1 Deleting vlan.dat 37

Step 2 Verifying the Root Bridge 37

Step 3 Changing the Primary and Secondary Root 40

Step 4 Changing Forwarding and Blocking Ports 42

Step 5 PortFast 44

Step 6 Modifying Port Costs 46

Scenario: Configuring Spanning Tree Differently for Different VLANs 49

Step 1 Basic Preparation 49

Step 2 Setting up VTP Domains 49

Step 3 Modifying Spanning Tree on a per-VLAN Basis 52

Step 4 RSTP 58

Challenge: Spanning Tree Root Primary 60

Scenario: Configuring Multiple Spanning Tree 62

Step 1 Basic Preparation 62

Step 2 VTP Domain Setup 62

Step 3 Verifying 11 Instances of Spanning Tree 63

Step 4 spanning-tree mode mst 66

Step 5 Grouping VLANs Using MST 67

Challenge: Modifying per-instance MST Attributes 70

Scenario: Bundling Redundant Links into One Logical Link 72

Step 1 Basic Preparation 72

Step 2 channel group mode desirable 72

Step 3 channel group mode active 75

Step 4 Configuring EtherChannel on Layer 3 Connections 75

Step 5 Traffic Load Balancing 76

Challenge: Logically Aggregating Additional Redundant Links 77

Scenario: A Cost Effective Solution to Segment a Network into Multiple

Broadcast Domains 79

Step 1 Basic Preparation 79

Step 2 Configuring up the Gateway and ISP Router 79

Step 3 ip default-gateway 80

Step 4 Verify Existing VLANs 81

Step 5 Configuring Trunking and EtherChannel 82

Step 6 Configuring the VTP Domain 83

Step 7 Configuring Switch Access Ports for Hosts 83

Step 8 Trunking with the External Router 83

Step 9 Trunking for VLANs 1, 100, and 200 84

Step 10 Verify inter-VLAN Routing 86

Scenario: Configuring Switched Virtual Interfaces to Route Between

VLANs 87

Step 1 Basic Preparation 87

Step 2 Basic Configuration 87

Step 3 Configuring Trunks and EtherChannel 89

Step 4 Changing the VTP Mode 91

Step 5 Creating the VTP Domain 92

Step 6 Configuring the Host Ports 92

Step 7 Creating Layer 3 VLAN interfaces 93

Step 8 Verifying inter-VLAN Routing 94

Step 9 CEF 94

Scenario: Redundant, Fault-tolerant Routing to the Internal Network 99

Step 1 Basic Preparation 99

Step 2 Basic Configuration 99

Step 3 Configuring Trunks and EtherChannel 101

Step 4 Changing the VTP Mode 104

Step 5 Creating the VTP Domain 105

Step 6 Configuring the Host Ports 105

Step 7 HSRP Configuration 106

Step 8 show standby 108

Step 9 Verify Connectivity Between VLANs 112

Step 10 Verify HSRP 112

Initial Configurations 113

Step 1 Basic Preparation 114

Step 2 Basic Configuration 114

Step 3 GLBP Configuration and Verification 114

Step 4 Adjusting the Weight to Prefer Certain Routers 120

Option 1: Using the External WLAN Controller 125

Option 2: Using the WLAN Controller Network Module 127

Step 1 Basic Preparation 130

Step 2 Basic Configuration 130

Step 3 Configuring the Switched Virtual Interfaces 132

Step 4 DHCP 132

Step 5 PortFast 133

Step 6 Configuring the Host and Host Port 134

Step 7 Enable and Verify Routing 136

Step 8 WLAN Controller Wizard 136

Step 9 Additional WLAN Controller Configuration 138

Step 1 Basic Preparation 139

Step 2 VLAN and VTP Domain Configuration 139

Step 3 Subinterfaces 140

Step 4 DHCP 141

Step 5 PortFast 142

Step 6 Configuring the Host and Host Port 142

Step 7 Verify Routing 144

Step 8 WLAN Controller Wizard 145

Step 9 Additional WLAN Controller Configuration 147

Step 1 Load Existing Configurations from Previous Lab 150

Step 2 Using the Web Interface for Configuration 150

Step 3 Creating Logical Interfaces 152

Step 4 Configuring WLANs That Correspond to the VLANs 155

Step 1 Install Cisco Aironet Wireless Card Software 159

Step 2 Inserting the Cisco 802.11 a/b/g Wireless Adapter 163

Step 3 Verify Status of Installation 166

Scenario: Preparing the Switching Network to Support Voice 169

Step 1 Basic Preparation 170

Step 2 Basic Configuration 170

Step 3 Configure the Trunks and EtherChannel 171

Step 4 Changing the VTP Mode 173

Step 5 Creating the VTP Domain 174

Step 6 HSRP 174

Step 7 Auto QoS Configuration 176

Step 8 Verify Auto QoS 177

Step 9 Configure the Distribution Layer to Trust CoS 177

Step 10 Verify Auto QoS at the Distribution Layer 178

Step 11 mls qos cos 179

Scenario: Layer 2 Threats 181

Step 1 Basic Preparation 182

Step 2 Basic Configuration 182

Step 3 Configuring VLANs and VTP 184

Step 4 Layer 2 Attacks and Mitigation 186

Step 5 Protecting Against MAC Flooding 187

Step 6 DHCP Spoofing 188

Step 7 AAA 191

Scenario: Protecting the Root Bridge and Preventing Rogue Access Points 193

Step 1 Verify Configurations from Lab 8-1 193

Step 2 Locking Down the Spanning Tree Root 197

Step 3 spanning-tree guard root 199

Step 4 Verify Root Guard 199

Step 5 BPDU Guard 201

Step 6 UDLD 202

Scenario: Configuring the Network to Secure VLANs 204

Step 1 Verifying Loaded Configurations 204

Step 2 Private VLANs 207

Step 3 RACLs 210

Step 4 VACLs 211

Author

Joshua Moorhouse, CCNP, recently graduated from Rensselaer Polytechnic Institute with a BS in computer science. While there, he also worked as a teaching assistant in the Cisco Networking Academy. He currently works as a network engineer at Factset Research Systems in Norwalk, Connecticut. Josh enjoys spending time with his wife Laura, his family, and friends.

Christian M. Price Sr., CCNP, attended Hudson Valley Community College in Troy, New York, where he studied computer information systems. From 1997 to 2001, he worked for PSINet, one of the first Internet service providers and a major player in the commercialization of the Internet. Christian worked as a technical project manager with the Carrier and ISP Services group during his time at PSINet. He currently works with a credit union focusing on LAN/WAN design and implementation as well as implementation of a VoIP infrastructure for the organization. Christian is also an instructor in the Cisco Academy at Rensselaer Polytechnic Institute in Troy, New York. He lives with his loving wife and children in Grafton, New York.

Ross G. Wolfson, CCIE No. 16696, recently graduated from Rensselaer Polytechnic Institute (RPI) with a BS in computer science. He currently works as a network engineer at Factset Research Systems. Ross enjoys spending time with his friends, running, and biking.