Techdhoom.in

CCNA Practice LAB Task – Switching, Routing, DHCP, NAT, ACL

saubhagya mishra

Networking Task 1 for CCNA

Diagram:

Switching Task:

  1. Your Distribution Switch will be the root bridge and it should always remain root bridge.
  2. All the switches should run separate instance of STP for each VLAN & should support DOT1Q encapsulation on trunk links.
  3. Distribution switch will only be the VTP server switch.
  4. VTP version 2 should run on all switches.
  5. The DMZ switch should always remain with CR value of 0.
  6. VTP domain will be LOCUZ.
  7. Your VTP messages should pass securely.
  8. Multiple Links between switches should be combined into a logical link.
  9. The Load balance method for bundled links should be source+destination IP.
  10. Users will be part of VLAN 10 (DATA) with subnet 192.168.1.0/24.
  11. All devices will be part of Management VLAN 20 (MGMT) with subnet 172.16.1.0/29.
  12. Servers will be part of VLAN 50 (DMZ) with subnet 10.100.100.0/25.
  13. The switches will not participate in any Layer 3 activity beside their own management.
  14. When user sending any Traffic for VLAN 50 from Access Switch, It should not pass through Distribution Switch in any case.
  15. User connected ports should come up in milliseconds all time.
  16. Unused ports should be Shut Down on all switches.
  17. On access switch, If any one connect a switch to any port then the port should go into Temporary Block.

Routing Task:

  1. ISP provided information.
    Your Public IP: 201.0.0.1/29
    Next Hop IP: 201.0.0.2
    DNS: 8.8.8.8

  2. On internet side 8.8.8.8 must be there. For testing create a loop back interface and assign this IP.
  3. Configure a Default route towards ISP. Customer is using this ISP for temporary use. In future if any new ISP added to the Router and if any new default route configured then the newly configured Default route should become Primary.

Advanced task:

  1. All the LAN users should receive IP address and DNS info dynamically.
  2. The internet or ISP router should not get to know about information about any Internal private IP.
  3. The server should be accessed from Internet using IP 201.0.0.5 and from LAN users it should be access using IP 10.100.100.100.
  4. The server should only access for ICMP & HTTP services from internet users.
  5. Internal users should only communicate for HTTP, HTTPS & ICMP services from internet.

Note: Apply your best practice for rest of the things.

Task By: Saubhagya Mishra

CCIE Routing & Switching certified

Exit mobile version