CCNAmod4 Lab 8.5.2 ENG

Lab 8.5.2: Troubleshooting Enterprise Networks 2
Topology Diagram

Addressing Table
Device

R1

R2

R3

S1
S2
S3
PC1
PC2

Interface

IP Address

Subnet Mask

Default Gateway

Fa0/0
Fa0/1
S0/0/0
S0/0/1
Fa0/1
S0/0/0
S0/0/1
Lo0
Fa0/1
Fa0/1.11
Fa0/1.30
S0/0/0
S0/0/1
VLAN10
VLAN11
VLAN30
NIC
NIC

192.168.10.1
192.168.11.1
10.1.1.1
10.3.3.1
192.168.20.110.1.1.2
10.2.2.1
209.165.200.225
N/A
192.168.11.3
192.168.30.1
10.3.3.2
10.2.2.2
DHCP
192.168.11.2
192.168.30.2
DHCP
192.168.11.10

255.255.255.0
255.255.255.0
255.255.255.252
255.255.255.252
255.255.255.0
255.255.255.252
255.255.255.252
255.255.255.224
N/A
255.255.255.0
255.255.255.0
255.255.255.252
255.255.255.252
255.255.255.0
255.255.255.0

N/A
N/A
N/A
N/AN/A
N/A
N/A
209.165.200.226
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A

255.255.255.0

192.168.11.1

All contents are Copyright © 1992–2007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.

Page 1 of 11

CCNA Exploration
Accessing the WAN: Network Troubleshooting

PC3
TFTP Server

NIC
NIC

192.168.30.10
192.168.20.254

Lab 8.5.2:Troubleshooting Enterprise Networks 2

255.255.255.0
255.255.255.0

192.168.30.1
192.168.20.1

Learning Objectives
Upon completion of this lab, you will be able to:
•

Cable a network according to the topology diagram

•

Erase the startup configuration and reload a router to the default state

•

Load the routers and switches with supplied scripts

•

Find and correct all networkerrors

•

Document the corrected network

Scenario
For this lab, do not use login or password protection on any console lines to prevent accidental
lockout. Use ciscoccna for all passwords in this lab.
Note: Because this lab is cumulative, you will be using all the knowledge and troubleshooting
techniques that you have acquired from the previous material to successfully complete this lab.Requirements
•

S2 is the spanning-tree root for VLAN 11, and S3 is the spanning-tree root for VLAN 30.

•

S3 is a VTP server with S2 as a client.

•

The serial link between R1 and R2 is Frame Relay.

•

The serial link between R2 and R3 uses HDLC encapsulation.

•

The serial link between R1 and R3 is authenticated using CHAP.

•

R2 must have secure login proceduresbecause it is the Internet edge router.

•

All vty lines, except those belonging to R2, allow connections only from the subnets
shown in the topology diagram, excluding the public address.

•

Source IP address spoofing should be prevented on all links that do not connect to other
routers.

•

Routing protocols must be used securely. EIGRP is used in this scenario.

•

R3 mustnot be able to telnet to R2 through the directly connected serial link.

•

R3 has access to both VLAN 11 and 30 via its Fast Ethernet port 0/1.

•

The TFTP server should not get any traffic that has a source address outside the subnet.
All devices have access to the TFTP server.

•

All devices on the 192.168.10.0 subnet must be able to get their IP addresses from
DHCP on R1. Thisincludes S1.

•

All addresses shown in diagram must be reachable from every device.

Task 1: Load Routers with the Supplied Scripts
!-----------------------------------------!
R1
!-----------------------------------------no service password-encryption
!
hostname R1
!

All contents are Copyright © 1992–2007 Cisco Systems, Inc. All rights reserved. This document is Cisco PublicInformation.

Page 2 of 11

CCNA Exploration
Accessing the WAN: Network Troubleshooting

Lab 8.5.2: Troubleshooting Enterprise Networks 2

boot-start-marker
boot-end-marker
!
security passwords min-length 6
enable secret ciscoccna
!
ip cef
!
ip dhcp pool Access1
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
!
no ip domain lookup
frame-relay switching
!
username...