CCNP ADVANCED LAB 1

Single Site Network

Advanced Labs
Lab 1: Single Site Network
Objective
This lab will allow you to develop your ability to combine multiple technologies to create a network
infrastructure that is typical of a small to medium-size enterprise with a single site. You will use
your knowledge of VLANs, Layer 2 switching, Layer 3 routing, and dynamic routing protocols to
build this infrastructure.

Simulated Network Overview

You will be creating a network with one router, one switch, and four PC hosts. Two of the PC hosts
will be connected to one VLAN, and the other two PC hosts will be connected to a different VLAN.
The router will have a subinterface for each VLAN, and 802.1q trunking will be used to connect
each subinterface to the appropriate VLAN on the switch.
You will be able to combine and use skills learned in prior labs to build out this network.

Lab Topology
For this lab, your network design will include the devices shown in the Topology diagram below.
9OUWILLBEGINWITHBLANKCONlGURATIONSONALLDEVICES4HEDIAGRAMREPRESENTSTHE.ET-APINTHE
Simulator. To access each of the devices from within the Simulator, select the device name from
the appropriate menu in the Simulator. For example, to access P1R1, click the eRouters button
and select P1R1 from the drop-down menu.

FastEthernet0/0.1 10.100.1.1 VLAN 1

FastEthernet0/0.20 10.100.20.1 VLAN 20
FastEthernet0/0.30 10.100.30.1 VLAN 30
P1R1
Fa0/0
Fa0/1

P1SW1 Vlan 1 10.100.1.2 VLAN 1

P1PC1 P1PC2 P1PC3 P1PC4

10.100.20.4 10.100.30.4 10.100.20.5 10.100.30.5
VLAN 20 VLAN 30 VLAN 20 VLAN 30
Fa0/2 Fa0/3 Fa0/4 Fa0/5
 CCNP ADVANCED LAB 1
Single Site Network

Command Summary
Command Description
configure terminal ENTERSGLOBALCONlGURATIONMODE
hostname host_name assigns a host name to a router or switch
show run DISPLAYSTHEROUTERSORSWITCHSRUNNINGCONlGURATION
erase startup-config ERASESTHESTARTUPCONlGURATIONSTOREDIN.62!-
ip address ip_address subnet_mask assigns an IP address and a subnet mask to an interface
vlan vlan_id name vlan_name creates and/or names a VLAN
show vlan displays VLAN information
interface type number ENTERSINTERFACECONlGURATIONMODE
switchport access vlan vlan_id assigns a switch port to a VLAN
speed {10 | 100 | 1000 | auto | nonegotiate} sets the interface speed
duplex {auto | full | half} SETSTHEINTERFACEDUPLEXCONlGURATIONTOFULLHALFORAUTO
show ip interface brief displays information for IP interfaces
interface type number subinterface_id creates a subinterface
encapsulation dot1q vlan_id sets the encapsulation method of the interface for 802.1q VLAN trunking;
ALSOSPECIlESTHE6,!.)$FORWHICHTHEFRAMESSHOULDBETAGGED
reload CAUSESTHE)/3TORESETANDRELOADITSSTARTUPCONlGURATIONIFPRESENT
switchport mode trunk CONlGURESATRUNKPORT
switchport mode access CONlGURESANACCESSPORT
switchport trunk encapsulation dot1q sets the encapsulation method used for a switch trunk port to 802.1q
enable password enters privileged EXEC mode
exit exits the current mode

Note: Please be aware of the following when using the Grade Lab function in the Lab Navigator. If
you choose to use an IP addressing scheme other than that shown in the lab documentation, you
MAYlNDTHATYOURLABWILLRECEIVEGRADINGERRORS9OURLABMAYSTILLFUNCTIONCORRECTLYINSPITEOF
these grading errors.

Lab Tasks
4ASK0REPARINGTHE$EVICESFOR#ONlGURATION
 -AKESURETHECORRECTTOPOLOGYANDCONlGURATIONlLESFORTHISLABARELOADED4HISSHOULD
occur automatically when you select this lab from the Lab Navigator.
 -AKESUREALLROUTERSANDSWITCHESINTHESIMULATEDNETWORKHAVEEMPTYCONlGURATIONS
What commands should you use to accomplish this?
______________________________________________________________
3. As per the Lab Topology diagram, change the host name of the router to P1R1, and change
the host name of the switch to P1SW1. What commands should you use to do this?
______________________________________________________________
 CCNP ADVANCED LAB 1
Single Site Network

Task 2
A. Assigning IP Addresses to the PC Hosts
1. Use the Lab Topology diagram to determine the correct IP addresses and default
GATEWAYSFOR00#00#00#AND00##ONlGURETHECORRECT)0ADDRESS
subnet mask, and default gateway on each PC host. Use a 24-bit subnet mask
(255.255.255.0). Remember that the gateway for each PC host is the subinterface on
the router that is assigned to the VLAN of which the PC host is a member. Write down the
commands you use to accomplish this.
_____________________________________________________________
2. From the console of P1PC1, can you ping P1PC2? Why or why not?
_____________________________________________________________
3. From the console of P1PC1, can you ping P1PC3? Why or why not?
_____________________________________________________________
B. Assigning an IP Address to the Management VLAN on P1SW1
1. Use the Lab Topology diagram to determine the correct IP address for the management VLAN
on P1SW1. Assign the correct IP address to the management VLAN on P1SW1. Remember to
use a 24-bit subnet mask (255.255.255.0). Write down the commands you use.
_____________________________________________________________
 7HATISTHENAMEAND)$OFTHEMANAGEMENT6,!.ON037
_____________________________________________________________
Task 3
A. Creating VLANs on P1SW1
1. Examine the Lab Topology diagram. How many VLANs will you need to create, and what
ARETHEIR6,!.)$S
_____________________________________________________________
2. Issue the commands necessary to create these VLANs. Write down the commands you use.
_____________________________________________________________
3. Verify that you have created and named the VLANs correctly. What command should you use?
_____________________________________________________________
B. Placing the PC Hosts in the Correct VLANs
1. By default, are the PC hosts already in a VLAN? If so, which one? What command should
you use to determine this?
_____________________________________________________________
2. Refer to the Lab Topology diagram, and write down which PC hosts should go in which
VLANs.
_____________________________________________________________
 !SSIGNTHE0#HOSTSTOTHECORRECT6,!.S)NADDITIONSETTHESWITCHPORTTO-BPS
half duplex for all PC hosts. What commands should you use?
_____________________________________________________________
 3ETTHEPORTSPEEDANDDUPLEXTO-BPSFULLDUPLEXFORTHESWITCHPORTTHATCONNECTS
P1SW1 to P1R1. What commands should you use?
_____________________________________________________________
CCNP ADVANCED LAB 1
Single Site Network

Task 4
A. Creating Subinterfaces on P1R1
1. On P1R1, you will need to create a subinterface for each VLAN. Write down the names of
the subinterfaces you plan to create. What rationale did you use when deciding on names
for the subinterfaces?
_____________________________________________________________
2. Create the subinterfaces that you listed in the previous step. Remember that the router
INTERFACEMAYBEINASHUTDOWNSTATEINTHEDEFAULTCONlGURATION"ESURETOISSUETHE
necessary commands to activate the interface. Write down the commands you use.
______________________________________________________________
B. Assigning IP Addresses to the Subinterfaces
1. Refer to the Lab Topology diagram, and write down the IP addresses that you will assign
to each subinterface on P1R1.
______________________________________________________________
2. Per your list above, assign the appropriate IP address to each subinterface on P1R1.
Remember to use a 24-bit subnet mask (255.255.255.0). Write down the commands you
use.
______________________________________________________________
3. Be sure to verify that you have assigned the correct IP address and subnet mask to each
subinterface. Check your work, and write down the commands you use to perform this
VERIlCATION
______________________________________________________________
##ONlGURING3UBINTERFACE%NCAPSULATIONFORQ6,!.4AGGING
1. When the Ethernet frames leaving FastEthernet0/0 arrive at FastEthernet0/1 on P1SW1,
the switch will examine the 4-byte VLAN tag in the Ethernet frame to determine which
virtual LAN should receive the frame. In order for the frames leaving Fa0/0 to be tagged
CORRECTLYTHE&ASUBINTERFACESMUSTBECONlGUREDWITHTHECORRECTENCAPSULATION
command to identify the VLAN to which the subinterface belongs.
 #ONlGUREQ6,!.TAGGINGFOREACHSUBINTERFACE7RITEDOWNTHECOMMANDSYOUUSE
to accomplish this.
______________________________________________________________
$#ONlGURINGTHE4RUNK0ORT4HAT#ONNECTS037TO02
1. Which port on P1SW1 is used to connect to P1R1?
______________________________________________________________
 "ECAUSETHISPORTWILLCARRYFRAMESFROMMULTIPLE6,!.SITSHOULDBECONlGUREDASA
TRUNKPORT3WITCHPORTSARECONlGUREDASACCESSPORTSBYDEFAULT!NACCESSPORTCARRIES
only Ethernet frames of the VLAN of which the port is a member.
 #ONlGURETHEPORTNAMEDINSTEPASATRUNKPORT2EMEMBERTOSETTHETRUNKPORTTOUSE
the correct encapsulation! Write down the commands you use to accomplish this.
______________________________________________________________
 CCNP ADVANCED LAB 1
Single Site Network

Task 5
A. Verifying Network Connectivity
1. At this point, the network should be fully operational. From the console of each PC host,
attempt to ping all other PC hosts. Are you able to do so?
_____________________________________________________________
2. From the console of P1SW1, you should be able to ping all subinterfaces on P1R1 as well
as all PC hosts. Verify that this is the case. Write down the commands you use.
_____________________________________________________________
3. From the console of P1R1, you should be able to ping all PC hosts as well as the management
VLAN on P1SW1. Verify that you can do this. Write down the commands you use.
_____________________________________________________________
B. Troubleshooting
 -OVE0#HOST00#FROM6,!.INTO6,!.7RITEDOWNTHECOMMANDSYOUUSETO
do this.
_____________________________________________________________
2. From the console of P1PC1, can you ping any other PC hosts? Why or why not?
_____________________________________________________________
3. From the console of P1PC1, can you ping any of the subinterfaces on P1R1? Why or why not?
_____________________________________________________________
4. From the console of P1R1, can you ping P1PC1? Why or why not?
_____________________________________________________________
5. Based on this troubleshooting exercise, summarize in a brief paragraph the
relationships between VLANs, subinterfaces, networks, and hosts.
_____________________________________________________________

_____________________________________________________________

_____________________________________________________________

_____________________________________________________________
 -OVE00#BACKINTO6,!.7HICHHOSTSANDSUBINTERFACESCANYOUNOWPINGFROM
00#"RIEmYEXPLAINTHISBEHAVIOR
_____________________________________________________________

_____________________________________________________________

_____________________________________________________________

_____________________________________________________________
CCNP ADVANCED LAB 1
Single Site Network

Lab Solutions
4ASK0REPARINGTHE$EVICESFOR#ONlGURATION
2. P1R1 and P1SW1:
erase startup-config
reload
show running-config
3. P1R1:
config t
hostname P1R1
P1SW1:
config t
hostname P1SW1
Task 2
A. Assigning IP Addresses to the PC Hosts
1. P1PC1:
ipconfig /ip 10.100.20.4 255.255.255.0
ipconfig /dg 10.100.20.1
P1PC2:
ipconfig /ip 10.100.30.4 255.255.255.0
ipconfig /dg 10.100.30.1
P1PC3:
ipconfig /ip 10.100.20.5 255.255.255.0
ipconfig /dg 10.100.20.1
P1PC4:
ipconfig /ip 10.100.30.5 255.255.255.0
ipconfig /dg 10.100.30.1
2. No. All PC hosts are initially in the same VLAN, which is VLAN 1; however, P1PC1 and
00#ARECONlGUREDWITHDIFFERENTNETWORKADDRESSESANDTHUSCANNOTPINGEACHOTHER
3. Yes. All PC hosts are initially in the same VLAN, which is VLAN 1. P1PC1 and P1PC3 are
also in the same IP network and are able to ping each other.
B. Assigning an IP Address to the Management VLAN on P1SW1
1. P1SW1:
configure terminal
interface vlan 1
ip address 10.100.1.2 255.255.255.0
 4HE6,!.)$OFTHEMANAGEMENT6,!.IS6,!.4HENAMEOF6,!.IShDEFAULTv
 CCNP ADVANCED LAB 1
Single Site Network

Task 3
A. Creating VLANs on P1SW1
 4WO6,!.SNEEDTOBECREATED6,!.AND6,!.4HE6,!.)$SARE and .
2. P1SW1:
config t
vlan 20
vlan 30
3. show vlan
B. Placing the PC Hosts in the Correct VLANs
1. You should issue the show vlan command to see that the PC hosts are already in VLAN 1.
2. P1PC1 and P1PC3 should be in VLAN 20. P1PC2 and P1PC4 should be in VLAN 30.
3. To place P1PC1 in VLAN 20 on P1SW1:
config t
interface FastEthernet0/2
switchport access vlan 20
speed 100
duplex half
To place P1PC2 in VLAN 30 on P1SW1:
config t
interface FastEthernet0/3
switchport access vlan 30
speed 100
duplex half
To place P1PC3 in VLAN 20 on P1SW1:
config t
interface FastEthernet0/4
switchport access vlan 20
speed 100
duplex half
To place P1PC4 in VLAN 30 on P1SW1:
config t
interface FastEthernet0/5
switchport access vlan 30
speed 100
duplex half
4. P1SW1:
config t
interface FastEthernet0/1
speed 100
duplex full
CCNP ADVANCED LAB 1
Single Site Network

Task 4
A. Creating Subinterfaces on P1R1
 )TISHELPFULTONAMETHESUBINTERFACESUSINGTHE6,!.)$TOWHICHTHEYWILLBE
trunked. Thus, you should create subinterfaces FastEthernet0/0.1, FastEthernet0/0.20,
and FastEthernet0/0.30 on both P1R1 and P2R1. For instance, in this case,
FastEthernet0/0.20 will be trunked to VLAN 20.
2. P1R1:
config t
interface FastEthernet0/0
no shutdown
interface FastEthernet0/0.1
interface FastEthernet0/0.20
interface FastEthernet0/0.30
B. Assigning IP Addresses to the Subinterfaces
1. FastEthernet0/0.1 10.100.1.1
FastEthernet0/0.20 10.100.20.1
FastEthernet0/0.30 10.100.30.1
2. P1R1:
config t
interface FastEthernet0/0.1
ip address 10.100.1.1 255.255.255.0
interface FastEthernet0/0.20
ip address 10.100.20.1 255.255.255.0
interface FastEthernet0/0.30
ip address 10.100.30.1 255.255.255.0
3. You should use the show ip interfaces brief and show running-config commands.
##ONlGURING3UBINTERFACE%NCAPSULATIONFORQ6,!.4AGGING
2. P1R1:
config t
interface FastEthernet0/0.1
encapsulation dot1q 1
interface FastEthernet0/0.20
encapsulation dot1q 20
interface FastEthernet0/0.30
encapsulation dot1q 30
$#ONlGURINGTHE4RUNK0ORT4HAT#ONNECTS037TO02
1. FastEthernet0/1
3. P1SW1:
conf t
interface FastEthernet0/1
switchport mode trunk
switchport trunk encapsulation dot1q
 CCNP ADVANCED LAB 1
Single Site Network

Task 5
A. Verifying Network Connectivity
1. Yes. From the console of each PC host, you should be able to ping all other PC hosts.
2. ping 10.100.1.1 (subinterface fa0/0.1 on P1R1)
ping 10.100.20.1 (subinterface fa0/0.20 on P1R1)
ping 10.100.30.1 (subinterface fa0/0.30 on P1R1)
ping 10.100.20.4 (P1PC1)
ping 10.100.20.5 (P1PC3)
ping 10.100.30.4 (P1PC2)
ping 10.100.30.5 (P1PC4)
3. ping 10.100.1.2 (VLAN 1 on P1SW1 – management/default VLAN)
ping 10.100.20.4 (P1PC1)
ping 10.100.20.5 (P1PC3)
ping 10.100.30.4 (P1PC2)
ping 10.100.30.5 (P1PC4)
B. Troubleshooting
1. P1PC1:
config t
interface fa0/2
switchport access vlan 30
 .O00#CANNOTPING00#BECAUSEEVENTHOUGHTHEYARECONlGUREDWITHTHESAME
IP network addresses, they are no longer in the same VLAN. Although P1PC1 is now in
the same VLAN as P1PC2 and P1PC4, it has a different IP network address from P1PC2
and P1PC4, so pings to those hosts also fail.
 .O00#ISCONlGUREDWITHTHEWRONGDEFAULTGATEWAYAND)0NETWORKADDRESSFORTHE
VLAN of which it is now a member; thus, it has no connectivity to hosts in its own, or any
other, VLAN.
 .O4RAFlCDESTINEDTO00#S)0ADDRESSISSENTOUT02S &AINTERFACEANDIS
TRUNKEDTO6,!.4HISTRAFlCWILLNEVERREACH00#BECAUSE00#ISNOWIN6,!.
 6,!.SRESTRICTANDCONTAIN,AYERTRAFlC7HENSWITCHPORTSAREMADEMEMBERSOFA
6,!.THEYBEHAVEASIFTHEYWERECONNECTEDTOTHEIROWNSEPARATESWITCH#ONlGURING
all hosts in a VLAN with the same IP network addresses is good network design.
 4RAFlCISMOVEDBETWEEN6,!.SAT,AYER4HE,AYERROUTINGFUNCTIONCANTAKEPLACE
on the switch itself if the switch has Layer 3 capabilities. In this network, P1SW1 does
NOTHAVE,AYERROUTINGCAPABILITIESSOASEPARATEDEVICE02MUSTMOVETRAFlCAT
Layer 3 between VLANs.
If the router had enough Ethernet ports, you could connect a separate Ethernet port
FROMTHEROUTERTOASWITCHPORTINEACH6,!.4HISAPPROACHISNOTEFlCIENTBECAUSE
ITWASTES%THERNETPORTSONTHEROUTERANDTHESWITCH)NSTEADYOUSHOULDCONlGURE
a Layer 2 trunking protocol that is supported by both P1R1 and P1SW1. You are using
802.1q trunking because the switch only supports 802.1q. By using Layer 2 trunking,
YOUCANCONNECTAhVIRTUALvROUTERSUBINTERFACETOEACH6,!.ONTHESWITCHANDUSETHE
ROUTERTOMOVETRAFlCBETWEENTHE6,!.SAT,AYER
 CCNP ADVANCED LAB 1
Single Site Network

6. After P1PC1 is moved back into VLAN 20, pings from P1PC1 to all other PC hosts and
subinterfaces are successful. Pings from P1PC1 to hosts and interfaces in VLAN 20 are all
successful because all hosts and subinterfaces in the same VLAN have the same network
address. Pings to hosts and subinterfaces in different VLANs have different network
addresses and are forwarded to the default gateway for delivery via Layer 3 routing.

3AMPLE#ONlGURATION3CRIPTS
P1R1 P1SW1
version 12.1 version 12.1
service timestamps debug uptime service timestamps debug uptime
service timestamps log uptime service timestamps log uptime
no service password-encryption no service password-encryption
! !
hostname P1R1 hostname P1SW1
! !
ip subnet-zero ip subnet-zero
! spanning-tree extend system-id
interface Serial0 !
no ip address interface FastEthernet0/1
no ip directed-broadcast switchport mode trunk
shutdown switchport trunk encapsulation dot1q
! speed 100
interface FastEthernet0/0 duplex full
no ip address !
no ip directed-broadcast interface FastEthernet0/2
! switchport access vlan 20
interface FastEthernet0/0.1 speed 100
encapsulation dot1q 1 duplex half
ip address 10.100.1.1 255.255.255.0 !
! interface FastEthernet0/3
interface FastEthernet0/0.20 switchport access vlan 30
encapsulation dot1q 20 speed 100
ip address 10.100.20.1 255.255.255.0 duplex half
! !
interface FastEthernet0/0.30 interface FastEthernet0/4
encapsulation dot1q 30 switchport access vlan 20
ip address 10.100.30.1 255.255.255.0 speed 100
! duplex half
ip classless !
no ip http server interface FastEthernet0/5
! switchport access vlan 30
line con 0 speed 100
transport input none duplex half
line aux 0 !
line vty 0 4 end
!
no scheduler allocate
end