Project Information

Faculty Name: Information Technology

Module Code: ITNAA2-12
Module Name: Advanced Network Security Second Block
Module Leader: Shani Nel
Copy Editor: Kyle Keens
Total Marks: 80
Submission Date: 23/06/2023

Student Documentation Template:

Student Name and Surname:

Student Number:

Campus:

Project Submission:
I submitted / did not submit my ITNAA2-12 project documentation on the Turnitin link provided
on MyLMS.

I submitted / did not submit my ITNAA2-12 project files (Cisco Packet Tracer) on the Turnitin
link provided on MyLMS.

ITNAA2-12 – Project – Documentation Block 2 2023 | V1.0

Page 1 of 5
Eduvos (Pty) Ltd (formerly Pearson Institute of Higher Education) is registered with the Department of Higher Education and Training as a private
higher education institution under the Higher Education Act, 101, of 1997. Registration Certificate number: 2001/HE07/008
Question 1 80 Marks

1. Consider the image below representative of a typical campus network – in our case a part of
Eduvos, then complete the questions to follow where you will be guided to recreate the
simulation using Cisco Packet Tracer:

Additional Information:

Main Campus Router Connects to ISP router, Cloud Vossie Net (Connecting to Durban
and Midrand Routers), and Bedfordview Router.
VLAN 1: IT 192.168.1.0/24
VLAN 2: HR 192.168.2.0/24
VLAN 3: Sales 192.168.3.0/24
VLAN 4: Marketing 192.168.4.0/24
VLAN 5: Servers 192.168.7.0/24

ITNAA2-12 – Project – Documentation Block 2 2023 | V1.0

Page 2 of 5
Complete the following questions using the table provided below to show the code you
are using in your Packet Tracer Project:
(Note that this will be your document to submit on the Turnitin link provided and that you
furthermore need to submit your Packet Tracer file of the actual project as well).

Nr Question Answer
1 Place and connect all devices as per the Insert screenshot of the overview of
illustration of the network topology provided. your Packet Tracer project.
1 Mark
Set the history for the configuration mode to Insert the code you are using in your
30, so that you can show commands, and project.
configure the logging synchronous and
exec-timeout 0 0 commands on the console
2 of all routers and switches.
Configure the following passwords on all
2 Marks
routers and switches, and ensure that they
are encrypted with:
Console: cisco
VTY: eduvos
Enable-secret: ultimate
3 Create the VLANs in all switches and put the Insert the code you are using in your
access ports in the required VLANs as in the project.
4 Marks diagram.
4 Create Ether-channel trunks between the access Insert the code you are using in your
switches and the distribution switches (L3 project.
6 Marks
Switches).
5 Create VLAN interfaces on L3 switches and Insert the code you are using in your
assign IP addresses to them. project.
2 Marks
6 Assign IP addresses, subnet masks. Default Insert the code you are using in your
gateways, and DNS Server IP to the servers project.
3 Marks
manually.
Make the L3 Switch No.1 the primary STP root
& default-gateway for the IT, HR, and Servers Insert the code you are using in your
VLANs (Use HSRP). project.
Make the L3 Switch No.1 the secondary STP
root & default- gateway for the Sales, and
7
Marketing VLANs (Use HSRP)
3 Marks Make the L3 Switch No.2 the primary STP root
& default-gateway for the Sales, and Marketing
VLANs (Use HSRP).
Make the L3 switch No.2 the secondary STP
root & default- gateway for the IT, HR, and
Servers VLANs (Use HSRP)
8 Add and configure an EtherChannel Trunk Insert the code you are using in your
between the Layer 3 Switches directly. project.
5 Marks
Remove the HSRP Configuration. Enable
routing on the Layer 3 switches.

ITNAA2-12 – Project – Documentation Block 2 2023 | V1.0

Page 3 of 5
 Change the default gateway of the servers to be
192.168.7.100.
9 Use the DHCP server to distribute IP addresses, Insert the code you are using in your
Masks, default-gateways, and the DNS-server IP project.
4 Marks
to the PCs.
10 Verify that Hosts have been assigned IP Insert the code you are using in your
configuration and ensure full connectivity inside project.
2 Marks Eduvos Site.
Configure the L3 switches with IP addresses on Insert the code you are using in your
11 the routed ports, that are connected to the main project.
router
3 Marks
Configure the required IP addresses on the router
as well.
Create VLANs in the Switches of the Branches Insert the code you are using in your
12 (Midrand: 8 & 9, Durban: 10 & 11, project.
Bedfordview: 15 & 16)
3 Marks
Configure access ports in the required VLANs in
these switches.
Configure Trunks to the routers on these Insert the code you are using in your
13
switches. project.
4 Marks Configure sub-interfaces on the routers to be the
default gateways for the VLANs.
Connect Eduvos router to routers of Midrand & Insert the code you are using in your
Durban using frame-relay -PVC 102 - 201, 103 - project.
301.
14 (Use point-to-point sub-interfaces for this
purpose).
6 Marks
Configure the required IP addresses as shown in
the diagram.
Configure all routers and switches in the
topology with the corresponding hostnames.
Connect Eduvos router to the router of Insert the code you are using in your
15 Bedfordview using PPP with chap authentication project.
(password cisco).
2 Marks
Configure the required IP addresses as shown in
the diagram.
Configure Eduvos router with static routes to all Insert the code you are using in your
VLANs (1, 2, 3, 4, 7, 8, 9, 10, 11, 15, 16), or use project.
a dynamic routing protocol of your choice.
Configure the L3 switches with a default static
16
route to the main router (Eduvos router), or use
1 Mark dynamic routing protocol of your choice
Configure the routers of the branches with a
default static route to the main router (Eduvos
router) or use a dynamic routing protocol of your
choice.
17 Use the DHCP server to distribute IP addresses, Insert the code you are using in your
Masks, default-gateways, and DNS- server IP to project.
3 Marks
the PCs in the branches.
18 Configure the DNS server with the name Insert the code you are using in your
resolution of the Web server (www.eduvos.com), project.
ITNAA2-12 – Project – Documentation Block 2 2023 | V1.0
Page 4 of 5
1 Mark Google & Yahoo.
Configure port security on all access ports in the Insert the code you are using in your
19 L2 switches - Allow one device per port with project.
shutdown mode for all VLANs except IT.
5 Marks
Allow two devices with mode protect for IT
VLAN. Use sticky for learning the MACs).
20 Change the STP mode to rapid-PVST on all Insert the code you are using in your
Switches (L2 & L3). project.
1 Mark

21 Configure portfast & BPDUGuard on all access Insert the code you are using in your
ports in L2 switches. project.
3 Marks

Using ACLs, allow only the required services to Insert the code you are using in your
22 the servers for everyone - allow only HTTP to project.
the web server, DNS to the DNS server, and
2 Marks
DHCP to the DHCP Server.
Allow only the IT users to ping the servers.
23 Configure DHCP on the ISP router. Insert the code you are using in your
The main router should take its IP from the ISP project.
2 Marks router.
Configure the main router with a default static Insert the code you are using in your
route to the internet. project.
24
If you used OSPF, use the default-
2 Marks information originate command on this
router to advertise the default route to the other
routers and Layer 3 switches.
25 Configure the ISP router with a default static Insert the code you are using in your
route to the main router. project.
1 Mark

Allow the IT users to access both Google & Insert the code you are using in your
Yahoo. project.
26
Allow other users to access Google only.
3 Marks Any other traffic should be denied except the
return traffic from the servers or pings & telnet
from the IT VLAN.
27 Configure one ACL for all VLANs to be used Insert the code you are using in your
with NAT. project.
1 Marks
28 Configure All interfaces (except the Internet one Insert the code you are using in your
–it should be NAT Outside-) on the main router project.
2 Marks
to be NAT Inside.
29 Configure PAT for all users (Use the outside Insert the code you are using in your
interface for the overload). project.
2 Marks
30 Ensure that all users can access each other and Insert the code you are using in your
the internet, considering the security project.
1 Mark
requirements listed above.

ITNAA2-12 – Project – Documentation Block 2 2023 | V1.0

Page 5 of 5