Skip to content
Class Notes

Lecture Notes for CCNA 2 v7 Labs and Study Guide

Lecture Notes for CCNA 2 v7 Labs and Study Guide is your go-to reference for efficient studying.

Preview 31 of 616 pages

See the first 31 pages exactly as they appear in the document.

  1. Page 1
    Read page 1 as text

    Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) Instructor’s Answer Key Allan Johnson

  2. Page 2
  3. Page 3
    Read page 3 as text

    iv Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) About the Contributing Author Allan Johnson entered the academic world in 1999, after 10 years as a business owner/operator, to dedicate his efforts to his passion for teaching. He holds both an M.B.A. and an M.Ed. in training and development. He taught CCNA courses at the high school level for 7 years and has taught both CCNA and CCNP courses at Del Mar College in Corpus Christi, Texas. In 2003, Allan began to commit much of his time and energy to the CCNA Instructional Support Team, providing services to Networking Academy instructors worldwide and creating training materials. He now works full time for Cisco Networking Academy as Curriculum Lead.

  4. Page 4
    Read page 4 as text

    v About the Technical Reviewer Dave Holzinger has been a curriculum developer, project manager, author, and technical editor for Cisco Networking Academy in Phoenix since 2001. Dave works on the team that develops Cisco Networking Academy’s online curricula, including CCNA, CCNP, and IT Essentials. He has been working with computer hardware and software since 1981. Dave has certifications from Cisco, BICSI, and CompTIA.

  5. Page 5
    Read page 5 as text

    vi Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) Contents at a Glance Introduction xxx Chapter 1 Basic Device Configuration 1 Chapter 2 Switching Concepts 69 Chapter 3 VLANs 77 Chapter 4 Inter-VLAN Routing 161 Chapter 5 STP Concepts 251 Chapter 6 EtherChannel 265 Chapter 7 DHCPv4 311 Chapter 8 SLAAC and DHCPv6 349 Chapter 9 FHRP Concepts 379 Chapter 10 LAN Security Concepts 393 Chapter 11 Switch Security Configuration 405 Chapter 12 WLAN Concepts 439 Chapter 13 WLAN Configuration 455 Chapter 14 Routing Concepts 503 Chapter 15 IP Static Routing 535 Chapter 16 Troubleshoot Static and Default Routes 571

  6. Page 6
    Read page 6 as text

    Contents Introduction xxx Chapter 1 Basic Device Configuration 1 Study Guide 2 Configure a Switch with Initial Settings 2 Switch Boot Sequence 2 The boot system Command 2 Switch LED Indicators 3 Recovering from a System Crash 4 Switch Management Access 5 Switch SVI Configuration 6 Configure Switch Ports 6 Duplex Communication 6 Configure Switch Ports at the Physical Layer 6 Auto-MDIX 7 Switch Verification Commands 7 Network Access Layer Issues 8 Troubleshooting Network Access Layer Issues 9 Secure Remote Access 10 Telnet Operation 10 SSH Operation 10 Verify That the Switch Supports SSH 10 Configure SSH 10 Verify That SSH Is Operational 11 Packet Tracer Exercise 1-1: Configure Secure Access 12 Basic Router Configuration 13 Configure Basic Router Settings 13 Dual Stack Topology 14 Configure Router Interfaces 14 IPv4 Loopback Interfaces 15 Packet Tracer Exercise 1-2: Basic Router Configuration 15 Verify Directly Connected Networks 16 Verify Interface Status 16 Verify IPv6 Link-Local and Multicast Addresses 16 Verify Interface Configuration 17 Verify Routes 17 Filter Show Command Output 18 Command History Feature 19 Check Your Understanding—Verify Directly Connected Networks 20 Labs and Activities 21 Command Reference 21 Contents vii

  7. Page 7
    Read page 7 as text

    viii Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) 1.1.7 Lab—Basic Switch Configuration (Instructor Version) 23 Topology 23 Addressing Table 23 Objectives 23 Background / Scenario 24 Required Resources 24 Part 1: Cable the Network and Verify the Default Switch Configuration 25 Part 2: Configure Basic Network Device Settings 29 Part 3: Verify and Test Network Connectivity 31 Part 4: Manage the MAC Address Table 34 Reflection Questions 37 Appendix A: Initialize and Reload a Switch 37 Device Configs 38 Switch S1 38 1.3.6 Packet Tracer—Configure SSH (Instructor Version) 42 Addressing Table 42 Objectives 42 Background 42 Instructions 42 Part 1: Secure Passwords 42 Part 2: Encrypt Communications 42 1.4.7 Packet Tracer—Configure Router Interfaces (Instructor Version) 44 Addressing Table 44 Objectives 44 Background 44 Instructions 44 Part 1: Configure IPv4 Addressing and Verify Connectivity 44 Part 2: Configure IPv6 Addressing and Verify Connectivity 45 Final Configuration 45 Router R1 45 Router R2 45 1.5.10 Packet Tracer—Verify Directly Connected Networks (Instructor Version) 46 Addressing Table 46 Objectives 46 Background 46 Instructions 46 Part 1: Verify IPv4 Directly Connected Networks 46 Part 2: Verify IPv6 Directly Connected Networks 48 Final Configuration 49 Router R1 49 Router R2 49

  8. Page 8
    Read page 8 as text

    1.6.1 Packet Tracer—Implement a Small Network (Instructor Version) 50 Addressing Table 50 Objectives 50 Instructions 50 Part 1: Create the Network Topology 50 Part 2: Configure Devices 51 Device Configurations 52 Router RTA 52 Switch SW1 53 Switch SW2 53 1.6.2 Lab—Configure Basic Router Settings (Instructor Version) 54 Topology 54 Addressing Table 54 Objectives 54 Background / Scenario 55 Required Resources 55 Instructions 56 Part 1: Set Up the Topology and Initialize Devices 56 Part 2: Configure Devices and Verify Connectivity 56 Part 3: Display Router Information 59 Reflection Questions 65 Router Interface Summary Table 66 Device Configs 66 Router R1 66 Chapter 2 Switching Concepts 69 Study Guide 70 Frame Forwarding 70 Switching in Networking 70 The Switch MAC Address Table 70 The Switch Learn and Forward Method 70 Switching Forwarding Methods 71 Store-and-Forward Switching 71 Cut-Through Switching 71 Activity—Build the MAC Address Table 72 Switching Domains 73 Collision Domains 73 Broadcast Domains 74 Alleviate Network Congestion 74 Check Your Understanding—Switching Domains 75 Labs and Activities 76 Contents ix

  9. Page 9
    Read page 9 as text

    x Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) Chapter 3 VLANs 77 Study Guide 78 Overview of VLANs 78 VLAN Definitions 78 Benefits of VLAN Design 78 Types of VLANs 78 Check Your Understanding—Overview of VLANs 79 VLANs in a Multi-Switched Environment 80 Defining VLAN Trunks 80 Network Without VLANs 80 Network with VLANs 80 VLAN Identification with a Tag 81 Native VLANs and 802.1Q Tagging 81 Voice VLAN Tagging 82 Check Your Understanding—VLANs in a Multi-Switched Environment 83 VLAN Configuration 85 VLAN Ranges on Catalyst Switches 85 VLAN Creation and Port Assignment Exercise 85 Packet Tracer 3-1: VLAN Creation and Port Assignment 86 Requirements 86 Verify VLAN Information 87 Modify VLANs and Port Assignments 88 VLAN Trunks 88 Trunk Configuration Commands 88 Packet Tracer Exercise 3-2: VLAN and Trunk Configuration 89 Reset the Trunk to the Default State 90 Dynamic Trunking Protocol 90 Introduction to DTP 90 Negotiated Interface Modes 90 Results of a DTP Configuration 91 Verify DTP Mode 92 Check Your Understanding—Dynamic Trunking Protocol 93 Labs and Activities 94 Command Reference 94 3.1.4 Packet Tracer—Who Hears the Broadcast? (Instructor Version) 95 Objectives 95 Scenario 95 Instructions 95 Reflection Questions 96 3.2.8 Packet Tracer—Investigate a VLAN Implementation (Instructor Version) 97 Addressing Table 97

  10. Page 10
    Read page 10 as text

    Objectives 97 Background 97 Instructions 97 Part 1: Observe Broadcast Traffic in a VLAN Implementation 97 Part 2: Observe Broadcast Traffic without VLANs 99 Reflection Questions 99 3.3.12 Packet Tracer—VLAN Configuration (Instructor Version) 101 Addressing Table 101 Objectives 101 Background 101 Part 1: View the Default VLAN Configuration 101 Part 2: Configure VLANs 102 Part 3: Assign VLANs to Ports 103 Answer Scripts 105 Switch S1 105 Switch S2 105 Switch S3 105 3.4.5 Packet Tracer—Configure Trunks (Instructor Version) 107 Addressing Table 107 Objectives 107 Background 107 Instructions 107 Part 1: Verify VLANs 107 Part 2: Configure Trunks 108 Answer Scripts 109 Switch S1 109 Switch S2 109 Switch S3 109 3.4.6 Lab—Configure VLANs and Trunking (Instructor Version) 110 Topology 110 Addressing Table 110 Objectives 110 Background / Scenario 110 Required Resources 111 Instructions 111 Part 1: Build the Network and Configure Basic Device Settings 111 Part 2: Create VLANs and Assign Switch Ports 113 Part 3: Maintain VLAN Port Assignments and the VLAN Database 116 Part 4: Configure an 802.1Q Trunk Between the Switches 120 Part 5: Delete the VLAN Database 124 Reflection Questions 125 Device Configs - Final 125 Contents xi

  11. Page 11
    Read page 11 as text

    xii Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) Switch S1 125 Switch S2 129 3.5.5 Packet Tracer—Configure DTP (Instructor Version) 133 Addressing Table 133 Objectives 133 Background / Scenario 133 Instructions 133 Part 1: Verify VLAN configuration 133 Part 2: Create additional VLANs on S2 and S3 134 Part 3: Assign VLANs to Ports 135 Part 4: Configure Trunks on S1, S2, and S3 136 Part 5: Reconfigure trunk on S3 138 Part 6: Verify end to end connectivity 138 Script 138 Switch S1 138 Switch S2 139 Switch S3 139 3.6.1 Packet Tracer—Implement VLANs and Trunking (Instructor Version) 141 Addressing Table 141 Objectives 141 Background 141 Instructions 141 Part 1: Configure VLANs 141 Part 2: Assign Ports to VLANs 142 Part 3: Configure Static Trunking 142 Part 4: Configure Dynamic Trunking 142 Answer Scripts 142 Switch SWA 142 Switch SWB 143 Switch SWC 144 3.6.2 Lab—Implement VLANs and Trunking (Instructor Version) 145 Topology 145 Addressing Table 145 VLAN Table 145 Objectives 145 Background / Scenario 146 Required Resources 146 Instructions 146 Part 1: Build the Network and Configure Basic Device Settings 146 Part 2: Create VLANs and Assign Switch Ports 148 Part 3: Configure an 802.1Q Trunk Between the Switches 150 Device Configs - Final 151

  12. Page 12
    Read page 12 as text

    Switch S1 151 Switch S2 155 Chapter 4 Inter-VLAN Routing 161 Study Guide 162 Inter-VLAN Routing Operation 162 What is Inter-VLAN Routing? 162 Legacy Inter-VLAN Routing 162 Router-on-a-Stick Inter-VLAN Routing 162 Inter-VLAN Routing on a Layer 3 Switch 162 Check Your Understanding—Inter-VLAN Routing Operation 163 Router-on-a-Stick Inter-VLAN Routing 164 Router-on-a-Stick Command Syntax 164 Router-on-a-Stick Configuration 165 Packet Tracer Exercise 4-1: Router-on-a-Stick Inter-VLAN Routing Configuration 166 Inter-VLAN Routing Using Layer 3 Switches 166 Layer 3 Switch Inter-VLAN Routing 166 Layer 3 Switch Configuration 167 Packet Tracer 4-2: Layer 3 Switch Inter-VLAN Routing Configuration 168 Troubleshoot Inter-VLAN Routing 169 Common Inter-VLAN Issues 169 Troubleshoot Router-on-a-Stick Inter-VLAN Routing 170 Troubleshoot Layer 3 Switch Inter-VLAN Routing 171 Check Your Understanding—Troubleshoot Inter-VLAN Routing 174 Labs and Activities 175 Command Reference 175 4.2.7 Packet Tracer—Configure Router-on-a-Stick Inter-VLAN Routing (Instructor Version) 175 Addressing Table 175 Objectives 175 Scenario 176 Instructions 176 Part 1: Add VLANs to a Switch 176 Part 2: Configure Subinterfaces 177 Part 3: Test Connectivity with Inter-VLAN Routing 177 Answer scripts 178 Switch S1 178 Router R1 179 4.2.8 Lab—Configure Router-on-a-Stick Inter-VLAN Routing (Instructor Version) 180 Topology 180 Addressing Table 180 Contents xiii

  13. Page 13
    Read page 13 as text

    xiv Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) VLAN Table 180 Objectives 180 Background / Scenario 181 Required Resources 181 Instructions 182 Part 1: Build the Network and Configure Basic Device Settings 182 Part 2: Create VLANs and Assign Switch Ports 184 Part 3: Configure an 802.1Q Trunk Between the Switches 186 Part 4: Configure Inter-VLAN Routing on the Router 187 Part 5: Verify Inter-VLAN Routing is Working 188 Router Interface Summary Table 188 Device Configs - Final 189 Switch S1 189 Switch S2 193 Router R1 198 4.3.8 Packet Tracer—Configure Layer 3 Switching and Inter-VLAN Routing (Instructor Version) 201 Addressing Table 201 Objectives 201 Background / Scenario 201 Instructions 202 Part 1: Configure Layer 3 Switching 202 Part 2: Configure Inter-VLAN Routing 202 Part 3: Configure IPv6 Inter-VLAN Routing 204 Script 205 MLS 205 S1 206 4.4.8 Packet Tracer—Troubleshoot Inter-VLAN Routing (Instructor Version) 207 Addressing Table 207 Objectives 207 Scenario 207 Instructions 207 Part 1: Locate the Network Problems 207 Part 2: Implement the Solutions 208 Part 3: Verify Network Connectivity 208 4.4.9 Lab—Troubleshoot Inter-VLAN Routing (Instructor Version) 209 Topology 209 Addressing Table 209 VLAN Table 209 Objectives 209 Background / Scenario 210

  14. Page 14
    Read page 14 as text

    Router R1 210 Switch S1 210 Switch S2 212 Required Resources 213 Instructions 213 Part 1: Evaluate Network Operation 213 Part 2: Gather information, create an action plan, and implement corrections 214 Router R1 214 Switch S1 214 Switch S2 215 Device Configuration - Final 215 Router R1 215 Switch S1 217 Switch S2 221 4.5.1 Packet Tracer—Inter-VLAN Routing Challenge (Instructor Version) 227 Addressing Table 227 VLAN and Port Assignments Table 227 Scenario 227 Instructions 227 Answer Scripts 228 Switch S1 228 Router R1 229 4.5.2 Lab—Implement Inter-VLAN Routing (Instructor Version) 230 Topology 230 Addressing Table 230 VLAN Table 230 Objectives 230 Background / Scenario 231 Required Resources 231 Instructions 232 Part 1: Build the Network and Configure Basic Device Settings 232 Part 2: Create VLANs and Assign Switch Ports 234 Part 3: Configure an 802.1Q Trunk Between the Switches 236 Part 4: Configure Inter-VLAN Routing on the Router 237 Part 5: Verify Inter-VLAN Routing is Working 238 Router Interface Summary Table 239 Device Configs - Final 239 Switch S1 239 Switch S2 244 Router R1 248 Contents xv

  15. Page 15
    Read page 15 as text

    xvi Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) Chapter 5 STP Concepts 251 Study Guide 252 Purpose of STP 252 Issues with Redundant Switch Links 252 Layer 2 Loops 252 Broadcast Storm 252 The Spanning-Tree Algorithm 252 Check Your Understanding—Purpose of STP 253 STP Operation 253 Steps to a Loop-Free Topology 253 1. Elect the Root Bridge 254 2. Elect the Root Ports 255 3. Elect Designated Ports 255 4. Elect Alternate (Blocked) Ports 256 Elect a Root Port from Multiple Equal-Cost Paths 256 STP Timers and Port States 256 Operational Details of Each Port State 257 Check Your Understanding—STP Operations 258 Evolution of STP 259 Different Versions of STP 259 RSTP Port States and Port Roles 260 PortFast and BPDU Guard 260 Check Your Understanding—Evolution of STP 261 Labs and Activities 262 Command Reference 262 5.1.9 Packet Tracer—Investigate STP Loop Prevention (Instructor Version) 262 Objectives 262 Background / Scenario 262 Instructions 262 Part 1: Observe a Converged Spanning-Tree Instance 262 Part 2: Observe spanning-tree convergence 263 Chapter 6 EtherChannel 265 Study Guide 266 EtherChannel Operation 266 EtherChannel Advantages 266 Implementation Restrictions 266 PAgP and LACP Autonegotiation Protocols 266 Check Your Understanding—EtherChannel Operation 268 Configure EtherChannel 269 Configuration Guidelines 269 EtherChannel Configuration Steps 269

  16. Page 16
    Read page 16 as text

    EtherChannel Configuration Scenarios 270 Verify and Troubleshoot EtherChannel 271 Verify EtherChannel 271 Troubleshoot EtherChannel 273 Labs and Activities 275 Command Reference 275 6.2.4 Packet Tracer—Configure EtherChannel (Instructor Version) 275 Objectives 275 Background 275 Instructions 276 Part 1: Configure Basic Switch Settings 276 Part 2: Configure an EtherChannel with Cisco PAgP 276 Part 3: Configure an 802.3ad LACP EtherChannel 278 Part 4: Configure a Redundant EtherChannel Link 279 EtherChannel Configuration Guidelines and Restrictions 280 Answer Scripts 281 Switch S1 281 Switch S2 282 Switch S3 282 6.3.4 Packet Tracer—Troubleshoot EtherChannel (Instructor Version) 283 Objectives 283 Background 283 Instructions 284 Part 1: Examine the Physical Layer and Correct Switch Port Mode Issues 284 Part 2: Identify and Correct Port Channel Assignment Issues 285 Part 3: Identify and Correct Port Channel Protocol Issues 285 Answer Scripts 286 Switch S1 286 Switch S2 286 Switch S3 287 Switch S4 287 6.4.1 Packet Tracer—Implement EtherChannel (Instructor Version) 288 Objectives 288 Background 288 Instructions 288 Part 1: Build the Network 288 Part 2: Configure EtherChannel 289 Answer Scripts 290 Switch SWA 290 Switch SWB 290 Switch SWC 291 Contents xvii

  17. Page 17
    Read page 17 as text

    xviii Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) 6.4.2 Lab—Implement EtherChannel (Instructor Version) 292 Topology 292 Addressing Table 292 VLAN Table 292 Objectives 292 Background / Scenario 292 Required Resources 293 Instructions 293 Part 1: Build the Network and Configure Basic Device Settings 293 Part 2: Create VLANs and Assign Switch Ports 294 Part 3: Configure 802.1Q trunks between the switches 296 Part 4: Implement and Verify an EtherChannel between the switches 298 Device Configs - Final 300 Switch S1 300 Switch S2 304 Chapter 7 DHCPv4 311 Study Guide 312 DHCPv4 Concepts 312 DHCPv4 Operation 312 Check Your Understanding—DHCPv4 Concepts 313 Configure a Cisco IOS DHCPv4 Server 313 Steps to Configure a Cisco IOS DHCPv4 Server 313 DHCPv4 Relay 316 Other Service Broadcasts Relayed 316 Configure a DHCPv4 Client 316 Labs and Activities 318 Command Reference 318 7.2.10 Packet Tracer—Configure DHCPv4 (Instructor Version) 319 Addressing Table 319 Objectives 319 Scenario 319 Instructions 319 Part 1: Configure a Router as a DHCP Server 319 Part 2: Configure DHCP Relay 320 Part 3: Configure a Router as a DHCP Client 321 Part 4: Verify DHCP and Connectivity 321 Answer Scripts 321 Router R1 321 Router R2 321 Router R3 322

  18. Page 18
    Read page 18 as text

    7.4.1 Packet Tracer—Implement DHCPv4 (Instructor Version) 323 Addressing Table 323 Objectives 323 Scenario 323 Instructions 323 Part 1: Configure a Router as a DHCP Server 323 Part 2: Configure DHCP Relay 324 Part 3: Configure R2 as a DHCP Client 324 Answer Scripts 324 Router R1 324 Router R2 324 Router R3 325 7.4.2 Lab—Implement DHCPv4 (Instructor Version) 326 Topology 326 Addressing Table 326 VLAN Table 326 Objectives 326 Background / Scenario 327 Required Resources 327 Instructions 327 Part 1: Build the Network and Configure Basic Device Settings 327 Part 2: Configure and verify two DHCPv4 Servers on R1 333 Part 3: Configure and verify a DHCP Relay on R2 334 Device Configs - Final 334 Switch S1 334 Switch S2 339 Router R1 342 Router R2 345 Chapter 8 SLAAC and DHCPv6 349 Study Guide 350 IPv6 GUA Assignment 350 IPv6 Host Configuration 350 IPv6 Host Link-Local Address 350 IPv6 GUA Assignment 350 Three RA Message Flags 351 Check Your Understanding—IPv6 GUA Assignment 351 SLAAC 351 Enabling SLAAC 351 SLAAC-Only Method 351 Host Process to Generate an Interface ID 352 Duplicate Address Detection 352 Check Your Understanding—SLAAC 352 Contents xix

  19. Page 19
    Read page 19 as text

    xx Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) DHCPv6 353 DHCPv6 Operation Steps 353 Stateless DHCPv6 Operation 354 Stateful DHCPv6 Operation 354 Check Your Understanding—DHCPv6 355 Configure DHCPv6 Server 355 Configure Stateless DHCPv6 356 Configure Stateful DHCPv6 357 Check Your Understanding—Configure DHCPv6 Server 357 Labs and Activities 359 Command Reference 359 8.5.1 Lab—Configure DHCPv6 (Instructor Version) 359 Topology 359 Addressing Table 360 Objectives 360 Background / Scenario 360 Required Resources 361 Instructions 361 Part 1: Build the Network and Configure Basic Device Settings 361 Part 2: Verify SLAAC Address Assignment from R1 364 Part 3: Configure and Verify a DHCPv6 Server on R1 364 Part 4: Configure a Stateful DHCPv6 Server on R1 366 Part 5: Configure and Verify DHCPv6 Relay on R2 367 Device Configs - Final 369 Switch S1 369 Switch S2 371 Router R1 374 Router R2 377 Chapter 9 FHRP Concepts 379 Study Guide 380 First Hop Redundancy Protocols 380 Default Gateway Limitations 380 Router Redundancy 380 FHRP Options 380 Check Your Understanding—First Hop Redundancy Protocols 381 HSRP 382 HSRP Priority and Preemption 382 HSRP States and Timers 383 Check Your Understanding—HSRP 384 Labs and Activities 385 Command Reference 385

  20. Page 20
    Read page 20 as text

    9.3.3 Packet Tracer—HSRP Configuration Guide (Instructor Version) 385 Addressing Table 385 Objectives 386 Background / Scenario 386 Instructions 386 Part 1: Verify Connectivity 386 Part 2: Configure HSRP Active and Standby Routers 387 Part 3: Observe HSRP Operation 390 Answer Scripts 391 Router R1 391 Router R3 391 Switch S1 391 Switch S3 391 PC-A and PC-B 391 Chapter 10 LAN Security Concepts 393 Study Guide 394 Endpoint Security 394 Network Security Devices 394 Check Your Understanding—Endpoint Security 394 Access Control 395 Authentication with a Local Password 395 AAA Components 395 Authentication 396 Authorization 396 Accounting 396 802.1X 396 Check Your Understanding—Access Control 396 Layer 2 Security Threats 397 Switch Attack Categories 397 Switch Attack Mitigation Techniques 398 Check Your Understanding—Layer 2 Security Threats 398 MAC Address Table Attack 399 Check Your Understanding—MAC Address Table Attacks 399 LAN Attacks 400 VLAN Hopping Attacks 400 VLAN Double-Tagging Attack 400 DHCP Attacks 400 ARP Attacks 400 Address Spoofing Attack 400 STP Attack 401 CDP Reconnaissance 401 Contents xxi

  21. Page 21
    Read page 21 as text

    xxii Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) Check Your Understanding—LAN Attacks 401 Labs and Activities 403 Chapter 11 Switch Security Configuration 405 Study Guide 406 Implement Port Security 406 Secure Unused Ports 406 Enable Port Security 406 Ports in error-disabled State 407 Verify Port Security 407 Mitigate VLAN Attacks 409 VLAN Attacks Review 409 Steps to Mitigate VLAN Hopping Attacks 409 Mitigate DHCP Attacks 409 DHCP Attack Review 410 DHCP Snooping 410 Steps to Implement DHCP Snooping 410 Mitigate ARP Attacks 411 Dynamic ARP Inspection 411 Configure DAI 411 Mitigate STP Attacks 411 PortFast and BPDU Guard 412 Configure PortFast and BPDU Guard 412 Labs and Activities 413 Command Reference 413 11.1.10 Packet Tracer—Implement Port Security (Instructor Version) 414 Addressing Table 414 Objective 414 Background 414 11.6.1 Packet Tracer—Switch Security Configuration (Instructor Version) 416 VLAN Table 416 Objectives 416 Background 416 Instructions 416 SW1 Configurations 417 SW-2 Configuration 418 11.6.2 Lab—Switch Security Configuration (Instructor Version) 419 Topology 419 Addressing Table 419 Objectives 419 Background / Scenario 420

  22. Page 22
    Read page 22 as text

    Required Resources 420 Instructions 420 Part 1: Configure the Network Devices 420 Part 2: Configure VLANs on Switches 422 Part 3: Configure Switch Security 423 Reflection Questions 429 Device Configurations - Final 429 Switch S1 429 Switch S2 433 Chapter 12 WLAN Concepts 439 Study Guide 440 Introduction to Wireless 440 Wireless Terminology 440 Check Your Understanding—Introduction to Wireless 441 WLAN Components 441 WLAN Component Terminology 442 Check Your Understanding—WLAN Components 442 WLAN Operation 443 WLAN Operation Terminology 443 Check Your Understanding—WLAN Operation 444 CAPWAP Operation 445 CAPWAP Review 445 Split MAC Architecture 445 Check Your Understanding—CAPWAP Operation 446 Channel Management 447 Frequency Channel Saturation 447 Channel Selection 448 Check Your Understanding—Channel Management 448 WLAN Threats 449 DoS Attacks 449 Rogue Access Points 449 Man-in-the-Middle Attack 449 Check Your Understanding—WLAN Threats 450 Secure WLANs 450 SSID Cloaking and MAC Address Filtering 450 Open and Shared Key Authentication Methods 450 Authentication in the Enterprise 451 WPA3 451 Check Your Understanding—Secure WLANs 452 Labs and Activities 453 Contents xxiii

  23. Page 23
    Read page 23 as text

    xxiv Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) Chapter 13 WLAN Configuration 455 Study Guide 456 Remote Site WLAN Configuration 456 Video—Configure a Wireless Network 456 The Wireless Router 456 Basic Network Setup 456 Basic Wireless Setup 457 Other Services Provided by a Wireless Router 458 Configure a Basic WLAN on the WLC 458 Video—Configure a Basic WLAN on the WLC 458 Overview of the Cisco 3504 Wireless Controller 459 Basic WLAN Configuration Steps on the WLC 460 Configure a WPA2 Enterprise WLAN on the WLC 463 Video—Define an SNMP and RADIUS Server on the WLC 463 Configure SNMP and RADIUS Servers 463 Video—Configure a VLAN for a New WLAN 465 Configure a New Interface 465 Video—Configure a DHCP Scope 467 Configure a DHCP Scope 467 Video—Configure a WPA2 Enterprise WLAN 469 Configure a WPA2-Enterprise WLAN 469 Troubleshoot WLAN Issues 471 Troubleshooting Approaches 471 Wireless Client Not Connecting 472 Troubleshooting When the Network Is Slow 473 Labs and Activities 474 13.1.10 Packet Tracer—Configure a Wireless Network (Instructor Version) 474 Objectives 474 Introduction 474 Instructions 474 Part 1: Connect to a Wireless Router 474 Part 2: Configure the Wireless Settings 476 Part 3: Connect Wireless Clients to an Access Point 477 Part 4: Other Administrative Tasks 477 13.1.11 Lab—Configure a Wireless Network (Instructor Version) 479 Introduction 479 Recommended Equipment 479 Instructions 479 Part 1: Log into the Wireless Router 479 Part 2: Configure Basic Wireless Settings 481 Part 3: Connect a Wireless Client 482

  24. Page 24
    Read page 24 as text

    Part 4: Connect an Access Point (Optional) 482 Part 5: Reset to the original configuration 484 13.2.7 Packet Tracer—Configure a Basic WLAN on the WLC (Instructor Version) 485 Addressing Table 485 Objectives 485 Background / Scenario 485 Instructions 486 Part 1: Monitor the WLC 486 Part 2: Create a Wireless LAN 486 Part 3: Connect a Host to the WLAN 488 13.3.12 Packet Tracer—Configure a WPA2 Enterprise WLAN on the WLC (Instructor Version) 489 Addressing Table 489 Objectives 489 Background / Scenario 489 Instructions 490 Part 1: Create a new WLAN 490 Part 2: Configure a DHCP Scope and SNMP 492 Part 3: Connect Hosts to the Network 494 Reflection Questions 495 13.4.5 Packet Tracer—Troubleshoot WLAN Issues (Instructor Version) 496 Addressing Table 496 WLAN Information 496 Objectives 496 Background / Scenario 497 Instructions 497 Part 1: Troubleshoot the Network 497 Part 2: Fix Issues 498 13.5.1 Packet Tracer—WLAN Configuration (Instructor Version) 499 Addressing Table 499 WLAN Information 499 Objectives 499 Background / Scenario 500 Instructions 500 Part 1: Configure a Home Wireless Router 500 Part 2: Configure a WLC Controller Network 501 Chapter 14 Routing Concepts 503 Study Guide 504 Path Determination 504 Two Functions of a Router 504 Best Path Equals Longest Match 504 Contents xxv

  25. Page 25
    Read page 25 as text

    xxvi Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) Build the Routing Table 505 Check Your Understanding—Path Determination 505 Packet Forwarding 506 Packet Forwarding Decision Process 506 End-to-End Packet Forwarding 506 Packet Forwarding Mechanisms 508 Check Your Understanding—Packet Forwarding 511 Basic Router Configuration Review 512 Configure and Verify Dual Stack IPv4 and IPv6 Addressing 512 Packet Tracer Exercise 14-1: Dual Stack Addressing 513 Verify Connectivity of Directly Connected Networks 514 Filter Command Output 516 IP Routing Table 517 Routing Table Principles 517 Routing Table Entries 517 Administrative Distance Exercise 518 Check Your Understanding—IP Routing Table 519 Static and Dynamic Routing 520 Static or Dynamic? 520 Dynamic Routing Protocol Concepts 521 Check Your Understanding—Dynamic and Static Routing 521 Labs and Activities 523 Command Reference 523 14.3.5 Packet Tracer—Basic Router Configuration Review (Instructor Version) 524 Addressing Table 524 Objectives 524 Background / Scenario 525 Instructions 525 Part 1: Configure Devices and Verify Connectivity 525 Part 2: Display Router Information 528 Answer Scripts 533 Router R2 533 Chapter 15 IP Static Routing 535 Study Guide 536 Static Routes 536 Types of Static Routes 536 IPv4 Static Route Command 536 IPv6 Static Route Command 537 Check Your Understanding—Static Routes 537 Configure IP Static Route Types 538

  26. Page 26
    Read page 26 as text

    Configure Static and Default Routes 538 Configure Floating Static Routes 540 Configure Static Host Routes 540 Packet Tracer Exercise 15-1: Configure Static and Default Routes 542 Labs and Activities 543 Command Reference 543 15.6.1 Packet Tracer—Configure IPv4 and IPv6 Static and Default Routes (Instructor Version) 544 Addressing Table 544 Objectives 544 Background / Scenario 545 Instructions 545 Part 1: Configure IPv4 Static and Floating Static Default Routes 545 Part 2: Configure IPv6 Static and Floating Static Default Routes 545 Part 3: Configure IPv4 Static and Floating Static Routes to the Internal LANs 545 Part 4: Configure IPv6 Static and Floating Static Routes to the Internal LANs 546 Part 5: Configure Host Routes 546 Answer Scripts 547 Router Edge_Router 547 Router ISP1 547 15.6.2 Lab—Configure IPv4 and IPv6 Static and Default Routes (Instructor Version) 548 Topology 548 Addressing Table 548 Objectives 549 Background / Scenario 549 Required Resources 549 Instructions 550 Part 1: Build the Network and Configure Basic Device Settings 550 Part 2: Configure and verify IPv4 and IPv6 addressing on R1 and R2 552 Part 3: Configure and verify static and default routing for IPv4 on R1 and R2 554 Part 4: Configure and verify static and default routing for IPv6 on R1 and R2 557 Router Interface Summary Table 559 Device Configs - Final 559 Router R1 559 Router R2 561 Switch S1 563 Switch S2 566 Contents xxvii

  27. Page 27
    Read page 27 as text

    xxviii Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) Chapter 16 Troubleshoot Static and Default Routes 571 Study Guide 572 Packet Processing with Static Routes 572 Check Your Understanding—Packet Processing with Static Routes 573 Troubleshoot IPv4 Static and Default Route Configuration 573 Packet Tracer Exercise 16-1: Troubleshoot IPv4 Static and Default Routes 574 Labs and Activities 575 16.3.1 Packet Tracer—Troubleshoot Static and Default Routes (Instructor Version) 575 Addressing Table 575 Objectives 575 Background / Scenario 576 Instructions 576 Answer Configurations 576 Router R1 576 Router R2 577 Router R3 577 16.3.2 Lab—Troubleshoot IPv4 and IPv6 Static and Default Routers (Instructor Version) 578 Topology 578 Addressing Table 578 Objectives 578 Background / Scenario 579 Router R1 579 Router R2 579 Switch S1 580 Switch S2 580 Required Resources 581 Instructions 581 Part 1: Evaluate Network Operation 581 Part 2: Gather information, create an action plan, and implement corrections 581 Router R1 582 Router R2 582 Router Interface Summary Table 582 Final Configuration 583 Router R1 583 Router R2 583 Switch S1 584 Switch S2 584

  28. Page 28
    Read page 28 as text

    xxix Command Syntax Conventions The conventions used to present command syntax in this book are the same conventions used in the IOS Command Reference. The Command Reference describes these conventions as follows: ■ ■ Boldface indicates commands and keywords that are entered literally as shown. In actual configuration examples and output (not general command syntax), boldface indicates commands that are manually input by the user (such as a show command). ■ ■ Italic indicates arguments for which you supply actual values. ■ ■ Vertical bars (|) separate alternative, mutually exclusive elements. ■ ■ Square brackets ([ ]) indicate an optional element. ■ ■ Braces ({ }) indicate a required choice. ■ ■ Braces within brackets ([{ }]) indicate a required choice within an optional element.

  29. Page 29
    Read page 29 as text

    xxx Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) Introduction This book supports instructors and students in Cisco Networking Academy, an IT skills and career building program for learning institutions and individuals worldwide. Cisco Networking Academy provides a variety of curricula choices, including the very popular Cisco Certified Network Associate (CCNA) curriculum. It includes three courses oriented around the topics of CCNA certifications. Switching, Routing, and Wireless Essentials Labs and Study Guide is a supplement to your classroom and laboratory experience with the Cisco Networking Academy. To be successful on the exam and achieve your CCNA certification, you should do everything in your power to arm yourself with a variety of tools and training materials to support your learning efforts. This book provides just such a collection of tools. Used to its fullest extent, it will help you gain the knowledge as well as practice the skills associated with the content area of the Switching, Routing, and Wireless Essentials v7 course. Specifically, this book will help you work on these main areas: ■ ■ Configure devices using security best practices. ■ ■ Explain how Layer 2 switches forward data. ■ ■ Implement VLANs and trunking in a switched network. ■ ■ Troubleshoot inter-VLAN routing on Layer 3 devices. ■ ■ Explain how STP enables redundancy in a Layer 2 network. ■ ■ Troubleshoot EtherChannel on switched links. ■ ■ Implement DHCPv4 to operate across multiple LANs. ■ ■ Configure dynamic address allocation in IPv6 networks. ■ ■ Explain how FHRPs provide default gateway services in a redundant network. ■ ■ Explain how vulnerabilities compromise LAN security. ■ ■ Implement switch security to mitigate LAN attacks. ■ ■ Explain how WLANs enable network connectivity. ■ ■ Implement a WLAN using a wireless router and WLC. ■ ■ Explain how routers use information in packets to make forwarding decisions. ■ ■ Configure IPv4 and IPv6 static routes. ■ ■ Troubleshoot static and default route configurations. Labs and Study Guides similar to this one are also available for the other two courses: Introduction to Networks Labs and Study Guide and Enterprise Networking, Security, and Automation Labs and Study Guide. Who Should Read This Book This book’s main audience is anyone taking the Switching, Routing, and Wireless Essentials course of the Cisco Networking Academy curriculum. Many Academies use this Labs and Study Guide as a required tool in the course, whereas other Academies recommend the Labs and Study Guide as an additional resource to prepare for class exams and the CCNA certi- fication. The secondary audience for this book is people taking CCNA-related classes from

  30. Page 30
    Read page 30 as text

    professional training organizations. This book can also be used for college- and university-level networking courses, as well as anyone wanting to gain a detailed understanding of routing. However, the reader should know that the content of this book tightly aligns with the Cisco Networking Academy course. It may not be possible to complete some of the Study Guide sections and Labs without access to the online course. Fortunately, you can purchase the Switching, Routing, and Wireless Essentials v7.0 Companion Guide (ISBN: 9780136729358). Goals and Methods The most important goal of this book is to help you pass the 200-301 Cisco Certified Network Associate exam, which is associated with the Cisco Certified Network Associate (CCNA) certification. Passing the CCNA exam shows that you have the knowledge and skills required to manage a small enterprise network. You can view the detailed exam topics online, at http:// learningnetwork.cisco.com. They are divided into six broad categories: ■ ■ Network Fundamentals ■ ■ Network Access ■ ■ IP Connectivity ■ ■ IP Services ■ ■ Security Fundamentals ■ ■ Automation and Programmability The Introduction to Networks v7 course covers introductory material in the first five bullets. The next two courses, Switching, Routing, and Wireless Essentials v7 and Enterprise Networking, Security, and Automation v7, cover the material in more detail. Each chapter of this book is divided into a “Study Guide” section followed by a “Labs and Activities” section. The “Study Guide” section offers exercises that help you learn the concepts, configurations, and troubleshooting skills crucial to your success as a CCNA exam candidate. Each chapter is slightly different and includes some or all of the following types of exercises: ■ ■ Concept question exercises ■ ■ Skill-building activities and scenarios ■ ■ Configuration scenarios ■ ■ Packet Tracer exercises ■ ■ Troubleshooting scenarios The “Labs and Activities” sections include all the online course labs and Packet Tracer activity instructions. In some chapters, this section begins with a Command Reference that you will complete to show that you understand all the commands introduced in the chapter. Packet Tracer and Companion Website This book includes the instructions for all the Packet Tracer activities in the online course. You need to be enrolled in the Introduction to Networks v7 course to access these Packet Tracer files. Nine Packet Tracer activities have been created exclusively for this book. You can access these unique Packet Tracer files at this book’s companion website. Introduction xxxi

  31. Page 31
    Read page 31 as text

    xxxii Switching, Routing, and Wireless Essentials Labs and Study Guide (CCNAv7) To get your copy of Packet Tracer software and the nine unique files for this book, please go to the companion website for instructions. To access this companion website, follow these steps: Step 1. Go to www.ciscopress.com/register and log in or create a new account. Step 2. Enter the ISBN: 9780136634386. Step 3. Answer the challenge question as proof of purchase. Step 4. Click on the Access Bonus Content link in the Registered Products section of your account page to be taken to the page where your downloadable content is available. How This Book Is Organized This book corresponds closely to the Cisco Networking Academy Switching, Routing, and Wireless Essentials v7 course and is divided into 16 chapters: ■ ■ Chapter 1, “Basic Device Configuration”: This chapter explains how to configure devices using security best practices. It includes initial switch and router configuration, switch port configuration, remote access configuration, and verification of connectivity between two networks. ■ ■ Chapter 2, “Switching Concepts”: This chapter explains how switches forward data. It includes frame forwarding methods and collision and broadcast domain comparison. ■ ■ Chapter 3, “VLANs”: This chapter explains how to implement VLANs and trunk- ing in a switched network. It includes an explanation of the purpose of VLANs, how VLANs forward frames in a multi-switched environment, VLAN port assignments, trunk configuration, and DTP configuration. ■ ■ Chapter 4, “Inter-VLAN Routing”: This chapter explains how to implement inter-VLAN routing. It includes a description of inter-VLAN routing options, router-on-a-stick configuration, Layer 3 switch inter-VLAN routing, and troubleshooting of common inter-VLAN routing configuration issues. ■ ■ Chapter 5, “STP Concepts”: This chapter explains how STP enables redundancy in a Layer 3 network. It includes an explanation of common problems in redundant Layer 2 networks, STP operation, and Rapid PVST+ operation. ■ ■ Chapter 6, “EtherChannel”: This chapter explains how to implement EtherChannel on switched links. It includes a description of EtherChannel technology, EtherChannel configuration, and EtherChannel troubleshooting. ■ ■ Chapter 7, “DHCPv4”: This chapter explains how to implement DHCPv4 for multiple LANs. It includes an explanation of DHCPv4 operation and how to configure a router as a DHCPv4 server or DHCPv4 client. ■ ■ Chapter 8, “SLAAC and DHCPv6”: This chapter explains how to implement dynamic address allocation in an IPv6 network. It includes an explanation of how an IPv6 host acquires its addressing, SLAAC operation, DHCPv6 operation, and how to configure a router as a stateful or stateless DHCPv6 server. ■ ■ Chapter 9, “FHRP Concepts”: This chapter explains how FHRPs provide default gateway services in a redundant network. It includes an explanation of the purpose of FHRPs and HSRP operation. ■ ■ Chapter 10, “LAN Security Concepts” : This chapter explains how vulnerabilities compromise LAN security. It includes an explanation of how to use endpoint security,

585 more pages in the full document

Unlock it once and it stays in your library, ready to chat with or turn into flashcards.

Unlock the full document

More Information Technology study materials

See all

Study this document with CramX

Once it is in your library, every tool can work from it.