Swinburne University of Technology TNE10006/TNE60006

SoSCET Group Lab Activity 2

Group Assignment 2 - Group Lab Activity 2

TNE10006/TNE60006 S2 2023

Assignment Weight:
7.5%
Assignment Points:
75
Submission Due Date:
By the start of Week 12 Lab session.

Reference Material:

 Sample Final Practical Assessment (available in Canvas Lab Sessions page, Week 6a tab)

Instructions:
1. Form a group of 3-4 people amongst the students present in the lab session.
2. Your group discussion time will be in the last 60 minutes of the lab session in Collaborate
Ultra, Breakout groups.
3. Discuss and answer the questions in Group Assignment 2 in your breakout group.
4. Organise for your group to meet again to complete all the questions.
5. Each group will submit one completed Group Assignment 2
6. Submit Group Assignment 2, in the Canvas shell, under the Group Lab Activity 2
7. Late penalties will apply for submission after the due date.

Group Assignment 2 Sections:

 Section 1: Sample Final Practical Assessment – Topology and Specs Analysis (15 marks)
 Section 2: Sample Final Practical Assessment – Configuration (35 marks)
 Section 3: Sample Final Practical Assessment – Validation and Troubleshooting (25 marks)

Group Lab Activity 2 – S2 2023 update pg.1

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

Group Assignment 2 Members Information:

Name Student Id:

Saurav Bhila 104657332
Nirachorn 104349778
Sumaiya 104693051
Kartavya 104223283

Group Lab Activity 2 – S2 2023 update pg.2

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

Section 1: Sample Final Practical Assessment – Topology and Specs

Analysis
(15 marks)
When tasked to build a network end to end, you should first take some time to analyse the
topology diagram, addressing tables and other specifications to understand the basic network
requirements.

Refer to the Sample Final Practical Assessment.

Q1. How many VLANs MUST be configured on the switches? (3 marks)

a) On Lisbon? Please specify VLAN(s) ID

3 VLANs
- Centralbank: VLAN 15
- Royalmint: VLAN 50
- Management: VLAN 150

b) On Tokyo? Please specify VLAN(s) ID

3 VLANs
- Centralbank: VLAN 15
- Royalmint: VLAN 50
- Management: VLAN 150

Q2. How many access ports MUST be configured on the switches? (3 marks)

a) On Lisbon? Please specify switchport to VLAN ID allocation.

- Gi1/0/1-3 are allocated as access ports for VLAN 15 Centralbank

- Gi1/0/11-13 are allocated as access ports for VLAN 50 Royalmint

b) On Tokyo? Please specify switchport to VLAN ID allocation.

- none

Q3. How many 802.1q trunks MUST be configured on the switches? (3 marks)

a) On Lisbon? Please specify interface(s) ID.

- Two
- Gi1/0/5 and Gi1/0/6

Group Lab Activity 2 – S2 2023 update pg.3

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

b) On Tokyo? Please specify interface(s) ID.

- Three
- Gi1/0/5, Gi1/0/6 and Gi1/0/11.

Q4. How many sub-interfaces MUST be configured on Nairobi? Please specify sub-interface(s) ID.
(3 marks)

3 sub-interfaces

- Gi0/0/1.15
- Gi0/0/1.50
- Gi0/0/1.150

Q5. How many interfaces VLAN MUST be configured on the switches? (2 marks)

a) On Lisbon? Please specify interface(s) ID.

- One
- VLAN 150: Management

b) On Tokyo? Please specify interface(s) ID.

- One
- VLAN 150: Management

Q6. Do we need to set a default-gateway on the switches? If YES, specify the default-gateway IP to
be configured. (1 mark)

- Yes
- IP: 55.252.16.254/28.

Group Lab Activity 2 – S2 2023 update pg.4

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

Section 2: Sample Final Practical Assessment - Configuration

(35 marks)

After you have a good understanding of the network topology and basic network requirements, you
can move on to configuring the devices following a systemic procedure.

Refer to the Sample Final Practical Assessment.

Q1. List the configuration commands required to complete Task 1: Configure Device Names and
MOTD. For each command, specify the device(s) and operation mode. (2 marks)

First, we transition from User mode to Administration mode by using “ena” command and then to
configuration mode by using “conf t” command

- Switch3> en
- Switch3# conf t
- Switch3(config)# hostname Tokyo
- Tokyo(config)# banner motd + Unauthorized Access is not allowed +

- Switch4> en
- Switch4# conf t
- Switch4(config)# hostname Lisbon
- Lisbon(config)# banner motd + Unauthorized Access is not allowed +

- Router1> en
- Router1# conf t
- Router1(config)# hostname Nairobi
- Nairobi(config)# banner motd + Unauthorized Access is not allowed +

Group Lab Activity 2 – S2 2023 update pg.5

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

Q2. List the configuration commands required to complete Task 2: Configure VLANs and VLAN
membership. For each command, specify the device(s) and operation mode. (6 marks)

First, we transition from User mode to Administration mode by using “ena” command and then to
configuration mode by using “conf t” command.

On Tokyo switch:
- Tokyo(config)# vlan 15
- Tokyo(config-vlan)# name Centralbank
- Tokyo(config-vlan)# end
- Tokyo(config)# vlan 50
- Tokyo(config-vlan)# name Royalmint
- Tokyo(config-vlan)# end
- Tokyo(config)# vlan 150
- Tokyo(config-vlan)# name Management
- Tokyo(config-vlan)# end

On Lisbon switch:
- Lisbon(config)# vlan 15
- Lisbon (config-vlan)# name Centralbank
- Lisbon (config-vlan)# end
- Lisbon (config)# vlan 50
- Lisbon (config-vlan)# name Royalmint
- Lisbon (config-vlan)# end
- Lisbon (config)# vlan 150
- Lisbon (config-vlan)# name Management
- Lisbon (config-vlan)# end

Group Lab Activity 2 – S2 2023 update pg.6

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

On Lisbon switch:
- Lisbon(config)# int range gi1/0/1-3
- Lisbon(config-if-range)# description Centralbank VLAN
- Lisbon(config-if-range)# switchport mode access
- Lisbon(config-if-range)# switchport access vlan 15
- Lisbon(config-if-range)# no shutdown
- Lisbon(config-if-range)# end
- Lisbon(config)# int range gi1/0/11-13
- Lisbon(config-if-range)# description Royalmint VLAN
- Lisbon(config-if-range)# switchport mode access
- Lisbon(config-if-range)# switchport access vlan 50
- Lisbon(config-if-range)# end

- Lisbon(config)# interface gi1/0/4

- Lisbon(config-if-range)# shutdown
- Lisbon(config-if-range)# exit

- Lisbon(config)# interface range gi1/0/1 - 2, 7 - 23

- Lisbon(config-if-range)# shutdown
- Lisbon(config-if-range)# exit

Q3. List the configuration commands required to complete Task 3: Configure Router-on-a-Stick. For
each command, specify the device(s) and operation mode. (8 marks)

First we transition from User mode to Administration mode by using “ena” command and then to
configuration mode by using “conf t” command
On Nairobi
- Nairobi(config)# int g0/0/1
- Nairobi(config-if)# no shutdown
- Nairobi(config-if)# end

Group Lab Activity 2 – S2 2023 update pg.7

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

- Nairobi(config)# int g0/0/1.15

- Nairobi(config-subif)# description Connection to VLAN 15 Centralbank
- Nairobi(config-subif)# encapsulation dot1Q 15
- Nairobi(config-subif)# ip address 213.17.144.254 255.255.255.128
- Nairobi(config-subif)# end

- Nairobi(config)# int g0/0/1.50

- Nairobi(config-subif)# description Connection to VLAN 50 Royalmint
- Nairobi(config-subif)# encapsulation dot1Q 50
- Nairobi(config-subif)# ip address 165.45.191.254 255.255.224.0
- Nairobi(config-subif)# end

- Nairobi(config)# int g0/0/1.150

- Nairobi(config-subif)# description Connection to VLAN 150 Management
- Nairobi(config-subif)# encapsulation dot1Q 150
- Nairobi(config-subif)# ip address 55.252.16.254 255.255.255.240
- Nairobi(config-subif)# end

- Nairobi(config)# interface lo0

- Nairobi(config-if)# ip address 53.15.30.33 255.255.255.248
- Nairobi(config-if)# description Loopback test interface
- Nairobi(config-if)# no shutdown
- Nairobi(config-if)# end

On Tokyo and Lisbon

- Lisbon(config)# #ip default-gateway 53.252.16.254
- Lisbon(config)# #int range gi1/0/5 – 6
- Lisbon(config)# switchport mode trunk

Group Lab Activity 2 – S2 2023 update pg.8

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

- Tokyo(config)# #ip default-gateway 53.252.16.254

- Tokyo (config)# #int range gi1/0/5 – 6
- Tokyo (config)# switchport mode trunk

On Tokyo
- Tokyo (config)# int gi1/0/11
- Tokyo (config)# switchport mode trunk

Q4. List the configuration commands required to complete Task 4: Configure Switch Management.
For each command, specify the device(s) and operation mode. (6 marks)

First, we transition from User mode to Administration mode by using “ena” command and then to
configuration mode by using “conf t” command.
- On Tokyo
- Tokyo(config)# int vlan 150
- Tokyo(config-if)# ip address 55.252.16.253 255.255.255.240
- Tokyo(config-if)# description Management
- Tokyo(config-if)# exit

- On Lisbon
- Tokyo(config)# int vlan 150
- Tokyo(config-if)# ip address 55.252.16.252 255.255.255.240
- Tokyo(config-if)# description Management
- Tokyo(config-if)# exit

Group Lab Activity 2 – S2 2023 update pg.9

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

On Lisbon
- Lisbon(config)# ip domain-name ccna.lab
- Lisbon(config)# crypto key generate rsa general-keys modulus 1024
- Lisbon(config)# username cisco privilege 15 secret cisco
- Lisbon(config)# line vty 0 15
- Lisbon(config)# transport input ssh
- Lisbon(config)# login local
- Lisbon(config)# end

Q5. List the configuration commands required to complete Task 5: Fine-tune STP. For each
command, specify the device(s) and operation mode. (4 marks)

First, we transition from User mode to Administration mode by using “ena” command and
then to configuration mode by using “conf t” command.

- On Tokyo
- Tokyo(config)# spanning-tree vlan 50 root primary

- On Lisbon
- Lisbon(config)# spanning-tree vlan 15 root primary

- Lisbon(config)# interface range g1/0/1 - 3

- Lisbon(config-if-range)# spanning-tree portfast
- Lisbon(config-if-range)# end
- Lisbon(config)# interface range g1/0/11 - 13
- Lisbon(config-if-range)# spanning-tree portfast
- Lisbon(config-if-range)# end

Group Lab Activity 2 – S2 2023 update pg.10

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

Q6. List the configuration commands required to complete Task 6: Configure Port-Security. For
each command, specify the device(s) and operation mode. (4 marks)

First, we transition from User mode to Administration mode by using “ena” command and
then to configuration mode by using “conf t” command.
- Lisbon(config)# interface g1/0/3
- Lisbon(config-if)# switchport port-security
- Lisbon(config-if)# switchport port-security violation protect
- Lisbon(config-if)# switchport port-security mac-address sticky
- Lisbon(config-if)# Switchport port-security maximum 2

Q7. List the configuration commands required to complete Task 7: Configure EtherChannel. For
each command, specify the device(s) and operation mode. (4 marks)
First, we transition from User mode to Administration mode by using “ena” command and
then to configuration mode by using “conf t” command.

On Tokyo
- Tokyo(config)# int range g1/0/5 - 6
- Tokyo(config-if)# switchport mode trunk
- Tokyo(config-if)# switchport trunk native vlan 150
- Tokyo(config-if)# channel-group 1 mode active
- Tokyo(config-if)# no shutdown

- On Lisbon

- Lisbon(config)# int range g1/0/5 - 6

- Lisbon(config-if)# switchport mode trunk
- Lisbon(config-if)# switchport trunk native vlan 150
- Lisbon(config-if)# channel-group 1 mode passive
- Lisbon(config-if)# no shutdown

Group Lab Activity 2 – S2 2023 update pg.11

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

Q8. List the configuration commands required to complete Task 8: Additional Settings. For each
command, specify the device(s) and operation mode. (1 mark)

- Nairobi(config)#interface g0/0/1.15
- Nairobi(config-subif)# description Connection to VLAN 15 Centralbank

- Nairobi(config)#interface g0/0/1.50
- Nairobi(config-subif)# description Connection to VLAN 50 Royalmint

- Nairobi(config)#interface g0/0/1.150
- Nairobi(config-subif)# description Connection to VLAN 150 Management

On Lisbon
- Lisbon(config)# line console 0
- Lisbon(config-line)# logging sync

On Tokyo
- Tokyo(config)# line console 0
- Tokyo(config-line)# logging sync

Group Lab Activity 2 – S2 2023 update pg.12

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

Section 3: Sample Final Practical Assessment - Validation and

Troubleshooting
(25 marks)
Upon completing your configuration, you should validate all settings using troubleshooting
commands, such as Cisco show commands. You should also run connectivity tests using ICMP tools,
such as ping.

Refer to the Sample Final Practical Assessment.

Q1. Answer the following questions regarding validating and troubleshooting VLANs and VLAN
membership.
a) What command(s) can be used on Tokyo to validate VLANs and VLAN membership
configuration? For each command, describe the expected output. (2 marks)
- #show vlan brief:
- This command provides a summary of VLAN information. It displays a list of VLANs,
their names, status, and the ports associated with each VLAN.
- The output should include VLAN 15, 50, and 150, with their names along with the
default VLANs. Additionally, all ports should be assigned to VLAN1.

b) What command(s) can be use on Lisbon to validate VLANs and VLAN membership
configuration? For each command, describe the expected output. (2 marks)
- #show vlan brief
- The output should include VLAN 15, 50, and 150, with their names along with the
default VLANs.
- Ports Gi1/0/1 - 3 should be assigned to VLAN 15 Centralbank.
- Ports Gi1/0/11 - 13 should be assigned to VLAN 50 Royalmint.

c) What command(s) can be use on Lisbon to validate that all unused ports have been
disabled? For each command, describe the expected output. (2 marks)

- #show ip int brief

- The output should list that all ports are administratively down except for Gi1/0/3,
Gi1/0/5 – 6.

Group Lab Activity 2 – S2 2023 update pg.13

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

- #show interfaces status

- This command will display the status of all interfaces on the device. The output
should list that all ports are ‘down’ in status except for Gi1/0/3, Gi1/0/5 – 6.

Q2. Answer the following question regarding validating and troubleshooting Router-on-a-Stick
a) What command(s) can be used on Nairobi to validate Router-on-a-Stick configuration? List
at least 2. For each command, describe the expected output. (4 marks)

- #show ip route
- The output should display 4 connected networks and 4 local networks for 3 sub-
interfaces and 1 loopback network.

- #show interface <interface-id>

- This command will display the status and configuration details for the main interface,
including information about any subinterfaces

b) What command(s) can be used on Tokyo to validate Router-on-a-Stick configuration? For

each command, describe the expected output. (2 marks)

- #ping 55.252.16.254
- It should successfully ping the default gateway to ensure that the router is
reachable.

- #show int trunk

- The output should display that Gi 1/0/5-6 (Port Channel 1) and Gi1/0/11 are trunk
ports, allowd VLAN 15,50,150 and the encapsulation as 802.1q.

Group Lab Activity 2 – S2 2023 update pg.14

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

c) Troubleshooting Scenario: The routing table on Nairobi is not displaying all the correct
connected (C) routes and their exit interfaces.
What are the possible configuration issues? List at least 3 possible issues. (3 marks)

- Gi 0/0/1 is disabled.
- Incorrect encapsulation configuration on sub-interfaces.
- Incorrect IP address configuration on sub-interfaces

Q3. Answer the following questions regarding validating and troubleshooting Switch Management
a) What command(s) can be used on Tokyo to validate that the Management IP has been
correctly configured? For each command, describe the expected output. (1 mark)
- #show ip int brief
- The output should list VLAN 150 with an IP address of 55.252.16.254 and a status of
"up", along with the information of all other interfaces.

b) What command(s) can be used on Tokyo to test SSH access to Lisbon? (1 mark)
- #ssh -l cisco 55.252.16.252

c) Troubleshooting Scenario: Tokyo and Lisbon can ping each other. Tokyo can ping all IP
addresses configured on Nairobi. However, Lisbon can only ping the IP address configured
on Nairobi’s Management sub-interface; it cannot ping any other router IP.
What is the most likely configuration issue? (2 marks)
- There might me some misconfigurations related to VLANs on Lisbon that is causing
the issue. The issue can be fixed by verifying the VLANs configuration on Lisbon and
trunk configuration as it should allow VLAN 15, 50, 150.

Group Lab Activity 2 – S2 2023 update pg.15

Swinburne University of Technology TNE10006/TNE60006
SoSCET Group Lab Activity 2

Q4. Answer the following questions regarding validating and troubleshooting STP, Port-Security
and EtherChannel

a) Using the show spanning-tree command, how do we validate that Tokyo has been correctly
configured as the root bridge for the Royalmint VLAN? (2 marks)
- In the information related to VLAN 50 (Royalmint VLAN), it should display ‘This
bridge is the root’ in Root ID section.

b) What command can be used on Lisbon to validate the current Port-Security status of
interface Gi1/0/3? (2 marks)
- Lisbon# show port-security interface gi1/0/3
- Port Security: Enabled
- Port Status: Secure-up
- Violation Mode: Protect
- Maximum MAC Addresses: 2
- Sticky MAC Addresses: 1

c) If the Port-Channel between Tokyo and Lisbon has been correctly configured and is fully
operational; what should be the status flag(s) next to the Port-Channel interface on the
show etherchannel summary output? (1 mark)
“SU” flags should be present.

d) If the Port-Channel between Tokyo and Lisbon has been correctly configured and is fully
operational; what should be the status flag(s) next to the member interfaces on the show
etherchannel summary output? (1 mark)
“P” flag should be present.

Group Lab Activity 2 – S2 2023 update pg.16