Download PNETLab Platform
PNETLAB Store
PNETLab.com
LAB – Configuration Static Router with AD
* Topology:
Objectives
- Build the network and configuration basic Cisco Router
- Configuration Gateway for all vlan at Router
- Configuration Trunking / Access at Switch Layer02
- Configuration allow all traffic access internet of all VLAN.
Download PNETLab Platform
PNETLAB Store
PNETLab.com
Table information detail
Lab hand-on Step-by-step:
Step 1: Start all Device
Menu > Setup Nodes > Start all nodes
1|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com
Step 2: Verify status of devices, Device need have “Blue” color as picture
2|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com
>>>>> Configuration Router <<<<<
Step 3: because first setup, so Router Cisco question to you about initial configuration dialog. You should
be type “no” bypass this step.
Step 4: You must be basic configuration for Router as following:
Command Detail
Router> // User mode
Router> enable // moving to Privilege mode
Router# configuration terminal // moving to global config
Router(config)# hostname RX // config hostname from Router to RX
RX (config)# banner motd # // config banner message of the day is “This is
This is Router # Router 1
RX (config)# enable password cisco123enable // set password login from user mode to Privilege
mode
RX (config)# service password-encryption // request Router use service password encryption
RX (config)# line con 0 // configuration line console
RX (config-line)# password cisco // set password login from console
RX (config-line)# login // apply password into line console
RX (config-line)# exit // exit configuration line console
RX (config)# line vty 0 4 // configuration line vty
RX (config-line)# transport in all // set method access into router via line vty
RX (config-line)# password cisco123telnet // set password login from live vty
RX (config-line)# login // apply password on line vty
RX (config-line)# exit // exit configuration line vty
Step 5: IP configuration for Router
RX (config)# // Privilege mode
RX (config)# interface eth0/0 // configuration interface ethernet
RX (config-if)# description #Connection to ISP# // Add a description on interface
RX (config-if)# ip address 172.16.1.2 // Set ip address for interface
255.255.255.252
RX (config-if)# no shutdown // active interface
RX (config-if)# ip nat outside // Set interface as Outside Zone
3|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com
RX (config-if)# exit // exit configuration
RX (config)#
RX (config)# interface eth0/1.10 // configuration sub interface
RX (config-if)# description #Connection to // Add a description on interface
VLAN 10#
RX (config-if)# encapsulation dot1Q 10 // Set Sub-interface working with VLAN10
RX (config-if)# ip address 10.0.10.1 // set ip address for interface
255.255.255.0
RX (config-if)# ip nat inside // set interface as Inside Zone
RX (config-if)# no shutdown // active interface
RX (config-if)# exit // exit configuration
RX (config)# interface eth0/0.20 // configuration sub interface
RX (config-if)# description #Connection to // Add a description on interface
VLAN 20#
RX (config-if)# encapsulation dot1Q 20 // Set Sub-interface working with VLAN30
RX (config-if)# ip address 10.0.20.1 // set ip address for interface
255.255.255.0
RX (config-if)# ip nat inside // set interface as Inside Zone
RX (config-if)# no shutdown // active interface
RX (config-if)# exit // exit configuration
RX (config)# write // Save running-config to startup-config
*** Configuration Access Control List for access internet ***
RX (config)# access-list 1 permit any // Configuration access list permit all vlan
*** Configuration NAT policy allow ipv4 private connect internet via ip connected with ISP ***
RX (config)# ip nat inside source list 1 interface // Configuration NAT
ethernet 0/0 overload
RX (config)# write // Save running-config to startup-config
4|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com
Step 6: Verify configuration of Interface
- type command “show ip int brief” and [Enter]
Step 7: Configuration for Switch:
Switch> enable // moving to Privilege mode
Switch# // Privilege mode
Switch# configuration terminal // moving to global config
Switch# vlan database // moving to vlan database of switch
Switch (vlan)# vlan 10 name IT // add vlan 10 into vlan database
Switch (vlan)# vlan 20 name HR // add vlan 20 into vlan database
Switch (vlan)# exit // exit vlan mode
Verify VLAN
- type command “show vlan”
Switch# // Privilege mode
Switch# configuration terminal // moving to global config
Switch (config)# interface ethernet 0/0 // configuration interface ethernet
Switch (config)# description #Connection to // Add a description on interface
Router#
Switch (config)# switchport trunk // Set interface working with trunk Dot1Q
encapsulation dot1q
Switch (config)# switchport mode trunk // Set interface working with trunk mode
5|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com
Verify configuration of Interface Trunk
- type command “show interface trunk”
Switch (config)# interface ethernet 0/1 // configuration interface ethernet
Switch (config-if)# description #Connection to // Add a description on interface
VLAN10#
Switch (config-if)# switchport mode access // Set interface working with access mode
Switch (config-if)# switchport access vlan 10 // Set Vlan 10 into interface
Switch (config-if)# exit // exit config interface mode
Switch (config)#
Switch (config)# interface ethernet 0/2 // configuration interface ethernet
Switch (config-if)# description #Connection to // Add a description on interface
VLAN20#
Switch (config-if)# switchport mode access // Set interface working with access mode
Switch (config-if)# switchport access vlan 20 // Set Vlan 20 into interface
Switch (config-if)# exit // exit config interface mode
Switch (config)#
Verify VLAN port access
- type command “show vlan”
6|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com
>>>>> TestCase<<<<<
Result:
- Desktop-IT can ping success to Gateway
- Desktop-HR can ping success to Gateway
- Desktop-IT and Desktop-HR can ping success between.
7|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com
- Desktop-IT and Desktop-HR can ping to Internet with any ip public
- Desktop-IT and Desktop-HR can access interface via web brower
8|Page
Download PNETLab Platform
PNETLAB Store
PNETLab.com
- Review connect on Router with “show ip nat translations” command
DONE
**** Goodluck ****
9|Page
