Case Study. Routing & Switching. Cisco Networking Academy Routing and Switching: Scaling Network Case Study

Case Study Routing & Switching Cisco Networking Academy Routing and Switching: Scaling Network Case Study Overview and Objectives This case study ...
Author: Aron Ford
11 downloads 0 Views 330KB Size
Case Study

Routing & Switching

Cisco Networking Academy Routing and Switching: Scaling Network Case Study

Overview and Objectives This case study allows students to build and configure a complex network using skills gained throughout the course. This case study is not a trivial task. To complete it as outlined with all required documentation will be a significant accomplishment. The case study scenario describes the project in general terms, and will explain why the network is being built. Following the scenario, the project is broken into a number of phases, each of which has a detailed list of requirements. It is important to read and understand each requirement to make sure that the project is completed accurately.

The following tasks are required to complete this case study:  Set up the physical layout of the network using the diagram and accompanying narrative  Correctly configure multi-area OSPF with MD5 authentication  Correctly configure VLANs and 802.1q trunking  Correctly configure STP  Correctly configure Etherchannel when required  Correctly configure Multi-area OSPF routing  Correctly configure HSRP  Correctly configure DHCP  Correctly configure NAT  Create and apply access control lists (ACL’S) on the appropriate routers and interfaces  Verify/test and document that all devices are operational and functioning according to the scenario guidelines  Provide detailed documentation in a prescribed form as listed in the deliverables sections

Scenario

Galway

ISP Server 209.1.1.2/30 Go/o 209.1.1.1/30

OSPF 10 Area 1

S0/0

ISP 200 200 Hosts Hosts

DCE

G0/0 10.0.0.1/30

S0/0

G0/0 10.0.0.5/30

S0/0

Cork

S0/1 S0/1

G0/0

S0/0

Belfast2

Belfast1

G0/1

HSRP

G0/1

G0/1

100 Hosts

G0/1 Etherchannel

S2

S1

Limerick G0/0

Nat Outside 200.10.10.64/26 Nat Inside 172.16.0.0/20

200 hosts

OSPF 10 area 0

S3 VLA N 2

VLAN 3

VLAN 4

N VLA 99

Belfast VLANs 900 hosts (total)

A company needs a network to be designed and implemented; the company has locations in four cities. All of the locations will be connected using leased-line serial links. The company has previously used RIP version 2; however, all four locations will use OSPF routing process. Also, default static route must be used to access the internet. One location, Belfast, has a large and complex LAN. Due to the size and complexity, the company wants to create VLANs to control broadcasts, enhance security, and logically group users. The company also wants to use private addresses throughout the Autonomous System, DHCP over most of the LAN segments, and NAT implemented for Internet connectivity. The company also wishes to limit Internet access to Web traffic while allowing multiple protocols (not all) within its own WAN. Although private addresses (RFC 1918) will be used, the company appreciates efficiency and address conservation in design. To minimize wasted address space, they have requested VLSM to be used when appropriate.

Phase 1: Addressing the WAN & LAN

Galway

ISP Server 209.1.1.2/30 Go/o 209.1.1.1/30

OSPF 10 Area 1

S0/0

ISP 200 200 Hosts Hosts

DCE

G0/0 10.0.0.1/30

S0/0

G0/0 10.0.0.5/30

S0/0

Cork

S0/1 S0/1

G0/0

S0/0

Belfast2

Belfast1

G0/1

HSRP

G0/1

G0/1

G0/1

100 Hosts

Etherchannel

S2

S1

Limerick G0/0

Nat Outside 200.10.10.64/26 Nat Inside 172.16.0.0/20

OSPF 10 area 0

200 hosts

S3 VLA N 2

VLAN 3

VLAN 4

N VLA 99

Belfast VLANs 900 hosts (total)

Use the following instructions to complete Phase 1:  Use 172.16.0.0/20 for internal addressing with IP subnet zero enabled.  Apply /30 subnets on all serial interfaces, using the last available subnet.  Assign an appropriately sized subnet for the Belfast LAN, which has about 900 devices: - VLAN 99: 40 devices (Management VLAN) -

VLAN 2: 120 hosts

-

VLAN 3: 250 hosts

-

VLAN 4: 500 hosts

 Assign the appropriately sized subnet to the Limerick LAN, which has 200 hosts.  Assign an appropriately sized subnet for the Galway’s 2 LANs, which have 400 devices.  Assign the appropriately sized subnet to the Cork LAN, which has 100 hosts  Document all of the addressing in tables.

DHCP POOL

Configure DHCP services on the Cork router. DHCP should provide services to the following LANs hosts:  Belfast’s VLAN 2, VLAN 3 and VLAN 4 DHCP should pass the following parameters to the hosts:  IP address, Subnet Mask, Default Gateway and DNS (10.0.0.4)

Phase 2: Configuring Default Routes, OSPF Routing and HSRP

OSPF 10 Area 1

S0/0

Galway

ISP Server 209.1.1.2/30 Go/o 209.1.1.1/30

ISP 200 200 Hosts Hosts

DCE

G0/0 10.0.0.1/30

S0/0

G0/0 10.0.0.5/30

S0/0

Cork

S0/1 S0/1

G0/0

S0/0

Belfast2

Belfast1

G0/1

HSRP

G0/1

G0/1

100 Hosts

G0/1 Etherchannel

S2

S1

Limerick G0/0

Nat Outside 200.10.10.64/26 Nat Inside 172.16.0.0/20

200 hosts

OSPF 10 area 0

S3 VLA N 2

VLAN 3

VLAN 4

VLAN 99

Belfast VLANs 900 hosts (total)

Use the following instructions to complete Phase 2:  Configure each router with a hostname and required passwords.  Configure each interface on all routers documented in Phase 1.  Configure Multi-area OSPF on Routers (Galway, Cork, Limerick, and Belfast).   

Configure a summary (type 3) for area 1. Configure a Default on Belfast and redistribute the route into the OSPF process. Configure MD5 authentication between OSPF routers across all WAN links

 Adjust the Hello timer to 40 sec and Dead timers to 160 sec on the link between Cork and Galway  Verify that the Limerick, Belfast, Galway, and Cork routers have connectivity through Layers 1-7. Provide the ability of the network to dynamically recover from the failure of a device acting as a default gateway to ISP. Use first-hop redundancy protocol (HSRP) to provide the mechanism.  Capture and save the four router configuration files. Edit the text files, and include comments at the top of each file documenting the following: – Your name – The date – CCNA4 Case Study – Phase 2 This documentation will serve as the deliverable item for Phase 2.

Phase 3: Configuring VLANs

Galway

ISP Server 209.1.1.2/30 Go/o 209.1.1.1/30

OSPF 10 Area 1

S0/0

ISP 200 200 Hosts Hosts

DCE

G0/0 10.0.0.1/30

S0/0

G0/0 10.0.0.5/30

S0/0

Cork

S0/1 S0/1

G0/0

S0/0

Belfast2

Belfast1

G0/1

HSRP

G0/1

G0/1

100 Hosts

G0/1 Etherchannel

S2

S1

Limerick

OSPF 10 area 0

G0/0

Nat Outside 200.10.10.64/26 Nat Inside 172.16.0.0/20

S3 VLA N 2

200 hosts

VLAN 3

VLAN 4

N VLA 99

Belfast VLANs 900 hosts (total)

Use the following instructions to complete Phase 3: 1. Apply the basic switch configuration -

Hostname and passwords

- STP (PVST +)

- VTP Server (S1)

2. Configure the Belfast’s LAN (2 routers and 3 switches) as follows: 

Create and name three Data VLANs and one Management VLAN -

VLAN VLAN VLAN VLAN

99: Management (Native) 2: HR 3: R&D 4: Production.



Configure G0/1 ports as trunks (802.1Q) on S1 and S2



Configure switches S1, S2 and S3; assign: -

FastEthernet ports 1-4 as trunks (802.1Q)

-

Configure Etherchannel when appropriate.



Configure access layer switch S3; assign: - Port 6 to VLAN 99 - Ports 7-10 to VLAN 2 - Ports 11-14 to VLAN 3 - Ports 14-20 to VLAN 4 - Disable all unused ports



Connect G0/1 of the Belfast’s 2 routers to G0/1 of S1 and S2



Connect one workstation per VLAN.

This documentation will serve as the deliverable item for Phase 3

Phase 4: Configuring ACLs

Galway

ISP Server 209.1.1.2/30 Go/o 209.1.1.1/30

OSPF 10 Area 1

S0/0

ISP 200 200 Hosts Hosts

DCE

G0/0 10.0.0.1/30

S0/0

G0/0 10.0.0.5/30

S0/0

Cork

S0/1 S0/1

G0/0

S0/0

Belfast2

Belfast1

G0/1

HSRP

G0/1

G0/1

G0/1

100 Hosts

Etherchannel

S2

S1

Limerick G0/0

Nat Outside 200.10.10.64/26 Nat Inside 172.16.0.0/20

OSPF 10 area 0

200 hosts

S3 VLA N 2

VLAN 3

VLAN 4

N VLA 99

Belfast VLANs 900 hosts (total)

Use the following instructions to complete Phase 4: 1. Configure a Reflexive ACL On the Belfast Router. The ACL should: 

Allow IP traffic for TCP and ICMP sessions originating from the inside (established sessions) while denying IP traffic for sessions originating outside the network.

2. Use an ACL to control VTY access on the Limerick router only. The ACL should: 

Allow telnet session to the Limerick router from the Management VLAN (VLAN 99) only; telnet from other networks should be denied

Document the ACL configuration a chart. This will serve as the deliverable item for Phase 4.

Phase 5: Configuring DHCP

OSPF 10 Area 1

S0/0

Galway

ISP Server 209.1.1.2/30 Go/o 209.1.1.1/30

ISP 200 200 Hosts Hosts

DCE

G0/0 10.0.0.1/30

S0/0

G0/0 10.0.0.5/30

S0/0

Cork

S0/1 S0/1

G0/0

S0/0

Belfast2

Belfast1

G0/1

HSRP

G0/1

G0/1

100 Hosts

G0/1 Etherchannel

S2

S1

Limerick G0/0

Nat Outside 200.10.10.64/26 Nat Inside 172.16.0.0/20

200 hosts

OSPF 10 area 0

S3 VLA N 2

VLAN 3

VLAN 4

VLAN 99

Belfast VLANs 900 hosts (total)

DHCP Services

DHCP should provide services to the following LANs hosts:  Belfast’s VLAN 2, VLAN 3 and VLAN 4

DHCP should pass the following parameters to the hosts:  IP address and Subnet Mask  Default Gateway  DNS address (10.0.0.4) The Cork router will perform the DHCP services. Configure Cork using the DHCP pools documented in Phase 1. Configure DHCP services on the Cork router as follows:  

G0/1’s sub-interfaces with the first useable address. Exclude the first 10 IP addresses from each pool (to be used for printers and servers)  Configure Workstations to obtain its IP address automatically. Have one host connected to Fa0/0 on Cork and one host per VLAN connected to VLANs 2-4 on the Belfast’s access layer switch.

Recapture and save the Galway router configuration file. Edit the text file, and include comments. This documentation will serve as the deliverable item for Phase 5

F

Phase 6: NAT OSPF 10 Area 1

S0/0

Galway

ISP Server 209.1.1.2/30 G0/0 209.1.1.1/30

ISP 200 200 Hosts Hosts

DCE

G0/0 10.0.0.1/30

S0/0

G0/0 10.0.0.5/30

S0/0

Cork

S0/1 S0/1

G0/0

S0/0

Belfast2

Belfast1

G0/1

HSRP

G0/1

G0/1

G0/1

100 Hosts

Etherchannel

S2

S1

Limerick G0/0

Nat Outside 200.10.10.64/26 Nat Inside 172.16.0.0/20

200 hosts

OSPF 10 area 0

S3 VLA N 2

VLAN 3

VLAN 4

VLAN 99

Belfast VLANs 900 hosts (total)

Use the following instructions to complete Phase 6: 1. The Belfast’s (2) routers will perform NAT. Configure the routers as follows: 

Define the NAT pool. The pool consists of public network address 200.10.10.64/26. Exclude first 10 addresses from this pool (to be use for servers, when required).



Define an access control list, which will translate for all internal (172.16.0.0/20) addresses, and deny all other traffic.



Establish dynamic source translation, specifying the NAT pool and the ACL defined in the previous steps.



Specify the inside and the outside NAT interfaces.



Change the default NAT timeout value to 120 seconds.

Document NAT configuration in a chart; it will serve as the deliverable item for Phase 6. 2. Connect a Server to the ISP’s G0/0 port to simulate an ISP server.  Configure this Server as follows:  Configure the IP address and subnet mask as 209.1.1.2/8.  Configure the default gateway to be 209.1.1.1. 3. Configure the server to act as a web server. enable a simple web page that will tell users that they have reached the ISP. Recapture and save the Belfast’s routers configuration file. Edit the text file, and include comments. This documentation will serve as the deliverable item for Phase 6

Phase 7: Verification and Testing

OSPF 10 Area 1

S0/0

Galway

ISP Server 209.1.1.2/30 Go/o 209.1.1.1/30

ISP 200 200 Hosts Hosts

DCE

G0/0 10.0.0.1/30

S0/0

G0/0 10.0.0.5/30

S0/0

Cork

S0/1 S0/1

G0/0

S0/0

Belfast2

Belfast1

G0/1

HSRP

G0/1

G0/1

G0/1

100 Hosts

Etherchannel

S2

S1

Limerick G0/0

Nat Outside 200.10.10.64/26 Nat Inside 172.16.0.0/20

200 hosts

OSPF 10 area 0

S3 VLA N 2

VLAN 3

VLAN 4

N VLA 99

Belfast VLANs 900 hosts (total)

Use the following instructions to complete Phase 7: 1.

Verify communication between various hosts in the network. Troubleshoot and fix any problems in the network until it works properly. Document the results of the tests in a table.

2.

Recapture and save the router configuration files for all four routers. Edit the text files, and include comments at the top of each file documenting the following: – Your name – The date – CCNA4 Case Study – Final Router Configuration – The router name that corresponds to each file.

This documentation, along with the completed tables from Phase 1, Phase 2, Phase 3, Phase4, Phase 5, Phase 6, and Phase 7, will serve as the final deliverable item for the case study.

Case Study Deliverables Once the case study problem has been solved, the network has been successfully designed and the prototype implemented and tested, a final report must be provided to your instructor. This report will include thorough and well-organized documentation of the process. It is highly recommended that all tables be completed using a spreadsheet program such as Microsoft Excel. Cisco Network Designer, Visio or a paint program can be used for the network diagrams. Some of these tables and outputs should be used in your power point presentation The following items must be included in the final report and presentation: • Outline • Summary of the Company and Network Requirements • Discussion on the implementation of IP address and VLSM • Discussion on the implementation of Routing • Discussion on the implementation of VLANs, STP, and switches • Discussion on the physical layer design and equipment • Discussion on testing and verification strategies • Recommendations for future network upgrades • Logical Diagram • Physical Diagram • IP Addressing Table • Equipment Table including quantity, make and model (Routers & Switches ONLY) • Show Commands outputs to verify connectivity: show ip route, show ip ospf neighbors, show spanning-tree, show vlan, ping, telnet, etc. • Router Configurations • Switch Configuration The documentation should be complete and should contain enough information to allow a third party to properly install, configure and troubleshoot the network without requesting additional information.

Suggest Documents