IPv4 Addressing

1. Divide the 192.168.4.0 /24 network into 4 equal sized subnets2. Use the 2nd subnet for the green network3. Use the 4th subnet to create 4 smaller subnet for 14 hosts each. Use the first of the smaller subnets for the yellow network4. The router get the first usable address in the subnet5. The PCs get 5th and 6th, usable address in the green subnet, and the 5th in the yellow subnet6. The switches get the last usable address in the subnet.7. The server gets the second address in the subnetIPv6 Addressing

Green Network: 2001:DB8:CCCC:1::/64 R1 -- :1 PC0 -- :A PC1 -- :B

Yellow Network: 2001:DB8:CCCC:2::/64 R1 -- :1 PC2 -- :A Server -- :F

Link-local: R1 -- FE80::1

Note:You will need to configure the router and both switches usingthe console connection and the desktop terminal program

Configuration Tasks

On R1, S1, S2:

1. hostnames: R1, S1, S22. R1 minimum password length 10 characters3. user account: admin, encrypted password: danscourses4. console line: login using local database5. enable password: class12345 (encrypted)6. password encryption on all lines

7. banner message of the day: No unauthorized access allowed!8. domain name: danscourses.com9. ssh version 210 .timeout after 5 minutes on all console and vty lines11.security keys: rsa 1024 modulus12. R1: vty 0 4, S1: vty 0 15, secure SSH access using local database13. enable ipv6 routing on R114. configure PCs with IPv4 and IPv6 addresses, network prefix or subnet mask, and default gateway15. R1 interfaces with IPv4 and IPv6 addressing16. S1 & S2 interface VLAN1 with IPv4 address and subnet mask17. S1 & S2 with default gateway18. backup R1, S1, S2 running-config to the tftp server (accept the default name)19 .Copy running-config to startup-config

R1

router> enablerouter# configure terminalrouter(config)# hostname R1R1(config)# banner motd “No unauthorized access allowed!”R1(config)# service password-encryptionR1(config)# security passwords min-length 10R1(config)# enable secret class12345R1(config)# username admin secret danscoursesR1(config)# ip ssh version 2R1(config)# ip domain-name danscourses.comR1(config)# crypto key generate rsa modulus[512] 1024R1(config)# interface GigabitEthernet0/0R1(config-if)# ip address 192.168.4.65 255.255.255.192R1(config-if)# ipv6 address FE80::1 link-localR1(config-if)# ipv6 address 2001:DB8:CCCC:1::1/6R1(config-if)# no shutdownR1(config-if)# interface GigabitEthernet0/1R1(config-if)# ip address 192.168.4.193 255.255.255.240R1(config-if)# ipv6 address FE80::1 link-localR1(config-if)# ipv6 address 2001:DB8:CCCC:2::1/64

R1(config-if)# no shutdownR1(config-if)# exitR1(config)# line con 0R1(config-line)# exec-timeout 5 0R1(config-line)# login localR1(config-line)# line vty 0 4R1(config-line)# exec-timeout 5 0R1(config-line)# login localR1(config-line)# transport input sshR1(config-line)#exitR1(config-line)#copy run start

S1

switch> enableswitch# configure terminalswitch(config)# hostname S1S1(config)# banner motd “No unauthorized access allowed!”S1(config)# service password-encryptionS1(config)# enable secret class12345S1(config)# username admin secret danscoursesS1(config)# ip ssh version 2S1(config)# ip domain-name danscourses.comS1(config)# crypto key generate rsa modulus[512] 1024S1(config)# interface vlan 1S1(config-if)# ip address 192.168.4.126 255.255.255.192S1(config-if)# no shutS1(config-if)# exitS1(config)# ip default-gateway 192.168.4.65S1(config)# line con 0S1(config-line)# exec-timeout 5 0S1(config-line)# login localS1(config-line)# line vty 0 4S1(config-line)# exec-timeout 5 0S1(config-line)# login localS1(config-line)# transport input ssh>S1(config-line)# line vty 5 15S1(config-line)# exec-timeout 5 0S1(config-line)# login localS1(config-line)# transport input sshS1(config-line)# exitS1(config-line)# copy run start

S2

switch> enableswitch# configure terminalswitch(config)# hostname S2S2(config)# banner motd “No unauthorized access allowed!”S2(config)# service password-encryptionS2(config)# enable secret class12345S2(config)# username admin secret danscoursesS2(config)# ip ssh version 2S2(config)# ip domain-name danscourses.comS2(config)# crypto key generate rsamodulus[512] 1024S2(config)# interface vlan 1S2(config-if)# ip address 192.168.4.206 255.255.255.240S2(config-if)# no shutS2(config-if)# exitS2(config)# ip default-gateway 192.168.4.193S2(config)# line con 0S2(config-line)# exec-timeout 5 0S2(config-line)# login localS2(config-line)# line vty 0 4S2(config-line)# exec-timeout 5 0S2(config-line)# login localS2(config-line)# transport input ssh>S2(config-line)# line vty 5 15S2(config-line)# exec-timeout 5 0S2(config-line)# login localS2(config-line)# transport input sshS2(config-line)# exitS2(config-line)# copy run start