4.5.1 Packet Tracer - Inter-VLAN Routing Challenge (Instructor Version)

Addressing Table
| Device | Interface | IP Address | Subnet Mask | Default Gateway |
|---|---|---|---|---|
| R1 | G0/0 | 172.17.25.2 | 255.255.255.252 | N/A |
| G0/1.10 | 172.17.10.1 | 255.255.255.0 | ||
| G0/1.20 | 172.17.20.1 | 255.255.255.0 | ||
| G0/1.30 | 172.17.30.1 | 255.255.255.0 | ||
| G0/1.88 | 172.17.88.1 | 255.255.255.0 | ||
| G0/1.99 | 172.17.99.1 | 255.255.255.0 | ||
| S1 | VLAN 99 | 172.17.99.10 | 255.255.255.0 | 172.17.99.1 |
| PC1 | NIC | 172.17.10.21 | 255.255.255.0 | 172.17.10.1 |
| PC2 | NIC | 172.17.20.22 | 255.255.255.0 | 172.17.20.1 |
| PC3 | NIC | 172.17.30.23 | 255.255.255.0 | 172.17.30.1 |
| Server | NIC | 172.17.50.254 | 255.255.255.0 | 172.17.50.1 |
VLAN and Port Assignments Table
| VLAN | Name | Interface |
|---|---|---|
| 10 | Faculty/Staff | F0/11-17 |
| 20 | Students | F0/18-24 |
| 30 | Guest(Default) | F0/6-10 |
| 88 | Native | G0/1 |
| 99 | Management | VLAN 99 |
Scenario
In this activity, you will demonstrate and reinforce your ability to implement inter-VLAN routing, including configuring IP addresses, VLANs, trunking, and subinterfaces.
Instructions
Configure the devices to meet the following requirements.
- Assign IP addressing to R1 and S1 based on the Addressing Table.
- Configure the default gateway on S1.
- Create, name, and assign VLANs on S1 based on the VLAN and Port Assignments Table. Ports should be in access mode. Your VLAN names should match the names in the table exactly.
- Configure G0/1 of S1 as a static trunk and assign the native VLAN.
- All ports that are not assigned to a VLAN should be disabled.
- Configure inter-VLAN routing on R1 based on the Addressing Table.
- Verify connectivity. R1, S1, and all PCs should be able to ping each other and the server.
Device Configs - Final
SWITCH S1
! ============================================================== !--- 4.5.1 Packet Tracer - Inter-VLAN Routing Challenge !--- ANSWER SCRIPT FOR SWITCH S1 !--- Usage: from the console (or a Telnet/SSH session, if already reachable) on S1, enter privileged EXEC mode with "enable", then paste this whole file. Every line beginning with "!" is a comment; IOS ignores it, so pasting a comment by accident is harmless. !--- S1 starts unconfigured beyond factory defaults. This script creates all five VLANs, assigns the access port ranges, brings up the VLAN 99 management SVI, trunks the uplink to R1 with VLAN 88 as native, and disables every port that isn't assigned anywhere. ! ============================================================== enable configure terminal ! -------------------------------------------------------------- !--- Create, name, and assign VLANs (per the VLAN and Port Assignments Table) ! -------------------------------------------------------------- !--- Note: Packet Tracer's VLAN-name grading is lenient here - only the first letter of each name is actually checked - but the "/" in Faculty/Staff and the parentheses in Guest(Default) are typed exactly as the table shows anyway. vlan 10 name Faculty/Staff vlan 20 name Students vlan 30 name Guest(Default) vlan 88 name Native vlan 99 name Management ! -------------------------------------------------------------- !--- Assign access ports to VLANs ! -------------------------------------------------------------- interface range FastEthernet0/11 - 17 switchport mode access switchport access vlan 10 interface range FastEthernet0/18 - 24 switchport mode access switchport access vlan 20 interface range FastEthernet0/6 - 10 switchport mode access switchport access vlan 30 ! -------------------------------------------------------------- !--- Configure G0/1 as a static trunk with VLAN 88 as native ! -------------------------------------------------------------- interface GigabitEthernet0/1 switchport mode trunk switchport trunk native vlan 88 ! -------------------------------------------------------------- !--- Configure the management SVI (VLAN 99) and default gateway ! -------------------------------------------------------------- interface Vlan99 ip address 172.17.99.10 255.255.255.0 no shutdown ip default-gateway 172.17.99.1 ! -------------------------------------------------------------- !--- Disable every port that isn't assigned to a VLAN ! -------------------------------------------------------------- !--- F0/6-10, F0/11-17, F0/18-24, and G0/1 are all spoken for above - the only ports left over are F0/1-5 and G0/2, which the Instructions require to be shut down. interface range FastEthernet0/1 - 5, GigabitEthernet0/2 shutdown end ! -------------------------------------------------------------- !--- Operational habit (not explicitly required by this lab): save to NVRAM. (Press Enter when prompted for the destination filename.) ! -------------------------------------------------------------- copy running-config startup-config ! ============================================================== !--- Verification (from S1 and its neighbors): !--- S1# show vlan brief -> VLAN 10 shows Fa0/11-17, VLAN 20 shows Fa0/18-24, VLAN 30 shows Fa0/6-10 !--- S1# show interfaces trunk -> G0/1 trunking, native VLAN 88 !--- S1# show ip interface brief -> Fa0/1-5 and Gi0/2 all administratively down !--- S1# ping 172.17.99.1 (R1) -> success !--- From PC1/PC2/PC3, ping their own default gateway -> success ! ==============================================================
ROUTER R1
! ============================================================== !--- 4.5.1 Packet Tracer - Inter-VLAN Routing Challenge !--- ANSWER SCRIPT FOR ROUTER R1 !--- Usage: from the console (or a Telnet/SSH session, if already reachable) on R1, enter privileged EXEC mode with "enable", then paste this whole file. Every line beginning with "!" is a comment; IOS ignores it, so pasting a comment by accident is harmless. !--- R1 sits between S1 (trunk on G0/1) and HQ (point-to-point link on G0/0). This script brings up both physical interfaces, assigns G0/0 its WAN address, and builds five router-on-a-stick subinterfaces on G0/1 for VLANs 10/20/30/88(native)/99. ! ============================================================== enable configure terminal ! -------------------------------------------------------------- !--- Assign IP addressing to G0/0 (link to HQ) - see the discrepancy note in chat ! -------------------------------------------------------------- !--- The Addressing Table lists this /30 for R1's G0/0, and the Instructions say to "assign IP addressing to R1 ... based on the Addressing Table," which covers this row too - it's just easy to miss since it's not part of the inter-VLAN routing story. interface GigabitEthernet0/0 ip address 172.17.25.2 255.255.255.252 no shutdown ! -------------------------------------------------------------- !--- Enable G0/1 and build the router-on-a-stick subinterfaces (link to S1) ! -------------------------------------------------------------- interface GigabitEthernet0/1 no shutdown interface GigabitEthernet0/1.10 encapsulation dot1Q 10 ip address 172.17.10.1 255.255.255.0 interface GigabitEthernet0/1.20 encapsulation dot1Q 20 ip address 172.17.20.1 255.255.255.0 interface GigabitEthernet0/1.30 encapsulation dot1Q 30 ip address 172.17.30.1 255.255.255.0 !--- VLAN 88 is the native VLAN on S1's G0/1 trunk, so this subinterface needs the "native" keyword too, or untagged traffic between R1 and S1 won't line up. interface GigabitEthernet0/1.88 encapsulation dot1Q 88 native ip address 172.17.88.1 255.255.255.0 interface GigabitEthernet0/1.99 encapsulation dot1Q 99 ip address 172.17.99.1 255.255.255.0 end ! -------------------------------------------------------------- !--- Operational habit (not explicitly required by this lab): save to NVRAM. (Press Enter when prompted for the destination filename.) ! -------------------------------------------------------------- copy running-config startup-config ! ============================================================== !--- Verification (from R1 and its neighbors): !--- R1# show ip interface brief -> G0/0, G0/1, and all five subinterfaces up/up !--- R1# ping 172.17.99.10 (S1) -> success !--- From PC1, ping 172.17.10.1 (gateway) -> success !--- From PC2, ping 172.17.20.1 (gateway) -> success !--- From PC3, ping 172.17.30.1 (gateway) -> success !--- From PC1, ping PC2 or PC3 (inter-VLAN routing) -> success !--- R1# ping 172.17.25.1 (HQ, far end of G0/0) -> success once HQ's side is up !--- Reaching the Server (172.17.50.254) -> NOT covered by this lab's Instructions or Addressing Table (no route/next-hop given for that subnet on R1). If the "ping the server" verification step in Instructions fails, check for a missing static or default route toward HQ - that's outside what this activity's Addressing Table specifies, so it isn't in this script. ! ==============================================================




