4.5.1 Packet Tracer – Inter-VLAN Routing Challenge (Instructions Answer)

4.5.1 Packet Tracer - Inter-VLAN Routing Challenge (Instructor Version)

Addressing Table

Device Interface IP Address Subnet Mask Default Gateway
R1 G0/0 172.17.25.2 255.255.255.252 N/A
G0/1.10 172.17.10.1 255.255.255.0
G0/1.20 172.17.20.1 255.255.255.0
G0/1.30 172.17.30.1 255.255.255.0
G0/1.88 172.17.88.1 255.255.255.0
G0/1.99 172.17.99.1 255.255.255.0
S1 VLAN 99 172.17.99.10 255.255.255.0 172.17.99.1
PC1 NIC 172.17.10.21 255.255.255.0 172.17.10.1
PC2 NIC 172.17.20.22 255.255.255.0 172.17.20.1
PC3 NIC 172.17.30.23 255.255.255.0 172.17.30.1
Server NIC 172.17.50.254 255.255.255.0 172.17.50.1

VLAN and Port Assignments Table

VLAN Name Interface
10 Faculty/Staff F0/11-17
20 Students F0/18-24
30 Guest(Default) F0/6-10
88 Native G0/1
99 Management VLAN 99

Scenario

In this activity, you will demonstrate and reinforce your ability to implement inter-VLAN routing, including configuring IP addresses, VLANs, trunking, and subinterfaces.

Instructions

Configure the devices to meet the following requirements.

  • Assign IP addressing to R1 and S1 based on the Addressing Table.
  • Configure the default gateway on S1.
  • Create, name, and assign VLANs on S1 based on the VLAN and Port Assignments Table. Ports should be in access mode. Your VLAN names should match the names in the table exactly.
  • Configure G0/1 of S1 as a static trunk and assign the native VLAN.
  • All ports that are not assigned to a VLAN should be disabled.
  • Configure inter-VLAN routing on R1 based on the Addressing Table.
  • Verify connectivity. R1, S1, and all PCs should be able to ping each other and the server.

Device Configs - Final

SWITCH S1

! ==============================================================
!--- 4.5.1 Packet Tracer - Inter-VLAN Routing Challenge
!--- ANSWER SCRIPT FOR SWITCH S1
!--- Usage: from the console (or a Telnet/SSH session, if already reachable) on S1, enter privileged EXEC mode with "enable", then paste this whole file. Every line beginning with "!" is a comment; IOS ignores it, so pasting a comment by accident is harmless.
!--- S1 starts unconfigured beyond factory defaults. This script creates all five VLANs, assigns the access port ranges, brings up the VLAN 99 management SVI, trunks the uplink to R1 with VLAN 88 as native, and disables every port that isn't assigned anywhere.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Create, name, and assign VLANs (per the VLAN and Port Assignments Table)
! --------------------------------------------------------------

!--- Note: Packet Tracer's VLAN-name grading is lenient here - only the first letter of each name is actually checked - but the "/" in Faculty/Staff and the parentheses in Guest(Default) are typed exactly as the table shows anyway.
vlan 10
 name Faculty/Staff
vlan 20
 name Students
vlan 30
 name Guest(Default)
vlan 88
 name Native
vlan 99
 name Management

! --------------------------------------------------------------
!--- Assign access ports to VLANs
! --------------------------------------------------------------

interface range FastEthernet0/11 - 17
 switchport mode access
 switchport access vlan 10

interface range FastEthernet0/18 - 24
 switchport mode access
 switchport access vlan 20

interface range FastEthernet0/6 - 10
 switchport mode access
 switchport access vlan 30

! --------------------------------------------------------------
!--- Configure G0/1 as a static trunk with VLAN 88 as native
! --------------------------------------------------------------

interface GigabitEthernet0/1
 switchport mode trunk
 switchport trunk native vlan 88

! --------------------------------------------------------------
!--- Configure the management SVI (VLAN 99) and default gateway
! --------------------------------------------------------------

interface Vlan99
 ip address 172.17.99.10 255.255.255.0
 no shutdown

ip default-gateway 172.17.99.1

! --------------------------------------------------------------
!--- Disable every port that isn't assigned to a VLAN
! --------------------------------------------------------------

!--- F0/6-10, F0/11-17, F0/18-24, and G0/1 are all spoken for above - the only ports left over are F0/1-5 and G0/2, which the Instructions require to be shut down.
interface range FastEthernet0/1 - 5, GigabitEthernet0/2
 shutdown

end

! --------------------------------------------------------------
!--- Operational habit (not explicitly required by this lab): save to NVRAM. (Press Enter when prompted for the destination filename.)
! --------------------------------------------------------------
copy running-config startup-config

! ==============================================================
!--- Verification (from S1 and its neighbors):
!---   S1# show vlan brief       -> VLAN 10 shows Fa0/11-17, VLAN 20 shows Fa0/18-24, VLAN 30 shows Fa0/6-10
!---   S1# show interfaces trunk -> G0/1 trunking, native VLAN 88
!---   S1# show ip interface brief -> Fa0/1-5 and Gi0/2 all administratively down
!---   S1# ping 172.17.99.1 (R1) -> success
!---   From PC1/PC2/PC3, ping their own default gateway -> success
! ==============================================================

ROUTER R1

! ==============================================================
!--- 4.5.1 Packet Tracer - Inter-VLAN Routing Challenge
!--- ANSWER SCRIPT FOR ROUTER R1
!--- Usage: from the console (or a Telnet/SSH session, if already reachable) on R1, enter privileged EXEC mode with "enable", then paste this whole file. Every line beginning with "!" is a comment; IOS ignores it, so pasting a comment by accident is harmless.
!--- R1 sits between S1 (trunk on G0/1) and HQ (point-to-point link on G0/0). This script brings up both physical interfaces, assigns G0/0 its WAN address, and builds five router-on-a-stick subinterfaces on G0/1 for VLANs 10/20/30/88(native)/99.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Assign IP addressing to G0/0 (link to HQ) - see the discrepancy note in chat
! --------------------------------------------------------------

!--- The Addressing Table lists this /30 for R1's G0/0, and the Instructions say to "assign IP addressing to R1 ... based on the Addressing Table," which covers this row too - it's just easy to miss since it's not part of the inter-VLAN routing story.
interface GigabitEthernet0/0
 ip address 172.17.25.2 255.255.255.252
 no shutdown

! --------------------------------------------------------------
!--- Enable G0/1 and build the router-on-a-stick subinterfaces (link to S1)
! --------------------------------------------------------------

interface GigabitEthernet0/1
 no shutdown

interface GigabitEthernet0/1.10
 encapsulation dot1Q 10
 ip address 172.17.10.1 255.255.255.0

interface GigabitEthernet0/1.20
 encapsulation dot1Q 20
 ip address 172.17.20.1 255.255.255.0

interface GigabitEthernet0/1.30
 encapsulation dot1Q 30
 ip address 172.17.30.1 255.255.255.0

!--- VLAN 88 is the native VLAN on S1's G0/1 trunk, so this subinterface needs the "native" keyword too, or untagged traffic between R1 and S1 won't line up.
interface GigabitEthernet0/1.88
 encapsulation dot1Q 88 native
 ip address 172.17.88.1 255.255.255.0

interface GigabitEthernet0/1.99
 encapsulation dot1Q 99
 ip address 172.17.99.1 255.255.255.0

end

! --------------------------------------------------------------
!--- Operational habit (not explicitly required by this lab): save to NVRAM. (Press Enter when prompted for the destination filename.)
! --------------------------------------------------------------
copy running-config startup-config

! ==============================================================
!--- Verification (from R1 and its neighbors):
!---   R1# show ip interface brief          -> G0/0, G0/1, and all five subinterfaces up/up
!---   R1# ping 172.17.99.10 (S1)           -> success
!---   From PC1, ping 172.17.10.1 (gateway) -> success
!---   From PC2, ping 172.17.20.1 (gateway) -> success
!---   From PC3, ping 172.17.30.1 (gateway) -> success
!---   From PC1, ping PC2 or PC3 (inter-VLAN routing) -> success
!---   R1# ping 172.17.25.1 (HQ, far end of G0/0) -> success once HQ's side is up
!---   Reaching the Server (172.17.50.254)  -> NOT covered by this lab's Instructions or Addressing Table (no route/next-hop given for that subnet on R1). If the "ping the server" verification step in Instructions fails, check for a missing static or default route toward HQ - that's outside what this activity's Addressing Table specifies, so it isn't in this script.
! ==============================================================

Download Packet Tracer (.pka) file:

Subscribe
Notify of
guest

4 Corrections & Clarifications