Maw Office
|
Name |
Network Address/Subnet Mask |
|
Printers |
192.168.1.0/24 |
|
Wireless AP |
192.168.2.0/24 255.255.255.0 |
|
Senior Management |
192.168.3.0/24 |
|
IT Support |
192.168.4.0/24 255.255.255.0 |
|
Research Staff |
192.168.5.0/24 |
|
Admin Staff |
192.168.6.0/24 255.255.255.0 |
|
Sales Staff |
192.168.7.0/24 |
|
Data Center Room |
192.168.8.0/24 255.255.255.0 |
|
Training Room |
192.168.9.0/24 |
Mo Office
|
Name |
Network Address/Subnet Mask |
|
Admin Staff |
192.168.10.0/24 |
|
Printers |
192.168.11.0/24 255.255.255.0 |
|
Sales Staff |
192.168.12.0/24 |
Use the
following instructions to complete step 4:
·Use 192.168.0.0
for internal addressing with IP subnet zero enabled
·User
195.50.16.64/27 for external and public addresses
·You can
assume inter-office WAN connections will use private IP addresses
·Apply /30
subnets on all serial interface
—Configuring the Routers, switches and OSPF
Configure
each router and switch with a hostname and passwords
Configure
each interface on the routers as documented above
Configure
OSPF on all IQ routers (NOT THE ISP ROUTER) and insert a default route on the gateway
router.
Configure
the management VLAN on each of the switches
Configure
the wireless access points with any security options you see fit
At Maw Office,
configure the layer 3 switch as the root bridge in spanning tree
—Configuring
NAT and ACLs
Configure
the Maw Office MAIN router as follows:
Define the NAT pool; the pool consists
of only one address of 195.50.16.128/30
Configure
the workstation connected to the ISP as follows:
Configure the IP address and subnet mask
as 10.0.0.2/8
Configure the default gateway
Configure the workstation to act as a
web server. Create a simple page that will tell users that they have reached
the ISP
The
servers at the Maw office will act as the company’s intranet web server and email
server. Create a simple page that will tell users they have reached the company
intranet web site.
Configure
an ACL to block all traffic from the Internet to the internal server at Maw
Office except web traffic; this should prevent hackers using ping etc on the
network.
Configure
an ACL to ensure all wireless generated traffic from the Maw Office is unable
to access any other part of the network except the Internet. This includes all
internal computers.
This
should also only allow web traffic.
—Configuring
VLANs and DHCP
Configure
the Local Area Network switches with the necessary VLANs as per the details in
step 4.
Create
the VLANs on the desired switches and use VTP where possible.
The Maw
Office layer 3 switch will perform DHCP. Configure it as
follows:
Using the DHCP pool documented in step 4
Configure the DHCP pool on the switch
Configure the workstations to obtain
their IP address automatically
Use static IP addresses with any servers
If IP helper does not work in PT, you
will need to configure DHCP on each of the other locations. You can use static
IPs for the Mo Office.
At the
Maw office, there are 2 links between the floors. Configure these 2 links between
each of the switches as a single ether channel. An ether channel uses multiple
physical links and virtually combines them into a single link. For example, 3 x100Mbps
links can be combined as 1 ether channel at 300Mbps.
Configure
all inter-vlan routing necessary at both Maw Office and Mo Office.
0 comments