create a VLAN and IP addressing {{should be one subnet per VLAN. Each building s

ID: 3600743 • Letter: C

Question

create a VLAN and IP addressing

{{should be one subnet per VLAN. Each building should have a separate wired VLAN. There should be a management VLAN for all of the network infrastructure devices There should be one VOIP VLAN for the entire campus There should be three separate wireless VLANs: one for staff one for students and one for guests.}}VLANs must use VLSM to create appropriately sized and contiguous subnets whenever possible]]

{{Main Room A; approximately 10 servers and each server requires a primary and backup network connection for redundancy. There should be redundant switches to permit failover in case the primary server switch fails. Wireless was not installed here previously, but should be part of the new design}}

{{Room B: is a main office; 8 administrative offices plus 18 desks for staff. There are also two adjoining conference rooms that will accommodate 10 people each. (Each conference room should have 4 wired connections.) There is an old Netgear AP here. The Main Office is a one-story structure with no significant interior issues that would affect wireless connectivity}}

[[Rooom C: three classrooms and four offices here. There is an AP already installed here]]

Answer this by including: network location; public or private address; manual or DHCP you would use;Network address x.x.x.x/nn; subnetmask; # possible hosts;estimate # actual devices on subnets; explain why

Explanation / Answer

The statement of "...default router through a VLAN." is ture in my case. "IP address for that VLAN interface."

it helps here is network layout, switch, and router configs.

VLAN 10 management

VLAN 70 is a /28 that is framed to me by my ISP. Port-channel1.70 has to 70.57.155.254

VLAN 192 is a /24 that is all things DHCP and WiFi

VLAN 193 is a /24 that is all things static IP's like servers, WiFi access points, basicly anything that supports VLAN 192

Switch config -

version 12.2

service nagle

no service pad

service tcp-keepalives-in

service tcp-keepalives-out

service timestamps debug datetime msec localtime show-timezone

service timestamps log datetime msec localtime show-timezone

service password-encryption

service sequence-numbers

no service dhcp

hostname Stack

enable secret 5 <PASSWORD>

enable password 7 <PASSWORD>

no aaa new-model

switch 1 provision ws-c3750g-24t

switch 2 provision ws-c3750g-24t

system mtu routing 1500

ip subnet-zero

ip routing

no ip gratuitous-arps

spanning-tree mode pvst

spanning-tree extend system-id

vlan internal allocation policy ascending

interface Loopback0

ip address 10.0.1.1 255.255.255.0

interface Port-channel1

description To 2901

switchport trunk encapsulation dot1q

switchport mode trunk

interface Port-channel2

switchport access vlan 70

switchport mode access

interface Port-channel3

switchport access vlan 70

switchport mode access

interface Port-channel4

switchport access vlan 70

switchport mode access

interface Port-channel5

switchport access vlan 70

switchport mode access

interface Port-channel6

switchport access vlan 192

switchport mode access

interface Port-channel7

switchport access vlan 193

switchport mode access

interface GigabitEthernet1/0/1

switchport access vlan 70

switchport mode access

channel-protocol lacp

channel-group 2 mode active

interface GigabitEthernet1/0/2

switchport access vlan 70

switchport mode access

interface GigabitEthernet1/0/3

switchport access vlan 70

switchport mode access

channel-protocol lacp

channel-group 4 mode active

interface GigabitEthernet1/0/4

switchport access vlan 70

switchport mode access

channel-protocol lacp

channel-group 5 mode active

interface GigabitEthernet1/0/5

no switchport

no ip address

interface GigabitEthernet1/0/6

interface GigabitEthernet1/0/7

interface GigabitEthernet1/0/8

interface GigabitEthernet1/0/9

interface GigabitEthernet1/0/10

interface GigabitEthernet1/0/11

interface GigabitEthernet1/0/12

description To 2901

switchport trunk encapsulation dot1q

switchport mode trunk

channel-group 1 mode on

interface GigabitEthernet1/0/13

interface GigabitEthernet1/0/14

switchport access vlan 192

switchport mode access

interface GigabitEthernet1/0/15

interface GigabitEthernet1/0/16

interface GigabitEthernet1/0/17

interface GigabitEthernet1/0/18

interface GigabitEthernet1/0/19

interface GigabitEthernet1/0/20

interface GigabitEthernet1/0/21

switchport access vlan 193

switchport mode access

interface GigabitEthernet1/0/22

switchport access vlan 193

switchport mode access

interface GigabitEthernet1/0/23

switchport access vlan 193

switchport mode access

channel-protocol lacp

channel-group 7 mode active

interface GigabitEthernet1/0/24

switchport access vlan 192

switchport mode access

channel-protocol lacp

channel-group 6 mode active

interface GigabitEthernet2/0/1

switchport access vlan 70

switchport mode access

channel-protocol lacp

channel-group 2 mode active

interface GigabitEthernet2/0/2

switchport access vlan 70

switchport mode access

interface GigabitEthernet2/0/3

switchport access vlan 70

switchport mode access

channel-protocol lacp

channel-group 4 mode active

interface GigabitEthernet2/0/4

switchport access vlan 70

switchport mode access

channel-protocol lacp

channel-group 5 mode active

interface GigabitEthernet2/0/5

interface GigabitEthernet2/0/6

interface GigabitEthernet2/0/7

interface GigabitEthernet2/0/8

interface GigabitEthernet2/0/9

interface GigabitEthernet2/0/10

interface GigabitEthernet2/0/11

interface GigabitEthernet2/0/12

switchport trunk encapsulation dot1q

switchport mode trunk

channel-group 1 mode on

interface GigabitEthernet2/0/13

interface GigabitEthernet2/0/14

switchport access vlan 192

switchport mode access

interface GigabitEthernet2/0/15

interface GigabitEthernet2/0/16

interface GigabitEthernet2/0/17

interface GigabitEthernet2/0/18

interface GigabitEthernet2/0/19

interface GigabitEthernet2/0/20

interface GigabitEthernet2/0/21

switchport access vlan 193

switchport mode access

interface GigabitEthernet2/0/22

switchport access vlan 193

switchport mode access

interface GigabitEthernet2/0/23

switchport access vlan 193

switchport mode access

channel-protocol lacp

channel-group 7 mode active

interface GigabitEthernet2/0/24

switchport access vlan 192

switchport mode access

channel-protocol lacp

channel-group 6 mode active

interface Vlan1

no ip address

shutdown

interface Vlan10

ip address 10.0.0.1 255.255.255.0

no ip redirects

no ip unreachables

no ip proxy-arp

interface Vlan70

ip address 70.57.155.241 255.255.255.240

no ip redirects

no ip unreachables

no ip proxy-arp

interface Vlan192

ip address 192.168.3.1 255.255.255.0

no ip redirects

no ip unreachables

no ip proxy-arp

interface Vlan193

ip address 192.168.5.1 255.255.255.0

no ip redirects

no ip unreachables

no ip proxy-arp

ip default-gateway 10.0.0.254

ip classless

no ip http server

no ip http secure-server

no cdp run

control-plane

line con 0

line vty 0 4

password 7 <PASSWORD>

line vty 5 15

password 7 <PASSWORD>

scheduler process-watchdog reload

end

-- Router Config --

version 15.3

service nagle

no service pad

service tcp-keepalives-in

service tcp-keepalives-out

service timestamps debug datetime msec localtime show-timezone

service timestamps log datetime msec localtime show-timezone

service password-encryption

service sequence-numbers

no service dhcp

hostname 2901

boot-start-marker

boot system flash1 c2900-universalk9-mz.SPA.153-1.T.bin

boot-end-marker

enable secret 4 <PASSWORD>

enable password 7 <PASSWORD>

no aaa new-model

clock timezone CST -6 0

clock summer-time CST recurring

no ip gratuitous-arps

ip cef

ipv6 spd queue min-threshold 62

ipv6 spd queue max-threshold 63

ipv6 multicast rpf use-bgp

no ipv6 cef

multilink bundle-name authenticated

vpdn enable

vpdn-group 1

license udi pid CISCO2901/K9 sn FTX1539817B

controller VDSL 0/0/0

csdb tcp synwait-time 30

csdb tcp idle-time 3600

csdb tcp finwait-time 5

csdb tcp reassembly max-memory 1024

csdb tcp reassembly max-queue-length 16

csdb udp idle-time 30

csdb icmp idle-time 10

csdb session max-session 65535

interface Loopback0

ip address 10.0.1.254 255.255.255.0

interface Null0

no ip unreachables

interface Port-channel1

ip address 172.31.1.254 255.255.255.252

no ip redirects

no ip unreachables

no ip proxy-arp

ip tcp adjust-mss 1452

hold-queue 150 in

interface Port-channel1.10

encapsulation dot1Q 10 native

ip address 10.0.0.254 255.255.255.0

no ip redirects

no ip unreachables

no ip proxy-arp

interface Port-channel1.70

encapsulation dot1Q 70

ip address 70.57.155.254 255.255.255.240

no ip redirects

no ip unreachables

no ip proxy-arp

ip tcp adjust-mss 1452

interface Port-channel1.192

encapsulation dot1Q 192

ip address 192.168.3.254 255.255.255.0

ip helper-address 192.168.5.5

no ip redirects

no ip unreachables

no ip proxy-arp

ip nat inside

ip virtual-reassembly in

ip tcp adjust-mss 1452

interface Port-channel1.193

encapsulation dot1Q 193

ip address 192.168.5.254 255.255.255.0

no ip redirects

no ip unreachables

no ip proxy-arp

ip nat inside

ip virtual-reassembly in

ip tcp adjust-mss 1452

interface Embedded-Service-Engine0/0

no ip address

shutdown

interface GigabitEthernet0/0

no ip address

no ip redirects

no ip unreachables

no ip proxy-arp

ip tcp adjust-mss 1452

duplex auto

speed auto

channel-group 1

no cdp enable

no mop enabled

interface GigabitEthernet0/1

no ip address

no ip redirects

no ip unreachables

no ip proxy-arp

ip tcp adjust-mss 1452

duplex auto

speed auto

channel-group 1

no cdp enable

no mop enabled

interface ATM0/0/0

no ip address

no ip redirects

no ip unreachables

no ip proxy-arp

load-interval 30

shutdown

no atm ilmi-keepalive

ntp disable

no snmp trap link-status

hold-queue 224 in

interface Ethernet0/0/0

no ip address

interface Ethernet0/0/0.201

encapsulation dot1Q 201

pppoe enable group global

pppoe-client dial-pool-number 1

interface Dialer0

mtu 1492

ip unnumbered Port-channel1.70

ip access-group from_internet in

ip access-group to_internet out

no ip redirects

no ip unreachables

no ip proxy-arp

ip nat outside

ip virtual-reassembly in

encapsulation ppp

dialer pool 1

dialer-group 1

ntp disable

no snmp trap link-status

ppp authentication chap pap callin

ppp chap hostname <USERNAME>

ppp chap password 7 <PASSWORD>

ppp pap sent-username <USERNAME> password 7 <PASSWORD>

ppp ipcp route default

no cdp enable

no ip forward-protocol nd

no ip http server

no ip http secure-server

ip nat inside source list NAT interface Port-channel1.70 overload

ip access-list extended NAT

permit ip 192.168.3.0 0.0.0.255 any

permit ip 192.168.5.0 0.0.0.255 any

deny ip any any

ip access-list extended from_internet

evaluate reflexive-temporary-list

deny tcp any any fragments

deny udp any any fragments

deny icmp any any fragments

deny ip any any fragments

deny udp any any eq netbios-ns

deny udp any any eq netbios-dgm

deny udp any any eq netbios-ss

deny ip 0.0.0.0 0.255.255.255 any

deny ip 10.0.0.0 0.255.255.255 any

deny ip 127.0.0.0 0.255.255.255 any

deny ip 169.254.0.0 0.0.255.255 any

deny ip 172.16.0.0 0.15.255.255 any

deny ip 192.168.0.0 0.0.255.255 any

deny ip 224.0.0.0 15.255.255.255 any

deny ip any 0.0.0.0 0.255.255.255

deny ip any 10.0.0.0 0.255.255.255

deny ip any 127.0.0.0 0.255.255.255

deny ip any 169.254.0.0 0.0.255.255

deny ip any 172.16.0.0 0.15.255.255

deny ip any 192.168.0.0 0.0.255.255

deny ip any 224.0.0.0 15.255.255.255

deny ip host 0.0.0.0 any

permit tcp any host 70.57.155.242 eq 22

permit udp any host 70.57.155.242 eq domain

permit udp any host 70.57.155.242 eq ntp

permit tcp any host 70.57.155.242 eq smtp

permit tcp any host 70.57.155.242 eq 3128

permit tcp any host 70.57.155.234 gt 1024

permit udp any host 70.57.155.234 gt 1024

permit tcp any host 70.57.155.245 eq www

permit tcp any host 70.57.155.245 eq 443

permit udp any host 70.57.155.243 eq domain

permit udp any host 70.57.155.243 eq ntp

permit tcp any host 70.57.155.243 eq www

permit tcp any host 70.57.155.243 eq smtp

permit tcp any host 70.57.155.243 eq 995

permit tcp any host 70.57.155.243 eq 443

permit tcp any host 70.57.155.243 eq 7071

permit tcp any host 70.57.155.243 eq pop3

permit tcp any host 70.57.155.243 eq 143

permit tcp any host 70.57.155.243 eq 465

permit tcp any host 70.57.155.243 eq 993

permit icmp any any administratively-prohibited

permit icmp any any echo-reply

permit icmp any any echo

permit icmp any any packet-too-big

permit icmp any any time-exceeded

permit icmp any any traceroute

permit icmp any any unreachable

deny ip any any

ip access-list extended to_internet

deny udp any any eq netbios-ns

deny udp any any eq netbios-dgm

deny udp any any eq netbios-ss

deny ip 0.0.0.0 0.255.255.255 any

deny ip 10.0.0.0 0.255.255.255 any

deny ip 127.0.0.0 0.255.255.255 any

deny ip 169.254.0.0 0.0.255.255 any

deny ip 172.16.0.0 0.15.255.255 any

deny ip 192.168.0.0 0.0.255.255 any

deny ip 224.0.0.0 15.255.255.255 any

deny ip any 0.0.0.0 0.255.255.255

deny ip any 10.0.0.0 0.255.255.255

deny ip any 127.0.0.0 0.255.255.255

deny ip any 169.254.0.0 0.0.255.255

deny ip any 172.16.0.0 0.15.255.255

deny ip any 192.168.0.0 0.0.255.255

deny ip any 224.0.0.0 15.255.255.255

permit ip 70.57.155.240 0.0.0.15 any reflect reflexive-temporary-list timeout 300

deny ip any any

dialer-list 1 protocol ip permit

no cdp run

access-list 1 permit any

control-plane

line con 0

line aux 0

line 2

no activation-character

no exec

transport preferred none

transport input all

transport output pad telnet rlogin lapb-ta mop udptn v120 ssh

stopbits 1

line vty 0 4

password 7 <PASSWORD>

transport input all

scheduler allocate 20000 1000

ntp server 70.57.xxx.yyy

ntp server 70.57.xxx,yyy

end

Navigate

create a StickyNotes program using java!! Problem Statement: Write a set of java

create a \"unique\" index of EMP_CODE by filling in the table below : (the numbe

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.

create a VLAN and IP addressing {{should be one subnet per VLAN. Each building s

Question

Explanation / Answer

Related Questions

Navigate