VLAN Configuration with VLSM
Hands-On Project

Device	Interface	IP Address	Subnet Mask	Default Gateway	
ISP	S0/0/0	192.168.1.1	255.255.255.252	N/A	
	S0/0/1	192.168.1.5	255.255.255.252	N/A	
R1	S0/0/0	192.168.1.2	255.255.255.252	N/A	
	Fa0/0.10	172.16.9.1	255.255.255.128	N/A	
	Fa0/0.20	172.16.0.1	255.255.248.0	N/A	
	Fa0/0.70	172.16.8.1	255.255.255.0	N/A	
R3	S0/0/1	192.168.1.6	255.255.255.252	N/A	
	Fa0/0	172.16.9.129	255.255.255.192	N/A	
SW1	VLAN70	172.16.8.5	255.255.255.0	172.16.8.1	
SW2	VLAN70	172.16.8.6	255.255.255.0	172.16.8.1	
PC1	VLAN70	172.16.8.254	255.255.255.0	172.16.8.1	
PC2	VLAN10	172.16.9.126	255.255.255.128	172.16.9.1	
PC3	VLAN20	172.16.0.254	255.255.248.0	172.16.0.1	
PC4	-	172.16.9.190	255.255.255.192	172.16.9.129	

You will need to configure the ISP router for the routing
Task 1: Complete the addressing table using the instructions below. You will be using classless VLSM subnetting. Take the network 172.16.0.0/16 and subnet it according to the following needs. You will have space left over. Do not make your networks larger than they need to be to meet the requirements. Subnetworks should be created from largest to smallest. 
Network 0: Support at least 1200 hosts.
Network 1: Support at least 240 hosts.
Network 2: Support at least 120 hosts.
Network 3: Support at least 35 hosts.
Routers should be assigned the first usable IP address in the network for their Ethernet interfaces. The PCs should be assigned the last usable IP address for the network they are in.
Assign Network 0 to VLAN 20
Assign Network 1 to VLAN 70
Assign Network 2 to VLAN 10
Assign Network 3 to R3
Complete the addressing table.
Task 2: Configure Routers with basic information and configure interfaces with IP information and settings on R1 and R3.
Configure the following items:
•	Hostname (R1=routerone, R3=routerthree)
•	Clock rate of 64000 on DCE interfaces (R1 only)
•	Secure Console and VTY logins with the password of: cisco
•	Secure access to Privilege Exec using the password of: cisco
•	Configure IP address information on R1 and R3 according to the addressing table.
•	Configure Fa0/0 on R1 as a trunk to SW1 (Router on a stick)
•	Trunk VLAN 10, 20, and 70 with 70 active as Native
•	Configure the serial link between R1 and ISP to use PPP with authentication.

Task 3: Configure switches SW1 and SW2 with basic configurations and VLANs.
Configure the following items:
•	Hostname (SW1=switchone, SW2=switchtwo)
•	Default Gateway (VLAN 70 is the management VLAN)
•	VLANs
•	VLAN 10 Sales
•	VLAN 20 Support
•	VLAN70 Management
•	Configure VLAN dot1q trunking between SW1 and SW2 across port fa0/1
•	Use VLAN 70 as your Native VLAN
•	Assign a management IP on VLAN 70 for each switch. Use any valid IP within the network for VLAN70 so long as it doesn’t conflict with another device. Record the IP you use in the addressing table.
•	SW1: Configure port fa0/24 as a VLAN trunk to R1 again with VLAN 70 as native.
•	SW1: Configure ports fa0/2 through fa0/23 as access ports
•	SW1: Assign ports fa0/2 through fa0/8 to VLAN 70
•	SW1: Assign ports fa0/9 – fa0/23 to VLAN 10
•	SW1: Enable port security on fa0/5 to protect the port the management workstation is on.
•	One MAC address should be remembered.
•	The MAC address should be learned automatically and remembered (sticky)
•	When a violation is detected the interface should drop packets from the unknown source address without logging any information.
•	SW2: Configure ports fa0/2 through fa0/24 as access ports
•	SW2: Configure ports fa0/2 through fa0/8 to VLAN10
•	SW2: Configure ports fa0/9 through fa0/24 to VLAN20

Task 4: Configure EIGRP on routers R1 and R3 and ISP
•	Use the EIGRP AS number of 21
•	Turn off auto summarization
•	Verify that R1 and R3 and ISP are receiving all routes
Task 5: Configure PC1 through PC4 with the correct IP information, subnet mask, and default gateway.
•	Each PC should be configured as the last valid IP address for the network it is on. Record that information in the IP addressing table.
•	Verify that each PC can ping every other PC in the topology.

Scoring Rubrics:
Total score is 100
Any miss-configuration is -5
Nonfunctioning EIGRP  -20
Nonfunctioning InterVLAN -20