General Telecommunication Institute
SRWE Final Skills Project
SRWE Final Skills Project
Project Objectives
Part 1: Create and Design a Network Topology
Part 2: Configure the Devices with Basic Settings
Part 3: Configure and verify IPv4 and IPv6 addressing
Part 4: Configure Network Infrastructure Settings (VLANs, Trunking, EtherChannel)
Part 5: Configure Inter-VLAN Routing
Part 6: Configure DHCPv4 and DHCPv6
Part 7: Configure a Wireless LAN using WLC
Part 8: Configure switch security to mitigate LAN attacks.
Part 9: Configure and verify static and default routing for IPv4 and IPv6
Part 10: Troubleshoot the Topology
The Instructions
Part 1: Create and Design a Network Topology
In Part 1, you will set up the network topology that meet all the requirements in the project objectives.
Part 2: Configure the Devices with Basic Settings
In part 2, you will configure all basic configurations as you learned in CCNA1. The basic configuration
should contain:
1- Host names for all switches and routers devices.
2- Secure all devices with all passwords as you learned. All passwords should be (cisco12345).
3- Disable DNS lookup.
4- Encrypt all the plaintext passwords.
5- Create a banner that warns anyone accessing the device that unauthorized access is prohibited.
6- Configure SSHv2 for at least one device in the topology. The username should be Admin and the
password should be (Cisco12345).
7- Configure SVI and default gateway for all switches with IPv4 & IPv6 for Management VLAN according
to the plan you created for IP addressing scheme.
8- Save the running configuration to the startup configuration file.
© 2021 - 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public Page 1 of 4 www.netacad.com
SRWE Final Skills Project
Part 3: Configure and verify IPv4 and IPv6 addressing
In Part 3, you will configure and verify the IPv4 and IPv6 addresses on all the required devices. The
devices interfaces or sub-interfaces should have:
1- Description to verify the interfaces to which device is connected.
2- IPv4 address with subnet mask.
3- IPv6 GUA address with link-local address.
Part 4: Configure Network Infrastructure Settings (VLANs, Trunking, EtherChannel)
In part 4, you will configure VLANs, switchport for all access and trunking ports, and EtherChannel to
aggregate multiple links between switches.
- VLAN configurations should have (Data, Management, Native, and Unused VLANs).
- VLAN configurations should have at least two Data VLANs for LANs, and WLAN networks.
- You can use PAgP or LACP for EtherChannel configurations.
Part 5: Configure Inter-VLAN Routing
In part 5, you will configure any method of Inter-VLAN routing depending on your topology.
Part 6: Configure DHCPv4 and DHCPv6
In part 6, you will configure DHCPv4 and DHCPv6 for devices on LANs, and the Same DHCPv4 for all
WLAN Networks.
- The DHCPv6 configurations should be stateful-DHCPv6.
Part 7: Configure a Wireless LAN using WLC
In part 7, you will configure WLC device to control one LWAP that have two wireless LANs.
- You are going to configure DHCP pool from Management VLAN pool addresses in WLC to control the
LWAP.
- You are going to create two types of Wireless LANs:
The first WLAN are for wireless clients who must authenticate locally, and the second WLAN the for
wireless clients who must authenticate using a dedicated AAA server.
- You must configure two interfaces for each WLAN.
- You must configure AAA server and configure it in WLC.
- You must configure two wireless LANs
- You have to ensure that two wireless can associate with two WLANs, and get an IP address from
DHCPv4 router.
© 2021 - 2022 Cisco Academy. All rights reserved. General Telecommunication Institute Page 2 of 4 www.gti.edu.ye
SRWE Final Skills Project
Part 8: Configure switch security to mitigate LAN attacks
In this part, you will configure at least one switch to mitigate LAN attacks:
- You should Secure and disable unused switchports in this switch.
- You should disable DTP protocol in the trunk ports in this switch.
- You should implement port security features in at least one accessing port in this switch.
- You should Implement DHCP snooping security and Dynamic ARP Inspection for this
accessing port in this switch.
- Implement PortFast and BPDU guard for this accessing port in this switch.
Part 9: Configure and verify static and default routing for IPv4 and IPv6
In part 9, you are going to configure static route:
- You must configure IPv4 & IPv6 standard static and floating standard static route.
- You must configure IPv4 & IPv6 default static and floating default static route.
- You must configure IPv4 & IPv6 host static and floating host static route.
Part 10: Troubleshoot the Topology
In the last part, you should troubleshoot your network to locate any configuration mistakes.
- Use verification commands to verify the configuration in the network.
- Use Ping, tracert to verify the connectivity.
© 2021 - 2022 Cisco Academy. All rights reserved. General Telecommunication Institute Page 3 of 4 www.gti.edu.ye
SRWE Final Skills Project
Tables help to design the network
VLAN Table
Port to VLAN Assignment Table
Device VLAN VLAN Name Ports Assignments
Addressing Table
Addressing Table
Default
Device Interface IPv4 Address Subnet Mask
Gateway
EtherChannel Table
Channel
Device Ports in Group Protocol VLANs
Group
Ex:
S3 F0/1-2 1 LACP Native VLAN 30
Trunks Table
Device Ports Mode VLAN
Ex:
S3 F0/1-2, Port-channel 1 Trunk Native VLAN 30
© 2021 - 2022 Cisco Academy. All rights reserved. General Telecommunication Institute Page 4 of 4 www.gti.edu.ye
