You are on page 1of 7

CCNPv6 SWITCH

Skills-Based Assessment
Topology

Objectives
Part 1: Configure the switches in the topology according to the diagram and the specifications provided.
Part 2: Test the network for appropriate connectivity and configured options.

Exam Overview
This skills-based assessment (SBA) is the final practical exam for Academy training for the course CCNPv6
SWITCH. In Part 1, you configure various features such as trunking, EtherChannel, VTP, VLANs, SVIs, routed
links, EIGRP, HSRP, port security and QoS. In Part 2, you create a Tcl script to test IP connectivity and use show
commands to verify configured options. This exam combines device configuration and troubleshooting.
Note: This lab uses Cisco WS-C2960-24TT-L switches with the Cisco IOS image c2960-lanbasek9-mz.12246.SE.bin, and Catalyst 3560-24PS with the Cisco IOS image c3560-advipservicesk9-mz.122-46.SE.bin. You can
use other switches (such as a 2950 or 3550) and Cisco IOS Software versions if they have comparable
capabilities and features. Depending on the switch model and Cisco IOS Software version, the commands
available and output produced might vary from what is shown in this lab.

Required Resources
• 2 switches (Cisco 2960 with the Cisco IOS Release 12.2(46)SE C2960-LANBASEK9-M image or comparable)
• 2 switches (Cisco 3560 with the Cisco IOS Release 12.2(46)SE C3560-ADVIPSERVICESK9-mz image or
comparable)
• 2 PCs (Windows OS)
• Ethernet and console cables

Part 1: Configure the network according to specifications.
1. Disable the links between ALS1 and ALS2.
2. Use multiple class C 192.168.X.0/24 networks as required for this SBA.
3. Configure the Fa0/11 link between DLS1 and DLS2 as a Layer 3 link and assign a network to it.
4. Configure the Fa0/12 link between DLS1 and DLS2 as an ISL trunk, and statically set all other interswitch links
as 802.1q trunks.
5. Bind the links between DLS1 and ALS1 in an EtherChannel and configure the two switches to actively negotiate
a PAgP link.
6. Place all switches in the VTP domain CISCO with DLS1 as the VTP server using VTP version 2. Configure all
other switches as VTP clients.
7. On DLS1, create VLAN 10 named CLIENT, VLAN 20 named VOICE, VLAN 30 named SERVER and VLAN 99
named MGMT. Choose a 192.168.X.0/24 network for each VLAN for use in subsequent steps.
8. Ensure that the VLAN 1 interface on all switches is not used for administrative management or user traffic.
9. Configure the Rapid PVST (PVRST+) protocol on all switches. Ensure that DLS1 becomes the spanning tree
root of VLANs 10 and 20 and DLS2 becomes the backup. Ensure that DLS2 becomes the spanning tree root of
VLANs 30 and 99 and DLS1 becomes the backup.
10. On DLS1 and DLS2 configure SVIs and HSRP to provide gateway redundancy for access layer clients in
VLANs 10, 20, 30 and 99. Create an SVI in VLANs 10, 20, 30 and 99, each with an IP address and mask from
their respective networks chosen in Step 7.
11. Configure DLS1 as the active HSRP router for VLANs 10 and 20 and configure DLS2 as backup. Configure
DLS2 as the active router for VLANs 30 and 99 and configure DLS1 as backup.
All contents are Copyright © 1992–2011 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 1 of 7

Permit the links between DLS2 and ALS2 to carry traffic only for the VLANs created in Step 7. Inc. Verify the spanning tree configuration and that the root bridge (DLS1 or DLS2) is correct for each VLAN. Configure server PC-B with an IP address in VLAN 30 and specify the VLAN 30 HSRP virtual address as the default gateway. configure port Fa0/6 with port security. All rights reserved. 19. Verify the traced route from client PC-A to server PC-B. Verify that the correct SVIs exist and that the correct HRSP routers are primary and standby for each VLAN. Verify that Auto-QoS VoIP support is configured for port Fa0/6 on ALS1. b. Enable PortFast on all access layer switch ports. specify the HSRP gateway address of VLAN 99 as the default gateway. Configure client PC-A with an IP address in the VLAN 10 network and specify the VLAN 10 HSRP virtual address as the default gateway. Shut down the port if a violation occurs. 17. d.0/16 with automatic summarization disabled. g.168. Part 2: Test network connectivity and configured options. and use EIGRP to advertise 192. This document is Cisco Public Information. Page 2 of 7 . Configure IP routing on DLS1 and DLS2. Verify that the EtherChannel between DLS1 and ALS1 is configured correctly. On ALS1. Verify that client PC-A can ping server PC-B. 20. 21. Allow up to two MAC addresses to be learned for IP phone support. h. 18. On ALS1 configure Fa0/6 as an access port in CLIENT VLAN 10 and to trust Cisco IP phones CoS using AutoQoS.12. e. Exam Notes: __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ __________________________________________________________________________________ All contents are Copyright © 1992–2011 Cisco Systems. 14.0. 15. Create a Tcl script and test connectivity from each distribution layer switch to the addresses you assigned in the topology. Verify that the correct VLANs exist on all switches and contain the correct ports. f. 16. 13. a. On ALS2 configure port Fa0/6 as an access port in SERVER VLAN 30. For ALS1 and ALS2. Note: The IOS for the access layer switches used in this SBA does not support Tcl scripting. Enable QoS globally on all switches. On ALS1 and ALS2 create an SVI for MGMT VLAN 99 with an IP address from the VLAN 99 network assigned in Step 7. Enable sticky learning. c. Use VOICE VLAN 20 as the voice VLAN.

11 [DLS1] Switch(config-if-range)# switchport trunk encapsulation dot1q [DLS1] Switch(config-if-range)# switchport mode trunk /**Optional BestPractice**/ [DLS1] Switch(config-if)# switchport nonegotiate optional [DLS1] Switch(config-if)# switchport trunk allowed vlan 1-100 [DLS1] Switch(config-if)# no shutdown [DLS1] Switch(config-if)# end /**End BestPractice**/ [DLS2] Switch(config)# interface FastEthernet 0/12 [DLS2] Switch(config-if)# switchport trunk encapsulation isl1 [DLS2] Switch(config-if)# switchport mode trunk [DLS2] Switch(config)# interface range fastEthernet 0/7 .168.0.255.X.255.168. DLS1# show vtp status All contents are Copyright © 1992–2011 Cisco Systems.8 ALS1(config-if-range)# channel-group 1 mode desirable ALS1(config)# interface port-channel 1 ALS1(config-if)# switchport mode trunk DLS1(config)# interface range fastEthernet 0/7 . [DLS1] Switch(config)# interface FastEthernet 0/12 [DLS1] Switch(config-if)# switchport trunk encapsulation isl1 [DLS1] Switch(config-if)# switchport mode trunk [DLS1] Switch(config)# interface range fastEthernet 0/7 . Inc.0. and statically set all other interswitch links as 802.8 DLS1(config-if-range)# channel-group 1 mode desirable /* Creating a port-channel interface Port-channel 1 DLS1(config)# interface port-channel 1 DLS1(config-if)# switchport mode trunk /* Verificam configurarea pe ambele switch-uri*/ #show etherchannel summary 6.2 Switch(config-if-range)# shutdown 2. Bind the links between DLS1 and ALS1 in an EtherChannel and configure the two switches to actively negotiate a PAgP link. ALS1# show interfaces trunk ALS1(config-if-range)# interface range GigabitEthernet 0/7 .ANSWER Part 1: Configure the network according to specifications.255. [DLS1] Switch(config)# interface Fa0/11 [DLS1] Switch(config-if)# no switchport [DLS1] Switch(config-if)# ip address 192.255. Configure all other switches as VTP clients.1 255.1q trunks. Page 3 of 7 .0 [DLS2] Switch(config-if)# exit 4.11 [DLS2] Switch(config-if-range)# switchport trunk encapsulation dot1q [DLS2] Switch(config-if-range)# switchport mode trunk /* Switch-urilor ASL1 si 2 li se aplica configuratia de trunchi*/ ALS1(config)# interface range fastEthernet 0/7 12 ALS1(config-if)# switchport mode trunk ALS2(config)# interface range fastEthernet 0/7 12 ALS2(config-if)# switchport mode trunk /* Verification trunk configuration */ ALS2# show interfaces fastEthernet 0/7 switchport DLS1# show interfaces trunk 5.0 [DLS1] Switch(config-if)# exit [DLS2] Switch(config)# interface Fa0/11 [DLS2] Switch(config-if)# no switchport [DLS2] Switch(config-if)# ip address 192.8 ALS1(config-if-range)# shutdown ALS1(config)# interface range fastEthernet 0/7 . Configure the Fa0/11 link between DLS1 and DLS2 as a Layer 3 link and assign a network to it. 3. All rights reserved.168. Disable the links between ALS1 and ALS2.2 255. Configure the Fa0/12 link between DLS1 and DLS2 as an ISL trunk. Use multiple class C 192. Place all switches in the VTP domain CISCO with DLS1 as the VTP server using VTP version 2.0/24 networks as required for this SBA. This document is Cisco Public Information. Switch(config)# hostname DLS1 Switch(config)# hostname DLS2 Switch(config)# hostname ALS1 Switch(config)# hostname ALS2 1. Switch(config-if-range)# interface range GigabitEthernet 0/1 .

DLS2(config)# vtp mode client Setting device to VTP CLIENT mode. Ensure that the VLAN 1 interface on all switches is not used for administrative management or user traffic.3 255.20 root secondary 10. create VLAN 10 named CLIENT.30.X. each with an IP address and mask from their respective networks chosen in Step 7. Ensure that DLS2 becomes the spanning tree root of VLANs 30 and 99 and DLS1 becomes the backup.DLS1(config)# vtp domain CISCO Changing VTP domain name from NULL to CISCO DLS1(config)# vtp version 2 DLS1(config)# vtp mode server Device mode already VTP SERVER. This document is Cisco Public Information.0 DLS1(config-if)# no shutdown /* Activam rutarea pentru a permite switch-ului sa actioneze ca layer 3 */ DLS1(config)# ip routing DLS1(config)# sh ip route /*Configuración interface DLS2*/ All contents are Copyright © 1992–2011 Cisco Systems.0 DLS1(config-if)# no shutdown DLS1(config)# interface vlan 99 DLS1(config-if)# ip address 192.20 root primary DLS1(config)#spanning-tree vlan 30. DLS1(config)# interface vlan 10 DLS1(config-if)# ip address 192. Choose a 192. 7.0/24 network for each VLAN for use in subsequent steps.168. ALS2(config)# vtp mode client Setting device to VTP CLIENT mode. Inc.99. Ensure that DLS1 becomes the spanning tree root of VLANs 10 and 20 and DLS2 becomes the backup.99 root secondary DLS2(config)#spanning-tree vlan 30.255.168.0 DLS1(config-if)# no shutdown DLS1(config)# interface vlan 20 DLS1(config-if)# ip address 192.99 root primary DLS2(config)#spanning-tree vlan 10. ALS1(config)# spanning-tree mode rapid-pvst ALS2(config)# spanning-tree mode rapid-pvst DLS1(config)# spanning-tree mode rapid-pvst DLS2(config)# spanning-tree mode rapid-pvst /* Pentru a compara configuratia: DLS1# show spanning-tree */ DLS1(config)#spanning-tree vlan 10.255.168. DLS1(config)# vlan 10 DLS1(config-vlan)# name CLIENT DLS1(config-vlan)# exit DLS1(config)# vlan 20 DLS1(config-vlan)# name VOICE DLS1(config-vlan)# exit DLS1(config)# vlan 30 DLS1(config-vlan)# name SERVER DLS1(config-vlan)# exit DLS1(config)# vlan 99 DLS1(config-vlan)# name MGMT DLS1(config-vlan)# exit 8. VLAN 20 named VOICE. Create an SVI in VLANs 10.3 255.255. Page 4 of 7 .255. On DLS1 and DLS2 configure SVIs and HSRP to provide gateway redundancy for access layer clients in VLANs 10. VLAN 30 named SERVER and VLAN 99 named MGMT. Configure the Rapid PVST (PVRST+) protocol on all switches.3 255.0 DLS1(config-if)# no shutdown DLS1(config)# interface vlan 30 DLS1(config-if)# ip address 192.168.255. 30 and 99.255. ALS1(config)# vlan 1 ALS1(config-vlan)# shutdown ALS1# show vlan brief ALS2(config)# vlan 1 ALS2(config-vlan)# shutdown ALS2# show vlan brief DLS1(config)# vlan 1 DLS1(config-vlan)# shutdown DLS1# show vlan brief DLS2(config)# vlan 1 DLS2(config-vlan)# shutdown DLS2# show vlan brief 9. 20.255. On DLS1. 20.3 255.168.10.20. 30 and 99.255. ALS1(config)# vtp mode client Setting device to VTP CLIENT mode. All rights reserved.

0 DLS2(config-if)# no shutdown DLS2(config)# interface vlan 30 DLS2(config-if)# ip address 192.30.168.1 DLS1(config-if)# standby 1 preempt DLS1(config-if)# standby 1 priority 100 DLS1(config-if)# exit **** HSRP Configuration for DLS2 **** DLS2(config)# ip routing DLS2(config)# interface vlan 10 DLS2(config-if)# standby 1 ip 192.1 DLS1(config-if)# standby 1 preempt DLS1(config-if)# standby 1 priority 150 DLS1(config-if)# exit DLS1(config)# interface vlan 20 DLS1(config-if)# standby 1 ip 192.4 255. On ALS1 and ALS2 create an SVI for MGMT VLAN 99 with an IP address from the VLAN 99 network assigned in Step 7.10.0 DLS2(config-if)# no shutdown DLS2(config)# interface vlan 20 DLS2(config-if)# ip address 192.1 DLS2(config-if)# standby 1 preempt DLS2(config-if)# standby 1 priority 150 DLS2(config-if)# exit DLS2(config)# interface vlan 99 DLS2(config-if)# standby 1 ip 192. All contents are Copyright © 1992–2011 Cisco Systems.168.1 DLS2(config-if)# standby 1 preempt DLS2(config-if)# standby 1 priority 100 DLS2(config-if)# exit DLS2(config)# interface vlan 30 DLS2(config-if)# standby 1 ip 192. Configure DLS1 as the active HSRP router for VLANs 10 and 20 and configure DLS2 as backup.20.20.255. **** HSRP Configuration for DLS1 **** DLS1(config)# ip routing DLS1(config)# interface vlan 10 DLS1(config-if)# standby 1 ip 192.168.DLS2(config)# interface vlan 10 DLS2(config-if)# ip address 192.255.1 DLS2(config-if)# standby 1 preempt DLS2(config-if)# standby 1 priority 150 DLS2(config-if)# exit DLS1# show standby DLS1# show standby brief DLS2# show standby brief /* Si quisiera verificar la configuración de HSRP */ DLS2(config)# interface range fastEthernet 0/7 .0 DLS2(config-if)# no shutdown DLS2(config)# interface vlan 99 DLS2(config-if)# ip address 192.4 255.1 DLS1(config-if)# standby 1 preempt DLS1(config-if)# standby 1 priority 100 DLS1(config-if)# exit DLS1(config)# interface vlan 20 DLS1(config-if)# standby 1 ip 192.99.10.168.4 255.20. Configure DLS2 as the active router for VLANs 30 and 99 and configure DLS1 as backup.4 255.168. This document is Cisco Public Information.168.255.30. Inc.168.30. All rights reserved. Page 5 of 7 .1 DLS2(config-if)# standby 1 preempt DLS2(config-if)# standby 1 priority 100 DLS2(config-if)# exit DLS2(config)# interface vlan 20 DLS2(config-if)# standby 1 ip 192.168.99.12 DLS2(config-if-range)# shutdown 12.168.255.0 DLS2(config-if)# no shutdown /* No se si es necesario activarlo también en el DLS2 */ DLS2(config)# ip routing 11.99.255.255.255.168.168.168.255.1 DLS1(config-if)# standby 1 preempt DLS1(config-if)# standby 1 priority 150 DLS1(config-if)# exit DLS1(config)# interface vlan 30 DLS1(config-if)# standby 1 ip 192.10.

30.5 255.ALS1(config)# interface vlan 99 ALS1(config-if)# ip address 192. Page 6 of 7 . Configure IP routing on DLS1 and DLS2.0 DLS2(config)#router EIGRP 1 DLS2(config-router)#no auto-summary DLS2(config-router)#network 192. ALS2(config)# interface fastEthernet 0/6 ALS2(config-if)# switchport mode access ALS2(config-if)# switchport access vlan 30 20.255.20. Enable QoS globally on all switches.99 DLS2(config)# (config)#interface range fastEthernet 0/7 ± 8 DLS2(config-if)#switchport trunk allowed vlan 10. Note: The IOS for the access layer switches used in this SBA does not support Tcl scripting.6 255.0 ALS2(config-if)# no shutdown 13.168.99.1 14. ALS1(config)# ip default-gateway 192.0.168. Part 2: Test network connectivity and configured options.255.0/16 with automatic summarization disabled.1 ALS2(config)# ip default-gateway 192.168.168. Shut down the port if a violation occurs.255. DLS1#set qos enable DLS2#set qos enable ALS1#set qos enable ALS2#set qos enable ALS1(config)#mls qos ALS2(config)#mls qos DLS1(config)#mls qos DLS2(config)#mls qos 17.99. All contents are Copyright © 1992–2011 Cisco Systems.0 ALS1(config-if)# no shutdown ALS2(config)# interface vlan 99 ALS2(config-if)# ip address 192. configure port Fa0/6 with port security. Verify that the correct VLANs exist on all switches and contain the correct ports. On ALS1 configure Fa0/6 as an access port in CLIENT VLAN 10 and to trust Cisco IP phones CoS using AutoQoS. Create a Tcl script and test connectivity from each distribution layer switch to the addresses you assigned in the topology. This document is Cisco Public Information. Inc. Configure client PC-A with an IP address in the VLAN 10 network and specify the VLAN 10 HSRP virtual address as the default gateway. For ALS1 and ALS2. specify the HSRP gateway address of VLAN 99 as the default gateway. Allow up to two MAC addresses to be learned for IP phone support. ALS1(config-if)# switchport port-security ALS1(config-if)# switchport port-security maximum 2 ALS1(config-if)# switchport port-security mac-address sticky ALS1(config-if)# switchport port-security violation shutdown ALS1(config-if)# exit 19.168. Use VOICE VLAN 20 as the voice VLAN. All rights reserved. Enable PortFast on all access layer switch ports. Enable sticky learning. ALS1(config)# interface fastEthernet 0/6 ALS1(config-if)# switchport mode access ALS1(config-if)# switchport access vlan 10 ALS1(config-if)# switchport voice vlan 20 ALS1(config-if)# mls qos trust device cisco-phone ALS1(config-if)# auto qos voip cisco-phone /* verify configuration */ ALS1# show mls qos interface fastEthernet 0/15 ALS1# show run interface fastEthernet 0/15 18. a. b.99.99 16. On ALS2 configure port Fa0/6 as an access port in SERVER VLAN 30.0 21. DLS1(config)#router EIGRP 1 DLS1(config-router)#no auto-summary DLS1(config-router)#network 192. ALS2(config)# (config)#interface range fastEthernet 0/7 . Configure server PC-B with an IP address in VLAN 30 and specify the VLAN 30 HSRP virtual address as the default gateway. Permit the links between DLS2 and ALS2 to carry traffic only for the VLANs created in Step 7.20.0.255. ALS1(config)# interface fa0/6 ALS1(config-if)# spanning-tree portfast default ALS1(config-if)# no shutdown ALS2(config)# interface fa0/6 ALS2(config-if)# spanning-tree portfast default ALS2(config-if)# no shutdown 15. On ALS1.8 ALS2(config-if)#switchport trunk allowed vlan 10. and use EIGRP to advertise 192.30.168.168.0.99.

This document is Cisco Public Information. Verify that the EtherChannel between DLS1 and ALS1 is configured correctly. Verify that the correct SVIs exist and that the correct HRSP routers are primary and standby for each VLAN.c. Verify that client PC-A can ping server PC-B. All rights reserved. f. Page 7 of 7 . e. Verify that Auto-QoS VoIP support is configured for port Fa0/6 on ALS1. Verify the spanning tree configuration and that the root bridge (DLS1 or DLS2) is correct for each VLAN. Inc. d. h. All contents are Copyright © 1992–2011 Cisco Systems. Verify the traced route from client PC-A to server PC-B. g.