Changes between Initial Version and Version 1 of Cnbp2022/Agenda/NetworkSetup


Ignore:
Timestamp:
Feb 19, 2022, 9:38:43 AM (3 years ago)
Author:
geethike
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • Cnbp2022/Agenda/NetworkSetup

    v1 v1  
     1= Campus Network Design - Network Setup =
     2----
     3
     4In this tutorial, we will establish dual-stack network connectivity within all nodes of the network given below.
     5
     6[[Image(vlans.png,85%,border=1, center)]]
     7
     8== IP Address Plan ==
     9
     10||=     **Device**      =||=    **Management IP Address**       =||=    **MGT Network** =||=    **MGT VLAN**    =||                             
     11||      FAC1    ||      10.1.2.1        ||              10.XY.2.0/24    ||      VLAN 2    ||
     12||      FAC1-BLD1-FL0   ||      ~~10.XY.2.2~~ Ignore(LAB only)  ||              10.XY.2.0/24    ||      VLAN 2    ||                   
     13||      FAC1-BLD1-FL1   ||      ~~10.XY.2.3~~ Ignore(LAB only)  ||              10.XY.2.0/24    ||      VLAN 2    ||   
     14||      FAC1-BLD1-FL2   ||      10.XY.2.4       ||              10.XY.2.0/24    ||      VLAN 2    ||           
     15||      FAC1-BLD2-FL0   ||      ~~10.XY.2.5~~ Ignore(LAB only)  ||              10.XY.2.0/24    ||      VLAN 2    ||
     16||      FAC2    ||      10.1.3.1        ||              10.XY.3.0/24    ||      VLAN 3    ||                           
     17||      FAC2-BLD1-FL1   ||      ~~10.XY.3.2~~ Ignore(LAB only)  ||              10.XY.3.0/24    ||      VLAN 3    ||                           
     18||      FAC2-BLD2-FL1   ||      ~~10.XY.3.3~~ Ignore(LAB only)  ||              10.XY.3.0/24    ||      VLAN 3    ||                           
     19||      FAC2-BLD2-FL3   ||      ~~10.XY.3.4~~ Ignore(LAB only)  ||              10.XY.3.0/24    ||      VLAN 3    ||                           
     20                                                               
     21----                                                           
     22       
     23[=#point1]                                             
     24||=     **FAC1**        =||=    **Type**        =||=    **VLANS/IP**    =||=    **Native VLAN** =||
     25||      F0/0    ||      Routed Link     ||      10.XY.0.6/30[[br]]2401:DD00:20XY:2::FFFF/64     ||      -       ||
     26||      F0/1    ||      Routed Link     ||      10.XY.0.1/30[[br]]2401:DD00:20XY:1::FFFE/64     ||      -       ||
     27||      F1/0    ||      Trunk   ||      10, 20  ||      2       ||
     28||      F1/1    ||      Trunk   ||      20, 30  ||      2       ||
     29||      F1/15   ||      Access  ||      5       ||      -       ||
     30                                                               
     31----                                                           
     32                                                               
     33                                                               
     34||=     **FAC2**        =||=    **Type**        =||=    **VLANS/IP**    =||=    **Native VLAN** =||
     35||      F0/1    ||      Routed Link     ||      10.XY.0.5/30[[br]]2401:dd00:20XY:2::FFFE/64     ||      -       ||
     36||      F1/0    ||      Trunk   ||      60, 70  ||      3       ||
     37||      F1/1    ||      Trunk   ||      70, 80  ||      3       ||
     38                                                               
     39
     40=== Log in to the the devices ===
     41
     42In dynagen console type command "list" and it will show you the running devices and console port associated with them.Use terminal emulator (putty) to login to device using local host ip with associated port.
     43
     44=== Initial Configurations ===
     45
     46Before configuring the devices for the network setup. Let's configure some initial settings in the Core Network Devices.
     47
     48Press the '''Enter''' key to go to the user mode of the FAC1 switch. Prompt will look as follows.
     49{{{
     50FAC1#
     51}}}
     52In this privileged mode, you can check the router configuration by the following command. The configuration you see will be the default configuration
     53{{{
     54FAC1#show run
     55}}}
     56To add configurations you have to go configuration mode. Type '''config terminal'''. Note the prompt change.
     57{{{
     58FAC1(config)#
     59}}}
     60
     61
     62> '''note:''' If you get following error,
     63
     64> `%Error opening tftp://255.255.255.255/AccessRt-confg (Timed out)`
     65
     66> Give the following command in the config mode, `no service config`
     67
     68
     69
     70You can now start making configurations.
     71
     72 - The first thing you have to add is the hostname of the device. The hostname is the device's identification. In this Lab, device name or the hostname is automatically configured based on the GUI edits we did previously. If you want to change it you may use
     73{{{
     74hostname <device name>
     75}}}
     76
     77 - Then let's give a enable secret. Which is a password you set when you go to the privileged mode from the user mode? Make sure to use the '''<class password>''' as the enable secret
     78{{{
     79enable secret <class password>
     80}}}
     81 - Add the DNS server
     82{{{
     83ip name-server 10.XY.0.2
     84}}}
     85> In your production environment you may use your internal DNS resolver if needed.
     86 - Next, you can add a banner to your device. This will display every time you log in to the device
     87{{{
     88banner motd @ Unauthorized Access is Prohibited! @
     89}}}
     90 - Add more security by encrypting passwords in your config file
     91{{{
     92service password-encryption
     93}}}
     94 - Then lets's configure the line console which is the console port settings
     95    * Go to line console config mode
     96{{{
     97line console 0
     98}}}
     99    * Enable login authentication. Make sure not to save or exit the router after this command without executing the next command.
     100{{{
     101login
     102}}}
     103    * Set the password
     104{{{
     105password <class password>
     106}}}
     107 - Finally let's enable ssh (version 2) in the device. Type '''exit''' to go back to previous mode (config mode) from line console config mode
     108    * Configure a domain name. Use '''instXY.ac.lk''' for this lab where XY is your group id.
     109{{{
     110ip domain name instXY.ac.lk
     111}}}
     112    * Create an ssh user with a password. In here we will use the username admin with the class password
     113{{{
     114username admin secret <class password>
     115}}}
     116    * Create a certificate which will use for encryption
     117{{{
     118crypto key generate rsa
     119}}}
     120    * Give the size of key as 768 (minimum size needed to activate ssh version 2)
     121    * Then Configure the line vty
     122{{{
     123line vty 0 4
     124login local
     125transport input ssh
     126exit
     127}}}
     128   * Add SNMP community and location details
     129{{{
     130snmp-server community CNBP2019 ro
     131snmp-server ifindex persist
     132snmp-server contact NOC
     133snmp-server location Faculty_One
     134}}}
     135 - Now '''save the configurations'''. you have to Go to privileged mode and give the following command
     136{{{
     137#copy running-config startup-config
     138}}}
     139 - Check the configuration by '''show run''' command.
     140''' Apply these settings in FAC2 and FAC1-BLD1-FL2 as well'''
     141
     142
     143== Core Network Layer ==
     144
     145Let's start Configuring the connectivity between the core network (FAC1 and Fac2). We will start with Fac1.
     146
     147- Remember, the core network runs on routed ports. Get the IP from the [#point1 table]
     148
     149   * Link to Firewall
     150{{{
     151FAC1(config)# interface fastEthernet 0/1
     152FAC1(config-if)# description Link to Firewall
     153FAC1(config-if)# ip address 10.XY.0.1 255.255.255.252
     154FAC1(config-if)#ipv6 address 2401:dd00:20XY:1::fffe/64
     155FAC1(config-if)#no shutdown
     156FAC1(config-if)#exit
     157}}}
     158
     159  * Link to FAC2
     160{{{
     161FAC1(config)# interface fastEthernet 0/0
     162FAC1(config-if)# description Link to FAC2
     163FAC1(config-if)# ip address 10.XY.0.6 255.255.255.252
     164FAC1(config-if)#ipv6 address 2401:dd00:20XY:2::ffff/64
     165FAC1(config-if)#no shutdown
     166FAC1(config-if)#exit
     167}}}
     168
     169
     170* On switch FAC2 we have only one routed port. Get the IP from the [#point1 table]
     171   * Link to FAC1
     172
     173{{{
     174FAC2(config)# interface fastEthernet 0/1
     175FAC2(config-if)# description Link to FAC1
     176FAC2(config-if)# ip address 10.XY.0.5 255.255.255.252
     177FAC2(config-if)#ipv6 address 2401:dd00:20XY:2::fffe/64
     178FAC2(config-if)#no shutdown
     179FAC2(config-if)#exit
     180}}}
     181
     182 - Next, we need to configure routing among Core devices. We will configure dynamic routing / OSPF to distribute routing.
     183    * On FAC1, Define OSPF process and Process ID. In this lab use process ID as 1
     184{{{
     185FAC1(config)#ip routing
     186FAC1(config)#router ospf 1
     187}}}
     188    * Give the router ID
     189{{{
     190FAC1(config-router)#router-id 10.XY.2.1
     191}}}
     192    * You are announcing the core network and connected subnets. Use this command for this
     193{{{
     194FAC1(config-router)#redistribute connected subnets
     195FAC1(config-router)#network 10.XY.0.0 0.0.0.255 area 2
     196FAC1(config-router)#exit
     197}}}
     198    * Now you have enable OSPF on FAC1 Switch. Now lets add the default Route.
     199{{{
     200FAC1(config)# ip route 0.0.0.0 0.0.0.0 10.XY.0.2
     201}}}
     202   * Now let's enable routing for IPv6.
     203{{{
     204FAC1(config)# ipv6 unicast-routing
     205}}}
     206    * Create a OSPF v3 instance, Define OSPF process and Process ID. In this lab use process ID as 1
     207{{{
     208FAC1(config)#ipv6 router ospf 1
     209}}}
     210    * Give the router ID, this will be the same as ipv4 ospf router ID for simplicity
     211{{{
     212FAC1(config-rtr)#router-id 10.XY.2.1
     213}}}
     214    * You are going to redistribute the connected networks. Use this command for that,
     215{{{
     216FAC1(config-rtr)#redistribute connected
     217FAC1(config-rtr)#exit
     218}}}
     219    * Create the default route
     220{{{
     221FAC1(config)ipv6 route ::/0 2401:DD00:20XY:1::FFFF
     222}}}
     223   * Assign ospf to Ports on FAC1
     224{{{
     225FAC1(config)#int fa 0/0
     226FAC1(config-if)#ip ospf 1 area 2
     227FAC1(config-if)#ipv6 ospf 1 area 2
     228FAC1(config-if)#exit
     229}}}
     230   * Configure routing on FAC2   
     231{{{
     232FAC2(config)#ip routing
     233FAC2(config)#router ospf 1
     234FAC2(config-router)#router-id 10.XY.3.1
     235FAC2(config-router)#redistribute connected subnets
     236FAC2(config-router)#network 10.XY.0.0 0.0.0.255 area 2
     237FAC2(config-router)#exit
     238FAC2(config)# ip route 0.0.0.0 0.0.0.0 10.XY.0.6
     239FAC2(config)# ipv6 unicast-routing
     240FAC2(config)#ipv6 router ospf 1
     241FAC2(config-rtr)#router-id 10.XY.3.1
     242FAC2(config-rtr)#exit
     243FAC2(config)#int fa 0/1
     244FAC2(config-if)#ip ospf 1 area 2
     245FAC2(config-if)#ipv6 ospf 1 area 2
     246FAC2(config-if)#exit
     247FAC2(config)ipv6 route ::/0 2401:DD00:20XY:2::FFFF
     248}}}
     249
     250
     251== VLAN Structure ==
     252
     253Now we need to create VLANs in each L3 device and configure inter-VLAN routing. We will start with FAC1.
     254
     255=== VLANs for FAC1===
     256                                                               
     257||=     **FAC1**        =||= **VLAN Name**  =||=        **IPv4**        =||=    **IPv6**        =||
     258||      VLAN02  ||  FAC1_MGT  ||        10.XY.02.1/24   ||      -       ||
     259||      VLAN05  ||  Servers  || 10.XY.05.254/24 ||      2401:DD00:20XY:5::FFFF/64       ||             
     260||      VLAN10  ||  Dept1  ||   10.XY.10.254/24 ||      2401:DD00:20XY:1110::FFFF/64    ||             
     261||      VLAN20  ||  Dept2  ||   10.XY.20.254/24 ||      2401:DD00:20XY:1120::FFFF/64    ||             
     262||      VLAN30  ||  Dept3  ||   10.XY.30.254/24 ||      2401:DD00:20XY:1230::FFFF/64    ||             
     263                                                               
     264* First Create VLANs and provide a suitable description.
     265
     266{{{
     267Fac1# vlan database
     268Fac1(vlan)# vlan 2 name FAC1_MGT
     269}}}
     270
     271Repeat the same for all other VLAN's in FAC1.
     272
     273* Then we need to create vlan interfaces and assign routing.
     274
     275{{{
     276Fac1(vlan)# exit
     277Fac1# config t
     278Fac1(config)# interface vlan 2
     279Fac1(config-if)# ip address 10.XY.2.1 255.255.255.0
     280Fac1(config-if)# ip ospf 1 area 2
     281Fac1(config-if)# exit
     282}}}
     283
     284Following illustrates the dual stack connectivity.
     285
     286{{{
     287Fac1(config)# interface vlan 5
     288Fac1(config-if)# ip address 10.XY.5.254 255.255.255.0
     289Fac1(config-if)# ip ospf 1 area 2
     290Fac1(config-if)# ipv6 address 2401:DD00:20XY:5::FFFF/64
     291Fac1(config-if)# ipv6 ospf 1 area 2
     292Fac1(config-if)# exit
     293}}}
     294
     295* Continue same for the VLAN 10, 20 and 30.
     296
     297=== VLANs for FAC2===
     298
     299* Configure above same configurations on FAC2 switch for the following VLAN data
     300                                                                                                                                                                                                                                               
     301||=     **FAC2**        =||= **VLAN Name**   =||=  **IPv4**     =||=    **IPv6**        =||
     302||      VLAN03  ||  FAC2_MGT  ||        10.XY.03.1/24   ||      -       ||             
     303||      VLAN60  ||  Dept4  ||   10.XY.60.254/24 ||      2401:DD00:20XY:2160::FFFF/64    ||             
     304||      VLAN70  ||  Dept5  ||   10.XY.70.254/24 ||      2401:DD00:20XY:2270::FFFF/64    ||             
     305||      VLAN80  ||  Dept6  ||   10.XY.80.254/24 ||      2401:DD00:20XY:2280::FFFF/64    ||     
     306
     307
     308=== Assign Interfaces  ===
     309
     310On L3 devices we can have three types of links,
     311* L3 routed ports
     312* Trunk ports
     313* L2 Access Ports
     314
     315We have already configured routed ports and now we need to assign ports to our VLAN's created above.
     316
     317* Create Trunk Ports,
     318   * First make the interface a trunk port. This is for the link between FAC1 and Building 1
     319{{{
     320FAC1(config)#interface FastEthernet 1/0
     321FAC1(config-if)#switchport mode trunk
     322}}}
     323   * Define the encapsulation
     324{{{
     325FAC1(config-if)#switchport trunk encapsulation dot1q
     326}}}
     327   * Give the Description of the interface
     328{{{
     329FAC1(config-if)#description link to Building 1
     330}}}
     331   * Allow the VLAN's that we only need.
     332{{{
     333FAC1(config-if)#switchport trunk allowed vlan 1,2,10,20,1002-1005
     334}}}
     335   * Change the Native VLAN
     336{{{
     337FAC1(config-if)#switchport trunk native vlan 2
     338}}}
     339
     340Do the same for the other trunk link
     341
     342{{{
     343FAC1(config)#interface FastEthernet 1/1
     344FAC1(config-if)#switchport mode trunk
     345FAC1(config-if)#switchport trunk encapsulation dot1q
     346FAC1(config-if)#description link to Building 2
     347FAC1(config-if)#switchport trunk allowed vlan 1,2,20,30,1002-1005
     348FAC1(config-if)#switchport trunk native vlan 2
     349FAC1(config-if)#exit
     350}}}
     351* Create Access ports.
     352   * Assign the interface to be in Access Mode
     353{{{
     354FAC1(config)#interface FastEthernet 1/15
     355FAC1(config-if)#switchport mode access
     356}}}
     357   * Assign the VLAN
     358{{{
     359FAC1(config-if)#switchport access vlan 5
     360}}}
     361   * Assign a suitable description
     362{{{
     363FAC1(config-if)#description link to Monitoring Server
     364FAC1(config-if)#exit
     365}}}
     366
     367Make sure to save your setting with `FAC1#write` and `FAC2#write`
     368
     369== Distribution Layer ==
     370
     371For the lab purposes, we are using an L3 capable switch platform to illustrate a manageable L2 switch. We need to configure following on the '''FAC1-BLD1-FL2''',
     372
     373* Management Network
     374* Trunk Ports
     375*  Access Ports
     376
     377Details of the switch as follows,
     378
     379----                                                            ||
     380                                                               
     381||=     **FAC1-BLD1-FL2**       =||=    **Type**        =||=    **VLANS**       =||=    **Native VLAN** =||     
     382||      Fa1/0   ||      Access  ||      20      ||      -   || 
     383||      Fa1/13  ||      Trunk   ||      20      ||      2   ||
     384||      Fa1/14  ||      Trunk   ||      10      ||      2   || 
     385||      Fa1/15  ||      Trunk   ||      10,20   ||      2   || 
     386                                                               
     387
     388
     389=== Configure Management Network ===
     390
     391* Create VLAN 2 which is the MGT Network for Faculty 1. Then assign an IP address for the VLAN 2 interface.
     392{{{
     393FAC1-BLD1-FL2# vlan database
     394FAC1-BLD1-FL2(vlan)# vlan 2 name FAC1_MGT
     395FAC1-BLD1-FL2(vlan)# exit
     396FAC1-BLD1-FL2# config t
     397FAC1-BLD1-FL2(config)# interface vlan 2
     398FAC1-BLD1-FL2(config-if)# ip address 10.XY.2.4 255.255.255.0
     399FAC1-BLD1-FL2(config-if)# exit
     400}}}
     401*  apply default routing for the subnet.
     402{{{
     403FAC1-BLD1-FL2(config)#ip route 0.0.0.0 0.0.0.0 10.XY.2.1
     404}}}
     405
     406=== Configure Trunk Ports ===
     407
     408* Before configuring trunks we need to define the vlans first.
     409{{{
     410FAC1-BLD1-FL2# vlan database
     411FAC1-BLD1-FL2(vlan)# vlan 10 name DEPT1
     412FAC1-BLD1-FL2(vlan)# vlan 20 name DEPT2
     413FAC1-BLD1-FL2(vlan)#exit
     414}}}
     415
     416* This FAC1-BLD1-FL2 has three trunk ports configure them to allow VLAN 10,20 to fa1/15 and VLAN 10 on fa1/14 and VLAN 20 on fa1/15. We need to configure Native VLAN to VLAN 2 as well.
     417{{{
     418FAC1-BLD1-FL2(config)#interface FastEthernet 1/15
     419FAC1-BLD1-FL2(config-if)#switchport mode trunk
     420FAC1-BLD1-FL2(config-if)#switchport trunk encapsulation dot1q
     421FAC1-BLD1-FL2(config-if)#description link to FAC1_L3
     422FAC1-BLD1-FL2(config-if)#switchport trunk allowed vlan 1,2,10,20,1002-1005
     423FAC1-BLD1-FL2(config-if)#switchport trunk native vlan 2
     424FAC1-BLD1-FL2(config-if)#exit
     425FAC1-BLD1-FL2(config)#interface FastEthernet 1/14
     426FAC1-BLD1-FL2(config-if)#switchport mode trunk
     427FAC1-BLD1-FL2(config-if)#switchport trunk encapsulation dot1q
     428FAC1-BLD1-FL2(config-if)#description link to FAC1-BLD1-FL1A
     429FAC1-BLD1-FL2(config-if)#switchport trunk allowed vlan 1,2,10,1002-1005
     430FAC1-BLD1-FL2(config-if)#switchport trunk native vlan 2
     431FAC1-BLD1-FL2(config-if)#exit
     432FAC1-BLD1-FL2(config)#interface FastEthernet 1/13
     433FAC1-BLD1-FL2(config-if)#switchport mode trunk
     434FAC1-BLD1-FL2(config-if)#switchport trunk encapsulation dot1q
     435FAC1-BLD1-FL2(config-if)#description link to FAC1-BLD1-FL1B
     436FAC1-BLD1-FL2(config-if)#switchport trunk allowed vlan 1,2,20,1002-1005
     437FAC1-BLD1-FL2(config-if)#switchport trunk native vlan 2
     438FAC1-BLD1-FL2(config-if)#exit
     439}}}
     440
     441
     442=== Configure Access Ports ===
     443
     444* We have only one access port
     445
     446{{{
     447FAC1-BLD1-FL2(config)#interface FastEthernet 1/0
     448FAC1-BLD1-FL2(config-if)#switchport mode access
     449FAC1-BLD1-FL2(config-if)#switchport access vlan 20
     450FAC1-BLD1-FL2(config-if)#description link to PC3
     451FAC1-BLD1-FL2(config-if)#exit
     452}}}
     453
     454Make sure to save your setting with `FAC1-BLD1-FL2#write`
     455
     456
     457== Configuring the rest L2 network ==
     458
     459||=     **FAC1-BLD1-FL1A**      =||=    **Type**        =||=    **VLANS**       =||     
     460||      e0      ||      Access  ||      10      ||     
     461||      e7      ||      dot1q   ||              ||     
     462                                                               
     463
     464* Right-click on FAC1-BLD1-FL1A and select '''Configure'''
     465* Under Settings, Select
     466   * Port: 7
     467   * VLAN: 2
     468   * Type: dot1q
     469* Click Add
     470* Repeat again and select,
     471   * Port: 0
     472   * VLAN: 10
     473   * Type: access
     474* Click Add
     475* Click Apply and OK
     476
     477Repeat the same procedure for all other L2 switches but make sure you change the ports as per the tables below,
     478
     479
     480
     481----                                                           
     482                                                               
     483||=     **FAC1-BLD1-FL1B**      =||=    **Type**        =||=    **VLANS**       =||     
     484||      e0      ||      Access  ||      20      ||     
     485||      e7      ||      dot1q   ||      2       ||
     486                                                               
     487----                                                            ||
     488                                                               
     489||=     **FAC1-BLD2-FL0**       =||=    **Type**        =||=    **VLANS**       =||
     490||      e0      ||      Access  ||      20      ||
     491||      e1      ||      Access  ||      30      ||
     492||      e7      ||      dot1q   ||      2       ||
     493                                                               
     494----                                                           
     495                                                               
     496||=     **FAC2-BLD1-FL1**       =||=    **Type**        =||=    **VLANS**       =||
     497||      e0      ||      Access  ||      60      ||
     498||      e1      ||      Access  ||      70      ||
     499||      e7      ||      dot1q   ||      3       ||     
     500                                                               
     501----                                                           
     502                                                               
     503||=     **FAC2-BLD2-FL1**       =||=    **Type**        =||=    **VLANS**       =||
     504||      e0      ||      Access  ||      70      ||     
     505||      e6      ||      dot1q   ||      3       ||     
     506||      e7      ||      dot1q   ||      3       ||     
     507                                                               
     508----                                                           
     509                                                               
     510||=     **FAC2-BLD2-FL3**       =||=    **Type**        =||=    **VLANS**       =||
     511||      e0      ||      Access  ||      80      ||
     512||      e7      ||      dot1q   ||      3       ||
     513                                                               
     514----                                                           
     515                                                               
     516||=     **DMC** =||=    **Type**        =||     **VLANS**       ||
     517||      e0      ||      Access  ||      1       ||
     518||      e1      ||      Access  ||      1       ||
     519||      e7      ||      Access  ||      1       ||
     520
     521
     522== Configure End Devices ==
     523
     524=== Configure PC's ===
     525
     526* Right click on '''PC-1''' and select '''Console''', this will open a terminal or putty session on your '''User A''' host machine.
     527  * Enter following commands,
     528{{{
     529PC-1> ip 10.XY.10.1 24 10.XY.10.254
     530PC-1> ip dns 10.XY.0.1
     531PC-1> ip 2401:DD00:20XY:1110::1/64 2401:DD00:20XY:1110::ffff
     532PC-1> ip dns6 2401:DD00:20XY:1::FFFE
     533PC-1> save
     534}}}
     535>We will use the DNS forwarder installed in pfsense.
     536> On some GNS3 installations on Windows hosts may not support dns6 command, thereofore ignore it
     537  * For troubleshooting and configuration verification, we can use:
     538{{{
     539PC-1> show ip
     540PC-1> show ipv6
     541}}}
     542* Based on the following table configure all other end-user PC's just as above. You may need to change IP addresses.
     543||=     **Host Devices**        =||=    **IPv4**        =||=    **IPv6**        =||             
     544||      PC-1    ||  10.XY.10.1  ||      2401:DD00:20XY:1110::1/64       ||             
     545||      PC-2    ||              10.XY.20.1      ||      2401:DD00:20XY:1120::1/64       ||
     546||      PC-3    ||              10.XY.20.2      ||      2401:DD00:20XY:1120::2/64       ||             
     547||      PC-4    ||              10.XY.20.3      ||      2401:DD00:20XY:1120::3/64       ||             
     548||      PC-5    ||      10.XY.30.1      ||      2401:DD00:20XY:1230::1/64       ||             
     549||      PC-6    ||      10.XY.60.1      ||      2401:DD00:20XY:2160::1/64       ||             
     550||      PC-7    ||      10.XY.70.1      ||      2401:DD00:20XY:2270::1/64       ||
     551||      PC-8    ||      10.XY.70.2      ||      2401:DD00:20XY:2270::2/64       ||     
     552||      PC-9    ||      10.XY.80.1      ||      2401:DD00:20XY:2280::1/64       ||
     553||      Monitoring-Server       ||              10.XY.5.10      ||      2401:DD00:20XY:5::AAAA/64       ||             
     554||      Web-Server      ||      192.168.XY.100  ||      2401:DD00:20XY:1::PQRW/64       ||             
     555||      GUI-PC  ||||            via DHCP                ||             
     556                                                               
     557* On '''User B''' switch on '''Monitoring-Server''' and  '''Web-Server'''. Log-in as user '''wsuser''' with the class password.
     558   * Edit the following file to insert ip details according to the above table, you may also need to check the [wiki:Cnbp2019/Agenda/IpAllocation IP allocation table].
     559{{{
     560sudo vi /etc/netplan/50-cloud-init.yaml
     561}}}
     562   * Edit details as follows on Monitoring Server
     563{{{
     564# This file describes the network interfaces available on your system
     565# For more information, see netplan(5).
     566network:
     567    ethernets:
     568         enp0s3:
     569            addresses:
     570            - 10.XY.5.10/24
     571            - 2401:dd00:20XY:5::AAAA/64
     572            dhcp4: false
     573            dhcp6: false
     574            gateway4: 10.XY.5.254
     575            gateway6: 2401:dd00:20XY:5::FFFF
     576            nameservers:
     577                addresses:
     578                - 2401:dd00:20XY:1::FFFF
     579                search:
     580                - instXY.ac.lk
     581    version: 2
     582}}}
     583   * Restart servers.
     584{{{
     585sudo init 6
     586}}}
     587>You need to modify the above settings to suit the IP detail when applying to the webserver
     588* Test end-user connectivity using ping command on each.
     589
     590== Some commands to check your setup ==
     591* Check VLAN Setup
     592{{{
     593FAC1#show vlan-switch
     594}}}
     595* Check IP address details
     596{{{
     597FAC1#show ip interface brief
     598FAC1#show ipv6 interface brief
     599}}}
     600* Check OSPF details
     601{{{
     602FAC1#show ip ospf
     603FAC1#show ipv6 ospf
     604}}}
     605* Check IP routing details
     606{{{
     607FAC1#show ip route
     608FAC1#show ipv6 route
     609}}}
     610* Check Interface details
     611{{{
     612FAC1#show interface switchport
     613}}}
     614* Check all config
     615{{{
     616FAC1#show run