Home > Solution to Lab Challenge – Switch Config

Solution to Lab Challenge – Switch Config

Go to comments

 

Lab 1

1. spanning-tree mode rapid-pvst

2. spanning-tree vlan 10 root primary
spanning-tree vlan 10 root secondary

3. spanning-tree guard root

4. spanning-tree portfast

5. channel-group 1 mode on

6. switchport trunk encapsulation dot1q

7. switchport mode trunk
switchport mode dynamic auto

8. switchport mode dynamic desirable

9. switchport mode trunk
switchport nonegotiate

Lab 2

1.vlan 10,20,30,40
2.
a) spanning-tree mst configuration
b) name digitaltut
c) revision 1
d) instance 1 vlan 10, 20
e) instance 2 vlan 30, 40
f)
f1. spanning-tree mst 0 root primary
f2. spanning-tree mst 1 root primary
f3. spanning-tree mst 2 root secondary

g)
g1. spanning-tree mst 0 root secondary
g2. spanning-tree mst 1 root secondary
g3. spanning-tree mst 2 root primary
g4. spanning-tree mode mst

3. vlan dot1q tag native

4. switchport trunk native vlan 999

5. switchport trunk allowed vlan 10, 20, 30, 40

Lab 3

1. vtp domain digitaltut
2. vtp version 2
3. vtp mode server
4. vtp mode client
5. vtp mode transparent
6. vtp password CCIE$way
7. vtp pruning
8.
a) interface vlan 1
b) ip address 10.1.1.1 255.255.255.0
9. switchport host
10. spanning-tree portfast bpduguard default
11.
a) monitor session 1 source interface range fastEthernet0/1 – 10 (can use keyword “both” or not)
b) monitor session 1 destination interface fastEthernet0/15
12. ip default-gateway 10.1.1.254

Lab 4

1.vtp mode transparent

2.
a) vlan 15
b)private-vlan community

3.
a) vlan 67
b) private-vlan isolated

4.
a) vlan 45
b) private-vlan primary
c) private-vlan association (add) 15,67
d) switchport mode private-vlan promiscuous
e) switchport private-vlan mapping 45 15, 67

5.
a) switchport mode private-vlan host
b) switchport private-vlan host-association 45 15

6.
a) switchport mode private-vlan host
b) switchport private-vlan host-association 45 67

7.
a) switchport trunk encapsulation dot1q
b) switchport mode trunk
Lab 5
switchport mode access
switchport access vlan 20
switchport port-security
switchport port-security maximum 10
switchport port-security mac-address 000f.abab.abab
switchport port-security violation shutdown
switchport port-security aging time 5
switchport port-security aging type inactivity
errdisable recovery cause psecure-violation
errdisable recovery interval 600
spanning-tree vlan 20 root primary
spanning-tree vlan 20 port-priority 64 		Lab 6
track 1 ip route 8.8.8.0 255.255.255.0 reachability”
ip address 192.168.30.1 255.255.255.0
standby 1 ip 192.168.30.254
standby 1 priority 120
standby 1 authentication md5 key-string digitaltut
standby 1 preempt
standby 1 timers 3 16
standby 1 track 1 decrement 30
udld port aggressive
ip sla 1
icmp-echo 1.1.1.1 source-ip 2.2.2.2
frequency 300
ip sla schedule 1 start-time now recurring
Lab 7
aaa new-model
radius-server host 10.6.4.1 key digitaltut
aaa authentication login default group radius local
username localuser secret localpass
snmp-server community publickey ro
snmp-server community secret$admin rw
snmp-server host 192.168.12.22 publickey
logging host 10.6.4.200
logging buffered 10000
logging trap errors
vlan 40
remote-span
monitor session 1 source interface fastethernet 0/3
monitor session 1 destination remote vlan 40
monitor session 1 source remote vlan 40
monitor session 1 destination interface fastethernet 0/5 		 

 

Comments
  1. KOCCNP
    March 29th, 2025

    Please revise lab 3. As to where I am suppose to fill in answers in regards to the placeholders for 8 through 11 get really confusing. Thank you.

  2. Anonymous
    September 8th, 2025

    I’m having issues with lab 1, item 4. My response is identical to the answer but it’s returning “Statement 4 is not correct!”

  3. digitaltut
    September 8th, 2025

    @Anonymous: Please post your command here so that we can have a closer check for you!

  4. Ani
    September 17th, 2025

    Please confirm LAb 7:q12. ….last two configs: should it not be on “Sw4”?

  1. No trackbacks yet.