CloudLabBox
Try the free demo

CCNA lab 45 of 46

Capstone 2: a redundant campus with an Internet edge

Build a two-tier campus that survives the loss of any distribution switch or link: trunks and an LACP bundle, Rapid PVST+ roots aligned with HSRP, Layer 3 switching with OSPF to an edge router, central DHCP through relays, PAT to the Internet and an ACL protecting management.

Run this lab

It needs Standard: its 9 nodes are set to 9 vCPU and 9,216 MB in total.

In your workspace: Shared, then CCNA 200-301 guided labs, then 45 - Capstone 2 - a redundant campus with an Internet edge

Run it on Standard from £5 a day

The free demo can’t run it: it has 6 vCPU and 8 GB, and this lab’s nodes need 9 vCPU and 9,216 MB together. Every lab plan includes every guided lab.

Level
Advanced
Time
About 150 minutes
Nodes need
9 vCPU, 9,216 MB
Smallest plan
Standard

The scenario

Meridian College's new campus must keep working if any one distribution switch, uplink or bundle member fails. You have two distribution switches (DSW1, DSW2, routing in hardware), two access switches (ASW1, ASW2), an Internet edge router (EDGE) and an ISP (already configured). Build it from the requirements and prove each one.

Addressing

NetworkAddresses
VLAN 10 STAFF10.45.10.0/24: HSRP VIP .1, DSW1 .2, DSW2 .3; PC1 (ASW1 Gi1/0) by DHCP
VLAN 20 SALES10.45.20.0/24: VIP .1, DSW1 .2, DSW2 .3; PC2 (ASW2 Gi1/0) and PC3 (ASW1 Gi1/1) by DHCP
VLAN 99 MGMT10.45.99.0/24: VIP .1, DSW1 .2, DSW2 .3, ASW1 .11, ASW2 .12
EDGE – DSW1 / EDGE – DSW210.0.1.0/30 (EDGE .1, DSW1 .2) / 10.0.2.0/30 (EDGE .1, DSW2 .2), routed ports
EDGE Loopback010.255.255.254/32 (DHCP server address)
EDGE – ISP203.0.113.2/30 (ISP .1); Internet test 198.51.100.1

Requirements

  1. VLANs 10, 20 and 99 on every switch (VTP transparent, Rapid PVST+). Access ports as in the table, PortFast and BPDU guard on host ports.
  2. Trunks (802.1Q, static, DTP off, native VLAN 99, allowed 10, 20, 99): each access switch to both distribution switches (ASW1 Gi0/0–DSW1 Gi0/1, ASW1 Gi0/1–DSW2 Gi0/1, ASW2 Gi0/0–DSW1 Gi0/2, ASW2 Gi0/1–DSW2 Gi0/2).
  3. EtherChannel: DSW1 Gi0/3 + Gi1/0 to DSW2 Gi0/3 + Gi1/0 as Port-channel1, LACP active on both ends, carrying the same trunk settings.
  4. Spanning tree: DSW1 is root primary for VLANs 10 and 99 and secondary for 20; DSW2 the opposite.
  5. Gateways: SVIs on both distribution switches with HSRP version 2 (group = VLAN number). DSW1 is active (priority 110, preempt) for VLANs 10 and 99, DSW2 for VLAN 20. The access switches use the VLAN 99 VIP as their default gateway.
  6. Routing: routed ports to EDGE; OSPF area 0 on EDGE, DSW1 and DSW2 (router IDs 1.1.1.1, 2.2.2.2, 3.3.3.3), point-to-point links, SVIs advertised but passive. EDGE has a static default route to the ISP and originates it into OSPF.
  7. DHCP: EDGE serves VLANs 10 and 20 (exclude .1–.20, gateway = the VIP, DNS 198.51.100.53); both distribution switches relay to 10.255.255.254.
  8. Internet: PAT on EDGE for 10.45.0.0/16.
  9. Protect management: VLAN 20 may not reach VLAN 99 (named extended ACL PROTECT-MGMT inbound on the VLAN 20 SVIs); everything else allowed.

What you’ll practise

  • Design and build a redundant two-tier campus from requirements
  • Align spanning-tree roots with HSRP active gateways per VLAN
  • Route between Layer 3 switches and an edge router with OSPF and a default route
  • Provide DHCP centrally through relays on redundant gateways
  • Verify redundancy by reading the state of every protocol

The tasks

  1. Design for one failure at a time
  2. Build the switching layer
  3. Build the gateways
  4. Build the routed core and the edge
  5. Build the services
  6. Test a failure

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Capstone 2 - a redundant campus with an Internet edge9 nodes, 12 links. Every link is listed as text below the diagram.ISPEDGEDSW1DSW2ASW1ASW2PC1PC3PC2Gi0/0Gi0/0Gi1/1eth0Gi1/0eth0Gi0/1Gi0/0Gi0/2Gi0/1Gi1/0eth0Gi0/1Gi0/0Gi0/2Gi0/0Gi0/3Gi0/3Gi1/0Gi1/0Gi0/2Gi0/0Gi0/1Gi0/1
9 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Every link, as text
  • EDGE Gi0/0 to ISP Gi0/0
  • EDGE Gi0/1 to DSW1 Gi0/0
  • EDGE Gi0/2 to DSW2 Gi0/0
  • DSW1 Gi0/1 to ASW1 Gi0/0
  • DSW1 Gi0/2 to ASW2 Gi0/0
  • DSW2 Gi0/1 to ASW1 Gi0/1
  • DSW2 Gi0/2 to ASW2 Gi0/1
  • DSW1 Gi0/3 to DSW2 Gi0/3
  • DSW1 Gi1/0 to DSW2 Gi1/0
  • ASW1 Gi1/0 to PC1 eth0
  • ASW1 Gi1/1 to PC3 eth0
  • ASW2 Gi1/0 to PC2 eth0
Nodes in Capstone 2: a redundant campus with an Internet edge, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
ISPCisco IOSvvios-adventerprisek9-m.SPA.159-3.M61 vCPU, 1,024 MB
EDGECisco IOSvvios-adventerprisek9-m.SPA.159-3.M61 vCPU, 1,024 MB
DSW1Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 1,024 MB
DSW2Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 1,024 MB
ASW1Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 1,024 MB
ASW2Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 1,024 MB
PC1VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB
PC3VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB
PC2VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder CCNA 200-301 guided labs.

  3. Open 45 - Capstone 2 - a redundant campus with an Internet edge and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More CCNA labs

All CCNA labs

Related labs in other courses

CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.