CloudLabBox
Try the free demo

CCNA lab 46 of 46

Capstone 3: enterprise troubleshooting challenge

The redundant campus from capstone 2 comes back with ten faults spread across access ports, trunks, EtherChannel, spanning tree, HSRP, OSPF, DHCP relay, NAT, an ACL and switch management. Work five help-desk tickets to root causes and restore the design.

Run this lab

It needs Standard: its 9 nodes are set to 9 vCPU and 9,216 MB in total.

In your workspace: Shared, then CCNA 200-301 guided labs, then 46 - Capstone 3 - enterprise troubleshooting challenge

Run it on Standard from £5 a day

The free demo can’t run it: it has 6 vCPU and 8 GB, and this lab’s nodes need 9 vCPU and 9,216 MB together. Every lab plan includes every guided lab.

Level
Advanced
Time
About 120 minutes
Nodes need
9 vCPU, 9,216 MB
Smallest plan
Standard

The scenario

Meridian College's campus (the network you built in capstone 2) was changed during a weekend "optimisation" by three different contractors. On Monday the help desk logs these tickets:

  • T1 Sales PC3 (ASW1 Gi1/1) "works, but my address starts 10.45.10 and the sales printer can't see me".
  • T2 Sales PC2 (ASW2) gets no address at all.
  • T3 Nobody in Sales can reach the Internet, even with a manual address.
  • T4 The monitoring system can't reach ASW2 (10.45.99.12), although ASW1 answers.
  • T5 The network team sees odd logs: HSRP complaints on VLAN 10, an EtherChannel member suspended, an OSPF neighbour missing on EDGE, and spanning tree reporting a new root for VLAN 10.

There are ten faults. The design hasn't changed: it's exactly capstone 2 (lab 45).

Design itemIntended state
VLANs10 STAFF, 20 SALES, 99 MGMT on every switch; PC1 VLAN 10 (ASW1 Gi1/0), PC3 VLAN 20 (ASW1 Gi1/1), PC2 VLAN 20 (ASW2 Gi1/0)
Trunksaccess-to-distribution and Po1 (LACP, Gi0/3 + Gi1/0): native 99, allowed 10, 20, 99
Spanning treeDSW1 root for 10 and 99, DSW2 root for 20
HSRP v2VIPs 10.45.10.1, 10.45.20.1, 10.45.99.1; DSW1 active for 10/99, DSW2 for 20
OSPF area 0EDGE 1.1.1.1, DSW1 2.2.2.2, DSW2 3.3.3.3; EDGE originates the default route
DHCPEDGE (10.255.255.254) for VLANs 10 and 20, relayed by both DSW SVIs
NATPAT on EDGE for 10.45.0.0/16
PROTECT-MGMTVLAN 20 may not reach 10.45.99.0/24; everything else allowed
ManagementASW1 10.45.99.11, ASW2 10.45.99.12, gateway 10.45.99.1

What you’ll practise

  • Triage several simultaneous faults and order the work by layer
  • Prove every fault with show output before changing anything
  • Restore a redundant design: trunks, EtherChannel, spanning-tree roots, HSRP and OSPF
  • Restore DHCP relay, NAT and ACL behaviour to match the design
  • Use an AI assistant critically, with deliberately chosen evidence

The tasks

  1. Triage
  2. Layer 2 (tickets T1, T2 and T5)
  3. Gateways and routing (T5)
  4. Services (T2, T3)
  5. Management (T4)
  6. Fix, verify and close the tickets

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Capstone 3 - enterprise troubleshooting challenge9 nodes, 12 links. Every link is listed as text below the diagram.ISPEDGEDSW1DSW2ASW1ASW2PC1PC3PC2Gi0/0Gi0/0Gi1/1eth0Gi1/0eth0Gi0/1Gi0/0Gi0/2Gi0/1Gi1/0eth0Gi0/1Gi0/0Gi0/2Gi0/0Gi0/3Gi0/3Gi1/0Gi1/0Gi0/2Gi0/0Gi0/1Gi0/1
9 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Every link, as text
  • EDGE Gi0/0 to ISP Gi0/0
  • EDGE Gi0/1 to DSW1 Gi0/0
  • EDGE Gi0/2 to DSW2 Gi0/0
  • DSW1 Gi0/1 to ASW1 Gi0/0
  • DSW1 Gi0/2 to ASW2 Gi0/0
  • DSW2 Gi0/1 to ASW1 Gi0/1
  • DSW2 Gi0/2 to ASW2 Gi0/1
  • DSW1 Gi0/3 to DSW2 Gi0/3
  • DSW1 Gi1/0 to DSW2 Gi1/0
  • ASW1 Gi1/0 to PC1 eth0
  • ASW1 Gi1/1 to PC3 eth0
  • ASW2 Gi1/0 to PC2 eth0
Nodes in Capstone 3: enterprise troubleshooting challenge, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
ISPCisco IOSvvios-adventerprisek9-m.SPA.159-3.M61 vCPU, 1,024 MB
EDGECisco IOSvvios-adventerprisek9-m.SPA.159-3.M61 vCPU, 1,024 MB
DSW1Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 1,024 MB
DSW2Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 1,024 MB
ASW1Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 1,024 MB
ASW2Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 1,024 MB
PC1VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB
PC3VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB
PC2VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder CCNA 200-301 guided labs.

  3. Open 46 - Capstone 3 - enterprise troubleshooting challenge and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More CCNA labs

All CCNA labs

Related labs in other courses

CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.