CCNP ENCOR lab 2 of 36

Troubleshoot VLANs, VTP and 802.1Q trunks

The warehouse switching block from lab 1 has been 'standardised' by a contractor and half the users are offline. Work bottom-up through trunks, DTP, VTP, native VLANs, access ports and SVIs to find and fix five faults.

Run this lab

It needs Lite: its 6 nodes are set to 6 vCPU and 5,376 MB in total. That fits the free demo too.

In your workspace: Shared, then CCNP ENCOR 350-401 guided labs, then 02 - Troubleshoot VLANs VTP and 802-1Q trunks

Try it free for 30 minutesRun it on Lite from £3 a day

The free demo needs no card and no email. Every lab plan includes every guided lab.

Level
Intermediate
Time
About 60 minutes
Nodes need
6 vCPU, 5,376 MB
Smallest plan
Lite

The scenario

Over the weekend a contractor "standardised" the warehouse switches from lab 1. On Monday morning the service desk has three tickets:

  1. INC-5101 The scanner station (PC2) and the staff PC on ASW2 (PC3) can't reach anything, and ASW2 can't be managed.
  2. INC-5102 PC1 on ASW1 can't reach its gateway or anything else.
  3. INC-5103 DSW1's console keeps printing CDP warnings about the link to ASW1.

The design hasn't changed: it's the one you built in lab 1 and it's summarised below. Find and fix every fault, and don't change anything that already matches the design.

ItemDesign
VTPversion 2, domain FERNHILL, password Fh-VTP-2026; DSW1 server, ASW1 and ASW2 clients
VLANs10 STAFF, 20 WAREHOUSE, 99 MGMT, 999 NATIVE
DSW1–ASW1static 802.1Q trunk, DTP off, native 999, allowed 10,20,99
DSW1–ASW2DTP trunk (DSW1 desirable, ASW2 auto), native 999, allowed 10,20,99
Access portsASW1 Gi1/0 VLAN 10 (PC1); ASW2 Gi1/0 VLAN 20 (PC2), Gi1/1 VLAN 10 (PC3)
Layer 3DSW1 SVIs 10.10.10.1, 10.10.20.1, 10.10.99.1; ASW1 10.10.99.11, ASW2 10.10.99.12
PCsPC1 10.10.10.10, PC2 10.10.20.10, PC3 10.10.10.11 (/24, gateway .1)

Topology: DSW1 Gi0/1 — ASW1 Gi0/1 · DSW1 Gi0/2 — ASW2 Gi0/1 · PC1 on ASW1 Gi1/0 · PC2 and PC3 on ASW2 Gi1/0 and Gi1/1.

What you’ll practise

  • Troubleshoot a switched network bottom-up with CDP, show interfaces, show interfaces trunk and show vlan
  • Recognise DTP and VTP domain mismatches from their symptoms and log messages
  • Find allowed-list and native VLAN mismatches on 802.1Q trunks
  • Separate layer 2 faults (wrong access VLAN) from layer 3 faults (a shut SVI)

The tasks

  1. Work bottom-up
  2. INC-5101 (part 1): the ASW2 uplink
  3. INC-5101 (part 2): PC2 and PC3
  4. INC-5102: PC1
  5. INC-5103: the CDP warnings

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Troubleshoot VLANs VTP and 802-1Q trunks6 nodes, 5 links. Every link is listed as text below the diagram.DSW1ASW1ASW2PC1PC2PC3Gi1/0eth0Gi1/0eth0Gi1/1eth0Gi0/1Gi0/1Gi0/2Gi0/1
6 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Nodes in Troubleshoot VLANs, VTP and 802.1Q trunks, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
DSW1Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 768 MB
ASW1Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 768 MB
ASW2Cisco IOSvL2viosl2-adventerprisek9-m.ssa.high_iron_202009291 vCPU, 768 MB
PC1VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB
PC2VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB
PC3VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder CCNP ENCOR 350-401 guided labs.

  3. Open 02 - Troubleshoot VLANs VTP and 802-1Q trunks and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More CCNP ENCOR labs

All CCNP ENCOR labs

Related labs in other courses

CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.