CCNP ENCOR lab 1 of 36
Campus VLANs, VTP, 802.1Q trunks and forwarding tables
Build the switching block of Fernhill's new Leeds warehouse: VTP to share VLANs, one static and one DTP-negotiated 802.1Q trunk, access ports, inter-VLAN routing on the distribution switch, and a look inside the MAC, ARP and CEF tables that forward every frame.
Run this lab
It needs Lite: its 6 nodes are set to 6 vCPU and 5,376 MB in total. That fits the free demo too.
In your workspace: Shared, then CCNP ENCOR 350-401 guided labs, then 01 - Campus VLANs VTP 802-1Q trunks and forwarding tables
- Level
- Intermediate
- Time
- About 70 minutes
- Nodes need
- 6 vCPU, 5,376 MB
- Smallest plan
- Lite
The scenario
Fernhill Freight is fitting out its new Leeds warehouse. The network team has racked a distribution switch (DSW1) and two access switches (ASW1, ASW2). They're cabled but unconfigured, and the PCs already have their addresses. The design:
- VLAN 10 STAFF (10.10.10.0/24), VLAN 20 WAREHOUSE (10.10.20.0/24), VLAN 99 MGMT (10.10.99.0/24) and VLAN 999 NATIVE (no hosts, used only as the native VLAN on trunks).
- VLANs are created once, on DSW1, and shared with VTP version 2 (domain
FERNHILL, passwordFh-VTP-2026). - DSW1–ASW1 is a static trunk with DTP turned off; DSW1–ASW2 is negotiated with DTP, so you can compare the two.
- DSW1 routes between the VLANs (its SVIs use .1); the access switches are managed on VLAN 99.
| Device | Interface | VLAN / mode | Address |
|---|---|---|---|
| DSW1 | Gi0/1 | trunk to ASW1 (static) | – |
| DSW1 | Gi0/2 | trunk to ASW2 (DTP desirable) | – |
| DSW1 | Vlan10 / Vlan20 / Vlan99 | SVIs | 10.10.10.1 / 10.10.20.1 / 10.10.99.1 (/24) |
| ASW1 | Gi0/1 / Gi1/0 | trunk / access VLAN 10 (PC1) | Vlan99 10.10.99.11/24 |
| ASW2 | Gi0/1 / Gi1/0 / Gi1/1 | trunk (DTP auto) / access VLAN 20 (PC2) / access VLAN 10 (PC3) | Vlan99 10.10.99.12/24 |
| PC1 / PC2 / PC3 | eth0 | VLAN 10 / 20 / 10 | 10.10.10.10 / 10.10.20.10 / 10.10.10.11 |
Topology: DSW1 Gi0/1 — ASW1 Gi0/1 · DSW1 Gi0/2 — ASW2 Gi0/1 · PC1 on ASW1 Gi1/0 · PC2 and PC3 on ASW2 Gi1/0 and Gi1/1.
What you’ll practise
- Place a two-tier (collapsed core) switching block in the enterprise design models
- Configure VTP version 2 server and clients and explain its risks
- Build a static trunk and a DTP-negotiated trunk with a dedicated native VLAN and an allowed list
- Configure access ports and SVIs for inter-VLAN routing
- Read the MAC address table, the ARP table and the CEF FIB and adjacency tables
The tasks
- Find your place in the design
- Share VLANs with VTP
- Build a static trunk to ASW1
- Let DTP negotiate the trunk to ASW2
- Connect the users
- Route between the VLANs and manage the switches
- Look inside the forwarding tables
The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.
Topology and devices
The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.
Every link, as text
- DSW1
Gi0/1to ASW1Gi0/1 - DSW1
Gi0/2to ASW2Gi0/1 - ASW1
Gi1/0to PC1eth0 - ASW2
Gi1/0to PC2eth0 - ASW2
Gi1/1to PC3eth0
| Node | Device | Image in Add Node | Set to |
|---|---|---|---|
| DSW1 | Cisco IOSvL2 | viosl2-adventerprisek9-m.ssa.high_iron_20200929 | 1 vCPU, 768 MB |
| ASW1 | Cisco IOSvL2 | viosl2-adventerprisek9-m.ssa.high_iron_20200929 | 1 vCPU, 768 MB |
| ASW2 | Cisco IOSvL2 | viosl2-adventerprisek9-m.ssa.high_iron_20200929 | 1 vCPU, 768 MB |
| PC1 | VPCS host | Built in to EVE-NG | Counted as 1 vCPU, 1,024 MB |
| PC2 | VPCS host | Built in to EVE-NG | Counted as 1 vCPU, 1,024 MB |
| PC3 | VPCS host | Built in to EVE-NG | Counted as 1 vCPU, 1,024 MB |
How to open this lab
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
CCNP ENCOR 350-401 guided labs.Open
01 - Campus VLANs VTP 802-1Q trunks and forwarding tablesand start its nodes, then open Lab Tasks for the scenario and the steps.
The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.
More CCNP ENCOR labs
Related labs in other courses
CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.