Sunteți pe pagina 1din 47

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Table of Contents
Introduction to wireless LAN topologies Network 1: Ad hoc Pictorial view Topology map Screen shots State Diagram Network 2: Infrastructure Topology map State Diagram Network 3: using access point and switch Topology map State diagram Comments Network 4: PIX Firewall Topology State Diagram Appendix A: Configurations for network 1 Appendix B: Configurations for network 2 Appendix C: Configurations for network 3 Appendix D: Configurations for network 4 20 22 26 44 15 17 17 18 19 10 10 12 13 14 2 4 4 5 5 9

Veer Partap Singh (2040589)

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Introduction to wireless LAN topologies


In wireless LAN we have the option of deploying three types of WLAN topologies: Independent basic service sets (IBSSs) Basic service sets (BSSs) Extended service sets (ESSs)

A service set is a logical grouping of devices. WLANs provide network access by broadcasting a signal across a wireless radio frequency (RF) carrier. A receiving station can be within range of a number of transmitters. The transmitter prefaces its transmissions with a service set identifier (SSID). The receiver uses the SSID to filter through the received signals and locate the one it wants to listen to. IBSS An IBSS consists of a group of 802.11 stations communicating directly with one another. An IBSS is also referred to as an ad-hoc network because it is essentially a simple peer-to-peer WLAN. BSS A BSS is a group of 802.11 stations communicating with one another. A BSS requires a specialized station known as an access point (AP). The AP is the central point of communications for all stations in a BSS. The client stations do not communicate directly other client stations. Rather, they communicate with the AP, and the AP forwards the frames to the destination stations. The AP might be equipped with an uplink port that connects the BSS to a wired network (for example, an Ethernet uplink). Because of this requirement, a BSS is also referred to as an infrastructure BSS.

Veer Partap Singh (2040589)

Assignments 1 & 2 ESS

Network Technology 1 Unit CSG5135

Multiple infrastructure BSSs can be connected via their uplink interfaces. In the world of 802.11, the uplink interface connects the BSS to the distribution system (DS). The collection of BSSs interconnected via the DS is known as the ESS.

Veer Partap Singh (2040589)

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Network 1: Ad hoc
An ad hoc or independent basic service set (IBSS) network is created when individual client devices form a self-contained network without the use of an access point. There is no standards-based limit as to the number of devices that can be in an IBSS. But because every device is a client, often, certain members of the IBSS cannot talk to each other because of the hidden node issue. In spite of this, there is no mechanism for a relay function in an IBSS. Because no access point is in an IBSS, timing is controlled in a distributed manner. An Ad hoc WLAN can be shown as follows:

Pictorial view

(Khan, 2004)

Veer Partap Singh (2040589)

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Topology Map:

PC 1

PC 4

PC 2

PC 3

Screen Shots
Network Name: As with any network there should be a unique identifier. Service set Identifier (SSID) is used by client to identify the network. In this experiment I have given SSID group1 on 4 wireless adapters. As shown in the following screen shot.

Veer Partap Singh (2040589)

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Following networks are used for four adapters: 192.168.1.1 192.168.1.2

Veer Partap Singh (2040589)

Assignments 1 & 2 192.168.1.3 192.168.1.4 And the SNM is same for everyone 255.255.255.0

Network Technology 1 Unit CSG5135

IPTV server is installed on one of the machine and rests of 3 adapters are installed with IPTV Client. From the server, allow the different program for multicasting out of 6 one-by-one. It is observed that 3 programs are running successfully at different data rate like 500 kbps, 1.6 Mbps, 1.4 Mbps.

Veer Partap Singh (2040589)

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Above screen shots are showing the fact that 3 programs are running successfully.

Comments for Network 1


For Adhoc networks to work in wireless network, SSID should be same. Here in this case SSID is Group 1. Multicasting was happening without any problem up to three programs. Both of these programs were tried on all the bandwidths available.

Veer Partap Singh (2040589)

Assignments 1 & 2

Network Technology 1 Unit CSG5135

State Diagram :Adhoc network


PC 1 IP/TV Server Business TV
Interface Wireless NIC 1 Group Video IP Video MAC Group Audio IP Audio MAC Interface SSID Network Authentication Encryption AP authentication MAC IP address 192.168.1.1/24 239.255.12.189 01.00.5E.7f.0C.BD 239.255.233.213 01.00.5E.7f.E9.D5 Wireless NIC Group1 Ad hoc None None Open 00-40-96-A67D-33

PC2 IP/TV Client Business TV


Interface IP address 192.168.1.2/24 239.255.12.189 01.00.5E.7f.0C.BD 239.255.233.213 Wireless NIC 2 Group Video IP Video MAC Group Audio IP

Layer 3: Netwo rk Layer

Layer 3: Netwo rk Layer

Layer 2: Data Link Layer

Interface SSID Network Encryption MAC Interface SSID

Wireless NIC Group1 Ad hoc None 00-40-96-A6-7D-F0 Wireless NIC Group1

Layer 2: Data Link Layer

NIC Power level Channel Frequency Data rate Power save mode

802.11a 20mW 36 (5180MHz) Auto Constantly Awake Mode (CAM)

Layer 1: Physic al Layer

NIC Power level Channel Frequency

802.11a 20mW 36 (5180MHz)

Layer 1: Physic al Layer

Veer Partap Singh (2040589)

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Network 2: Using Wireless Access Point


This type of network is called Basic Service Set (BSS). A Basic Service Set is a group of wireless stations communicating with one another. A BSS requires a specialized station known as an access point (AP). The AP is the central point of communications for all stations in a BSS. The client stations do not communicate directly other client stations. Rather, they communicate with the AP, and the AP forwards the frames to the destination stations. The AP might be equipped with an uplink port that connects the BSS to a wired network (for example, an Ethernet uplink). Because of this requirement, a BSS is also referred to as an infrastructure BSS.

Topology Map

PC 1

PC 2

PC 3

Veer Partap Singh (2040589)

10

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Access Point
AP operates within a specific frequency spectrum and uses an 802.11 standard modulation technique. It also informs the wireless clients of its availability and authenticates and associates wireless clients to the wireless network. An AP also coordinates the wireless clients' use of wired resources. It should be noted that there are several kinds of APs, including single radio and multiple radios, based on different 802.11 technologies. In simple words, Access Point is the central communication point for wireless network users. It can link wired and wireless networks together. It can also be connected together to let wireless users roam between APs without interruption. AP can provide enterprise level security, monitoring, and manageability.

State diagram of Network 2

Veer Partap Singh (2040589)

11

Assignments 1 & 2
Interface Wireless NIC 2 Group Video IP Video MAC

Network Technology 1 Unit CSG5135


IP address 192.168.1.2/24 239.255.12.189 01.00.5E.7f.0C.BD 239.255.233.213 Wireless NIC Group1 Infrastructure None 00-40-96-A6-7D-F0 Wireless NIC Group1

PC 1 IP/TV Server Business TV


Interface Wireless NIC 1 Group Video IP Video MAC Group Audio IP Audio MAC IP address 192.168.1.1/24 239.255.12.189 01.00.5E.7f.0C.BD 239.255.233.213 01.00.5E.7f.E9.D5

Group Audio IP Interface SSID Network Encryption MAC Interface SSID

Layer 3: Netwo rk Layer

Layer 2: Data Link Layer

Interface SSID Network Authentication Encryption AP authentication MAC

Wireless NIC Group1 Infrastructure None None Open 00-40-96-A67D-33

Layer 2: Data Link Layer

NIC Power level Channel Frequency

802.11a 20mW 36 (5180MHz)

Layer 1: Physical

MAC NIC Power level Channel Frequency Data rate Power save mode 802.11a 20mW 36 (5180MHz) Auto Constantly Awake Mode (CAM) 004096A67D33

IP 192.168.1.1 192.168.1.2 dot11radio1 Group1 Open

Device

Name

Parent Self Self

State Assoc Assoc

Layer 1: Physic al Layer

0040.96a6.7df0 Interface SSID Authentication

Access Point (AP)

Veer Partap Singh (2040589)

12

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Network 3
This is infrastructure network and it uses wireless access point and one switch. Here two multicast servers are attached to a switch and this switch is connected to a wireless access point. This is further attached with two clients. Two VLANs are used.

Veer Partap Singh (2040589)

13

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Topology for Network 3:

Multicast server VLAN 1 IP 192.168.1.4

Multicast server VLAN 2 IP 192.168.1.2

VLAN 10

VLAN 20

SWITCH

AP

Multicast client VLAN 1 IP 192.168.1.5

Multicast client VLAN 2 IP 192.168.1.3

Veer Partap Singh (2040589)

14

Assignments 1 & 2

Network Technology 1 Unit CSG5135


Interface IP SSID Network Authentication MAC Wireless NIC 192.168.1.3 Group 1 Infrastructure Open 0040.96a6.7df0 Interface Ethernet 0 192.168.1.5 Group1 Infrastructure Open 0040.96a6.7d64

Access Point IP
SSID Network Authentication MAC

MAC 0040.96a6.7df0 0040.96a6.7d64 Interface SSID Network Authentication Bridge group MAC

IP 192.168.1.3 192.168.1.5 dot11radio1 Infrastructure Open 1 0011.20ee.d2c0

Device CB21AG/PI2IAG CB21AG/PI2IAG Interface SSID Network Authentication Encapsulation MAC Bridge group VLAN

Name 134WK-1B 134WK-1B

Parent Self Self

State Assoc Assoc dot11radio1.20 Groupvlan20 Infrastructure Open 802.1q 0011.20ee.d2c0 20

dot11radio1.10 Groupvlan10 Infrastructure Open 802.1q 0011.20ee.d2c0 10

Interface IP MAC

Ethernet 0 0013.1a32.9735

10

Interface SSID Network Authentication Encapsulation MAC Bridge group VLAN Interface MAC Encapsulation VLAN Bridge group

20 Ethernet 0.20
0013.1a32.9735

Access Point 802.1.q 20 20

VLAN Switch CAT 1 10 10 20

MAC address 0002.557a.8125 0040.96a6.7df0 0002.5573.0840

Type DYNAMIC DYNAMIC DYNAMIC

Interface Interface Fa0/1 MAC Fa0/3 Encapsulation Fa0/2 VLAN


Bridge group

Ethernet 0.10
0013.1a32.9735 PC 4

802.1.q 3 PC 10 PC 2 10 15

Veer Partap Singh (2040589)

Assignments 1 & 2 20 1 1 0040.96a6.7d64 0011.20ee.d2c0 0013.1a32.9735 DYNAMIC DYNAMIC DYNAMIC Fa0/3 Fa0/3 Fa0/3

Network Technology 1 Unit CSG5135


PC 5

Interface Encapsulation Status Native VLAN Allow VLAN

Ethernet 0.10 802.1q Trunking 1 1-4894

Interface Encapsulation Status Native VLAN Allow VLAN

Ethernet 0.10 802.1q Non Trunk 1 10

Interface Encapsulation Status Native VLAN Allow VLAN

Ethernet 0.20 802.1q Non Trunk 1 20

PC 1 Interface IP Cable NIC 192.168.1.4

Veer Partap Singh (2040589)

16

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Comment The multicast server can transmit all of the 6 multicast streams at one time, but the client can only display 3 multicast programmes without any interruption with minimum use of CPU. Multicast stream is only received by client belonging to particular vlan

Network 4 Wireless Access Point and PIX firewall


As one of the first technologies employed to protect networks from unauthorized access, the firewall has come to exemplify network security.While an overall security strategy requires the harmonious integration of people, process, and technology to reduce risk, there is no doubt that firewalls can be a very valuable security tool when properly implemented. Today, the use of firewalls has become such an accepted practice that their deployment in one fashion or another is virtually a foregone conclusion when designing and building networks. Recognizing this need, Cisco Systems has developed and continues to improve upon its line of PIX firewalls. These systems have steadily gained market leadership by demonstrating an excellent mix of functionality, performance, and flexibility. Firewalls have become increasingly sophisticated devices as the technology has matured. At its most basic level, a firewall is intended to enforce a security policy governing the network traffic that passes through it. To this basic functionality, Cisco has added many features such as network address translation (NAT), virtual private networks (VPN), and redundant architectures for high availability. Management

Veer Partap Singh (2040589)

17

Assignments 1 & 2

Network Technology 1 Unit CSG5135

systems are typically installed along with the firewall to assist with monitoring and administrating the device. A maxim of IT security is that technology is only as effective as the people responsible for its operation. Therefore, it is extremely important for the technical staff managing PIX firewalls to understand the technical functionality of these devices, as this will result in better security and more efficient operation of the equipment. Ciscos PIX firewalls are a series of appliances that offer world-class security and high levels of performance and reliability. They are a mature product, having been a part of enterprise and service provider networks since 1995. Cisco PIX firewalls fit into a wide range of environments, from small office/home office (SOHO) environments to large enterprises and service providers. With support for complex protocols, the latest VPN technologies, and intrusion detection features, the PIX is one of the leading firewalls in the market.

Topology
Multicast server 192.168.100.2 Gateway: 192.168.100.1 Inside

AP

PIX Firewall

SWITCH

Veer Partap Singh (2040589)

Multicast client 192.168.1.2 Gateway: 192.168.1.1 Outside

Multicast client 192.168.50.2 Gateway: 192.168.50.1 Outside

18

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

19

State Diagram Assignments 1 & 2


GLOBAL Interface IP MAC Nameif NAT id Real IP SNM Max conn Emb limit Inside 192.168.100.2 000255730ad7 Inside 1 192.168.100.0 255.255.255.0 0 0 INSIDE 192.168.1.0 255.255.255.0 192.168.1.1 1 connect Type Name Permit/deny protocol source static ACLIN Permit TCP Any DMZ 192.168.50.0 255.255.255.0 192.168.50.1 1 connect static ACLIN2 permit TCP Any
192.168.100.99

Network Technology 1 Unit CSG5135


LOCAL 192.168.100.2

DMZ

Outside 192.168.1.2 000025573095 Outside 1 192.168.1.10 192.168.1.20 255.255.255.0

192.168.1.0

Nameif NAT id Global ip Global ip SNM

interface nameif Security IP

E1 inside 100 192.168.1.1/24 interface IP Gateway Cable NIC 192.168.1.2 192.168.1.1

INTERFACE IP SNM IP Metric

OUTSIDE 192.168.100.0 255.255.255.0 192.168.100.1 1 connect static

interface nameif Security IP

E2 dmz 50 192.168.50.1/24

interface IP Gateway

Cable NIC 192.168.50.2 192.168.50.1

interface nameif Security IP

E2 outside 0 192.168.100.1/24 interface IP Gateway Wireless 192.168.100.2 192.168.100.1

Inside outside

192.168.100.2 192.168.1.99

192.168.50.99 Destination inside 192.168.100.2 parameters Eq www dmz 192.168.50.99

Eq www

Veer Partap Singh (2040589)

20

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Appendix A
Configurations for Network 1: Adhoc Network
PC 1: IPTV Server Business TV C:\>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No Ethernet adapter Wireless Network Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Cisco Systems AIR-CB20A 802.11a Wireless LAN Adapter #3 Physical Address. . . . . . . . . : 00-40-96-A6-7D-33 Dhcp Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.1.1 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . :

Veer Partap Singh (2040589)

21

Assignments 1 & 2 PC 2 IPTV Client Business TV C:\>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : Primary Dns Suffix . . . . . . . : Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No Ethernet adapter Wireless Network Connection: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Cisco Systems AIR-CB20A 802.11a Wireless LAN Adapter #3 Physical Address. . . . . . . . . : 00-40-96-A6-7D-F0 Dhcp Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 192.168.1.2 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . :

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

22

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Appendix B
Configurations for Network 2: Infrastructure
Access Point Configuration Building configuration... Current configuration : 1886 bytes ! version 12.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname AP2 ! logging queue-limit 100 enable secret 5 $1$PUEC$PMe9aKILcC8YKvvdtAEZK1 ! username Cisco password 7 13261E010803 ip subnet-zero ! ! ! bridge irb ! ! interface Dot11Radio1 no ip address

Veer Partap Singh (2040589)

23

Assignments 1 & 2 no ip route-cache ! ssid Group-vlan10 vlan 10 authentication open ! ssid Group-vlan20 vlan 20 authentication open ! speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0 rts threshold 2312 channel 5240 station-role root bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface Dot11Radio1.10 encapsulation dot1Q 10 no ip route-cache bridge-group 10 bridge-group 10 subscriber-loop-control bridge-group 10 block-unknown-source no bridge-group 10 source-learning no bridge-group 10 unicast-flooding bridge-group 10 spanning-disabled ! interface Dot11Radio1.20

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

24

Assignments 1 & 2 no ip route-cache ! interface FastEthernet0 no ip address no ip route-cache duplex auto speed auto bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface FastEthernet0.10 encapsulation dot1Q 10 no ip route-cache bridge-group 10 no bridge-group 10 source-learning bridge-group 10 spanning-disabled ! interface FastEthernet0.20 encapsulation dot1Q 20 no ip route-cache bridge-group 20 no bridge-group 20 source-learning bridge-group 20 spanning-disabled ! interface BVI1 no ip address no ip route-cache ! ip http server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag /122-15.JA/1100

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

25

Assignments 1 & 2 ip radius source-interface BVI1 bridge 1 route ip ! ! ! line con 0 line vty 0 4 login local line vty 5 15 login ! end

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

26

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Appendix C
Configurations for Network 3: Using Wireless Access Point and Switch
Access Point Configuration ap#show dot11 associations 802.11 Client Stations on Dot11Radio1: SSID [GroupVlan10] : MAC Address IP address e 0040.96a6.7df0 192.168.1.3 c SSID [GroupVlan20] : MAC Address IP address Device Name Parent e 0040.96a6.7d64 192.168.1.5 CB21AG/PI21AG 134WK-1B c Others: (not related to any ssid) ap#show vlans Virtual LAN ID: 1 (IEEE 802.1Q Encapsulation) Stat self Asso Device Name Parent Stat self Asso

CB21AG/PI21AG 134WK-1B

Veer Partap Singh (2040589)

27

Assignments 1 & 2

Network Technology 1 Unit CSG5135

vLAN Trunk Interfaces: Dot11Radio1 FastEthernet0 Virtual-Dot11Radio0 This is configured as native Vlan for the following interface(s) : Dot11Radio1 FastEthernet0 Virtual-Dot11Radio0 Protocols Configured: Address: Bridging Bridge Group 1 Bridging Bridge Group 1 Bridging Bridge Group 1 Received: 2165 2165 2167 Transmitted: 0 0 0

Virtual LAN ID: 10 (IEEE 802.1Q Encapsulation) vLAN Trunk Interfaces: Dot11Radio1.10 FastEthernet0.10 Virtual-Dot11Radio0.10 Protocols Configured: Address: Bridging Bridge Group 10 Bridging Bridge Group 10 Bridging Bridge Group 10 Received: 784428 784428 784428 Transmitted: 783145 783145 783145

Virtual LAN ID: 20 (IEEE 802.1Q Encapsulation) vLAN Trunk Interfaces: Dot11Radio1.20 FastEthernet0.20 Virtual-Dot11Radio0.20

Veer Partap Singh (2040589)

28

Assignments 1 & 2 Protocols Configured: Address: Bridging Bridge Group 20 Bridging Bridge Group 20 Bridging Bridge Group 20 Received: 501659 501660 501660 Transmitted: 500547 500548 500548

Network Technology 1 Unit CSG5135

ap#show interfaces BVI1 is up, line protocol is up Hardware is BVI, address is 0013.1a32.9735 (bia 0011.20ee.d2c0) MTU 1500 bytes, BW 54000 Kbit, DLY 5000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output never, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/0 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 3 packets output, 180 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 output buffer failures, 0 output buffers swapped out Dot11Radio1 is up, line protocol is up Hardware is 802.11A Radio, address is 0011.20ee.d2c0 (bia 0011.20ee.d2c0) MTU 1500 bytes, BW 54000 Kbit, DLY 1000 usec, reliability 255/255, txload 65/255, rxload 1/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output 00:00:00, output hang never

Veer Partap Singh (2040589)

29

Assignments 1 & 2 Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 12986 Queueing strategy: fifo Output queue: 0/30 (size/max) 5 minute input rate 3000 bits/sec, 3 packets/sec 5 minute output rate 13967000 bits/sec, 1464 packets/sec 3115 packets input, 340916 bytes, 2626 no buffer Received 1509 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 input packets with dribble condition detected 1289716 packets output, 1573638600 bytes, 0 underruns 0 output errors, 0 collisions, 14 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out Dot11Radio1.10 is up, line protocol is up Hardware is 802.11A Radio, address is 0011.20ee.d2c0 (bia 0011.20ee.d2c0) MTU 1500 bytes, BW 54000 Kbit, DLY 1000 usec, reliability 255/255, txload 66/255, rxload 1/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 10. ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters never Dot11Radio1.20 is up, line protocol is up Hardware is 802.11A Radio, address is 0011.20ee.d2c0 (bia 0011.20ee.d2c0) MTU 1500 bytes, BW 54000 Kbit, DLY 1000 usec, reliability 255/255, txload 66/255, rxload 1/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 20. ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters never FastEthernet0 is up, line protocol is up Hardware is PowerPC405GP Ethernet, address is 0013.1a32.9735 (bia 0013.1a32.97 35)

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

30

Assignments 1 & 2 MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 1/255, rxload 35/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set Full-duplex, 100Mb/s, MII ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output 00:00:01, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 13932000 bits/sec, 1481 packets/sec 5 minute output rate 2000 bits/sec, 2 packets/sec 1310306 packets input, 1573946068 bytes Received 1310848 broadcasts, 0 runts, 0 giants, 9396 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog 0 input packets with dribble condition detected 2132 packets output, 236262 bytes, 0 underruns 0 output errors, 0 collisions, 7 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out FastEthernet0.10 is up, line protocol is up Hardware is PowerPC405GP Ethernet, address is 0013.1a32.9735 (bia 0013.1a32.97 35) MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 1/255, rxload 35/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 10. ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters never FastEthernet0.20 is up, line protocol is up Hardware is PowerPC405GP Ethernet, address is 0013.1a32.9735 (bia 0013.1a32.97

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

31

Assignments 1 & 2 35) MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 1/255, rxload 35/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 20. ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters never Virtual-Dot11Radio0 is down, line protocol is down Hardware is Virtual Dot11 interface, address is 0011.20ee.d2c0 (bia 0011.20ee. d2c0) MTU 1500 bytes, BW 54000 Kbit, DLY 1000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output never, output hang never Last clearing of "show interface" counters 00:55:28 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/30 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 0 packets input, 0 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 input packets with dribble condition detected 0 packets output, 0 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out Virtual-Dot11Radio0.10 is down, line protocol is down Hardware is Virtual Dot11 interface, address is 0011.20ee.d2c0 (bia 0011.20ee. d2c0)

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

32

Assignments 1 & 2 MTU 1500 bytes, BW 54000 Kbit, DLY 1000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 10. ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters never Virtual-Dot11Radio0.20 is down, line protocol is down Hardware is Virtual Dot11 interface, address is 0011.20ee.d2c0 (bia 0011.20ee. d2c0) MTU 1500 bytes, BW 54000 Kbit, DLY 1000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 20. ARP type: ARPA, ARP Timeout 04:00:00 Last clearing of "show interface" counters never ap#show bridge 10 Total of 300 station blocks, 298 free Codes: P - permanent, S - self Bridge Group 10: Address Action Interface Age RX count TX count 0040.96a6.7df0 forward Do1.10 P 415 109 ap#show bridge 20 Total of 300 station blocks, 298 free Codes: P - permanent, S - self Bridge Group 20: Address Action Interface Age RX count TX count 0040.96a6.7d64 forward Do1.20 P 1287 160

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

33

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Switch Configuration
Switch>enable Switch#vlan dat Switch(vlan)#vlan 10 VLAN 10 added: Name: VLAN0010 Switch(vlan)#vlan 20 VLAN 20 added: Name: VLAN0020 Switch(vlan)#exit APPLY completed. Exiting.... Switch#config t Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#int fa0/1 Switch(config-if)#switchport access 10 ^ % Invalid input detected at '^' marker. Switch(config-if)#switchport access vlan 10 Switch(config-if)#exit Switch(config)#int fa0/2 Switch(config-if)#switchport access 20 ^ % Invalid input detected at '^' marker. Switch(config-if)#switchport access vlan 20 Switch(config-if)#exit Switch(config)#exit Switch#

Veer Partap Singh (2040589)

34

Assignments 1 & 2 00:02:30: %SYS-5-CONFIG_I: Configured from console by consoleshow interface trun k Switch#config t Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#int fa0/3 Switch(config-if)#switchport mode trunk Switch(config-if)#exit Switch(config)# 00:03:02: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, chang ed state to down 00:03:05: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/3, chang ed state to up Switch(config)# Switch(config)#exit Switch#show 00:03:10: %SYS-5-CONFIG_I: Configured from console by consolerun Building configuration... Current configuration : 1471 bytes ! version 12.1 no service single-slot-reload-enable no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname Switch ! ! ip subnet-zero

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

35

Assignments 1 & 2 ! spanning-tree extend system-id ! ! interface FastEthernet0/1 switchport access vlan 10 no ip address ! interface FastEthernet0/2 switchport access vlan 20 no ip address ! interface FastEthernet0/3 switchport mode trunk no ip address ! interface FastEthernet0/4 no ip address ! interface FastEthernet0/5 no ip address ! interface FastEthernet0/6 no ip address ! interface FastEthernet0/7 no ip address ! interface FastEthernet0/8 no ip address ! interface FastEthernet0/9

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

36

Assignments 1 & 2 no ip address ! interface FastEthernet0/10 no ip address ! interface FastEthernet0/11 no ip address ! interface FastEthernet0/12 no ip address ! interface FastEthernet0/13 no ip address ! interface FastEthernet0/14 no ip address ! interface FastEthernet0/15 no ip address ! interface FastEthernet0/16 no ip address ! interface FastEthernet0/17 no ip address ! interface FastEthernet0/18 no ip address ! interface FastEthernet0/19 no ip address !

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

37

Assignments 1 & 2 interface FastEthernet0/20 no ip address ! interface FastEthernet0/21 no ip address ! interface FastEthernet0/22 no ip address ! interface FastEthernet0/23 no ip address ! interface FastEthernet0/24 no ip address ! interface Vlan1 no ip address no ip route-cache shutdown ! ip http server ! ! line con 0 line vty 5 15 ! end Switch#show interface trunk Port Mode Fa0/3 on Encapsulation Status Native vlan 802.1q trunking 1

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

38

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Port Vlans allowed on trunk Fa0/3 1-4094 Port Vlans allowed and active in management domain Fa0/3 1,10,20 Port Vlans in spanning tree forwarding state and not pruned Fa0/3 none Switch#show mac-address-table Mac Address Table -----------------------------------------Vlan Mac Address Type Ports ---- -----------------10 0002.557a.8125 DYNAMIC Fa0/1 10 0040.96a6.7df0 DYNAMIC Fa0/3 20 0002.5573.0840 DYNAMIC Fa0/2 20 0040.96a6.7d64 DYNAMIC Fa0/3 1 0011.20ee.d2c0 DYNAMIC Fa0/3 1 0013.1a32.9735 DYNAMIC Fa0/3 Total Mac Addresses for this criterion: 6 Switch#show vlan VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------1 default active Fa0/4, Fa0/5, Fa0/6, Fa0/7 Fa0/8, Fa0/9, Fa0/10, Fa0/11 Fa0/12, Fa0/13, Fa0/14, Fa0/15 Fa0/16, Fa0/17, Fa0/18, Fa0/19 Fa0/20, Fa0/21, Fa0/22, Fa0/23 Fa0/24

Veer Partap Singh (2040589)

39

Assignments 1 & 2 10 VLAN0010 20 VLAN0020 1002 fddi-default 1003 token-ring-default 1004 fddinet-default 1005 trnet-default active Fa0/1 active Fa0/2 active active active active

Network Technology 1 Unit CSG5135

VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2 ---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ -----1 enet 100001 1500 - - - 0 0 10 enet 100010 1500 - - - 0 0 20 enet 100020 1500 - - - 0 0 1002 fddi 101002 1500 - - - 0 0 1003 tr 101003 1500 - - - 0 0 VLAN Type SAID MTU Parent RingNo BridgeNo Stp BrdgMode Trans1 Trans2 ---- ----- ---------- ----- ------ ------ -------- ---- -------- ------ -----1004 fdnet 101004 1500 - - ieee 0 0 1005 trnet 101005 1500 - - ibm 0 0 Remote SPAN VLANs -----------------------------------------------------------------------------Primary Secondary Type Ports ------- --------- ----------------- -----------------------------------------Switch# show run Building configuration... Current configuration : 1471 bytes !

Veer Partap Singh (2040589)

40

Assignments 1 & 2 version 12.1 no service single-slot-reload-enable no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname Switch ! ! ip subnet-zero ! spanning-tree extend system-id ! ! interface FastEthernet0/1 switchport access vlan 10 no ip address ! interface FastEthernet0/2 switchport access vlan 20 no ip address ! interface FastEthernet0/3 switchport mode trunk no ip address ! interface FastEthernet0/4 no ip address ! interface FastEthernet0/5 no ip address

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

41

Assignments 1 & 2 ! interface FastEthernet0/6 no ip address ! interface FastEthernet0/7 no ip address ! interface FastEthernet0/8 no ip address ! interface FastEthernet0/9 no ip address ! interface FastEthernet0/10 no ip address ! interface FastEthernet0/11 no ip address ! interface FastEthernet0/12 no ip address ! interface FastEthernet0/13 no ip address ! interface FastEthernet0/14 no ip address ! interface FastEthernet0/15 no ip address ! interface FastEthernet0/16

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

42

Assignments 1 & 2 no ip address ! interface FastEthernet0/17 no ip address ! interface FastEthernet0/18 no ip address ! interface FastEthernet0/19 no ip address ! interface FastEthernet0/20 no ip address ! interface FastEthernet0/21 no ip address ! interface FastEthernet0/22 no ip address ! interface FastEthernet0/23 no ip address ! interface FastEthernet0/24 no ip address ! interface Vlan1 no ip address no ip route-cache shutdown ! ip http server

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

43

Assignments 1 & 2 ! ! line con 0 line vty 5 15 ! end Switch#

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

44

Assignments 1 & 2

Network Technology 1 Unit CSG5135

Appendix D Network 4 Access Point Configuration


ap#show run Building configuration... Current configuration : 2097 bytes ! version 12.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname ap ! logging queue-limit 100 enable secret 5 $1$rmJw$V105v9aYkS7SBoewsCaUs/ ! username Cisco password 7 106D000A0618 ip subnet-zero ! ! ! bridge irb ! ! interface Dot11Radio1 no ip address no ip route-cache ! ssid group1 Veer Partap Singh (2040589) 45

Assignments 1 & 2 authentication open ! speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0 rts threshold 2312 channel 5260 station-role root bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface FastEthernet0 ip address 192.168.10.3 255.255.255.0 no ip route-cache duplex auto speed auto bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface BVI1 ip address 192.168.10.1 255.255.255.0 no ip route-cache ! ip http server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag /122-15.JA/1100 ip radius source-interface BVI1 bridge 1 route ip !

Network Technology 1 Unit CSG5135

Veer Partap Singh (2040589)

46

Assignments 1 & 2 ! ! line con 0 line vty 0 4 login local line vty 5 15 login ! end

Network Technology 1 Unit CSG5135

PIX Firewall configuration


PIX Version 6.3(4) interface ethernet0 100full interface ethernet1 100full interface ethernet2 100full nameif ethernet0 outside security0 nameif ethernet1 inside security100 nameif ethernet2 dmz security50 access-list 100 permit udp any any pager lines 24 ip address outside 192.168.1.1 255.255.255.0 ip address inside 192.168.100.1 255.255.255.0 ip address dmz 192.168.50.1 255.255.255.0 multicast interface outside multicast interface dmz static (dmz,outside) 192.168.1.99 192.168.50.2 netmask 255.255.255.255 0 0 access-group 100 in interface outside

Veer Partap Singh (2040589)

47

S-ar putea să vă placă și