Topology diagrams, device configs, and instructor answer sheets for CCNA-aligned exercises.
Packet TracerVLAN Segmentation with Packet Tracer
Create VLANs 10, 20, 30; assign ports; verify isolation between departments.
Topology: Three 2960 switches, one router-on-a-stick optional for inter-VLAN in advanced variant.
Objectives
- Create named VLANs
- Assign access ports
- Verify with show vlan brief
Device configuration (sample)
enable
configure terminal
vlan 10
name SALES
vlan 20
name ENGINEERING
vlan 30
name GUEST
interface range fa0/1-8
switchport mode access
switchport access vlan 10
interface range fa0/9-16
switchport mode access
switchport access vlan 20
end
write memory
Instructor answer sheet
Expected: VLANs 10/20/30 created; Fa0/1-8 in VLAN 10; Fa0/9-16 in VLAN 20. PCs in different VLANs should not ping without L3 gateway.
Packet TracerInter-VLAN Routing (Router-on-a-Stick)
Configure subinterfaces for VLAN 10 and 20 with 802.1Q encapsulation.
Topology: 1 router R1, 1 switch SW1, 2 PCs per VLAN.
Objectives
- Trunk on switch
- Subinterfaces on router
- PC gateways set
Device configuration (sample)
interface g0/0.10
encapsulation dot1Q 10
ip address 192.168.10.1 255.255.255.0
interface g0/0.20
encapsulation dot1Q 20
ip address 192.168.20.1 255.255.255.0
Instructor answer sheet
PCs use respective .1 gateways; ping across VLANs succeeds.
Packet TracerStatic Routing Lab
Three-router topology with static routes to remote LANs.
Topology: R1-R2-R3 linear; LANs behind R1 and R3.
Objectives
- Interface IPs on all routers
- Static routes toward remote networks
Device configuration (sample)
ip route 192.168.30.0 255.255.255.0 10.0.12.2
ip route 10.0.23.0 255.255.255.252 10.0.12.2
Instructor answer sheet
Full mesh of statics or summary on R2; end-to-end ping works.
Packet TracerOSPF Single Area
Enable OSPF process 1 area 0 on all router interfaces in 10.x.x.x space.
Topology: Triangle of three routers.
Objectives
- OSPF neighbors FULL
- Routing table contains O IA routes
Device configuration (sample)
router ospf 1
network 10.0.0.0 0.0.255.255 area 0
passive-interface g0/0
Instructor answer sheet
show ip ospf neighbor - all FULL; ping across OSPF domain.
Packet TracerExtended ACL Lab
Permit HTTP/HTTPS from inside; deny all other inbound on outside interface.
Topology: Inside LAN, firewall router, simulated internet.
Objectives
- Named ACL
- Applied inbound on correct interface
- Implicit deny tested
Device configuration (sample)
ip access-list extended INSIDE_OUT
permit tcp 192.168.1.0 0.0.0.255 any eq 80
permit tcp 192.168.1.0 0.0.0.255 any eq 443
deny ip any any
interface g0/1
ip access-group INSIDE_OUT in
Instructor answer sheet
Telnet blocked; web permitted; log option optional for grading.
Packet TracerDHCP & NAT Configuration
Router as DHCP server and PAT overload for internet access.
Topology: Inside hosts DHCP; outside simulated.
Objectives
- DHCP lease issued
- NAT translations visible
Device configuration (sample)
ip dhcp pool INSIDE
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
ip nat inside source list 1 interface g0/1 overload
access-list 1 permit 192.168.1.0 0.0.0.255
Instructor answer sheet
show ip dhcp binding; show ip nat translations after ping 8.8.8.8.