Maw Office

Mo Office

Use the following instructions to complete step 4:
·Use 192.168.0.0 for internal addressing with IP subnet zero enabled
·User 195.50.16.64/27 for external and public addresses
·You can assume inter-office WAN connections will use private IP addresses
·Apply /30 subnets on all serial interface

---Configuring the Routers, switches and OSPF
Configure each router and switch with a hostname and passwords
Configure each interface on the routers as documented above
Configure OSPF on all IQ routers (NOT THE ISP ROUTER) and insert a default route on the gateway router.
Configure the management VLAN on each of the switches
Configure the wireless access points with any security options you see fit
At Maw Office, configure the layer 3 switch as the root bridge in spanning tree

---Configuring NAT and ACLs
Configure the Maw Office MAIN router as follows:
    Define the NAT pool; the pool consists of only one address of 195.50.16.128/30
Configure the workstation connected to the ISP as follows:
    Configure the IP address and subnet mask as 10.0.0.2/8
    Configure the default gateway
    Configure the workstation to act as a web server. Create a simple page that will tell users that they have reached the ISP
The servers at the Maw office will act as the company’s intranet web server and email server. Create a simple page that will tell users they have reached the company intranet web site.
Configure an ACL to block all traffic from the Internet to the internal server at Maw Office except web traffic; this should prevent hackers using ping etc on the network.
Configure an ACL to ensure all wireless generated traffic from the Maw Office is unable to access any other part of the network except the Internet. This includes all internal computers. This should also only allow web traffic.

---Configuring VLANs and DHCP
Configure the Local Area Network switches with the necessary VLANs as per the details in step 4.
  Create the VLANs on the desired switches and use VTP where possible.
The Maw Office layer 3 switch will perform DHCP. Configure it as follows:
        Using the DHCP pool documented in step 4
        Configure the DHCP pool on the switch
        Configure the workstations to obtain their IP address automatically
        Use static IP addresses with any servers
      If IP helper does not work in PT, you will need to configure DHCP on each of the other locations. You can use static IPs for the Mo Office.
At the Maw office, there are 2 links between the floors. Configure these 2 links between each of the switches as a single ether channel. An ether channel uses multiple physical links and virtually combines them into a single link. For example, 3 x100Mbps links can be combined as 1 ether channel at 300Mbps.
Configure all inter-vlan routing necessary at both Maw Office and Mo Office.