Network Config Report

Task 1 — Router on a Stick

Create sub-interfaces on Newton and Einstein for VLANs 10 and 20 using dot1Q trunking.

COMPLETE

STEP 03Newton — WAN interface (Gi0/0/0)

Assigns 99.0.0.1 to Newton's WAN-facing port. Without this the two routers cannot communicate at all.

interface GigabitEthernet0/0/0
 ip address 99.0.0.1 255.255.255.0
 no shutdown

ping 99.0.0.2 from Newton — 100% success

STEP 04Einstein — WAN interface (Gi0/0/0)

Assigns 99.0.0.2 to Einstein's WAN-facing port, completing the point-to-point WAN link.

interface GigabitEthernet0/0/0
 ip address 99.0.0.2 255.255.255.0
 no shutdown

STEP 05Newton — Sub-interfaces for VLAN 10 and 20 (Gi0/0/1)

Router-on-a-stick: one physical cable to Heisenberg carries both VLANs. dot1Q encapsulation tags traffic so the router separates them logically into two sub-interfaces.

interface GigabitEthernet0/0/1
 no shutdown

interface GigabitEthernet0/0/1.10
 encapsulation dot1Q 10
 ip address 172.16.0.1 255.255.255.252
 no shutdown

interface GigabitEthernet0/0/1.20
 encapsulation dot1Q 20
 ip address 172.16.0.5 255.255.255.252
 no shutdown

show ip interface brief — both sub-interfaces up/up

STEP 06Heisenberg — VLANs and port assignments

Fa0/6–12 assigned to VLAN 10, Fa0/13–18 to VLAN 20. Fa0/5 is the trunk port carrying both VLANs tagged up to Newton on one cable.

vlan 10
 name VLAN10
vlan 20
 name VLAN20

interface range FastEthernet0/6 - 12
 switchport mode access
 switchport access vlan 10
 no shutdown

interface range FastEthernet0/13 - 18
 switchport mode access
 switchport access vlan 20
 no shutdown

interface FastEthernet0/5
 switchport mode trunk
 switchport trunk allowed vlan 10,20
 no shutdown

show vlan brief — VLAN 10 on Fa0/6–12, VLAN 20 on Fa0/13–18

STEP 07PC0 — Static IP configuration

PC0 gets the only remaining /30 address after Newton takes .1. Connected to Heisenberg Fa0/6 (VLAN 10).

Field	Value
IP Address	172.16.0.2
Subnet Mask	255.255.255.252
Default Gateway	172.16.0.1

ping 99.0.0.1 from PC0 — 100% success

STEP 08Einstein — Sub-interfaces for VLAN 10 and 20 (Gi0/0/1)

Same as Step 5 but using Einstein's /28 subnets — 14 usable hosts per subnet compared to Newton's tight /30.

interface GigabitEthernet0/0/1
 no shutdown

interface GigabitEthernet0/0/1.10
 encapsulation dot1Q 10
 ip address 192.168.0.1 255.255.255.240
 no shutdown

interface GigabitEthernet0/0/1.20
 encapsulation dot1Q 20
 ip address 192.168.0.17 255.255.255.240
 no shutdown

show ip interface brief — both sub-interfaces up/up

STEP 09Schrodinger — VLANs and port assignments

Mirror of Heisenberg. VLAN 10 on Fa0/6–12, VLAN 20 on Fa0/13–18, trunk on Fa0/5 to Einstein.

vlan 10
 name VLAN10
vlan 20
 name VLAN20

interface range FastEthernet0/6 - 12
 switchport mode access
 switchport access vlan 10
 no shutdown

interface range FastEthernet0/13 - 18
 switchport mode access
 switchport access vlan 20
 no shutdown

interface FastEthernet0/5
 switchport mode trunk
 switchport trunk allowed vlan 10,20
 no shutdown

show vlan brief — correct VLAN assignments

STEP 10PC1 — Static IP configuration

PC1 connects to Schrodinger Fa0/18 (VLAN 20). Einstein's sub-interface holds .17, so PC1 gets .18.

Field	Value
IP Address	192.168.0.18
Subnet Mask	255.255.255.240
Default Gateway	192.168.0.17

ping 99.0.0.2 from PC1 — 100% success

Task 2 — Static and Default Routes

Configure default routes on both routers and explicit static routes for each VLSM subnet. Add loopback interfaces.

COMPLETE

STEP 11Einstein — Default route to Newton

A default route (0.0.0.0/0) means "send anything unknown to this next-hop." Einstein now forwards all unrecognised destinations to Newton at 99.0.0.1.

ip route 0.0.0.0 0.0.0.0 99.0.0.1

show ip route — S* default route present

STEP 12Newton — Default route to Einstein

Mirror of Step 11. Newton forwards all unknown destinations to Einstein at 99.0.0.2.

ip route 0.0.0.0 0.0.0.0 99.0.0.2

show ip route — S* default route present

STEP 13Newton — Static routes for Einstein's subnets

Explicit static routes for both of Einstein's /28 subnets. Required by the assignment even though the default route would cover them.

ip route 192.168.0.0 255.255.255.240  99.0.0.2
ip route 192.168.0.16 255.255.255.240 99.0.0.2

show ip route — two S entries for Einstein's subnets

STEP 14Einstein — Static routes for Newton's subnets

Explicit static routes for both of Newton's /30 subnets. Both routing tables now have full visibility of the entire network.

ip route 172.16.0.0 255.255.255.252 99.0.0.1
ip route 172.16.0.4 255.255.255.252 99.0.0.1

show ip route — two S entries for Newton's subnets

STEP 15Verify PC-to-PC connectivity

First full end-to-end test: PC0 → Heisenberg → Newton → WAN → Einstein → Schrodinger → PC1.

# From PC0
ping 192.168.0.18

# From PC1
ping 172.16.0.2

Both directions — 100% success

STEP 16Newton — Loopback interface

A loopback is a software-only virtual interface — always up as long as the router is running. Useful for management and testing.

interface Loopback0
 ip address 100.0.0.1 255.255.255.0
 no shutdown

STEP 17Einstein — Loopback interface

Same as Step 16 on Einstein. Existing default routes mean no additional static routes are needed to reach these loopbacks.

interface Loopback0
 ip address 123.0.0.1 255.255.255.0
 no shutdown

STEP 18Verify loopback reachability from both PCs

Final Task 2 verification. All four pings prove full reachability across the entire network.

# From PC0 and PC1
ping 100.0.0.1  # Newton loopback
ping 123.0.0.1  # Einstein loopback

All four pings — 100% success

Task 3 — LAN Security

Secure all unallocated switch ports by moving them to VLAN 123 and enabling port security.

COMPLETE

STEP 19Heisenberg — VLAN 123 and unallocated ports

Unallocated ports (Fa0/1–4, Fa0/21–24) moved into VLAN 123 — a "dead" VLAN with no routing. Ports also shut down entirely as best practice.

vlan 123
 name UNUSED

interface range FastEthernet0/1 - 4
 switchport mode access
 switchport access vlan 123
 switchport port-security
 shutdown

interface range FastEthernet0/21 - 24
 switchport mode access
 switchport access vlan 123
 switchport port-security
 shutdown

show vlan brief — VLAN 123 with correct ports

STEP 20Heisenberg — Port security on Fa0/19 and Fa0/20

Max 2 MACs per port, sticky learning, manual MAC addresses as assigned, violation mode restrict (drops and logs unknown MACs without shutting the port).

interface FastEthernet0/19
 switchport mode access
 switchport access vlan 123
 switchport port-security
 switchport port-security maximum 2
 switchport port-security mac-address sticky
 switchport port-security mac-address c001.c15c.0120
 switchport port-security violation restrict

interface FastEthernet0/20
 switchport mode access
 switchport access vlan 123
 switchport port-security
 switchport port-security maximum 2
 switchport port-security mac-address sticky
 switchport port-security mac-address c001.c15c.0121
 switchport port-security violation restrict

show port-security interface — Enabled, Restrict, max 2, MAC listed

STEP 21Schrodinger — VLAN 123 and unallocated ports

Identical to Step 19 on Schrodinger.

vlan 123
 name UNUSED

interface range FastEthernet0/1 - 4
 switchport mode access
 switchport access vlan 123
 switchport port-security
 shutdown

interface range FastEthernet0/21 - 24
 switchport mode access
 switchport access vlan 123
 switchport port-security
 shutdown

STEP 22Schrodinger — Port security on Fa0/19 and Fa0/20

Same as Step 20 with Schrodinger's specific MAC addresses.

interface FastEthernet0/19
 switchport port-security mac-address c001.c15c.0122
 switchport port-security violation restrict

interface FastEthernet0/20
 switchport port-security mac-address c001.c15c.0123
 switchport port-security violation restrict

Task 4 — DHCP

Configure DHCP pools on Newton and Einstein to automatically issue IP addresses to PC0 and PC1.

COMPLETE

STEP 23Newton — Configure DHCP pools

Two pools — one per VLAN subnet. Router's own IPs excluded first. Newton's /30 subnets leave only one address per pool for DHCP to issue.

ip dhcp excluded-address 172.16.0.1
ip dhcp excluded-address 172.16.0.5

ip dhcp pool VLAN10_NEWTON
 network 172.16.0.0 255.255.255.252
 default-router 172.16.0.1
 dns-server 12.34.56.78

ip dhcp pool VLAN20_NEWTON
 network 172.16.0.4 255.255.255.252
 default-router 172.16.0.5
 dns-server 12.34.56.78

show ip dhcp pool — both pools with correct ranges

STEP 24Einstein — Configure DHCP pools

Same as Step 23 on Einstein. /28 subnets give 14 usable addresses per pool — much more generous than Newton's /30.

ip dhcp excluded-address 192.168.0.1
ip dhcp excluded-address 192.168.0.17

ip dhcp pool VLAN10_EINSTEIN
 network 192.168.0.0 255.255.255.240
 default-router 192.168.0.1
 dns-server 12.34.56.78

ip dhcp pool VLAN20_EINSTEIN
 network 192.168.0.16 255.255.255.240
 default-router 192.168.0.17
 dns-server 12.34.56.78

show ip dhcp pool — 14 total addresses, correct ranges

STEP 25Switch PC0 and PC1 to DHCP

Both PCs changed from static to DHCP. PC0 initially showed a 169.254.x.x APIPA address (no server found) until Newton's pool was configured.

Device	DHCP Server	Address Received
PC0	Newton	172.16.0.2
PC1	Einstein	192.168.0.18

Both PCs can still ping 100.0.0.1 and 123.0.0.1

Task 5 — EtherChannel

Bundle two physical crossover cables between Heisenberg and Schrodinger into a single logical Port-channel link.

COMPLETE

STEP 26Add crossover cables between Heisenberg and Schrodinger

Two copper crossover cables added: Heisenberg Fa0/23 ↔ Schrodinger Fa0/23 and Heisenberg Fa0/24 ↔ Schrodinger Fa0/24. These will be bundled into one logical link.

STEP 27Heisenberg — Configure EtherChannel

Mode 'on' forces the channel unconditionally without negotiation. Initially showed SD/D (down) because Schrodinger was not yet configured.

interface range FastEthernet0/23 - 24
 channel-group 1 mode on
 no shutdown

interface Port-channel1
 switchport mode trunk
 switchport trunk allowed vlan 10,20,123

STEP 28Schrodinger — Configure EtherChannel

Identical to Heisenberg. Once both ends matched the channel came up immediately — Po1(SU) with both member ports showing P (bundled).

interface range FastEthernet0/23 - 24
 channel-group 1 mode on
 no shutdown

interface Port-channel1
 switchport mode trunk
 switchport trunk allowed vlan 10,20,123

show etherchannel summary — Po1(SU) Fa0/23(P) Fa0/24(P)

Task 6 — SSH

Enable secure remote management on both routers. Generate 2048-bit RSA keys, enforce SSH version 2.

COMPLETE

STEP 29Newton — Configure SSH

Hostname must be set before RSA key generation — Packet Tracer rejects crypto key generation with the default "Router" hostname. VTY lines restricted to SSH only.

hostname Newton

ip domain-name TM257.network

crypto key generate rsa modulus 2048

ip ssh version 2

username TM257 password Str0ng3rPa55w0rd

line vty 0 4
 login local
 transport input ssh

show ip ssh — SSH Enabled version 2.0

STEP 30Einstein — Configure SSH

Identical to Step 29 on Einstein.

hostname Einstein

ip domain-name TM257.network

crypto key generate rsa modulus 2048

ip ssh version 2

username TM257 password Str0ng3rPa55w0rd

line vty 0 4
 login local
 transport input ssh

show ip ssh — SSH Enabled version 2.0

STEP 31Test SSH from both PCs

Verified SSH login from both PCs using the TM257 credentials. Both PCs successfully landed at a router prompt over an encrypted session.

# From PC0 — connect to Newton
ssh -l TM257 172.16.0.1

# From PC1 — connect to Einstein
ssh -l TM257 192.168.0.17

# Password for both:
Str0ng3rPa55w0rd

Logged into Newton and Einstein via SSH from both PCs

Subnet	Network	Usable	Broadcast
VLAN 10	172.16.0.0/30	.1 – .2	172.16.0.3
VLAN 20	172.16.0.4/30	.5 – .6	172.16.0.7

Subnet	Network	Usable	Broadcast
VLAN 10	192.168.0.0/28	.1 – .14	192.168.0.15
VLAN 20	192.168.0.16/28	.17 – .30	192.168.0.31

From	To	Cable Type
Newton Gi0/0/0	Einstein Gi0/0/0	Crossover
Newton Gi0/0/1	Heisenberg Fa0/5	Straight-through
Einstein Gi0/0/1	Schrodinger Fa0/5	Straight-through
PC0 Fa0	Heisenberg Fa0/6	Straight-through
PC1 Fa0	Schrodinger Fa0/18	Straight-through
Heisenberg Fa0/23–24	Schrodinger Fa0/23–24	Crossover x2 (EtherChannel)

Network Config Report

Network Assignment

Task 1 — Router on a Stick

Task 2 — Static and Default Routes

Task 3 — LAN Security

Task 4 — DHCP

Task 5 — EtherChannel

Task 6 — SSH

IP Addresses & VLSM Reference

Command Reference

Device	Interface	IP Address	Mask
Newton	Gi0/0/0 (WAN)	99.0.0.1	255.255.255.0
Newton	Gi0/0/1.10	172.16.0.1	255.255.255.252
Newton	Gi0/0/1.20	172.16.0.5	255.255.255.252
Newton	Loopback0	100.0.0.1	255.255.255.0
Einstein	Gi0/0/0 (WAN)	99.0.0.2	255.255.255.0
Einstein	Gi0/0/1.10	192.168.0.1	255.255.255.240
Einstein	Gi0/0/1.20	192.168.0.17	255.255.255.240
Einstein	Loopback0	123.0.0.1	255.255.255.0
PC0	Fa0 (DHCP)	172.16.0.2	255.255.255.252
PC1	Fa0 (DHCP)	192.168.0.18	255.255.255.240