Open the lab

[ YOUR LAB FILE ]

Download the starting topology, then work through the lesson in SwitchLab.

Download SwitchLab Lab (.swlab)

  1. Save the .swlab file without renaming its extension.
  2. Open SwitchLab. Import and export controls currently require a desktop-width window. On a smaller screen, Tools → Fit brings the topology into view.
  3. Select Import Sandbox (folder icon), choose the downloaded file, and confirm the device and cable counts below.
  4. Select a device, then choose Open device on desktop or its name in the bottom bar on smaller screens. Select CLI for switches/routers or Desktop → Terminal for PCs. Enter enable only when the prompt ends in >.
  5. Follow this page beside the simulator. Use a free account to export your work. Reimport the original download to restart; export any work you want to keep first.

Prerequisites

  • Complete the focused lessons for the features used in this scenario.
  • For campus policy scenarios, complete VLANs, trunks, IPv4, OSPF and ACL lessons first.

Follow the CCNA study path · Browse all SwitchLab labs

Topology

Multi-Switch Campus Scenario: starting network imported into the SwitchLab sandbox.
Starting topology captured in SwitchLab. Select the image to view it at full size.

9 devices · 9 links

Scenario

The routed branch is already commissioned. Both campus switches are still flat access networks. Build the approved Users/Staff campus without altering the working router core.

Objectives

  • Implement or restore the approved network design without breaking required control paths.
  • Verify configuration, end-to-end behavior and completed-network persistence.
  • Produce an operational handoff with evidence and a deterministic reset path.

CCNA blueprint

200-301 v1.1 objectives — this lab covers the following specific skills, not every subtopic in the domain.

  • 1.6 — Apply and verify the scenario’s IPv4 addressing.
  • 2.1.a — Verify data access-port membership.
  • 2.2 — Verify the restricted interswitch trunk.

Starting information

  • USERS VLAN 10: PC1/PC2, subnet 10.10.10.0/24, gateway R1 g0/0=10.10.10.1. STAFF VLAN 20: PC3/PC4, subnet 10.20.20.0/24, gateway R1 g0/2=10.20.20.1.
  • SW1/SW2 g0/1 are Users ports and g0/2 are Staff ports. Their g0/8 trunk carries exactly VLANs 10,20. SW1 g0/6 connects to the Users gateway; SW1 g0/7 connects to the Staff gateway.
  • R1 g0/1=172.16.12.1/30 connects to R2 g0/1=172.16.12.2/30. R2 g0/0=10.30.30.1/24 serves PC5=10.30.30.50.
  • Use single-area OSPF process 1: router IDs R1=1.1.1.1 and R2=2.2.2.2, area 0 on transit and LAN prefixes, LAN interfaces passive. No static routes are required.
HostIPv4 addressMaskGateway
PC110.10.10.10255.255.255.010.10.10.1
PC210.10.10.20255.255.255.010.10.10.1
PC310.20.20.30255.255.255.010.20.20.1
PC410.20.20.40255.255.255.010.20.20.1
PC510.30.30.50255.255.255.010.30.30.1
RouterInterfaceIPv4 addressMask
R1g0/010.10.10.1255.255.255.0
R1g0/210.20.20.1255.255.255.0
R1g0/1172.16.12.1255.255.255.252
R2g0/010.30.30.1255.255.255.0
R2g0/1172.16.12.2255.255.255.252
Device / portDevice / port
PC1 / eth0SW1 / g0/1
PC2 / eth0SW2 / g0/1
PC3 / eth0SW1 / g0/2
PC4 / eth0SW2 / g0/2
SW1 / g0/8SW2 / g0/8
SW1 / g0/6R1 / g0/0
SW1 / g0/7R1 / g0/2
R1 / g0/1R2 / g0/1
R2 / g0/0PC5 / eth0

Tasks

  1. Produce a port/VLAN/cable plan for host ports, the interswitch trunk and both gateway ports.
  2. Create and assign both department VLANs on both switches and configure restricted trunk carriage.
  3. Validate configuration as well as delivery; some same-subnet hosts can communicate in the initial flat VLAN even though the departmental design is wrong.
  4. Prove both departments locally, across closets, across the gateway and to the branch resource. Save/export with a final port inventory.

Useful commands

show vlan brief
show interfaces trunk
show running-config
show ip ospf neighbor
show ip route
copy running-config startup-config

Progressive hints

Hint 1

Break the end-to-end path into host settings, local VLAN carriage, gateway reachability, route selection and any access policy.

Hint 2

Use a working control at each layer. Do not remove security controls or add broad routes just to make one ping succeed.

Hint 3

Compare each affected host, interface and route against the approved plan; use the earlier focused lessons for the exact command patterns.

Verification

  • The final network matches every approved addressing, VLAN, routing and policy requirement above.
  • Every required positive path succeeds and every forbidden path remains blocked.
  • Completed export/reload retains the result; reimporting the starter restores the original exercise.

Solution / walkthrough

Show Solution

Use enable only from a > prompt; if already at #, begin with configure terminal.

SW1

Apply the department plan to host ports, both trunk endpoints and the separate routed-gateway access ports.

enable
configure terminal
vlan 10
name USERS
exit
vlan 20
name STAFF
exit
interface g0/1
switchport mode access
switchport access vlan 10
exit
interface g0/2
switchport mode access
switchport access vlan 20
exit
interface g0/8
switchport mode trunk
switchport trunk allowed vlan 10,20
exit
interface g0/6
switchport mode access
switchport access vlan 10
exit
interface g0/7
switchport mode access
switchport access vlan 20
exit
end
copy running-config startup-config

SW2

Apply the department plan to host ports, both trunk endpoints and the separate routed-gateway access ports.

enable
configure terminal
vlan 10
name USERS
exit
vlan 20
name STAFF
exit
interface g0/1
switchport mode access
switchport access vlan 10
exit
interface g0/2
switchport mode access
switchport access vlan 20
exit
interface g0/8
switchport mode trunk
switchport trunk allowed vlan 10,20
exit
end
copy running-config startup-config

Run every verification check above after the changes. A saved configuration alone does not prove packet delivery.

Previous lab

Branch Office Deployment

Related labs

Related articles and tools

Next recommended lab

Broken Network Troubleshooting Capstone