TheLineman CCNA Capstone

Open the lab

1. Save the .swlab file without renaming its extension.
2. Open SwitchLab. Import and export controls currently require a desktop-width window. On a smaller screen, Tools → Fit brings the topology into view.
3. Select Import Sandbox (folder icon), choose the downloaded file, and confirm the device and cable counts below.
4. Select a device, then choose Open device on desktop or its name in the bottom bar on smaller screens. Select CLI for switches/routers or Desktop → Terminal for PCs. Enter enable only when the prompt ends in >.
5. Follow this page beside the simulator. Use a free account to export your work. Reimport the original download to restart; export any work you want to keep first.

Prerequisites

• Complete the focused lessons for the features used in this scenario.
• For campus policy scenarios, complete VLANs, trunks, IPv4, OSPF and ACL lessons first.

Follow the CCNA study path · Browse all SwitchLab labs

Topology

9 devices · 9 links

Scenario

You own the final commissioning handoff. Physical cabling, router IPv4 interfaces and host addressing are supplied. Build the logical campus and branch routing, enforce the resource policy and deliver a reusable completed sandbox.

Objectives

• Implement or restore the approved network design without breaking required control paths.
• Verify configuration, end-to-end behavior and completed-network persistence.
• Produce an operational handoff with evidence and a deterministic reset path.

CCNA blueprint

200-301 v1.1 objectives — this lab covers the following specific skills, not every subtopic in the domain.

• 1.6 — Apply and verify the scenario’s IPv4 addressing.
• 2.1.a — Verify data access-port membership.
• 2.2 — Verify the restricted interswitch trunk.
• 3.4 — Configure or repair single-area OSPF.
• 5.6 — Enforce the specified IPv4 access policy.

Starting information

• USERS VLAN 10: PC1/PC2, subnet 10.10.10.0/24, gateway R1 g0/0=10.10.10.1. STAFF VLAN 20: PC3/PC4, subnet 10.20.20.0/24, gateway R1 g0/2=10.20.20.1.
• SW1/SW2 g0/1 are Users ports and g0/2 are Staff ports. Their g0/8 trunk carries exactly VLANs 10,20. SW1 g0/6 connects to the Users gateway; SW1 g0/7 connects to the Staff gateway.
• R1 g0/1=172.16.12.1/30 connects to R2 g0/1=172.16.12.2/30. R2 g0/0=10.30.30.1/24 serves PC5=10.30.30.50.
• Use single-area OSPF process 1: router IDs R1=1.1.1.1 and R2=2.2.2.2, area 0 on transit and LAN prefixes, LAN interfaces passive. No static routes are required.
• Resource policy: deny Users 10.10.10.0/24 to PC5 10.30.30.50; permit Staff and other approved traffic. Use extended ACL 101 outbound on R1 g0/1 with a specific deny before the broad permit.

Tasks

1. Write a change plan for VLAN creation, access/gateway port assignment, trunk carriage, OSPF and ACL placement. Include a verification matrix before configuring anything.
2. Commission the campus and verify local/inter-VLAN connectivity. Then establish OSPF using the approved IDs, transit and passive LANs.
3. Apply the resource policy and prove both blocked Users paths and successful Staff controls. Preserve all addresses and cables.
4. Audit VLANs, trunks, connected/OSPF routes, neighbors and ACL direction. Export/reload and repeat the complete traffic matrix.
5. Deliver an operational handoff naming each device role, addressing plan, access policy, tests and the starter-file reset procedure.

Useful commands

show vlan brief
show interfaces trunk
show running-config
show ip ospf neighbor
show ip route
copy running-config startup-config

Progressive hints

Verification

• The final network matches every approved addressing, VLAN, routing and policy requirement above.
• Every required positive path succeeds and every forbidden path remains blocked.
• Completed export/reload retains the result; reimporting the starter restores the original exercise.

Solution / walkthrough

enable
configure terminal
vlan 10
name USERS
exit
vlan 20
name STAFF
exit
interface g0/1
switchport mode access
switchport access vlan 10
exit
interface g0/2
switchport mode access
switchport access vlan 20
exit
interface g0/8
switchport mode trunk
switchport trunk allowed vlan 10,20
exit
interface g0/6
switchport mode access
switchport access vlan 10
exit
interface g0/7
switchport mode access
switchport access vlan 20
exit
end
copy running-config startup-config

enable
configure terminal
vlan 10
name USERS
exit
vlan 20
name STAFF
exit
interface g0/1
switchport mode access
switchport access vlan 10
exit
interface g0/2
switchport mode access
switchport access vlan 20
exit
interface g0/8
switchport mode trunk
switchport trunk allowed vlan 10,20
exit
end
copy running-config startup-config

enable
configure terminal
router ospf 1
router-id 1.1.1.1
network 10.10.10.0 0.0.0.255 area 0
network 10.20.20.0 0.0.0.255 area 0
network 172.16.12.0 0.0.0.3 area 0
passive-interface g0/0
passive-interface g0/2
exit
end
copy running-config startup-config

enable
configure terminal
router ospf 1
router-id 2.2.2.2
network 10.30.30.0 0.0.0.255 area 0
network 172.16.12.0 0.0.0.3 area 0
passive-interface g0/0
exit
end
copy running-config startup-config

enable
configure terminal
access-list 101 deny ip 10.10.10.0 0.0.0.255 host 10.30.30.50
access-list 101 permit ip any any
interface g0/1
ip access-group 101 out
exit
end
copy running-config startup-config

Previous lab

Broken Network Troubleshooting Capstone

Related labs

• VLAN Guided Lab
• Static Routing Requirements Lab
• OSPF Troubleshooting Lab

Related articles and tools

• Cisco CLI cheat sheet

Next recommended lab

Trace an Ethernet Link and MAC Learning