Hello, dear friend, you can consult us at any time if you have any questions, add WeChat: THEend8_
INFT 3019 Network Architecture
Assignment 2: Wireless Implementation (25%)
(Week 14)
Individual Assignment
Submission: via the course website
Overview
Stelmaria Incorporated has finally finished moving their headquarters to Mawson Lakes Tech Park
and now want to upgrade their wireless infrastructure from a standard WPA2 PSK setup to a more
enterprise solution with Wireless LAN Controllers (WLCs) and WPA2 Enterprise. They are also looking
to learn more about WAN connections that are available to the company to enhance their
interconnectivity between branch offices. They will also be looking at implementing more WAN links,
currently Stelmaria has a reliance on Mawson Lakes Tech Park to route all traffic from all branch
offices to the ISP and back to the branch offices. Stelmaria is looking for other options that give
redundancy and scalability for branch offices and its headquarters.
In this assignment you will be making use of the skills you have learnt over the entire course to
create an IP addressing scheme, a network implementation with wireless and recommend a WAN
solution for Stelmaria that meets their needs as a growing enterprise.
Deliverables
You will be required to complete four deliverables and include them in your submission:
• IP addressing scheme (Excel Spreadsheet or Word Document/PDF).
• Test documentation (Excel Spreadsheet or Word Document/PDF).
• Completed network configuration (Packet Tracer file).
• Recommended WAN solution, justifications, and assumptions (Word Document/PDF).
Do not add these deliverables to a ZIP archive on submission. Submit them as separate files.
Weighting
The assignment is worth 25% of your overall grade for this course. The following table breaks down
each component of the assignment, giving it a percentage out of the 25% for this assignment. The
Implementation is worth 17% and the WAN solution is worth 8%
IP addressing scheme 2.5%
Basic configuration 1%
VLANs & VTP 1%
IP addressing implementation 1%
OSPF & Routing 3%
DHCP 2%
NAT 2%
Wireless 3.5%
Testing 1%
4/04/2022 v1.0
WAN Solution 8%
Configuration Guide
Below you will find some helpful steps to follow in order to assist you with configuring the network.
You may find that you do not want to do the steps in the order they are presented in, the order is up
to you to determine. The configuration is complete when all steps have been completed in the order
presented, or your own order.
To start, download the associated Packet Tracer file available on Learnonline. This includes the
devices and the layout of the network along with all connections already completed. See Figure 1 for
an overview of the supplied Packet Tracer file.
Figure 1 - Stelmaria Network Overview
Step 1 – IP addressing scheme.
• This must be done before you start. If the IP addressing scheme documentation is not
included in your submission you will get zero for this section.
• Your IP addressing scheme must include an IP assignment table. See your practicals for an
example of this type of table.
• Use 10.0.0.0/8 for internal addressing:
o The second octet represents the location (1 = Tech Park (HQ), 2 = Kensington, 3 =
Adelaide CBD, 255 = other IP addressing).
o The third octet represents the VLAN.
o The fourth octet represents the hosts.
4/04/2022 v1.0
o For example, 10.2.50.5: 2 = Kensington, 50 = VLAN ID, 5 = Host.
Step 2 – Implement basic configuration.
On switches and routers perform the following:
• Set hostnames and domain name (stelmaria.com.au)
• Disable IP domain lookup.
• Configure enable password (“class”).
• Configure password for console (“cisco”).
• Configure a user account named “admin” with password “cisco”.
• Create RSA key.
• Configure password for VTY (“cisco”) and only allow SSH connections.
• Encrypt all passwords.
Step 3 – Implement VLANs & VTP.
• VLANs are implemented as groups of devices, one per group. For example: management –
for switch management VLAN, Servers, HR, Auditing, Wi-Fi and so on.
• Configure the distribution switch in Tech Park with the VLANs and set it as VTP server and
the access switches as VTP clients.
• Configure the access switch in Adelaide and the access switch in Kensington with the VLANs.
• Configure access ports to be in the correct VLAN.
• Shut down all unused ports and move them into a blackhole/unused VLAN.
• Configure management SVI’s on each switch.
• Configure trunk links as appropriate and change the native VLAN.
Step 4 – Implement IP addressing.
• Configure each interface with their IP address information according to your scheme.
• Configure sub-interfaces on the Adelaide and Kensington router and SVIs on the distribution
switch in Tech Park.
• The ISP router already has the IP address configured on the serial link to Tech Park. The Tech
Park link to the ISP has not been configured.
• Use private IP addresses for the WAN links between locations excluding the ISP.
• End devices (PC, laptop, tablet, camera) should not have IP addressing assigned because
they will get their IP addresses through DHCP.
• Configure static IP addresses for the servers and printers as well as the Admin PCs. Admin
PCs should be placed into the Management VLAN.
• Admin PCs can be used to test the management VLAN through SSHing to switches to
manage them.
Step 5 – Implement OSPF and routing.
• Configure OSPF on the 3 routers (Tech Park, Adelaide, and Kensington). DO NOT configure
OSPF on the ISP router.
• Configure OSPF on the distribution switch in Tech Park.
• Configure default routes as appropriate. Use default route propagation where possible.
Step 6 – Implement DHCP.
• DHCP is done from the distribution switch in Tech Park to every device in the network.
• Configure your DHCP pools according to your subnets defined in Step 1.
4/04/2022 v1.0
• Configure a DHCP pool for Wi-Fi devices in each location.
• Configure excluded addresses to ensure no IP conflicts occur.
• Configure the IP helper address in the Adelaide and Kensington locations so devices there
can receive their IP addressing information from the distribution switch in Tech Park.
• Configure all end devices (excluding printers and servers) to obtain their IP addressing
information through DHCP.
Step 7 – Implement NAT.
• Packets destined for the ISP must be passed through NAT to avoid leaking private IP
addresses to the ISP. Use the external IP address of the network (209.162.125.10) and
implement PAT.
• Add a static NAT for the file server in Tech Park using the IP address 209.162.125.12.
• Ensure all traffic coming from the Internet cannot access any internal end device (only the
file server in Tech Park using the external IP address above).
Step 8 – Implement Wireless Network.
• Add a WLC-2504 to your network and attach it to the appropriate switch in each location (3
WLCs in total).
• Ensure the management network is configured on the “Configure” tab, use the management
VLAN and assign it to an appropriate IP address.
• Set up AAA (RADIUS) on the Auth Server (“Services” tab) in each location. Use an
appropriate secret and add a test user to the database.
• Use the Admin PC’s browser to configure the WLC.
• Create a WPA2 Enterprise network in each location with SSID “Stelmaria Staff - ”,
replace “” with an appropriate value.
• Add a LAP-PT (Lightweight Access Point) and connect it to the appropriate switch in each
location. The IP address for the LAP-PT (see the “Configure” tab) should be DHCP.
• Create a new DHCP pool for management on the Router/L3 Switch in each location, set
option 150 to the IP address of the WLC management interface.
• Verify that the AP has an IP address assigned to it.
• Configure an AP group named “Stelmaria-Wireless-”, add the “Stelmaria Staff -
” WLAN and the created AP to the group.
• Add a tablet and smart phone in each location and configure wireless settings to connect
appropriately.