Internet
8.8.8.8
Choose Difficulty
Normal mode gives hints, the command guide, and the demo config. Change levels anytime to restart the lab.
Network Topology
Goal: configure inter-VLAN routing, switch ports, DHCP, firewall access, printer access, and internet reachability.
Firewall
WAN pending
Cisco Router
Subinterfaces down
Office Switch
VLANs pending
VLAN 10Hardware/Data192.168.10.0/24 · GW 192.168.10.1
VLAN 20Phones/Voice192.168.20.0/24 · GW 192.168.20.1
Cisco-Style Configuration Console
Type commands, press Enter, and watch the VLAN network come online.
Easy Command Builder
Pick what you want the network to do. The game writes and runs the needed Cisco-style commands so you can see how each step works.
Business Network Specs to Program
Use these values exactly. The validation engine checks the VLAN IDs, gateways, masks, DHCP pools, switch ports, printer, NAT, route, and firewall rules.
| Area | Requirement | Value |
|---|---|---|
| VLAN 10 | Name | HARDWARE |
| VLAN 10 | Subnet / Gateway | 192.168.10.0/24 · 192.168.10.1 |
| VLAN 10 | PC DHCP Range | 192.168.10.21-25 |
| Printer | Static IP / Gateway | 192.168.10.50 · 192.168.10.1 |
| VLAN 20 | Name | PHONES |
| VLAN 20 | Subnet / Gateway | 192.168.20.0/24 · 192.168.20.1 |
| VLAN 20 | Phone DHCP Range | 192.168.20.21-25 |
| Voice DHCP | TFTP / Option 150 | 192.168.20.10 |
| Switch | User Ports | Fa0/1-5 access vlan 10 voice vlan 20 |
| Switch | Router Uplink | Fa0/24 trunk allow 10,20 |
| WAN | Router / Firewall | 10.0.0.1/30 · 10.0.0.2/30 |
| Route | Default Route | 0.0.0.0/0 via 10.0.0.2 |
Mission Checklist
Accepted Commands
The game accepts Cisco-style router and switch commands plus simple firewall/printer commands so the whole office network can be validated.
Minimum winning configuration
enable
configure terminal
hostname BRANCH-R1
vlan 10
name HARDWARE
exit
vlan 20
name PHONES
exit
interface range fa0/1-5
switchport mode access
switchport access vlan 10
switchport voice vlan 20
exit
interface fa0/24
switchport mode trunk
switchport trunk allowed vlan 10,20
no shutdown
exit
interface gigabitEthernet0/0
no ip address
no shutdown
exit
interface gigabitEthernet0/0.10
encapsulation dot1Q 10
ip address 192.168.10.1 255.255.255.0
ip nat inside
exit
interface gigabitEthernet0/0.20
encapsulation dot1Q 20
ip address 192.168.20.1 255.255.255.0
ip nat inside
exit
interface gigabitEthernet0/1
ip address 10.0.0.1 255.255.255.252
no shutdown
ip nat outside
exit
ip dhcp excluded-address 192.168.10.1 192.168.10.20
ip dhcp excluded-address 192.168.10.50 192.168.10.50
ip dhcp excluded-address 192.168.20.1 192.168.20.20
ip dhcp excluded-address 192.168.20.10 192.168.20.10
ip dhcp pool HARDWARE
network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 8.8.8.8
exit
ip dhcp pool PHONES
network 192.168.20.0 255.255.255.0
default-router 192.168.20.1
dns-server 8.8.8.8
option 150 ip 192.168.20.10
exit
access-list 10 permit 192.168.10.0 0.0.0.255
access-list 20 permit 192.168.20.0 0.0.0.255
ip nat inside source list 10 interface gigabitEthernet0/1 overload
ip nat inside source list 20 interface gigabitEthernet0/1 overload
ip route 0.0.0.0 0.0.0.0 10.0.0.2
printer ip 192.168.10.50
printer gateway 192.168.10.1
printer online
firewall enable
firewall wan 10.0.0.2 255.255.255.252
firewall gateway 10.0.0.1
firewall allow vlan 10 outbound
firewall allow vlan 20 outbound
firewall allow tcp 80
firewall allow tcp 443
firewall allow udp 53
firewall allow udp 5060
firewall deny inbound any
end
write memoryUseful show and test commands
show vlan brief
show interfaces trunk
show ip interface brief
show running-config
show ip dhcp binding
show ip route
show nat
show firewall
ping 192.168.10.1
ping 192.168.20.1
ping 192.168.10.50
ping 8.8.8.8
test hardware
test phones
test network
help