Capstone: join the branch to HQ

NetLab lab Advanced 4 tasks 30 points

The interfaces on R1 and R2 are addressed and up, but nothing else is done. Build the branch so it works end to end:

OSPF process 1, area 0, on both routers: R1 advertises its LAN (192.168.1.0/24) and the WAN link (10.0.12.0/30); R2 advertises the WAN link and the server LAN (203.0.113.0/24). Router-IDs 1.1.1.1 and 2.2.2.2. Make R1's Gi0/0 passive (no OSPF to the PCs).
DHCP on R1 for the LAN (pool BRANCH, gateway 192.168.1.1, exclude 1-9); PC1 and PC2 are DHCP clients.
SSH on R1: domain example.com, 2048-bit keys, SSH v2, user admin / Adm1n!2026 (privilege 15), vty SSH only.

How it works: this is VulnTech NetLab, a network simulator running in your browser. Click a device in the diagram to open its console and type commands, just like on real equipment (? shows help, Tab finishes a word). Click a cable to inspect it. Tasks tick themselves off as you complete them; questions are answered in the box under each task. Your work is kept if you reload; Reset starts the network over.

Solution explanation

Interfaces were already up, so you built from routing up: OSPF gives each router the other's networks (check show ip route for the O routes), DHCP addresses the PCs, and SSH secures management last. PC1 reaching the HQ web server proves the whole path - DHCP address, default gateway, OSPF route out and the return route back - all work.

Show solution

[R1]
enable
configure terminal
router ospf 1
router-id 1.1.1.1
network 192.168.1.0 0.0.0.255 area 0
network 10.0.12.0 0.0.0.3 area 0
passive-interface g0/0
exit
ip dhcp excluded-address 192.168.1.1 192.168.1.9
ip dhcp pool BRANCH
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
exit
ip domain name example.com
crypto key generate rsa modulus 2048
ip ssh version 2
username admin privilege 15 secret Adm1n!2026
line vty 0 4
login local
transport input ssh
exit
end
[R2]
enable
configure terminal
router ospf 1
router-id 2.2.2.2
network 10.0.12.0 0.0.0.3 area 0
network 203.0.113.0 0.0.0.255 area 0
passive-interface g0/1
end
[PC1]
ipconfig /renew
ping 203.0.113.10