Capstone: Wi-Fi and IPv6 for staff
The branch is adding a staff access point, AP1, on SW1 Fa0/2, and IPv6 for the STAFF VLAN. Someone started the job and left. Finish it so that:
- LAP1 joins SSID
Staff(WPA2-Personal, keyBranch-2027!) and gets a DHCP address in the STAFF VLAN (192.168.10.0/24). - R1's Gi0/0.10 has
2001:db8:acad:10::1/64, and STAFF devices (PC1, LAP1) build IPv6 addresses with SLAAC and can reach it.
How it works: this is VulnTech NetLab, a network simulator running in your browser. Click a device in the diagram to open its console and type commands, just like on real equipment (? shows help, Tab finishes a word). Click a cable to inspect it. Tasks tick themselves off as you complete them; questions are answered in the box under each task. Your work is kept if you reload; Reset starts the network over.
Solution explanation
Four faults, from layer 1 up. SW1 Fa0/2 had power inline never, so the AP was dead. Its port was an access port in VLAN 1, where there's no gateway or DHCP pool, so even connected clients got no address: it belongs in STAFF (VLAN 10). The AP's passphrase was Branch-2027, missing the !, so LAP1's saved key was rejected. On R1, the IPv6 address had been entered as the prefix (2001:db8:acad:10::/64, the subnet-router anycast address) instead of ::1, and ipv6 unicast-routing was missing, so there were no Router Advertisements and no SLAAC.
Show solution
[SW1]
enable
show power inline | include Fa0/2 |Interface
configure terminal
interface fa0/2
power inline auto
switchport access vlan 10
spanning-tree portfast
end
[AP1]
show wlan
wlan passphrase Branch-2027!
[R1]
enable
show ipv6 interface brief
configure terminal
ipv6 unicast-routing
interface g0/0.10
no ipv6 address 2001:db8:acad:10::/64
ipv6 address 2001:db8:acad:10::1/64
end
[LAP1]
netsh wlan show interfaces
ipconfig /renew
ping 2001:db8:acad:10::1
[PC1]
ping 2001:db8:acad:10::1