Capstone: Small Office Network
CCNA 200-301 v2.0 · Live Feb 3, 2027 (v1.1 valid through Feb 2, 2027) Cisco Packet Tracer
مقصدObjectiveObjective
اس capstone میں آپ چھوٹے آفس کا مکمل network بنائیں گے: 2 VLANs, inter-VLAN routing, DHCP, internet کے لیے PAT، اور basic security۔ اب تک کی سب labs کا نچوڑ۔Is capstone mein aap chhote office ka mukammal network banayenge: 2 VLANs, inter-VLAN routing, DHCP, internet ke liye PAT, aur basic security. Ab tak ki sab labs ka nichor.In this capstone you'll build a complete small-office network: 2 VLANs, inter-VLAN routing, DHCP, PAT for internet, and basic security. The essence of all the labs so far.
آسان مثالSimple AnalogySimple Analogy
اب تک آپ نے الگ الگ اوزار سیکھے — اب پورا گھر بنانا ہے۔ ایک چھوٹا آفس ہے: 2 departments، ایک راؤٹر، ایک switch، internet کا connection۔ اس project میں آپ VLANs, inter-VLAN routing, DHCP, NAT اور basic security — سب ایک ساتھ لگائیں گے۔ یہی اصل دنیا کا کام ہے۔Ab tak aap ne alag alag auzaar seekhe — ab poora ghar banana hai. Ek chhota office hai: 2 departments, ek router, ek switch, internet ka connection. Is project mein aap VLANs, inter-VLAN routing, DHCP, NAT aur basic security — sab ek saath lagayenge. Yehi asal duniya ka kaam hai.So far you've learned separate tools — now it's time to build the whole house. It's a small office: 2 departments, one router, one switch, an internet connection. In this project you'll apply VLANs, inter-VLAN routing, DHCP, NAT, and basic security — all together. This is real-world work.
سیٹ اپLab SetupLab Setup
R1 G0/0 سے SW1 Fa0/1 (trunk)۔ SW1: Fa0/2-5 = VLAN 10 (Staff)، Fa0/6-9 = VLAN 20 (Guests)۔ R1 G0/1 internet سرور سے connected۔ Devices: 1x Router 2911, 1x Switch 2960, 6x PC, 1x Server (internet)۔ تمام PCs DHCP (automatic) پر رکھو۔ کوئی manual IP نہیں۔R1 G0/0 se SW1 Fa0/1 (trunk). SW1: Fa0/2-5 = VLAN 10 (Staff), Fa0/6-9 = VLAN 20 (Guests). R1 G0/1 internet server se connected. Devices: 1x Router 2911, 1x Switch 2960, 6x PC, 1x Server (internet) Tamam PCs DHCP (automatic) par rakho. Koi manual IP nahi.R1 G0/0 to SW1 Fa0/1 (trunk). SW1: Fa0/2-5 = VLAN 10 (Staff), Fa0/6-9 = VLAN 20 (Guests). R1 G0/1 connected to the internet server. Devices: 1x Router 2911, 1x Switch 2960, 6x PC, 1x Server (internet). Keep all PCs on DHCP (automatic). No manual IPs.
اقداماتStepsSteps
Step 1
R1 کی بنیادی setup۔ CLI میں جاؤ اور راؤٹر کو نام دو (hostname) تاکہ ہر device پہچانی جائے۔R1 ki bunyadi setup. CLI mein jao aur router ko naam do (hostname) taake har device pehchani jaye.R1 basic setup. Enter the CLI and give the router a name (hostname) so every device is recognizable.
enable configure terminal hostname OFFICE-R1
Step 2
R1: DHCP pool بناؤ تاکہ PCs کو خود IP ملے۔ Pool میں network، گیٹ وے (default-router) اور DNS لگاؤ، پھر reserved IPs کو excluded کرو۔R1: DHCP pool banao taake PCs ko khud IP mile. Pool mein network, gateway (default-router) aur DNS lagao, phir reserved IPs ko excluded karo.R1: create the DHCP pool so PCs get IPs automatically. Set the network, gateway (default-router), and DNS in the pool, then exclude the reserved IPs.
ip dhcp pool STAFF network 192.168.10.0 255.255.255.0 default-router 192.168.10.1 dns-server 8.8.8.8 exit ip dhcp excluded-address 192.168.10.1 192.168.10.20
Step 3
R1: inter-VLAN routing۔ Sub-interfaces ہر VLAN کا گیٹ وے ہیں — یہی router-on-a-stick ہے۔R1: inter-VLAN routing. Sub-interfaces har VLAN ka gateway hain — yehi router-on-a-stick hai.R1: inter-VLAN routing. The sub-interfaces are each VLAN's gateway — that's router-on-a-stick.
interface g0/0.10 encapsulation dot1Q 10 ip address 192.168.10.1 255.255.255.0 exit interface g0/0.20 encapsulation dot1Q 20 ip address 192.168.20.1 255.255.255.0 exit interface g0/0 no shutdown exit
Step 4
R1: PAT for internet۔ G0/1 internet کی طرف ہے — اسے nat outside بناؤ، G0/0 nat inside، پھر overload کے ساتھ PAT لگاؤ تاکہ آفس کے PCs باہر جا سکیں۔R1: PAT for internet. G0/1 internet ki taraf hai — use nat outside banao, G0/0 nat inside, phir overload ke saath PAT lagao taake office ke PCs bahar ja saken.R1: PAT for internet. G0/1 faces the internet — make it nat outside, G0/0 nat inside, then apply PAT with overload so the office PCs can get out.
interface g0/1 ip address 203.0.113.2 255.255.255.0 ip nat outside no shutdown exit interface g0/0 ip nat inside exit ip nat inside source list 1 interface g0/1 overload access-list 1 permit 192.168.0.0 0.0.255.255
Step 5
SW1: VLANs اور trunk۔ Fa0/2-5 کو VLAN 10 (Staff) اور Fa0/6-9 کو VLAN 20 (Guests) میں ڈالو، اور Fa0/1 کو trunk بناؤ (setup کے مطابق)۔SW1: VLANs aur trunk. Fa0/2-5 ko VLAN 10 (Staff) aur Fa0/6-9 ko VLAN 20 (Guests) mein daalo, aur Fa0/1 ko trunk banao (setup ke mutabiq).SW1: VLANs and trunk. Put Fa0/2-5 in VLAN 10 (Staff) and Fa0/6-9 in VLAN 20 (Guests), and make Fa0/1 a trunk (per the setup).
Step 6
Testing: Checklist: (1) PC کو DHCP سے IP ملا؟ (2) اپنے گیٹ وے کو ping؟ (3) دوسرے VLAN کے PC کو ping؟ (4) Internet سرور کو ping (PAT)؟ (5) show ip nat translations میں entries؟Testing: Checklist: (1) PC ko DHCP se IP mila? (2) Apne gateway ko ping? (3) Doosre VLAN ke PC ko ping? (4) Internet server ko ping (PAT)? (5) show ip nat translations mein entries?Testing checklist: (1) Did the PC get an IP from DHCP? (2) Ping your own gateway? (3) Ping a PC in the other VLAN? (4) Ping the internet server (PAT)? (5) Entries in show ip nat translations?
تصدیقVerifyVerify
show ip dhcp binding, show ip nat translations, show ip interface brief — تینوں سے پورا project verify کرو۔show ip dhcp binding, show ip nat translations, show ip interface brief — teeno se poora project verify karo.Verify the whole project with all three: show ip dhcp binding, show ip nat translations, show ip interface brief.
show ip dhcp binding show ip nat translations show ip interface brief
خرابی دور کرناTroubleshootingTroubleshooting
⚠️ PCs کو DHCP سے IP نہیں مل رہا۔PCs ko DHCP se IP nahi mil raha.The PCs aren't getting an IP from DHCP.
✅ DHCP pool کا network اور sub-interface کا IP ایک subnet میں ہونے چاہئیں۔ Excluded range بھی چیک کرو۔DHCP pool ka network aur sub-interface ka IP same subnet mein hone chahiye. Excluded range bhi check karo.The DHCP pool's network and the sub-interface IP must be in the same subnet. Also check the excluded range.
⚠️ اندر سب کام کر رہا ہے لیکن internet نہیں جا رہا۔Andar sab kaam kar raha hai lekin internet nahi ja raha.Everything inside works, but there's no internet.
✅ ip nat inside/outside بھول گئے ہوں گے۔ دونوں interfaces پر چیک کرو۔ip nat inside/outside bhool gaye honge. Dono interfaces par check karo.You probably forgot ip nat inside/outside. Check both interfaces.
انٹرویو سوالاتInterview Q&AInterview Q&A
❓ نیا آفس network design کرنا ہو تو پہلا قدم کیا ہوگا؟Naya office network design karna ho to pehla qadam kya hoga?What's the first step when designing a new office network?
پہلے requirements لکھو (کتنے VLANs، کتنے hosts)، پھر IP plan بناؤ، پھر step by step: VLANs, trunk, routing, DHCP, NAT, security, testing۔Pehle requirements likho (kitne VLANs, kitne hosts), phir IP plan banao, phir step by step: VLANs, trunk, routing, DHCP, NAT, security, testing.First write the requirements (how many VLANs, how many hosts), then make the IP plan, then go step by step: VLANs, trunk, routing, DHCP, NAT, security, testing.