1. Open Packet Tracer → File → New.
2. Drag onto the workspace:
   • 1 × 2960 Switch (Switches category)
   • 4 × PC — rename: HR-PC1, HR-PC2, Sales-PC1, Sales-PC2
   • 6 × PC — rename: Student-PC1 through Student-PC6
3. Connect using Copper Straight-Through cables exactly as the port plan shows:
   • Sales-PC1 → Fa0/1, Sales-PC2 → Fa0/2
   • HR-PC1 → Fa0/3, HR-PC2 → Fa0/4
   • Student-PC1 → Fa0/8 … Student-PC6 → Fa0/13
4. Wait for all link lights to turn green.

Click each PC → Desktop → IP Configuration → Static.

Leave Default Gateway and DNS blank for now.

All ports are in VLAN 1 (factory default). From HR-PC1 → Desktop → Command Prompt:

ping 192.168.10.12

Succeeds. Now:

ping 192.168.30.11

Fails — different subnet, no router. After VLAN configuration the cross-subnet ping fails for a new Layer 2 reason. Record both results.

Click the switch → CLI tab. Press Enter to dismiss the banner. You land at:

Switch>

Enter privileged mode, global config, then define all three VLANs:

Switch> enable
Switch# configure terminal
Switch(config)# vlan 10
Switch(config-vlan)# name HR
Switch(config-vlan)# vlan 20
Switch(config-vlan)# name Sales
Switch(config-vlan)# vlan 30
Switch(config-vlan)# name Students
Switch(config-vlan)# end

Verify the VLANs were created:

Switch# show vlan brief

You should see VLAN 10 (HR), 20 (Sales), and 30 (Students) listed as active, each with no ports assigned yet.

Use interface range to assign multiple ports at once:

Switch# configure terminal

Switch(config)# interface range Fa0/1-2
Switch(config-if-range)# switchport mode access
Switch(config-if-range)# switchport access vlan 20
Switch(config-if-range)# exit

Switch(config)# interface range Fa0/3-4
Switch(config-if-range)# switchport mode access
Switch(config-if-range)# switchport access vlan 10
Switch(config-if-range)# exit

Switch(config)# interface range Fa0/8-13
Switch(config-if-range)# switchport mode access
Switch(config-if-range)# switchport access vlan 30
Switch(config-if-range)# end

Verify the assignments:

Switch# show vlan brief

VLAN 10: Fa0/3, Fa0/4  |  VLAN 20: Fa0/1, Fa0/2  |  VLAN 30: Fa0/8–13

From HR-PC1: ping 192.168.10.12 — succeeds.

From Sales-PC1: ping 192.168.20.12 — succeeds.

From Student-PC1: ping 192.168.30.16 — succeeds.

From HR-PC1:

ping 192.168.20.11

Times out. Also try ping 192.168.30.11 — also times out. Repeat from Sales-PC1 and Student-PC1 to confirm all three VLANs are isolated from each other.

1. Drag three Server-PT devices onto the workspace. Rename: HR-DHCP, Sales-DHCP, Student-DHCP.
2. Connect: HR-DHCP → Fa0/6, Sales-DHCP → Fa0/5, Student-DHCP → Fa0/14.

Click each server → Desktop → IP Configuration → Static.

Click the switch → CLI tab:

Switch# configure terminal

Switch(config)# interface Fa0/6
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 10
Switch(config-if)# exit

Switch(config)# interface Fa0/5
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 20
Switch(config-if)# exit

Switch(config)# interface Fa0/14
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 30
Switch(config-if)# end

Verify:

Switch# show vlan brief

VLAN 10 now includes Fa0/3, Fa0/4, Fa0/6. VLAN 20 includes Fa0/1, Fa0/2, Fa0/5. VLAN 30 includes Fa0/8–13, Fa0/14.

1. Click HR-DHCP → Services → DHCP.
2. Edit pool HR-Pool: Default Gateway 192.168.10.1, DNS 8.8.8.8, Start IP 192.168.10.10, Mask 255.255.255.0, Max Users 91.
3. Click Save → Service: On.

1. Click Sales-DHCP → Services → DHCP.
2. Pool Sales-Pool: Gateway 192.168.20.1, DNS 8.8.8.8, Start 192.168.20.10, Mask 255.255.255.0, Max 91.
3. Click Save → Service: On.

1. Click Student-DHCP → Services → DHCP.
2. Pool Student-Pool: Gateway 192.168.30.1, DNS 8.8.8.8, Start 192.168.30.10, Mask 255.255.255.0, Max 91.
3. Click Save → Service: On.

For each of the 10 PCs → Desktop → IP Configuration → DHCP. Expected address ranges:

Re-verify same-VLAN pings succeed and all cross-VLAN pings still time out.

On each DHCP server → Services → DHCP, scroll to the bottom:

• HR-DHCP: 2 entries with 192.168.10.x addresses.
• Sales-DHCP: 2 entries with 192.168.20.x addresses.
• Student-DHCP: 6 entries with 192.168.30.x addresses.

Each server only served the hosts inside its own VLAN. Neither reached the other departments.

ipconfig

ifconfig

Note your IP. From Student B’s host: ping <Student A’s IP>. If it fails, use the Tailscale fallback.

Student A must allow inbound TCP 38000:

• Windows: Windows Defender Firewall → Allow an app → Packet Tracer.
• macOS: System Settings → Network → Firewall → allow Packet Tracer.
• Linux: sudo ufw allow 38000/tcp

1. Open Lab10_S2_<A>.pkt. Drag a Multiuser Connection cloud onto the workspace. Connect it to Fa0/7.
2. Extensions → Multiuser → Listen… Port: 38000, Password: lab10trunk, New Remote Network: Always Accept → OK.
3. Share with Student B: host IP, port 38000, password lab10trunk.

Save as Lab10_S3_<A>.pkt.

1. Open Lab10_S2_<B>.pkt. Drag a Multiuser Connection onto your workspace. Connect it to Fa0/7.
2. Click the cloud → Outgoing Connections: Peer Address <A’s IP>, Port 38000, Password lab10trunk → Connect.
3. Cloud turns green when the link is up.

Each student runs this on their own switch → CLI tab:

Switch# configure terminal
Switch(config)# interface Fa0/7
Switch(config-if)# switchport mode trunk
Switch(config-if)# end

Verify:

Switch# show interfaces Fa0/7 switchport

Look for Operational Mode: trunk and Trunking Encapsulation: dot1q.

Exchange IPs with Student B (run ipconfig on their PCs).

VLAN 10 — HR across trunk:

ping 192.168.10.xx     <-- Student B's HR-PC1

Should succeed.

VLAN 20 — Sales across trunk:

ping 192.168.20.xx     <-- Student B's Sales-PC1

Should succeed.

VLAN 30 — Students across trunk:

ping 192.168.30.xx     <-- Student B's Student-PC1

Should succeed.

Cross-VLAN isolation across trunk:

ping 192.168.20.xx     <-- Student B's Sales-PC1 (from your HR-PC1)

Should time out. Also verify your HR-PC1 → Student B’s Student-PC1 times out, and your Student-PC1 → Student B’s Sales-PC1 times out.