1. Network Troubleshooting CT046-3.5-NWT NameTP No. Gan Pei ShanTP029115 Tan Ming FattTP036625 Elamparithi A/L ThuraisamyTP029002 Tan Ken SingTP028566

2. Troubleshooting Methodology  Troubleshooting methodology is the process that determines to solve and eliminate the problems on the network through the steps of the troubleshooting process Step 1: Define the problem Step 2: Gather information Step 3: Analyze the information Step 4: Eliminate possibilities Step 5: Propose hypothesis Step 6: Test hypothesis Step 7: Solve the problem  Troubleshooting approaches are provided some methods which are Top-down, Bottom-up, Divide and conquer, Follow-the-path, Spot the differences and Move the problem.

3. Troubleshooting Methodology  It will be using the troubleshooting approach which is bottom-up methodology that allows they can directly know and identify where the network problems at the physical component are.  The bottom-up will start with the physical components on the network and works its way up the layers of OSI model.  This approach is an effective and efficient for identifying the problem that given from the manufacturing company when the problem is suspected to be physical component on the network

4. Network Architecture Design  It suitable for using the network design for the manufacturing company which is tree topology.  Tree topology is combined the characteristics of Bus topology and Star topology.  For the Star topology, all devices are able to connect to a center hub which means that all PCs will be connected to its router.  multiple routers are connected directly to a center which is Shah Alam router.

5. Section A: Reserve Engineering & Troubleshooting  Kuantan  Problem 1  Solution 1

6. Section A: Reserve Engineering & Troubleshooting  Kuantan  Problem 2  Solution 2

7. Section A: Reserve Engineering & Troubleshooting  Kemaman  Problem 1  Solution 1

8. Section A: Reserve Engineering & Troubleshooting  Kemaman  Problem 2  Solution 2

9. Section B: Recommendation to Upgrade the Network  NAT  NAT is designed for IP address conversation that enables private IP networks to connect to the Internet.  NAT runs on a router and connect private network and public network together that allows single IP address communication.  NAT is able to connect multiple computers with private network to the public Internet by using single IP address  PAT  PAT is an extension for Network Address Translation (NAT) which allows multiple private IP address into single public IP address.  It is to share the single IP public address between multiple users who need to use the public Internet.  PAT is known as overload or port overload. PAT need to configure overload with NAT where can be assigned the available port to use it.

10. Section B: Recommendation to Upgrade the Network  Implementation NAT/PAT  NAT  the IP address “172.20.3.100” is the web server which is an internal address whereas the IP address “202.128.6.100” is the external address which allows others PC to access the public Internet.  The configuration “ip nat inside source static 172.20.3.100 202.128.6.100” is to perform translation for the inbound traffic.  interface Fast Ethernet port 0/0 is inside NAT interfaces which cannot be routed to the Internet because that is a private IP address.  The outside NAT interface is for the interface serial port 0/3/0 which means the interface can be connected to the Internet.

11. Section B: Recommendation to Upgrade the Network  Implementation NAT/PAT  PAT  the network team was implemented PAT configuration with access list (ACL) in order to permit the internal address of the Kuantan branch.  The difference is PAT translate into port address, instead of a pool of addresses in order to make sure that only one public IP address to communicate with each others.  The configuration is “ip nat inside source list 1 interface Serial0/3/0 overload” show that the NAT inside the access list 1 and the NAT outside the interface serial port 0/3/0.  The configured ACL is to identify which permits the IP address to translate as well as which interfaces are configured NAT inside and NAT outside. Kuantan(config)# access-list 1 permit 192.168.9.0 0.0.0.255 Kuantan(config)# ip nat inside source list 1 interface Serial0/3/0 overload Kuantan(config)# int se0/3/0 Kuantan(config-if)# ip nat outside Kuantan(config)# int fa0/0 Kuantan(config-if)# ip nat inside

12. Section B: Recommendation to Upgrade the Network  “show ip nat statistics” and “show ip nat translation” to check the IP NAT is working in the correct way on the Shah Alam router.

13. Section B: Recommendation to Upgrade the Network  the IP address “202.128.6.100” is the public address and the web server will successful to hide the private IP address.  the web server will be successful to hide the private IP address which is “172.20.3.254” so that Kuantan PC is not able to use this IP address to access the Internet.

14. Section B: Recommendation to Upgrade the Network  it is showing that the IP NAT traffic from Kuantan branch to Shah Alam headquarters.  That shows source IP address from Kuantan branch which is “202.128.6.120” and destination IP address to Shah Alam headquarter which is “202.128.6.100”  For example, Kuantan branch wants to access the Internet by using the public IP address from Shah Alam through web server is on a private network with private address which is “172.20.3.100”.

15. Shah Alam Router  Problem 1 interface Serial3/0 ip address 202.128.6.100 255.255.255.255 clock rate 2000000

16.  Solution 1 interface Serial3/0 ip address 202.128.6.100 255.255.255.0 clock rate 2000000 !

17.  Problem 2 ip classless ip route 192.168.40.0 255.255.255.0 202.128.6.120 ip route 192.168.9.0 255.255.255.0 202.128.6.120 ip route 200.128.30.0 255.255.255.0 202.128.6.120 ip route 172.13.0.0 255.255.0.0 200.128.50.12 ip route 172.16.0.0 255.255.0.0 202.128.60.3

18.  Solution 2 ShahAlam (config) # no ip route 200.128.30.0 255.255.255.0 202.128.6.120 ip classless ip route 192.168.40.0 255.255.255.0 202.128.6.120 ip route 192.168.9.0 255.255.255.0 202.128.6.120 ip route 172.13.0.0 255.255.0.0 200.128.50.12 ip route 172.16.0.0 255.255.0.0 202.128.60.3

19. What is VLAN? Virtual Local Area Networks (VLANs) divide a single existing physical network into multiple logical networks. Thereby, each VLAN forms its own broadcast domain. Communication between two different VLANs is only possible through a router that has been connected to both VLANs.

20. Advantages and Disadvantages  Advantages  Increased performance  Improved manageability  Simplification of software configurations  Increased security options  Flexibility  Cost

21. Advantages and Disadvantages  Disadvantages  Device limitations  Port constraints

22. VLAN and Inter-VLAN Implementation Taiping branch will be having several departments functioning. It will be human resource and sales department. After finding out the problems in section A the team have solved the issues for department communication by having VLAN’s in all the department. In this case the team have configured VLAN 10 for human resource and VLAN 20 for sales department.

23. Access control list (ACL) Taiping(config)#ip access-list standard 10 Taiping(config-std-nacl)#deny 192.168.20.0 0.0.0.63 Taiping(config-std-nacl)#permit any Taiping(config)#ip access-list standard 20 Taiping(config-std-nacl)#deny 192.168.10.0 0.0.0.31 Taiping(config-std-nacl)#permit any Taiping(config)# int fa0/0.10 Taiping(config-subif)# ip access-group 10 out Taiping(config)# int fa0/0.20 Taiping(config-subif)# ip access-group 20 out Taiping branch have used access list control to deny access to few network from accessing to the network. From above diagram we can see that by using access list control 20 the network with network address 192.168.20.0 255.255.255.192 is denied from accessing into Taiping branch. This is done to prevent users from other network to access information from this network. Not only that 192.168.10.0 255.255.255.224 is also blocked from accessing Taiping branch network, other than this two networks are allowed to communicate with Taiping branch.