White Belt 250 XP to Yellow Belt
▲ streak 0 d
xp 0
checking AI…
Level Beginner Core Challenge
☽ Hands on keyboard
CLI Dojo A simulated Catalyst console. Work the task list left to right — the dojo checks your running config after every command. Abbreviations work (conf t , int g0/1 ), and show run shows what you've built.
console: Dojo — line con 0 user EXEC
Dojo con0 is now available
Press RETURN to get started.
Dojo>
01 Claim the switch
Enter privileged then global config, set the hostname to SW1, and set an enable secret.
hint enable → configure terminal → hostname SW1 → enable secret <pw>
02 Build the VLANs
Create VLAN 10 named SALES and VLAN 20 named ENG.
hint vlan 10 → name SALES → exit → vlan 20 → name ENG
03 Wire the access ports
Make Fa0/1 an access port in VLAN 10 and Fa0/2 an access port in VLAN 20.
hint interface fa0/1 → switchport mode access → switchport access vlan 10 (repeat for fa0/2 / 20)
04 Trunk the uplink
Configure Gi0/1 as an 802.1Q trunk with native VLAN 99.
hint interface g0/1 → switchport mode trunk → switchport trunk native vlan 99
05 Management SVI
Give interface VLAN 10 the address 10.10.10.2 255.255.255.0, bring it up, and set the default gateway to 10.10.10.1.
hint interface vlan 10 → ip address 10.10.10.2 255.255.255.0 → no shutdown → exit → ip default-gateway 10.10.10.1
06 Route with OSPF
Address Gi0/2 as 192.168.1.1/24, enable it, then run OSPF process 1 advertising 192.168.1.0/24 into area 0.
hint interface g0/2 → ip address 192.168.1.1 255.255.255.0 → no shutdown → exit → router ospf 1 → network 192.168.1.0 0.0.0.255 area 0
07 SSH-only management
Set domain dojo.lab, create user admin with a secret, generate 2048-bit RSA keys, then restrict VTY 0-4 to SSH with local login.
hint ip domain-name dojo.lab → username admin secret <pw> → crypto key generate rsa modulus 2048 → line vty 0 4 → transport input ssh → login local
08 Lock down Fa0/3
Access mode on Fa0/3 with port security: maximum 2 MACs, violation restrict, sticky learning.
hint interface fa0/3 → switchport mode access → switchport port-security → switchport port-security maximum 2 → switchport port-security violation restrict → switchport port-security mac-address sticky