AP Networking / Lab 3
Unit 3 Lab · Managing Many Connections
Lab 3: Game Day Network Design
Your school is hosting a regional esports tournament with a live audience and an online livestream. Plan a segmented network that supports every device and user type, build it in a simulator, and present an event network document the tournament director can sign off on.
At a glance
- Time: 5 class periods (45 min)
- Team size: 4 (one role each)
- Book lessons: 3.1–3.5 (3.6 for documentation)
- Deliverable: event network document plus a working simulator file
Learning objectives
- 3.1.A 3.1.B Determine endpoint devices and the number and type of connections.
- 3.2.B 3.2.D Determine segmentation methods; evaluate an AI-generated LAN configuration.
- 3.3.C 3.3.D Configure a LAN and a guest and internal wireless network.
- 3.4.C Configure subnetting.
- 3.5.C Configure firewall rules for different segments.
- 3.6.A Document the network design.
The situation
Players, coaches, judges, event staff, a livestream crew, and hundreds of spectators will all connect on game day. A slow or dropped connection could disrupt the stream, delay matches, or even change the outcome of the competition. The event team has given you the venue details, user groups, and performance needs. Determine the devices, connections, and segments for a flawless setup.
Starter files
- Event brief: venue, user groups, equipment, addressing, director's rules (.txt)
- AI-generated design draft to evaluate (.txt)
- Event network document template (Word)
- Packet Tracer build sheet: VLANs, gateways, DHCP, ACL (.txt)
Team roles
Project lead
Keeps the team on the plan and the clock, makes sure every requirement is covered, and makes the final call when the team is split. Owns the team log.
Keeps the team on the plan and the clock, makes sure every requirement is covered, and makes the final call when the team is split. Owns the team log.
Data analyst
Reads the evidence (readings, logs, command output), compares values with the thresholds from the book, and states what each piece of evidence shows.
Reads the evidence (readings, logs, command output), compares values with the thresholds from the book, and states what each piece of evidence shows.
Configuration technician
Plans and carries out the configuration or fix in the simulator or on the device, and runs the verification tests.
Plans and carries out the configuration or fix in the simulator or on the device, and runs the verification tests.
Documentation lead
Builds the deliverable, keeps diagrams and tables consistent, and records how the team used and checked AI.
Builds the deliverable, keeps diagrams and tables consistent, and records how the team used and checked AI.
Walkthrough
Part 1: Devices and connections (Day 1)
- Make a device list by user role. For each role, name the endpoint device and justify it (for example, why tablets fit judges who walk the stage).
- Assign every device a connection type, wired or wireless, and justify it with the brief: which devices need high reliability, low latency, or large transfers?
- Count the wired devices and determine the number of switches and ports, remembering the reserved uplink port. Count wireless devices in each space and determine the number of WAPs. The concrete wall matters.
Part 2: Evaluate the AI draft (Day 1)
- Read the AI-generated design. For each numbered item, decide whether it is workable, overcomplicated or too costly, missing a requirement, or technically wrong. Check the subnets carefully.
- Rewrite the volunteer's prompt so that it includes the technical requirements an AI tool would need: user groups and counts, traffic needs, security rules, redundancy needs, and the physical layout. Run your new prompt and note what improved and what you still had to fix.
Part 3: Segments and subnets (Day 2)
- Choose your segments (VLANs) and say what separates them: risk, user type, or performance. At least players, production (stream and server), judges, coaches, staff, and spectators need to be considered. You may combine groups if you justify it against the director's rules.
- Divide 10.60.0.0/24 into the smallest subnets that fit each segment. For each one, record the network address, mask (CIDR and dotted decimal), gateway, usable range, and broadcast address. Subnets must not overlap.
- Decide which devices get static addresses (server, cameras, management workstation) and where DHCP is used.
Part 4: Wireless and firewall rules (Day 3)
- Plan the SSIDs: which segments get wireless, the SSID names, WPA3 or WPA2, and the guest network settings that meet the director's rule 2.
- Write firewall rules in the course format (rule number, ALLOW or DENY, direction, protocol, port, source, destination) that enforce rules 2–4. Put specific rules above broad ones and end with deny-by-default. Name the ports: HTTPS 443, DNS 53, SSH 22.
Part 5: Build, verify, and document (Days 4–5)
- Build a scaled-down version in Packet Tracer using the build sheet: VLANs, access and trunk ports, one gateway per VLAN, and a spectator SSID.
- Verify with
show vlan brief,pingwithin and between segments, and the spectator ACL test. Screenshot each result for your document. - Complete the event network document: device list by role; connection types; a segmentation diagram that separates user types; switch, port, and WAP counts; the subnet table; SSIDs and firewall rules; and the justifications.
Deliverable rubric
| Criterion | Points |
|---|---|
| Devices and connections. Appropriate endpoint and connection type for every role, each justified. | 4 |
| Counts. Switches, ports, and WAPs calculated correctly, including uplinks and the wall between spaces. | 3 |
| Segmentation and subnets. Sensible segments; smallest valid, non-overlapping subnets with correct masks, gateways, ranges, and broadcast addresses. | 5 |
| Security. Firewall rules in correct order enforce the director's rules; guest network settings meet rule 2; encrypted management only. | 4 |
| AI evaluation. Every AI item judged with a reason; improved prompt includes the technical requirements. | 3 |
| Simulator verification. Working build with show vlan brief, ping, and ACL evidence. | 3 |
| Documentation and collaboration. Clear diagram with consistent labels; team log shows roles and decisions. | 2 |
| Total | 24 |
Walkthrough video
A walkthrough of the VLAN and router subinterface steps in Packet Tracer will be posted on YouTube @CyberTeaches.