SkillsAndDrills.org
AP Networking

Connecting, configuring, and verifying access

Network design on paper becomes a real, working network when devices are physically connected, IP addresses are assigned, and configurations are verified. This topic covers the hands-on process of building and validating a LAN — from crimping cables to confirming that the guest network is properly isolated.

Go to practice page AP Networking topics Back to Networking

What this topic covers

  • › 3.3.A — Configuring static and DHCP IP addresses, and verifying settings
  • › 3.3.B — Determining whether two devices are on the same network using IP addresses and subnet masks
  • › 3.3.C — Physically connecting and configuring a LAN
  • › 3.3.D — Configuring a WAP to support both guest and internal wireless networks

Configuration before connection

Network design must be completed before connecting and configuring devices. Identifying devices, cabling, and network requirements first — then building — prevents costly rewiring, conflicts, and troubleshooting after the fact. A clear plan ensures each device is placed on the correct segment with the correct IP settings from the start.

Configuring IP addresses (3.3.A)

Every device on a network must have a unique IP address, subnet mask, and default gateway. These can be assigned manually (static) or automatically via DHCP.

Static IP configuration

A static address is entered manually in the device's network settings. It does not change unless an administrator changes it. Use static addresses for servers, management workstations, printers, and other devices that must be reachable at a predictable address.

  • › Access network settings on the device
  • › Enter the IP address, subnet mask, and default gateway manually
  • › Address must be unique within the LAN and in the correct address range

DHCP configuration

A DHCP server (commonly built into the router) automatically assigns IP addresses from a managed pool. Devices are configured to obtain IP addresses automatically. Setting up a DHCP pool requires:

  • › Accessing the router/switch web interface or CLI
  • › Defining the IP address range for the pool
  • › Setting subnet mask, default gateway, and network address
  • › Specifying the lease time (how often addresses are renewed)

Verifying IP configuration

After configuration, verify that the IP address, subnet mask, default gateway, and MAC address match the intended settings using:

ipconfig

Windows — shows IP, subnet mask, default gateway, Physical Address (MAC)

ifconfig

Mac/Linux — shows IP, subnet mask, Ether Address (MAC)

Network Settings

GUI method — accessible in system network preferences on any OS

Advertisement

Same network or different? (3.3.B)

Determining whether two devices are on the same network requires comparing the network bits of each IP address using the subnet mask.

How subnet masks work

The 32 bits of an IPv4 address are divided into network bits and host bits. The subnet mask is a sequence of 1s followed by 0s — the 1s identify the network bits and the 0s identify the host bits.

Common subnet masks (CIDR)

/24 = 11111111.11111111.11111111. 00000000 = 255.255.255.0

/16 = 11111111.11111111. 00000000.00000000 = 255.255.0.0

/26 = 11111111.11111111.11111111.11 000000 = 255.255.255.192

Determining same vs. different network

Two devices are on the same network when their network bits — the portion covered by the subnet mask — are identical.

Same network (/24)

192.168.1.10 → network: 192.168.1.0

192.168.1.20 → network: 192.168.1.0

✓ Same network — switch delivers directly

Different network (/24)

192.168.1.10 → network: 192.168.1.0

192.168.2.30 → network: 192.168.2.0

✗ Different networks — must route through gateway

Advertisement

Physically configuring a LAN (3.3.C)

Building a LAN involves both physical and software configuration steps. Design always precedes physical installation.

Tools and materials required

  • › Cables: Ethernet cables appropriate for the environment
  • › Wire/cable stripper: Removes outer insulation from cables
  • › RJ45 connectors: Terminate Ethernet cables at each end
  • › Crimping tool: Attaches RJ45 connectors to cables
  • › Cable management tools: Labels, ties, and trays for organized runs
  • › Safety equipment: Safety glasses and gloves as needed

Configuration steps

  • 1. Complete network design before connecting any devices
  • 2. Configure the switch (IP, password, settings) via CLI or GUI using a console cable
  • 3. Configure the router with an IP address and subnet mask to serve as the default gateway
  • 4. Configure WAPs with SSID, wireless security, IP address, and subnet mask
  • 5. Assign endpoint IP addresses — statically or via DHCP
  • 6. Verify connectivity using ping to test ICMP responses from target devices

Configuring guest and internal wireless networks (3.3.D)

Most WAPs and wireless routers support multiple SSIDs, allowing a single device to serve both internal staff and guests with separate, isolated wireless networks.

Configure internal network first

  1. Create an SSID with a descriptive internal name
  2. Set a strong, complex password
  3. Enable WPA2 or WPA3 encryption
  4. Disable WPS (has known vulnerabilities)
  5. Verify internal devices can reach all intended resources

Then configure the guest network

Access guest settings in the router/WAP interface by entering its IP address in a browser. Configure:

  • Separate SSID with strong password + WPA2/WPA3
  • Limit number of connected devices
  • Disable access to the internal LAN
  • Set access hours or session time limits
  • Optionally: enable a captive portal for login/terms acceptance

Verify: guest device should access internet but NOT internal resources.