Lab16.zip

Lab16/Lab 16 - Hands On Skills Assessment Option 1.docx

Cisco NetAcad_Header(Vertical)-01

CCNA: Introduction to Networks SA Exam

Lab 16 Option #1- CCNA: Introduction to Networks

Skills Assessment – Student Training Exam

Complete the assessment in Packet Tracer and document and fill in the blanks. Submit this file and the pka file in Week 8, Points will not be given for incomplete Steps. Every item in yellow should have a configuration/command from the work done on the Packet Tracer.

Topology

Assessment Requirements

Part 1: Develop the IPv4 Address Scheme

Part 2: Initialize and Reload Devices

Part 3: Configure Device IPv4 and Security Settings

Part 4: Test and Verify IPv4 End-to-End Connectivity

Part 5: Configure IPv6 Addressing on R1

Part 6: Test and Verify IPv6 End-to-End Connectivity

Part 7: Use the IOS CLI to Gather Device Information

Part 8: Save the R1 Configuration to a TFTP Server

Scenario

In this Skills Assessment (SA) you will configure the devices in a small network. You must configure a router, switch and PCs to support both IPv4 and IPv6 connectivity. You will configure security, including SSH, on the router. You will test and document the network using common CLI commands. Finally, you will save the router configuration to a TFTP server.

Required Packet Tracer Lab Setup

1 Router (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)

1 Switch (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)

2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)

1 Server (for TFTP)

Console cable to configure the Cisco IOS devices via the console ports

Ethernet cables as shown in the topology

Develop the IPv4 Addressing Scheme

Given the IP address range and mask of 172.16.0.0 - 172.31.255.255 255.240.0.0 (address range / mask), design an IP addressing scheme that satisfies the following requirements. Network address/mask and the number of hosts for Subnets A and B are provided by your instructor below.

Subnet

Number of Hosts

Subnet A

1,132

Subnet B

764

The 0th subnet is used. You don’t have to show your work but please try and do this without using subnet calculators

Subnet A

Specification

Student Input

Number of bits in the subnet

IP mask (binary)

New IP mask (decimal)

Maximum number of usable subnets (including the 0th subnet)

Number of usable hosts per subnet

IP Subnet

First IP Host address

Last IP Host address

Subnet B

Specification

Student Input

Number of bits in the subnet

IP mask (binary)

New IP mask (decimal)

Maximum number of usable subnets (including the 0th subnet)

Number of usable hosts per subnet

IP Subnet

First IP Host address

Last IP Host address

Host computers will use the first IP address in the subnet. The network router will use the LAST network host address. The switch will use the second to the last network host address.

Write down the IP address information for each device:

Device

IP address

Subnet Mask

Gateway

PC-A

R1-G0/0

N/A

R1-G0/1

N/A

S1

PC-B

Initialize and Reload Devices

Initialize and reload router and switch.

Erase the startup configurations and VLANs from the router and switch and reload the devices.

Task

IOS Command

Erase the startup-config file on the Router.

Reload the Router.

Erase the startup-config file on the Switch.

Delete the vlan.dat file on the Switch

Reload the Switch.

Configure Device IPv4 and Security Settings

Configure host computers.

After configuring each host computer, record the host network settings with the ipconfig /all command.

PC-A Network Configuration

Description

Physical Address

IP Address

Subnet Mask

Default Gateway

PC-B Network Configuration

Description

Physical Address

IP Address

Subnet Mask

Default Gateway

Configure R1.

Configuration tasks for R1 include the following:

Task

Specification

Disable DNS lookup

Router name

R1

Domain name

ccna-lab.com

Encrypted privileged exec password

ciscoenpass

Console access password

ciscoconpass

Telnet access password

ciscovtypass

Set the minimum length for passwords

10 characters

Create an administrative user in the local database

Username: admin

Password: admin1pass

Set login on VTY lines to use local database

Set VTY lines to accept ssh and telnet connections only

Encrypt the clear text passwords

MOTD Banner

Interface G0/0

Set the description

Set the Layer 3 IPv4 address

Activate Interface

Interface G0/1

Set the description

Set the Layer 3 IPv4 address

Activate Interface

Generate a RSA crypto key

1024 bits modulus

Configure S1.

Configuration tasks for R1 include the following:

Task

Specification

Switch name

S1

Configure Management Interface (SVI)

Set the Layer 3 IPv4 address

Encrypted privileged exec password

ciscoenpass

Console access password

ciscoconpass

Telnet access password

ciscovtypass

Test and Verify IPv4 End-to-End Connectivity

Verify network connectivity.

Use the ping command to test connectivity between all network devices.

Use the following table to methodically verify connectivity with each network device. Take corrective action to establish connectivity if a test fails:

From

To

IP Address

Ping Results

PC-A

R1, G0/0

PC-A

R1, G0/1

PC-A

S1 VLAN 1

PC-A

PC-B

PC-B

R1, G0/1

PC-B

R1, G0/0

PC-B

S1 VLAN 1

In addition to the ping command, what other command is useful in displaying network delay and breaks in the path to the destination? ( .5 point)

_______________________________________________________________________________________

Configure IPv6 Addressing on R1

Given an IPv6 network address of 2001:DB8:ACAD::/48, configure IPv6 addresses for the Gigabit interfaces on R1. Use FE80::1 as the link-local address on both interfaces.

Configure R1.

Configuration tasks for R1 include the following:

Task

Specification

Configure G0/0 to use the first address in subnet A.

Assign the IPv6 unicast address

Assign the IPv6 link-local address

Configure G0/1 to use the first address in subnet B.

Assign the IPv6 unicast address

Assign the IPv6 link-local address

Enable IPv6 unicast routing.

Test and Verify IPv6 End-to-End Connectivity

Obtain the IPv6 address assigned to host PCs.

PC-A IPv6 Network Configuration

Description

Physical Address

IPv6 Address

Default Gateway

PC-B IPv6 Network Configuration

Description

Physical Address

IPv6 Address

IPv6 Default Gateway

Use the ping command to verify network connectivity.

IPv6 network connectivity can be verified with the ping command. Use the following table to methodically verify connectivity with each network device. Take corrective action to establish connectivity if a test fails:

From

To

IP Address

Ping Results

PC-A

R1, G0/0

PC-A

R1, G0/1

PC-A

PC-B

PC-B

R1, G0/1

PC-B

R1, G0/0

Use the IOS CLI to Gather Device Information

Issue the appropriate command to discover the following information:

Description

Student Input

Router Model

IOS Image File

Total RAM

Total Flash Memory

Configuration Register

CLI Command Used

Enter the appropriate CLI command needed to display the following on R1:

Command Description

Student Input (command)

Display a summary of important information about the interfaces on R1.

Display the IPv4 routing table.

Display the Layer 2 to Layer 3 mapping of addresses on R1.

Display detailed IPv4 information about interface G0/0 on R1.

Display the IPv6 routing table.

Display a summary of IPv6 interface addresses and status.

Display information about the devices connected to R1. Information should include Device ID, Local Interface, Hold time, Capability, Platform, and Port ID.

Save the current configuration so it will be used the next time the router is started.

Save the R1 Configuration to a TFTP Server.

Assign an IP to a Server/PC. Ping server/PC to ensure it is functional. Save the current flash configuration for R1 to the Server/PC. Document the command used below:

Description

Student Input

CLI Command

Address of remote server

Destination Filename

Router Interface Summary Table

Router Interface Summary

Router Model

Ethernet Interface #1

Ethernet Interface #2

Serial Interface #1

Serial Interface #2

1800

Fast Ethernet 0/0 (F0/0)

Fast Ethernet 0/1 (F0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

1900

Gigabit Ethernet 0/0 (G0/0)

Gigabit Ethernet 0/1 (G0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

2801

Fast Ethernet 0/0 (F0/0)

Fast Ethernet 0/1 (F0/1)

Serial 0/1/0 (S0/1/0)

Serial 0/1/1 (S0/1/1)

2811

Fast Ethernet 0/0 (F0/0)

Fast Ethernet 0/1 (F0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

2900

Gigabit Ethernet 0/0 (G0/0)

Gigabit Ethernet 0/1 (G0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.

© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 8

© 2014 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 8

__MACOSX/Lab16/._Lab 16 - Hands On Skills Assessment Option 1.docx

Lab16/Lab 16 - Hands On Skills Assessment Option 2.docx

Cisco NetAcad_Header(Vertical)-01

CCNA: Routing and Switching Essentials SA Exam

Lab 16 – Option #2 CCNA: Routing and Switching Essentials

Skills Assessment – Student Training Exam

Complete the assessment in Packet Tracer and document and fill in the blanks. Submit this file and the pka file in Week 8, Points will not be given for incomplete Steps. Every item in yellow should have a configuration/command from the work done on the Packet Tracer.

Topology

RSEospfSBA

Assessment Objectives

Part 1: Initialize Devices

Part 2: Configure Device Basic Settings

Part 3: Configure Switch Security, VLANs, and Inter-VLAN Routing

Part 4: Configure OSPFv2 Dynamic Routing Protocol

Part 5: Implement DHCP and NAT

Part 6: Configure and Verify Access Control Lists (ACLs)

Scenario

In this Skills Assessment (SA) you will configure a small network. You will configure routers, switches, and PCs to support IPv4 connectivity, switch security, and inter VLAN routing. You will then configure the devices with OSPFv2, DHCP, and dynamic and static NAT. Access control lists (ACLs) will be applied for added security. You will test and document the network using common CLI commands throughout the assessment.

Required Packet Tracer Lab

3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)

2 Switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)

3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)

Console cable to configure the Cisco IOS devices via the console ports

Ethernet and Serial cables as shown in the topology

Initialize Devices

Initialize and reload the routers and switches.

Erase the startup configurations reload the devices.

Task

IOS Command

Erase the startup-config file on all routers.

Reload all routers.

Erase the startup-config file on all switches and remove the old VLAN database.

Reload both switches.

Verify VLAN database is absent from flash on both switches.

Configure Device Basic Settings

Configure the Internet PC.

Configuration tasks for the Internet PC include the following (Refer to Topology for IP address information):

Configuration Item or Task

Specification

IP Address

Subnet Mask

Default Gateway

209.165.200.225

Configure R1.

Configuration tasks for R1 include the following:

Configuration Item or Task

Specification

Disable DNS lookup

Router name

R1

Encrypted privileged exec password

class

Console access password

cisco

Telnet access password

cisco

Encrypt the clear text passwords

MOTD banner

Unauthorized Access is Prohibited!

Interface S0/0/0

Set the description

Set the Layer 3 IPv4 address. Use the first available address in the subnet.

Set the clocking rate to 128000

Activate Interface

Default route

Configure a default route out S0/0/0.

Note: Do not configure G0/1 at this time.

Configure R2.

Configuration tasks for R2 include the following:

Configuration Item or Task

Specification

Disable DNS lookup

Router name

R2

Encrypted privileged exec password

class

Console access password

cisco

Telnet access password

cisco

Encrypt the clear text passwords

Enable HTTP server

MOTD banner

Unauthorized Access is Prohibited!

Interface S0/0/0

Set the description

Set the Layer 3 IPv4 address. Use the next available address in the subnet.

Activate Interface

Interface S0/0/1

Set the description

Set the Layer 3 IPv4 address. Use the first available address in the subnet.

Set clocking rate to 128000

Activate Interface

Interface G0/0 (Simulated Internet)

Set the Description

Set the Layer 3 IPv4 address. Use the first available address in the subnet.

Activate Interface

Interface Loopback 0 (Simulated Web Server)

Set the description.

Set the Layer 3 IPv4 address.

Default route

Configure a default route out G0/0.

Configure R3.

Configuration tasks for R3 include the following:

Configuration Item or Task

Specification

Disable DNS lookup

Router name

R3

Encrypted privileged exec password

class

Console access password

cisco

Telnet access password

cisco

Encrypt the clear text passwords

MOTD banner

Unauthorized Access is Prohibited!

Interface S0/0/1

Set the description

Set the Layer 3 IPv4 address. Use the next available address in the subnet.

Activate Interface

Interface Loopback 4

Set the Layer 3 IPv4 address. Use the first available address in the subnet.

Interface Loopback 5

Set the Layer 3 IPv4 address. Use the first available address in the subnet.

Interface Loopback 6

Set the Layer 3 IPv4 address. Use the first available address in the subnet.

Default route

Configure a default route out S0/0/1.

Configure S1.

Configuration tasks for S1 include the following:

Configuration Item or Task

Specification

Disable DNS lookup

Switch name

S1

Encrypted privileged exec password

class

Console access password

cisco

Telnet access password

cisco

Encrypt the clear text passwords

MOTD banner

Unauthorized Access is Prohibited!

Configure S3

Configuration tasks for S3 include the following:

Configuration Item or Task

Specification

Disable DNS lookup

Switch name

S3

Encrypted privileged exec password

class

Console access password

cisco

Telnet access password

cisco

Encrypt the clear text passwords

MOTD banner

Unauthorized Access is Prohibited!

Verify network connectivity.

Use the ping command to test connectivity between network devices.

Use the following table to methodically verify connectivity with each network device. Take corrective action to establish connectivity if a test fails:

From

To

IP Address

Ping Results

R1

R2, S0/0/0

R2

R3, S0/0/1

Internet PC

Default Gateway

Configure Switch Security, VLANS, and Inter VLAN Routing

Configure S1.

Configuration tasks for S1 include the following:

Configuration Item or Task

Specification

Create the VLAN database

Use Topology VLAN Key table to create and name each of the listed VLANS.

Assign the management IP address.

Assign the Layer 3 IPv4 address to the Management VLAN. Use the IP address assigned to S1 in the Topology diagram.

Assign the default-gateway

Assign the first IP address in the subnet as the default-gateway.

Force trunking on Interface F0/3

Use VLAN 1 as the native VLAN.

Force trunking on Interface F0/5

Use VLAN 1 as the native VLAN.

Configure all other ports as access ports

Use the interface range command.

Assign F0/6 to VLAN 31

Shutdown all unused ports.

Configure S3.

Configuration tasks for S3 include the following:

Configuration Item or Task

Specification

Create the VLAN database

Use Topology VLAN Key Table to create each of the listed VLANS. Name each VLAN.

Assign the management IP address.

Assign the Layer 3 IPv4 address to the Management VLAN. Use the IP address assigned to S3 in the Topology diagram.

Assign the default-gateway

Assign the first IP address in the subnet as the default-gateway

Force trunking on Interface F0/3

Use VLAN 1 as the native VLAN.

Configure all other ports as access ports

Use the interface range command.

Assign F0/18 to VLAN 33

Shutdown all unused ports.

Configure R1.

Configuration tasks for R1 include the following:

Configuration Item or Task

Specification

Configure 802.1Q subinterface .31 on G0/1

Description Accounting LAN

Assign VLAN 31.

Assign the first available address to this interface.

Configure 802.1Q subinterface .33 on G0/1

Description Engineering LAN

Assign VLAN 33.

Assign the first available address to this interface.

Configure 802.1Q subinterface .99 on G0/1

Description Management LAN

Assign VLAN 99.

Assign the first available address to this interface.

Activate Interface G0/1

Verify network connectivity.

Use the ping command to test connectivity between the switches and R1.

Use the following table to methodically verify connectivity with each network device. Take corrective action to establish connectivity if a test fails:

From

To

IP Address

Ping Results

S1

R1, VLAN 99 address

S3

R1, VLAN 99 address

S1

R1, VLAN 31 address

S3

R1, VLAN 33 address

Configure OSPFv2 Dynamic Routing Protocol

Configure OSPFv2 on R1.

Configuration tasks for R1 include the following:

Configuration Item or Task

Specification

OSPF Process ID

1

Router ID

1.1.1.1

Advertise directly connected Networks

Use classless network addresses

Assign all directly connected networks to Area 0

Set all LAN interfaces as passive

Change the default cost reference bandwidth to support Gigabit interface calculations

1000

Set the serial interface bandwidth

128 Kb/s

Adjust the metric cost of S0/0/0

Cost: 7500

Configure OSPFv2 on R2.

Configuration tasks for R2 include the following:

Configuration Item or Task

Specification

OSPF Process ID

1

Router ID

2.2.2.2

Advertise directly connected Networks

Use classless network addresses

Note: Omit the G0/0 network.

Set the LAN (Loopback) interface as passive

Change the default cost reference bandwidth to allow for Gigabit interfaces

1000

Set the bandwidth on all serial interfaces

128 Kb/s

Adjust the metric cost of S0/0/0

Cost: 7500

Configure OSPFv2 on R3.

Configuration tasks for R3 include the following:

Configuration Item or Task

Specification

OSPF Process ID

1

Router ID

3.3.3.3

Advertise directly connected Networks

Use classless network addresses

Assign interfaces to Area 0

Use a single summary address for the LAN (loopback) interfaces.

Set all LAN (Loopback) interfaces as passive

Change the default cost reference bandwidth to support Gigabit interface calculations

1000

Set the serial interface bandwidth

128 Kb/s

Verify OSPF information.

Verify that OSPF is functioning as expected. Enter the appropriate CLI command to discover the following information:

Question

Response

What command will display all connected OSPFv2 routers?

What command displays a summary list of OSPF interfaces that includes a column for the cost of each interface?

What command displays the OSPF Process ID, Router ID, Address summarizations, Routing Networks, and passive interfaces configured on a router?

What command displays only OSPF routes?

What command displays detail information about the OSPF interfaces, including the authentication method?

What command displays the OSPF section of the running-configuration?

Implement DHCP and NAT for IPv4

Configure R1 as the DHCP server for VLANs 31 and 33.

Configuration tasks for R1 include the following:

Configuration Item or Task

Specification

Reserve the first 20 IP addresses in VLAN 31 for static configurations

Reserve the first 20 IP addresses in VLAN 33 for static configurations

Create a DHCP pool for VLAN 31

Name: ACCT

DNS-Server: 10.10.10.11

Domain-Name: ccna-sba.com

Set the default gateway.

Create a DHCP pool for VLAN 33

Name: ENGNR

DNS-Server: 10.10.10.11

Domain-Name: ccna-sba.com

Set the default gateway.

Configure Static and Dynamic NAT on R2.

Configuration tasks for R2 include the following:

Configuration Item or Task

Specification

Create a local database with 1 user account

Username: webuser

Password: cisco12345

Privilege level: 15

Enable HTTP server service

Configure the HTTP server to use the local database for authentication

Create a static NAT to the Web Server

Inside Global Address: 209.165.200.229

Assign the inside and outside interface for the static NAT

Configure the dynamic NAT inside private ACL

Access List: 1

Allow the Accounting and Engineering networks on R1 to be translated.

Allow a summary of the LANs (loopback) networks on R3 to be translated.

Define the pool of usable public IP addresses

Pool Name: INTERNET

Pool of addresses include:

209.165.200.225 – 209.165.200.228

Define the dynamic NAT translation

Verify DHCP and Static NAT.

Use the following tasks to verify that DHCP and Static NAT settings are functioning correctly. It may be necessary to disable the PC firewall for pings to be successful:

Test

Results

Verify that PC-A acquired IP information from the DHCP server

Verify that PC-C acquired IP information from the DHCP server

Verify that PC-A can ping PC-C.

Note: It may be necessary to disable the PC firewall

Use a Web browser on the Internet PC to access the Web server (209.165.200.229). Login with Username: webuser, Password: cisco12345

Note: Verification of dynamic NAT will be performed in Part 6.

Configure and Verify Access Control Lists (ACLs)

Restrict access to VTY lines on R2.

Configuration Item or Task

Specification

Configure a named access list to only allow R1 to telnet to R2.

ACL Name: ADMIN-MGT

Apply the named ACL to the VTY lines

Verify ACL is working as expected,

Secure the network from Internet traffic.

Configuration Item or Task

Specification

Configure an Extended ACL to:

· Allow Internet hosts WWW access to the simulated web server on R2 by accessing the static NAT address (209.165.200.229) that you configured in Part 3.

· Prevent traffic from the Internet from pinging internal networks, while continuing to allow LAN interfaces to ping the Internet PC.

ACL No.: 101

Apply ACL to the appropriate interface(s)

Verify ACL is working as expected

From the Internet PC:

· Ping PC-A (Pings should be unreachable.)

· Ping PC-C (Pings should be unreachable.)

From R1, Ping the Internet PC (Pings should be successful.)

Enter the appropriate CLI command needed to display the following:

Command Description

Student Input (command)

Display the matches an access-list has received since the last reset.

Reset access-list counters.

What command is used to display what ACL is applied to an interface and the direction that it is applied

What command displays the NAT translations?

Note: The translations for PC-A and PC-C were added to the table when the Internet PC attempted to ping these PCs in Step 2. Pinging the Internet PC from PC-A or PC-C will not add the translations to the table because of the way the Internet is being simulated on the network.

What command is used to clear dynamic NAT translations?

Router Interface Summary Table

Router Interface Summary

Router Model

Ethernet Interface #1

Ethernet Interface #2

Serial Interface #1

Serial Interface #2

1800

Fast Ethernet 0/0 (F0/0)

Fast Ethernet 0/1 (F0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

1900

Gigabit Ethernet 0/0 (G0/0)

Gigabit Ethernet 0/1 (G0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

2801

Fast Ethernet 0/0 (F0/0)

Fast Ethernet 0/1 (F0/1)

Serial 0/1/0 (S0/1/0)

Serial 0/1/1 (S0/0/1)

2811

Fast Ethernet 0/0 (F0/0)

Fast Ethernet 0/1 (F0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

2900

Gigabit Ethernet 0/0 (G0/0)

Gigabit Ethernet 0/1 (G0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.

© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 14

© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 14

__MACOSX/Lab16/._Lab 16 - Hands On Skills Assessment Option 2.docx