CCNA Routing and Switching Essentials – LAB TEST

Student Name:_______________________; Student No.:________________

Introduction

In this practice skills assessment, you will configure the XYZ Corporation network, as
shown in the graphic above, with single-area OSPFv2. In addition, you will configure
router-on-a-stick routing between VLANs. You will also implement NAT and access lists.

Some values that are required to complete the configurations have not been
given to you. In those cases, create the values that you need to complete the
requirements. These values may include certain IP addresses, passwords,
interface descriptions, banner text, and other values.

For the sake of time, many repetitive but important configuration tasks have been
omitted from this activity. Many of these tasks, especially those related to device
security, are essential elements of a network configuration. The intent of this activity is
not to diminish the importance of full device configurations.

Addressing Tables

This study source was downloaded by 100000800926459 from CourseHero.com on 08-08-2024 00:25:25 GMT -05:00

https://www.coursehero.com/file/51638586/Labtest-NET556-15W-1docx/
 Note: You are provided with the networks that interfaces should be configured on.
Unless you are told to do differently in the detailed instructions below, you are free to
choose the host addresses to assign.

Addressing Table:

Device Interface Network Comments

S0/0/0 192.168.10.104/30 any address in the network
Gi0/0.45 192.168.45.0/24 first address in the network
Site 1
Gi0/0.47 192.168.47.0/24 first address in the network
Gi0/0.101 192.168.101.0/24 first address in the network
S0/0/0 192.168.10.104/30 any address in the network
S0/0/1 192.168.10.112/30 any address in the network
HQ
S0/1/0 198.51.100.0/28 first address in the network
Gi0/0 192.168.18.40/29 first address in the network
S0/0/0 192.168.10.124/30 second address in the network
Site 2
S0/0/1 192.168.10.112/30 any address in the network
Site1-SW1 VLAN 101 192.168.101.0/24 any address in the network
Site1-SW2 VLAN 101 192.168.101.0/24 any address in the network
PC1 Fa0 192.168.45.0/24 use 192.168.45.5/24
PC3 Fa0 192.168.45.0/24 use 192.168.45.10/24
PC2 Fa0 192.168.47.0/24 use 192.168.47.5/24
PC4 Fa0 192.168.47.0/24 use 192.168.47.10/24

Pre-configured addresses for reference:

Device Address
Corporate Web Server 192.168.18.46/29
Admin Host 203.0.113.18
Internet Host 203.0.113.128
Web Server 209.165.201.235
East Host 192.168.200.10/24
Central Host 192.168.201.10/24
West Host 192.168.202.10/24

VLAN Table:

This study source was downloaded by 100000800926459 from CourseHero.com on 08-08-2024 00:25:25 GMT -05:00

https://www.coursehero.com/file/51638586/Labtest-NET556-15W-1docx/
 VLAN
VLAN Name VLAN Network Device:Port
Number
Site1-SW1: Fa0/10
45 finance 192.168.45.0/24
Site1-SW2: Fa0/3
Site1-SW1: Fa0/15
47 sales 192.168.47.0/24
Site1-SW2: Fa0/21
101 netadmin 192.168.101.0/24 SVI

Instructions

Step 1: Determine the Addresses to Assign

Determine the IP addresses that you will use for the required interfaces on the three
routers and two switches. Use the information in the Addressing Table and follow the
guidelines below:

 Assign the first IP addresses in the networks that are provided in the Addressing
Table to the LAN interfaces.
 Assign the first address in the HQ subnet to the interface that is connected to the
Internet.
 Assign any valid host address in the networks that are provided in the Addressing
Table to the serial interfaces.
 Assign the indicated static IP addresses on the host PCs.

Step 2: Configure Site 1

 Configure Site 1 with the following:

 Configure the router host name: Site-1
 Prevent the router from attempting to resolve command line entries to IP
addresses.
 Protect privileged EXEC mode from unauthorized access with the MD5
encrypted password.
 Prevent device status messages from interrupting command line entries at the
device console.
 Secure the router console and terminal lines.
 Configure a message-of-the-day banner.

Step 3: Configure the Router Physical Interfaces and Host PCs

Configure the interfaces of the routers for full connectivity with the following:

 IP addresses as shown in the addressing table.

This study source was downloaded by 100000800926459 from CourseHero.com on 08-08-2024 00:25:25 GMT -05:00

https://www.coursehero.com/file/51638586/Labtest-NET556-15W-1docx/
  Describe the operational Site 1 serial interface. The Site 1 Ethernet interfaces will
be configured at the end of this assessment.
 DCE settings where appropriate (only on HQ). Use a rate of 128000.

Configure the host PCs with the IP addresses indicated in the addressing table. The
PCs should be reachable by hosts on other networks.

Step 4: Configure static and default routing

Configure the following static routes:

 Manually configure a default route to the Internet on HQ. Use the exit interface
argument. All hosts on the internal LANs and Branch Network networks should
be able to reach the Internet.
 It has been decided to use static routes to reach the branch networks that are
connected to Site 2. Use a single summary to represent the branch networks in
the most efficient way possible. Configure the summary static route on HQ and
Site 2 using the exit interface argument.

Step 5: Configure OSPF Routing

Configure single-area OSPFv2 to route between all internal networks. The branch
networks are not routed with OSPFv2.

 Use a process ID of 10.The routers should be configured in area 0.

 Use the correct inverse masks for all network statements. Do not use quad zero
masks (0.0.0.0).

Step 6: Customize single-area OSPFv2

Customize single-area OSPFv2 by performing the following configuration tasks:

a. Set the bandwidth of the serial interfaces to 128 kb/s.

b. Configure OSPF router IDs as follows:

 Site 1: 1.1.1.1
 HQ: 2.2.2.2
 Site 2: 3.3.3.3

c. Configure the OSPF cost of the link between Site 1 and HQ to 7500.

d. Prevent routing updates from being sent out of any of the LAN interfaces that are
routed with OSPFv2. Do not use the default keyword in the commands you use to do
this.

This study source was downloaded by 100000800926459 from CourseHero.com on 08-08-2024 00:25:25 GMT -05:00

https://www.coursehero.com/file/51638586/Labtest-NET556-15W-1docx/
 e. Propagate the default static route to the Site routers.

Step 7: Configure VLANs and Trunking

Configure Site1-SW1 and Site1-SW2 with VLANs and trunk ports as follows:

 Refer to the VLAN table above for the VLAN numbers and names that should be
configured on both switches.
 Configure names for the VLANs. The VLAN names must be configured to match
the names in the VLAN Table exactly (case and spelling).
 Configure the appropriate ports that link the switches and Site 1 with the router
as functioning trunk ports. Use VLAN99 as the native VLAN.
 Assign the switch ports shown in the table as access ports in the VLANs as
indicated in the VLAN Table.
 Address VLAN 101 on the network indicated in the VLAN Table. Note that the
first address in this network will be assigned to the router in a later step in this
assessment. The management interfaces of both switches should be configured
to be reachable by hosts on other networks.

Step 8: Configure NAT

Configure NAT to translate internal private addresses into public addresses for the
Internet. The requirement is:

Configure dynamic NAT (not NAT with overload, or PAT).

 Use the addresses remaining in the public address subnet of 198.51.100.0/28.

The first two addresses in the subnet have already been assigned to the HQ and
ISP serial interfaces.
 Use a pool name of INTERNET. Note that the pool name must match this name
exactly, in spelling and capitalization.
 Hosts on each of the internal LANs shown in the topology and on all of the
branch networks should be permitted to use the NAT addresses to access the
Internet.
 Use a source list number of 1.
 Your source list should consist of three entries, one each for the LANs and one
for the branch networks.

Step 10: Configure Access Control List

You will configure an access control list to limit device access on HQ. You should use
the any and host keywords in the ACL statements as required. The ACL requirement is:

Restrict access to the vty lines on HQ:

This study source was downloaded by 100000800926459 from CourseHero.com on 08-08-2024 00:25:25 GMT -05:00

https://www.coursehero.com/file/51638586/Labtest-NET556-15W-1docx/
  Create a named standard ACL using the name MANAGE. Be sure that you use
this name exactly as it appears in these instructions (case and spelling).
 Allow only the Admin Host to access the vty lines of HQ.
 No other Internet hosts (including Internet hosts not visible in the topology)
should be able to access the vty lines of HQ.
 Your solution should consist of a single ACL statement.

Step 11: Configure Router-on-a-Stick Inter-VLAN Routing.

Configure Site 1 to provide routing between the VLANs configured on the switches, as
follows:

 Use the VLAN numbers for the required interface numbers.

 Use the first addresses in the VLAN networks for the interfaces.

Step 12: Test and Troubleshoot Connectivity.

Ensure that the hosts attached to the VLANs can reach hosts on the Branch Network
and the Internet.

This study source was downloaded by 100000800926459 from CourseHero.com on 08-08-2024 00:25:25 GMT -05:00

https://www.coursehero.com/file/51638586/Labtest-NET556-15W-1docx/
Powered by TCPDF (www.tcpdf.org)