CCNA M4 CCNA Skills Assessment Student Training Exam
########## Router 1 / Router 2 / Router 3 ###########
erase startup-config
reload
###############################
PC-A
192.168.11.3
255.255.255.0
192.168.11.1
PC-B
192.168.22.3
255.255.255.0
192.168.22.1
PC-C
10.10.33.3
255.255.255.0
10.10.33.1
########## Router 1 ########### Basic-Configuration
conf t
no ip domain-lookup
hostname R1
enable secret class
line console 0
password cisco
login
line vty 0 15
password cisco
login
exit
service password-encryption
banner motd #Unauthorized Access is Prohibited!#
int g0/0
description Connection to 192.168.11.0 LAN
ip address 192.168.11.1 255.255.255.0
no shutdown
exit
########## Router 2 ########### Basic-Configuration
conf t
no ip domain-lookup
hostname R2
enable secret class
line console 0
password cisco
login
line vty 0 15
password cisco
login
exit
service password-encryption
banner motd #Unauthorized Access is Prohibited!#
int g0/0
description Connection to 192.168.22.0 LAN
ip address 192.168.22.1 255.255.255.0
no shutdown
exit
########## Router 3 ########### Basic-Configuration
conf t
no ip domain-lookup
hostname R3
enable secret class
line console 0
password cisco
login
line vty 0 15
password cisco
login
exit
service password-encryption
banner motd #Unauthorized Access is Prohibited!#
int g0/0
description Connection to 10.10.33.0 LAN
ip address 10.10.33.1 255.255.255.0
no shutdown
exit
########## Router 1 / Router 2 / Router 3 ###########
copy running-config flash:
Destination filename [running-config]? BasicConfig
########## Router 1 - 2.Step ###########
conf t
int s0/0/0
description PPP Connection to R2
ip address 172.27.12.1 255.255.255.252
clock rate 128000
no shutdown
encapsulation ppp
ppp authentication chap
exit
username R2 password cisco
ip route 0.0.0.0 0.0.0.0 s0/0/0
exit
########## Router 2 - 2.Step ###########
conf t
int s0/0/0
description PPP Connection to R1
ip address 172.27.12.2 255.255.255.252
no shutdown
encapsulation ppp
ppp authentication chap
exit
username R1 password cisco
int s0/0/1
description PPP Connection to ISP
ip address 209.165.200.225 255.255.255.248
clock rate 128000
no shutdown
encapsulation ppp
exit
ip route 0.0.0.0 0.0.0.0 s0/0/1
ip route 192.168.11.0 255.255.255.0 s0/0/0
exit
########## Router 3 - 2.Step ###########
conf t
int s0/0/1
description PPP Connection to R2
ip address 209.165.200.230 255.255.255.248
no shutdown
encapsulation ppp
exit
########################################
PC-A ping 192.168.22.3 should be successful
PC-C ping 10.10.33.1 should be successful
PC-C ping 209.165.200.225 should be successful
PC-A ping 10.10.33.3 should not be successful
PC-B ping 10.10.33.3 should not be successful
PC-C ping 192.168.22.3 should not be successful
########## Router 2 - 3.Step ###########
conf t
ip nat inside source static 192.168.22.3 209.165.200.226
access-list 1 permit 192.168.11.0 0.0.0.255
ip nat pool R1-LAN 209.165.200.227 209.165.200.227 netmask 255.255.255.248
ip nat inside source list 1 pool R1-LAN overload
access-list 2 permit 192.168.22.0 0.0.0.255
ip nat pool R2-LAN 209.165.200.228 209.165.200.228 netmask 255.255.255.248
ip nat inside source list 2 pool R2-LAN overload
int s0/0/1
ip nat outside
int s0/0/0
ip nat inside
int g0/0
ip nat inside
exit
#######################################
PC-A ping 10.10.33.3 should be successful
PC-C ping 209.165.200.226 should be successful
########## Router 2 - Student Input ###########
show access-lists
show ip nat translations
show ip nat statistics
########## Router 2 - 4.Step ###########
clock set 9:00:00 25 August 2013
conf t
ntp master 5 (doesn't work in Packet Tracer)
exit
########## Router 1 - 3.Step ###########
conf t
ntp server 172.27.12.2
service timestamp log datetime msec
logging host 192.168.11.3
logging trap debugging
exit
########## Router 2 - 5.Step ###########
conf t
service timestamp log datetime msec
logging host 192.168.11.3
logging trap debugging
exit
########## Router 1 - 4.Step ###########
conf t
ip access-list standard SNMP-ACCESS
permit 192.168.11.3
snmp-server community SA-LAB ro SNMP-ACCESS (doesn't work)
snmp-server host 192.168.11.3 version 2c SA-LAB (doesn't work)
snmp-server enable traps (doesn't work)
########## Router 2 - 6.Step ###########
conf t
int s0/0/0
ip flow ingress
ip flow egress
int s0/0/1
ip flow ingress
ip flow egress
exit
ip flow-export destination 192.168.22.3 9996
ip flow-export version 9
end
########## Router 2 - Student Input ###########
show clock
show logging
show snmp community
show ip cache flow
#########################################
#########################################
Part 6: Configure Frame Relay
NOTE: DO NOT PROCEED WITH THE ASSESSMENT UNTIL YOUR INSTRUCTOR HAS SIGNED OFF ON THE PREVIOUS PARTS
#########################################
#########################################
########## Router 1 / Router 2 / Router 3 ###########
Step 1:
a)
erase startup-config
reload
b)
Router#copy flash: running-config
Source filename []? BasicConfig
c)
no shutdown command for the G0/0 interface on "Router 1" and "Router 3"
conf t
int g0/0
no shutdown
exit
########## Router 2 - 7.Step ###########You can change R2 for Cloud PT (WAN emulation)
conf t
frame-relay switching (doesn't work)
int s0/0/0
encapsulation frame-relay
frame-relay intf-type dce (doesn't work)
frame-relay route 123 interface s0/0/1 321 (doesn't work)
frame-relay lmi-type ansi
no shutdown
int s0/0/1
clock rate 128000
encapsulation frame-relay ietf
frame-relay intf-type dce (doesn't work)
frame-relay route 321 interface s0/0/0 123 (doesn't work)
no shutdown
exit
exit
########## Router 1 - 5.Step ###########
conf t
int s0/0/0
description frame-relay Connection to R3
ip address 172.27.13.1 255.255.255.252
encapsulation frame-relay
clock rate 128000
no shutdown
no frame-relay inverse-arp
frame-relay map ip 172.27.13.1 123
frame-relay map ip 172.27.13.2 123 broadcast
frame-relay lmi-type ansi
no shutdown
exit
ip route 0.0.0.0 0.0.0.0 172.27.13.2
exit
########## Router 3 - 3.Step ###########
conf t
int s0/0/1
description Frame Relay Connection to R1
encapsulation frame-relay
encapsulation frame-relay ietf
no shutdown
int s0/0/1.321 point-to-point
description Frame Relay Connection to R1
ip address 172.27.13.2 255.255.255.252
frame-relay interface-dlci 321
exit
ip route 0.0.0.0 0.0.0.0 172.27.13.1
exit
no frame-relay inverse-arp (not for subinterface)
########################################
PC-A ping 192.168.11.1 should be successful
PC-C ping 10.10.33.1 should be successful
PC-A ping 172.27.13.2 should be successful
PC-C ping 172.27.13.1 should be successful
PC-A ping 10.10.33.3 should be successful
########################################
show frame-relay lmi
show frame-relay pvc
show frame-relay map
#########################################
#########################################
Part 7: Configure a GRE VPN Tunnel
NOTE: DO NOT PROCEED WITH THE ASSESSMENT UNTIL YOUR INSTRUCTOR HAS SIGNED OFF ON THE PREVIOUS PART
#########################################
#########################################
########## Router 1 / Router 2 / Router 3 ###########
Step 1:
a)
erase startup-config
reload
b)
Router#copy flash: running-config
Source filename []? BasicConfig
c)
no shutdown command for the G0/0 interface on "Router 1" and "Router 3"
conf t
int g0/0
no shutdown
exit
########## Router 1 - 6.Step ###########
conf t
int s0/0/0
description HDLC Connection to ISP
ip address 172.27.12.1 255.255.255.252
no shutdown
encapsulation hdlc
clock rate 128000
########## Router 2 - 8.Step ###########
conf t
int s0/0/0
description HDLC Connection to R1
ip address 172.27.12.2 255.255.255.252
encapsulation hdlc
no shutdown
int s0/0/1
description HDLC Connection to R3
ip address 172.27.23.2 255.255.255.252
encapsulation hdlc
clock rate 128000
no shutdown
########## Router 3 - 4.Step ###########
conf t
int s0/0/1
description HDLC Connection to ISP
ip address 172.27.23.1 255.255.255.252
encapsulation hdlc
no shutdown
########## Router 1 - 7.Step ###########
conf t
int tunnel 0
ip address 172.27.13.1 255.255.255.252
tunnel source s0/0/0
tunnel destination 172.27.23.1
exit
ip route 0.0.0.0 0.0.0.0 s0/0/0
router eigrp 1
network 172.27.13.0 0.0.0.3
network 192.168.11.0 0.0.0.255
passive-interface g0/0
no auto-summary
end
description GRE VPN Tunnel to R3 (doesn't work for int tun 0)
########## Router 3 - 5.Step ###########
conf t
int tunnel 0
ip address 172.27.13.2 255.255.255.252
tunnel source s0/0/1
tunnel destination 172.27.12.1
exit
ip route 0.0.0.0 0.0.0.0 s0/0/1
router eigrp 1
network 10.10.33.0 0.0.0.255
network 172.27.13.0 0.0.0.3
passive-interface g0/0
no auto-summary
end
description GRE VPN Tunnel to R1 (doesn't work)
########################################
PC-A ping 192.168.11.1 should be successful
PC-C ping 10.10.33.1 should be successful
PC-A ping 10.10.33.3 should be successful
R1 traceroute 172.27.23.1 R2 should show up in the traceroute
R1 traceroute 172.27.13.2 R2 should be absent from traceroute
########################################
show interface tunnel 0