CCNA 4 Student Skills Based Assessment Lab Answer Key PDF
CCNA 4 Student Skills Based Assessment Lab Answer Key PDF
Addressing Table
All contents are Copyright 19922007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 1 of 9
CCNA Exploration
Accessing the WAN: Skills Based Assessment Student Skills based Assessment Lab
Learning Objectives
Scenario
This lab tests you on the skills and knowledge that you learned in Exploration 4. Use cisco for all passwords in
this lab, except for the enable secret password, which is class.
Step 1: Cable a network that is similar to the one in the topology diagram.
Configure the R1, R2, and R3 routers according to the following guidelines:
R1:
Router>enable
Router#configure terminal
Router(config)#hostname R1
R1(config)#no ip domain-lookup
All contents are Copyright 19922007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 2 of 9
CCNA Exploration
Accessing the WAN: Skills Based Assessment Student Skills based Assessment Lab
R1(config)#line console 0
R1(config-line)#password cisco
R1(config-line)#login
R1(config-line)#logging synchronous
R1(config-line)#exec-timeout 5
R1(config-line)#exit
R1(config)#line vty 0 4
R1(config-line)#password cisco
R1(config-line)#login
R1(config-line)#logging synchronous
R1(config-line)#exec-timeout 5
R1(config-line)#exit
R2:
Router>enable
Router#configure terminal
Router(config)#hostname R2
R2(config)#no ip domain-lookup
R2(config)#line console 0
R2(config-line)#password cisco
R2(config-line)#login
R2(config-line)#logging synchronous
R2(config-line)#exec-timeout 5
R2(config-line)#exit
R2(config)#line vty 0 4
R2(config-line)#password cisco
R2(config-line)#login
R2(config-line)#logging synchronous
R2(config-line)#exec-timeout 5
R2(config-line)#exit
R3:
Router>enable
Router#configure terminal
Router(config)#hostname R3
R3(config)#no ip domain-lookup
R3(config)#line console 0
R3(config-line)#password cisco
R3(config-line)#login
R3(config-line)#logging synchronous
R3(config-line)#exec-timeout 5
R3(config-line)#exit
All contents are Copyright 19922007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 3 of 9
CCNA Exploration
Accessing the WAN: Skills Based Assessment Student Skills based Assessment Lab
R3(config)#line vty 0 4
R3(config-line)#password cisco
R3(config-line)#login
R3(config-line)#logging synchronous
R3(config-line)#exec-timeout 5
R3(config-line)#exit
R1:
R1(config)#interface fastEthernet0/1
R1(config-if)#ip address 10.0.0.1 255.255.255.128
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface Serial0/0/0
R1(config-if)#ip address 172.16.0.1 255.255.255.252
R1(config-if)#clock rate 64000
R1(config-if)#no shutdown
R1(config-if)#exit
R1(config)#interface Serial0/0/1
R1(config-if)#ip address 172.16.0.9 255.255.255.252
R1(config-if)#no shutdown
R1(config-if)#end
R2:
R2(config)#interface Serial0/0/0
R2(config-if)#ip address 172.16.0.2 255.255.255.252
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface Serial0/0/1
R2(config-if)#ip address 172.16.0.5 255.255.255.252
R1(config-if)#clock rate 64000
R2(config-if)#no shutdown
R2(config-if)#exit
R2(config)#interface Loopback0
R2(config-if)#ip address 209.165.200.161 255.255.255.224
R2(config-if)#no shutdown
R2(config-if)#end
All contents are Copyright 19922007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 4 of 9
CCNA Exploration
Accessing the WAN: Skills Based Assessment Student Skills based Assessment Lab
R3:
R3(config)#interface fastEthernet0/1
R3(config-if)#ip address 10.0.0.129 255.255.255.128
R3(config-if)#no shutdown
R3(config-if)#exit
R3(config)#interface Serial0/0/0
R3(config-if)#ip address 172.16.0.10 255.255.255.252
R3(config-if)#clock rate 64000
R3(config-if)#no shutdown
R3(config-if)#exit
R3(config)#interface Serial0/0/1
R3(config-if)#ip address 172.16.0.6 255.255.255.252
R3(config-if)#no shutdown
R3(config-if)#end
Step 1: Configure and verify PPP encapsulation with CHAP authentication between R1 and R2. The
password is cisco.
R1:
R1#configure terminal
R1(config)#username R2 password cisco
R1(config)#interface Serial0/0/0
R1(config-if)#encapsulation ppp
R1(config-if)#ppp authentication chap
R1(config-if)#exit
R1(config)#interface Serial0/0/1
R1(config-if)#encapsulation frame-relay
R1(config-if)#frame-relay map ip 172.16.0.9 101 broadcast
R1(config-if)#frame-relay map ip 172.16.0.10 101 broadcast
R1(config-if)#frame-relay interface-dlci 101
R1(config-if)#no keepalive
R1(config-if)#end
R2:
R2#configure terminal
R2(config)#username R1 password cisco
R2(config)#interface Serial0/0/0
R2(config-if)#encapsulation ppp
All contents are Copyright 19922007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 5 of 9
CCNA Exploration
Accessing the WAN: Skills Based Assessment Student Skills based Assessment Lab
R2(config)#interface Serial0/0/1
R2(config-if)#encapsulation hdlc
R2(config-if)#end
R3:
R3#configure terminal
R3(config)#interface Serial0/0/0
R3(config-if)#encapsulation frame-relay
R3(config-if)#frame-relay map ip 172.16.0.10 101 broadcast
R3(config-if)#frame-relay map ip 172.16.0.9 101 broadcast
R3(config-if)#frame-relay interface-dlci 101
R3(config-if)#no keepalive
R3(config-if)#exit
R3(config)#interface Serial0/0/1
R3(config-if)#encapsulation hdlc
R3(config-if)#end
RIP updates should only be sent on the serial links between the routers. Prevent all other RIP updates on
all networks.
R1:
R1#configure terminal
R1(config)#router rip
R1(config-router)#version 2
R1(config-router)#network 10.0.0.0
R1(config-router)#network 172.16.0.0
R1(config-router)#passive-interface fastEthernet0/1
R1(config-router)#no auto-summary
R1(config-router)#end
R1#show ip protocols
R1#show ip route
All contents are Copyright 19922007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 6 of 9
CCNA Exploration
Accessing the WAN: Skills Based Assessment Student Skills based Assessment Lab
R2:
R2#configure terminal
R2(config)#router rip
R2(config-router)#version 2
R2(config-router)#network 172.16.0.0
R2(config-router)#no auto-summary
R2(config-router)#redistribute static
R2(config-router)#end
R2#show ip protocols
R2#show ip route
R3:
R3#configure terminal
R3(config)#router rip
R1(config-router)#version 2
R3(config-router)#network 10.0.0.0
R3(config-router)#network 172.16.0.0
R3(config-router)#passive-interface fastEthernet0/1
R3(config-router)#no auto-summary
R3(config-router)#end
R3#show ip protocols
R3#show ip route
R2:
R2#configure terminal
R2(config)#line vty 0 4
R2(config-line)#login authentication LOCAL_AUTH
All contents are Copyright 19922007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 7 of 9
CCNA Exploration
Accessing the WAN: Skills Based Assessment Student Skills based Assessment Lab
Step 2: Do not allow HTTP, Telnet, and FTP traffic from the Internet to PC1.
Step 3: Do not allow PC1 to receive traffic from the 10.0.0.128 /25 network.
Step 4: Verify that PC3 cannot ping PC1, but can ping 10.0.0.1.
R1:
R1#configure terminal
R1(config)#line vty 0 4
R1(config-line)#access-class 101 in
R1(config-line)#end
R1#show ip access-lists
R2:
R2#configure terminal
R2(config)#interface Loopback0
R2(config-if)#ip access-group 102 in
R2(config-if)#end
R2#show ip access-lists
R3:
R3#configure terminal
R3(config)#line vty 0 4
R3(config-line)#access-class 101 in
R3(config-line)#end
All contents are Copyright 19922007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 8 of 9
CCNA Exploration
Accessing the WAN: Skills Based Assessment Student Skills based Assessment Lab
R3(config)#interface Serial0/0/0
R3(config-if)#ip access-group 103 out
R3(config-if)#exit
R3(config)#interface Serial0/0/1
R3(config-if)#ip access-group 103 out
R3(config-if)#end
R3#show ip access-lists
R3:
R3#configure terminal
R3(config)#access-list 104 permit ip 10.0.0.128 0.0.0.127 any
R3(config)#ip nat inside source list 104 interface Serial0/0/0 overload
R3(config)#interface fastEthernet0/1
R3(config-if)#ip access-group 104 in
R3(config-if)#ip nat inside
R3(config-if)#exit
R3(config)#interface Serial0/0/0
R3(config-if)#ip nat outside
R3(config-if)#exit
R3(config)#interface Serial0/0/1
R3(config-if)#ip nat outside
R3(config-if)#end
R3#show ip access-lists
Erase the configurations and reload the routers. Disconnect and store the cabling. For PC hosts that are normally
connected to other networks, such as the school LAN or to the Internet, reconnect the appropriate cabling and
restore the TCP/IP settings.
All contents are Copyright 19922007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 9 of 9