Assessment Objectives
Part 1: Develop an IP Addressing Scheme (24 points)
Part 2: Initialize and Reload Devices (2 points)
Part 3: Configure Device IP address and Security Settings (46 points)
Part 4: Test and Verify IPv4 and IPv6 End-to-End Connectivity (1 point)
Part 5: Use the IOS CLI to Gather Device Information (10 points)
Scenario
In this Skills Assessment (SA) you will configure the devices in a small network. You must configure a router, switch and PCs to support both IPv4 and IPv6 connectivity. You will configure security, including SSH, on the router. In addition, you will test and document the network using common CLI commands.
Required Resources
- This packet
- Packet Tracer topology PKT file
Instructions
Part 1: Develop an IP Addressing Scheme
Total points: 24
- Given the IPv4 specifications below, design an IP addressing scheme that satisfies the following requirements in an efficient manner:
Network | Number of Hosts in Subnet A | Number of Hosts in Subnet B |
192.168.100.0/24 | 80 | 25 |
IP Addressing Worksheet
Specification | Subnet A | Subnet B |
Number Host bits needed for the subnet | ||
IP subnet mask (binary) | ||
New IP mask (decimal) | ||
IP Subnet address | ||
First IP Host address | ||
Last IP Host address | ||
Broadcast IP address |
Show your work on an additional piece of paper. Submit a photo of that paper with your lab. (5 pts)
- Record your subnet assignment in the table below.
- Assign the first IPv4 address of each subnet to a router interface
- subnet A is hosted on R1 G0/0/1
- subnet B is hosted on R1 G0/0/0
- Assign the last IPv4 address of each subnet to the PC NIC
- Assign the second IPv4 address of subnet A to S1
- List the maximum number of useable hosts per subnet
- subnet A is hosted on R1 G0/0/1
- Assign the first IPv4 address of each subnet to a router interface
Description | Subnet A | Subnet B |
First IP address | ||
Last IP address | ||
Maximum number of hosts |
- Record the IP address information for each device:
Device | IP address | Subnet Mask | Gateway | Points |
PC-A | 2 points | |||
R1-G0/0/0 | N/A | 2 points | ||
R1-G0/0/1 | N/A | 2 points | ||
S1 | 2 points | |||
PC-B | 2 points |
- Use the IPv6 address 2001:db8:acad::/48 and create two subnets for use in this network. Record the IPv6 addresses in the table. Do not use subnet 0.
Assigned to Interface | IPv6 Subnet Address | Prefix Length |
G0/0/1 | ||
G0/0/0 |
- Record the IPv6 address information for each device. Use the first non-0s address for the router interface and the 16th address for the PC in each subnet. Do not change the PC’s IPv6 link local addresses.
Note: Use FE80::1 as the link-local address on both router interfaces.
Device | IPv6 address | Prefix Length | Gateway | Points |
R1-G0/0/0 | N/A | 3 pts | ||
R1-G0/0/1 | N/A | 3 pts | ||
PC-A | FE80::1 | 1.5 pts | ||
PC-B | FE80::1 | 1.5 pts |
Part 2: Initialize and Reload Devices
Total points: 2
- Erase the startup configurations from the router and switch and reboot the devices.
What commands did you use?
_________________________________________
_________________________________________
_________________________________________
Part 3: Configure Device IP Address and Security Settings
Total points: 46
Step 1: Configure R1.
Configuration tasks for R1 include the following:
Task | Specification | Points |
Disable DNS lookup | 1 point | |
Router name | R1 | 1 point |
Domain name | local.com | 1 point |
Encrypted privileged EXEC password | ciscoenpass | 1 point |
Console access password; require use | ciscoconpass | 1 point |
Block login attempts for 2 minutes if there are 2 failed attempts within 30 seconds | 1 point | |
Set the minimum length for passwords | 10 characters | 2 points |
Create an administrative user in the local database | Username: admin Password: admin1pass | 2 points |
Set login on vty lines to use local database | 1 point | |
Set vty lines to accept SSH connections only | 1 point | |
Encrypt the clear text passwords | 1 point | |
Configure an appropriate MOTD Banner | 1 point | |
Enable IPv6 Routing | 1 point | |
Configure Interface G0/0/0 | Set the description Set the Layer 3 IPv4 address Set the IPv6 Link Local Address as FE80::1 Set the Layer 3 IPv6 address Activate Interface | 6 points |
Configure Interface G0/0/1 | Set the description Set the Layer 3 IPv4 address Set the IPv6 Link Local Address as FE80::1 Set the Layer 3 IPv6 address Activate Interface | 6 points |
Generate an RSA crypto key | 1024 bits modulus | 2 points |
Step 2: Configure S1.
Configuration tasks for S1 include the following:
Task | Specification | Points |
Disable DNS lookup | 1 point | |
Switch name | S1 | 1 point |
Domain name | local.com | 1 point |
Encrypted privileged EXEC password | ciscoenpass | 1 point |
Console access password; require use | ciscoconpass | 1 point |
Shutdown all unused interfaces | 1 point | |
Create an administrative user in the local database with full access privileges | Username: admin Encrypted password: admin1pass | 2 points |
Set login on vty lines to use local database | 1 point | |
Set vty lines to accept SSH connections only | 1 point | |
Encrypt the clear text passwords | 1 point | |
Configure an MOTD Banner | 1 point | |
Generate an RSA crypto key | 1024 bits modulus | 2 points |
Configure Management Interface (SVI) on VLAN1 with remote network access | Set the description Set the Layer 3 IPv4 address Ensure access to remote networks | 3 points |
Step 3: Configure host computers.
After configuring each host computer, record the host network settings with the ipconfig /all command. (2 points)
PC-A Network Configuration (2 points) | |
Physical Address | |
IPv4 Address | |
Subnet Mask | |
IPv4 Default Gateway | |
IPv6 Address | |
IPv6 Default Gateway |
PC-B Network Configuration (2 points) | |
Physical Address | |
IP Address | |
Subnet Mask | |
Default Gateway | |
IPv6 Address | |
IPv6 Default Gateway |
Part 4: Test and Verify End-to-End Connectivity
Use the ping command to test IPv4 and IPv6 connectivity between all network devices. All of these pings should succeed!
Use the following table to methodically verify connectivity with each network device. Take corrective action to establish connectivity if a test fails:
From | To | Protocol | Destination IP Address | Success (y/n) |
PC-A | R1 G0/0/0 | IPv4 | ||
PC-A | R1 G0/0/0 | IPv6 | ||
PC-A | R1 G0/0/1 | IPv4 | ||
PC-A | R1 G0/0/1 | IPv6 | ||
PC-A | S1 VLAN 1 | IPv4 | ||
PC-A | PC-B | IPv4 | ||
PC-A | PC-B | IPv6 | ||
PC-B | R1 G0/0/0 | IPv4 | ||
PC-B | R1 G0/0/0 | IPv6 | ||
PC-B | R1 G0/0/1 | IPv4 | ||
PC-B | R1 G0/0/1 | IPv6 | ||
PC-B | S1 VLAN1 | IPv4 |
Question:
In addition to the ping command, what other command is useful in displaying network delay and breaks in the path to the destination? (1 point)
__________________________________
Part 5: Use the IOS CLI to Gather Device Information
Total points: 10
Step 1: Issue the appropriate command to discover the following information. Fill out the chart with the answers based on the output, and then the command you used.
Description | Points | |
Router Model | 1/3 point | |
IOS Image File | 1/3 point | |
Total RAM | 1/3 point | |
Total Flash Memory | 1/3 point | |
Configuration Register | 1/3 point | |
CLI Command Used | 1/3 point |
Step 2: Enter the appropriate CLI command needed to display the following on R1:
Command Description | Command | Points |
Display a summary of important information about the IPv4 interfaces on R1. | 1 point | |
Display the IPv4 routing table. | 1 point | |
Display the Layer 2 to Layer 3 mapping of addresses on R1. | 1 point | |
Display detailed IPv4 information about interface G0/0/0 on R1. | 1 point | |
Display the IPv6 routing table. | 1 point | |
Display a summary of IPv6 interface addresses and status. | 1 point | |
Display information about the devices connected to R1. Information should include Device ID, Local Interface, Hold time, Capability, Platform, and Port ID. | 1 point | |
Save the current configuration so it will be used the next time the router is started. | 1 point |
Part 6: Cleanup
- Make sure your name is on page 1.
- Make sure you have filled out all sections with a blue bar beside them.
- Save this packet as “Your.Name – ITN SA.docx”
- Save the Packet Tracer file as “Your-Name – ITN SA.pkt”
- Attach this docx file, the completed Packet Tracer topology, and a photo of your subnetting work to the “Skills Final Exam submission” assignment in NetAcad