[CCNAv6 S4] 4.5.1.1 Packet Tracer - Skills Integration Challenge



Packet Tracer - Skills Integration Challenge
Addressing Table


Scenario

In this challenge activity, you will finish the addressing scheme, configure routing, and implement named access control lists.

Requirements

a.      Divide 172.16.128.0/19 into two equal subnets for use on Branch.

1)     Assign the last usable IPv4 address of the second subnet to the Gigabit Ethernet 0/0 interface.

2)     Assign the last usable IPv4 address of the first subnet to the Gigabit Ethernet 0/1 interface.

3)     Document the IPv4 addressing in the Addressing Table.

4)     Configure Branch with appropriate IPv4 addressing.

b.      Configure B1 with appropriate IPv4 address using the first available address of the network to which it is attached.

1)     Assign 2001:DB8:ACAD:B1::1/64 and 2001:DB8:ACAD:B2::1/64 to Branch’s Gigabit Ethernet 0/0 and Gigabit Ethernet 0/1, respectively.

c.      Configure Branch with appropriate IPv6 addressing.

d.      Configure B1 and B2 with appropriate IPv6 addresses using the first available address of the network to which it is attached.

e.      Document the addressing in the Addressing Table.

f.       Configure HQ and Branch with OSPFv2 routing for IPv4 according to the following criteria:

·        Assign the process ID 1.
·        Advertise all attached IPv4 networks. Do not advertise the link to the Internet.
·        Configure appropriate interfaces as passive.
g.      Set a IPv4 default route on HQ which directs traffic to S0/0/1 interface. Redistribute the route to Branch.

h.      Design an IPv4 named access list HQServer to prevent any computers attached to the Gigabit Ethernet 0/0 interface of the Branch router from accessing HQServer.pka. All other traffic is permitted. Configure the access list on the appropriate router, apply it to the appropriate interface and in the appropriate direction.

i.        Design an IPv4 named access list BranchServer to prevent any computers attached to the Gigabit Ethernet 0/0 interface of the HQ router from accessing the HTTP and HTTPS service of the Branch server. All other traffic is permitted. Configure the access list on the appropriate router, apply it to the appropriate interface and in the appropriate direction.

j.        Design an IPv6 access-list named NO-B1 to prevent any IPv6 traffic originating on B1 to reach the BranchServer.pka. No traffic should be permitted from B1 to BranchServer.pka. Apply the IPv6 access to the most appropriated location (interface and direction).



Configuration Branch:

enable
configure terminal
interface g0/0
 ip address 172.16.159.254 255.255.240.0
 ip access-group HQServer in
 ipv6 address 2001:DB8:ACAD:B1::1/64
interface g0/1
 ip address 172.16.143.254 255.255.240.0
 ipv6 traffic-filter NO-B1 out
 ipv6 address 2001:DB8:ACAD:B2::1/64
 exit
!
router ospf 1
 log-adjacency-changes
 passive-interface GigabitEthernet0/0
 passive-interface GigabitEthernet0/1
 network 172.16.128.0 0.0.15.255 area 0
 network 172.16.144.0 0.0.15.255 area 0
 network 192.168.0.0 0.0.0.3 area 0
 exit
!
ip access-list extended HQServer
 deny ip any host 172.16.0.1
 permit ip any any
ipv6 access-list NO-B1
 deny ipv6 host 2001:DB8:ACAD:B1::2 host 2001:DB8:ACAD:B2::3
 permit ipv6 any any
!
end
write memory
!

Configuration  HQ:

enable
configure terminal
!
router ospf 1
 log-adjacency-changes
 passive-interface GigabitEthernet0/0
 passive-interface GigabitEthernet0/1
 passive-interface Serial0/0/1
 network 172.16.0.0 0.0.63.255 area 0
 network 172.16.64.0 0.0.63.255 area 0
 network 192.168.0.0 0.0.0.3 area 0
 default-information originate
 exit
ip route 0.0.0.0 0.0.0.0 Serial0/0/1
!
!
ip access-list extended BranchServer
 deny tcp any host 172.16.128.1 eq www
 deny tcp any host 172.16.128.1 eq 443
 permit ip any any
!
interface GigabitEthernet0/0
 ip access-group BranchServer in
 end
write memory
!

Configuration  B1:



 Configuration  B2:


 Configuration  BranchServer.pka:



END !~!


Nhận xét

Đăng nhận xét

Bài đăng phổ biến từ blog này

[CCNAv6 S4] 8.2.4.14 Packet Tracer - Troubleshooting Enterprise Networks 3

Hình ảnh
Packet Tracer – Troubleshooting Enterprise Networks 3 Addressing Table Background This activity uses a variety of technologies you have encountered during your CCNA studies, including routing, port security, EtherChannel, DHCP, NAT, PPP, and Frame Relay. Your task is to review the requirements, isolate and resolve any issues, and then document the steps you took to verify the requirements. Note: This activity begins with a partial score. Requirements DHCP ·         R1 is the DHCP server for the R1 LAN. Switching Technologies ·         Port security is configured to only allow PC1 to access S1's F0/3 interface. All violations should disable the interface. ·         Link aggregation using EtherChannel is configured on S2, S3, and S4. Routing ·         All routers are configured with OSPF process ID 1 and no routing updates should be sent across interfaces that do n...
Đọc thêm

[CCNAv6 S2] 2.2.2.4 Packet Tracer - Configuring IPv4 Static and Default Routes

Hình ảnh
Packet Tracer - Configuring IPv4 Static and Default Routes Addressing Table Objectives Part 1: Examine the Network and Evaluate the Need for Static Routing Part 2: Configure Static and Default Routes Part 3: Verify Connectivity Background In this activity, you will configure static and default routes. A static route is a route that is entered manually by the network administrator to create a reliable and safe route. There are four different static routes that are used in this activity: a recursive static route, a directly attached static route, a fully specified static route, and a default route. Part 1:     Examine the Network and Evaluate the Need for Static Routing a.     Looking at the topology diagram, how many networks are there in total? b.    How many networks are directly connected to R1, R2, and R3? c.     How many static routes are required by each router to reach networks that are not directly ...
Đọc thêm

[CCNAv6 S2] 7.3.2.4 Packet Tracer - Troubleshooting Standard IPv4 ACLs

Hình ảnh
Packet Tracer – Troubleshooting Standard IPv4 ACLs Addressing Table Objectives Part 1: Troubleshoot ACL Issue 1 Part 2: Troubleshoot ACL Issue 2 Part 3: Troubleshoot ACL Issue 3 Scenario This network is meant to have the following three policies implemented: ·         Hosts from the 192.168.0.0/24 network are unable to access network 10.0.0.0/8. ·         L3 can’t access any devices in network 192.168.0.0/24. ·         L3 can’t access Server1 or Server2. L3 should only access Server3. ·         Hosts from the 172.16.0.0/16 network have full access to Server1, Server2 and Server3. Note: All FTP usernames and passwords are “cisco”. No other restrictions should be in place. Unfortunately, the rules that have been implemented are not working correctly. Your task is to find and fix the errors related to the access lists on R1. Part 1:     Troublesh...
Đọc thêm