CCNA 3 – ENSA Practice PT Skills Assessment (PTSA) Answers PDF

Preview

Summary

CCNA 3 - ENSA Practice PT Skills Assessment (PTSA) Answers...

Description

CCNAv7 Enterprise Networking, Security, and Automation v7.0 (ENSA) Topology

Addressing Table Device Name

G0/0/0

10.10.1.17/29

G0/ 0/ 0

10. 10. 1. 17/ 29

S0/ 1/ 0

10. 10. 0. 237/ 30

S0/ 1/ 1

192. 0. 2. 113/ 29

G0/ 0/ 0

192. 168. 11. 1/ 24

G0/ 0/ 1

10. 10. 1. 18/ 29

G0/ 0/ 0

192. 168. 22. 1/ 24

RTR3

G0/ 0/ 1

10. 10. 1. 19/ 29

RTRA

G0/ 0/ 0

192. 168. 66. 1/ 30

RTR1

RTR2

S0/ 1/ 0

10. 10. 0. 249/ 30

S0/ 1/ 1

10. 10. 0. 241/ 30

S0/ 2/ 0

10. 10. 0. 238/ 30

G0/ 0/ 0

192. 168. 33. 1/ 28

S0/ 1/ 0

10. 10. 0. 245/ 30

S0/ 1/ 1

10. 10. 0. 242/ 30

G0/ 0/ 0

192. 168. 44. 1/ 24

G0/ 0/ 1

192. 168. 55. 1/ 24

S0/ 1/ 0

10. 10. 0. 250/ 30

RTRC

S0/ 1/ 1

10. 10. 0. 246/ 30

HostA

NI C

192. 168. 11. 11/ 24

HostB

NI C

192. 168. 22. 22/ 24

HostC

NI C

192. 168. 44. 44/ 24

Ut i l i t ySer ver

NI C

192. 168. 33. 14/ 28

Par t nerSer ver

NI C

192. 168. 11. 100

Mobi l eHost

NI C

192. 168. 55. 55/ 24

Ext er nal Ser ver

NI C

203. 0. 113. 100

RTRB

Introduction Youar ecompl et i ngt heconfigur at i onoft heXYZCor pnet wor k. You are not required to configure host addressing. Youwi l lpr act i ceandbeass es s edont hef ol l owi ngs k i l l s :  Configur at i onofOSPFv2r out i ng  Cust omi z at i onofOSPF.  Configur at i onofs t at i cNAT.  Configur at i onofdy nami cNATwi t hPAT.  Configur at i onofv ar i oust ypesofACLs .  Configur at i onofar out erwi t hNTPasas y s t em t i mesour c e.  Bac ki ngupanI OSi maget oaTFTPs er v er . Instructions Part 1: Configure OSPF Step 1: Activate OSPF. Usepr oc essI D10 f orOSPFact i v at i ononal l r out er s . a.Ac t i v at eOSPFbyconfi gur i ngt hei nt er f ac esoft henet wor kdevi cesi nt heBr anch1Net wor knet wor k ,wher e r equi r ed. b.Ac t i v at eOSPFusi ngnet wor ks t at ement sandi nv er s emask sont her out er si nt heHQ Net wor knet wor k. Step 2: Configure router IDs.

Configur er out erI Dsont hemul t i acces snet wor kr out er sasf ol l ows : –RTR1:9.9.9.9 –RTR2:8.8.8.8 –RTR3:7.7.7.7 Step 3: Customize OSPF operation. a.Confi gur er out erRTR1wi t ht hehi ghes tOSPFi nt er f acepr i or i t ysot hati twi l lal way sbet hedes i gnat edr out eroft he mul t i ac ces snet wor k. b.Onr out erRTR1,confi gur eadef aul tr out et ot heI SPcl oudusi ngt heexi ti nt er f ac ecommandar gument . c .Aut omat i cal l ydi s t r i but et hedef aul tr out et oal l r out er si nt henet wor k. d.Confi gur et hehel l oanddeadt i merv al uesont hei nt er f ac est hatconnec tRTR1andRTRAt obet wi c et hedef aul t v al ues . e.Confi gur et heOSPFr out er ss ot hatt hedef aul tc ostv al uef oral lGi gabi tEt her neti nt er f aceswi l l be1 andt hec os t v al uef orFas tEt her netwi l l be10. f .Configur et heOSPFcos tv al ueofRTRAi nt er f aceSer i al 0/ 1/ 1t o50. g.Confi gur eOSPFs ot hatr out i ngupdat esar enots enti nt onet wor k swher eOSPFupdat esar enotr equi r ed. Part 2: Configure NAT I nt hi spar toft hepr act i ces ki l l sas s ess ment ,y ouwi l lc onfigur es t at i canddy nami cNATatt henet wor kedge. Step 1: Configure static NAT Configur es t at i cNATt ot r ansl at et headdr essoft hePar t nerSer v eronLANAt ot hepubl i caddr es sof 192.0.2.115.Ver i f yt hatt het r ansl at i onsar eoc cur r i ng. Step 2: Configure dynamic PAT. a.Cr eat eac ces sl i s t1 t oal l owal l addr es sesi nt he192.168.0.0/16 net wor kt obet r ansl at ed. b.Cr eat eaNATpool namedPOOL-1.I ts houl dus eaddr essi nt her ange192.0.2.116 -192.0.2.118. c .Confi gur eNATt ody nami c al l yuset headdr es s esi nt hepoolf oral lt r afficent er i ngandexi t i ngt hecompanynet wor k . Remembert hati ti sl i k el yt hatmor et hant hr eehost swi l l beacc ess i ngt r afficont heI nt er net . Part 3: Configure ACLs Configur eac ces sc ont r ol l i st st omeett hef ol l owi ngr equi r ement s. Note: Usehost andany k ey wor dswhenev erposs i bl e.Al way sexpl i c i t l yc onfi gur et hedef aul tdenycondi t i onwhen i ti st obeus edaspar toft heACLf unc t i onal i t ys ot hati tc anbel oggedwhent hecondi t i oni smet .Youdonotneedt o s pec i f yt hedef aul tdenycondi t i oni fi ti sc ount er ac t edwi t hpermit ip any any f ort hi sas ses s ment .Al lACLs s houl dbepl ac edi nt hemosteffic i entl oc at i onposs i bl eacc or di ngt ot hegui del i nesspec i fi edi nt hec ur r i c ul um. a.Cr eat eanameds t andar dacc essl i s tt oexpl i c i t l ypr ev ental l ext er nal t r afficac ces s i ngt het el netl i nesonRTR1. Namet hel i s tVTY-BLOCK.Al l addr ess esont he192. 168. 0. 0/ 16net wor konl ys houl dbeal l owedt oacc esst heVTY l i nes .Ver i f yt hatt hel i s twor ksasspec i fi ed. b.Cr eat eanumber eds t andar dACLt opr ev ental l host sonLANAf r om acc ess i ngLANB.Us e10 ast henumberf or t hel i s t . c .Cr eat eanex t endednumber edACLt hatwi l l pr ev entt r afficf r om t heLANDnet wor kf r om ac ces si ngt heHTTP s er v i c et hati sr unni ngonUt i l i t ySer v er .Al lot hert r afficf r om LANDhos t ss houl dbeabl et oacc esst henet wor k . Numbert hel i s t101. Part 4: Manage Network Devices Step 1: Configure NTP Configur er out erRTRBt ouseUt i l i t ySer v erasi t st i mesour c e. Step 2: Backup IOS to Server Bac k upt heI OSi magefi l eonr out erRTRBt oUt i l i t ySer v er . Answers Script:

RTR-1 Router / (Router 1) enable configure ter router ospf 10 exit

interface g0/0/0 ip ospf 10 area 0 interface s0/1/0 ip ospf 10 area 0 exit

router ospf 10 router-id 9.9.9.9 exit

int g0/0/0 ip ospf priority 255 exit ip route 0.0.0.0 0.0.0.0 s0/1/1 router ospf 10 default-information originate exit

int s0/1/0 ip ospf hello-interval 20 ip ospf dead-interval 80 exit

router ospf 10 auto-cost reference-bandwidth 1000 exit

router ospf 10 passive-interface s0/1/1 exit

ip nat inside source static 192.168.11.100 192.0.2.115 int s0/1/1 ip nat outside int g0/0/0 ip nat inside exit

access-list 1 permit 192.168.0.0 0.0.255.255 ip nat pool POOL-1 192.0.2.116 192.0.2.118 netmask 255.255.255.248 ip nat inside source list 1 pool POOL-1 overload int s0/1/0

ip nat inside exit

ip access-list standard VTY-BLOCK permit 192.168.0.0 0.0.255.255 deny any exit line vty 0 4 access-class VTY-BLOCK in exit

end copy running-config startup-config RTR-2 Router / (Router 2) enable configure terminal router ospf 10 exit

interface g0/0/0 ip ospf 10 area 0 interface g0/0/1 ip ospf 10 area 0 exit

router ospf 10 router-id 8.8.8.8 exit

router ospf 10 auto-cost reference-bandwidth 1000 exit

router ospf 10 passive-interface g0/0/0 exit

end copy running-config startup-config RTR-3 Router / (Router 3) enable configure terminal router ospf 10 exit

interface g0/0/0 ip ospf 10 area 0 interface g0/0/1

ip ospf 10 area 0 exit

router ospf 10 router-id 7.7.7.7 exit

router ospf 10 auto-cost reference-bandwidth 1000 exit

router ospf 10 passive-interface g0/0/0 exit

access-list 10 deny 192.168.11.0 0.0.0.255 access-list 10 permit any int g0/0/1 ip access-group 10 in exit

end copy running-config startup-config RTR-A Router 4

enable configure terminal router ospf 10 network 192.168.66.0 0.0.0.3 area 0 network 10.10.0.248 0.0.0.3 area 0 network 10.10.0.240 0.0.0.3 area 0 network 10.10.0.236 0.0.0.3 area 0 exit

int s0/2/0 ip ospf hello-interval 20 ip ospf dead-interval 80 exit

router ospf 10 auto-cost reference-bandwidth 1000 exit

int s0/1/1 ip ospf cost 50 exit

router ospf 10 passive-interface g0/0/0

exit

end copy running-config startup-config RTR-B Router / (Router 5) enable configure terminal router ospf 10 network 10.10.0.240 0.0.0.3 area 0 network 10.10.0.244 0.0.0.3 area 0 network 192.168.33.0 0.0.0.15 area 0 exit

router ospf 10 auto-cost reference-bandwidth 1000 exit

router ospf 10 passive-interface g0/0/0 exit

ntp server 192.168.33.14 exit

copy running-config startup-config

RTR-C Router / (Router 6) enable configure terminal router ospf 10 network 192.168.44.0 0.0.0.255 area 0 network 192.168.55.0 0.0.0.255 area 0 network 10.10.0.248 0.0.0.3 area 0 network 10.10.0.244 0.0.0.3 area 0 exit

router ospf 10 auto-cost reference-bandwidth 1000 exit

router ospf 10 passive-interface g0/0/0 passive-interface g0/0/1 exit

access-list 101 deny tcp any host 192.168.33.14 eq www access-list 101 permit ip any any int g0/0/0

ip access-group 101 in

end copy running-config startup-config RTR-B Router (Part 4, step 2) / (Router 5)

Not e:I OSi magefi l e( . bi nfil e)namemaybedi ffer ent RTR-B>enable RTR-B#show flash:

System flash directory: File

Length

Name/status

3

486899872isr4300-universalk9.03.16.05.S.155-3.S5-ext.SPA.bin

2

28282

sigdef-category.xml

1

227537

sigdef-default.xml

[487155691 bytes used, 2761893909 available, 3249049600 total] 3.17338e+06K bytes of processor board System flash (Read/Write)

RTR-B#copy flash tftp Source filename []? isr4300-universalk9.03.16.05.S.155-3.S5-ext.SPA.bin Address or name of remote host []? 192.168.33.14 Destination filename [isr4300-universalk9.03.16.05.S.155-3.S5-ext.SPA.bin]?...