4.5.1.1 Packet Tracer – Skills Integration Challenge

  • 07/07/2018 17:37
  • 102

4.5.1.1 Packet Tracer – Skills Integration Challenge

Packet Tracer – Skills Integration Challenge (Answer Version)

Answer Note: Red font color or gray highlights indicate text that appears in the Answer copy only.

Topology

4.5.1.1 Packet Tracer – Skills Integration Challenge

4.5.1.1 Packet Tracer – Skills Integration Challenge

Addressing Table

Device Interface IP Address Subnet Mask Default Gateway
IPv6 Address / Prefix
HQ G0/0 172.16.127.254 255.255.192.0 N/A
G0/1 172.16.63.254 255.255.192.0 N/A
S0/0/0 192.168.0.1 255.255.255.252 N/A
S0/0/1 64.104.34.2 255.255.255.252 64.104.34.1
Branch G0/0 172.16.159.254 255.255.240.0 N/A
2001:DB8:ACAD:B1::1 /64
G0/1 172.16.143.254 255.255.240.0 N/A
2001:DB8:ACAD:B2::1/64
S0/0/0 192.168.0.2 255.255.255.252 N/A
HQ1 NIC 172.16.64.1 255.255.192.0 172.16.127.254
HQ2 NIC 172.16.0.2 255.255.192.0 172.16.63.254
HQServer.pka NIC 172.16.0.1 255.255.192.0 172.16.63.254
B1 NIC 172.16.144.1 255.255.240.0 172.16.159.254
2001:DB8:ACAD:B1::2/64 2001:DB8:ACAD:B1::1
B2 NIC 172.16.128.2 255.255.240.0 172.16.143.254
2001:DB8:ACAD:B2::2/64 2001:DB8:ACAD:B2:1
BranchServer.pka NIC 172.16.128.1 255.255.240.0 172.16.143.254
2001:DB8:ACAD:B2::3/64 2001:DB8:ACAD:B2::1

Scenario

In this challenge activity, you will finish the addressing scheme, configure routing, and implement named access control lists.

Requirements

  1. Divide 172.16.128.0/19 into two equal subnets for use on Branch.
  2. Assign the last usable IPv4 address of the second subnet to the Gigabit Ethernet 0/0 interface.
  3. Assign the last usable IPv4 address of the first subnet to the Gigabit Ethernet 0/1 interface.
  4. Document the IPv4 addressing in the Addressing Table.
  5. Configure Branch with appropriate IPv4 addressing.
  6. Configure B1 with appropriate IPv4 address using the first available address of the network to which it is attached.
  7. Assign 2001:DB8:ACAD:B1::1/64 and 2001:DB8:ACAD:B2::1/64 to Branch’s Gigabit Ethernet 0/0 and Gigabit Ethernet 0/1, respectively.
  8. Configure Branch with appropriate IPv6 addressing.
  9. Configure B1 and B2 with appropriate IPv6 addresses using the first available address of the network to which it is attached.
  10. Document the addressing in the Addressing Table.
  11. Configure HQ and Branch with OSPFv2 routing for IPv4 according to the following criteria:
    • Assign the process ID 1.
    • Advertise all attached IPv4 networks. Do not advertise the link to the Internet.
    • Configure appropriate interfaces as passive.
  12. Set a IPv4 default route on HQ which directs traffic to S0/0/1 interface. Redistribute the route to Branch.
  13. Design an IPv4 named access list HQServer to prevent any computers attached to the Gigabit Ethernet 0/0 interface of the Branch router from accessing HQServer.pka. All other traffic is permitted. Configure the access list on the appropriate router, apply it to the appropriate interface and in the appropriate direction.
  14. Design an IPv4 named access list BranchServer to prevent any computers attached to the Gigabit Ethernet 0/0 interface of the HQ router from accessing the HTTP and HTTPS service of the Branch server. All other traffic is permitted. Configure the access list on the appropriate router, apply it to the appropriate interface and in the appropriate direction.
  15. Design an IPv6 access-list named NO-B1 to prevent any IPv6 traffic originating on B1 to reach the BranchServer.pka. No traffic should be permitted from B1 to BranchServer.pka. Apply the IPv6 access to the most appropriated location (interface and direction).
  16. Branch Configuration

    hostname Branch
    !
    interface GigabitEthernet0/0
    ip address 172.16.159.254 255.255.240.0
    ipv6 address 2001:DB8:ACAD:B1::1/64
    ip access-group HQServer in
    no shut
    !
    interface GigabitEthernet0/1
    ip address 172.16.143.254 255.255.240.0
    ipv6 traffic-filter NO-B1 out
    ipv6 address 2001:DB8:ACAD:B2::1/64
    no shut
    !
    interface Serial0/0/0
    ip address 192.168.0.2 255.255.255.252
    no shut
    !
    router ospf 1
    passive-interface GigabitEthernet0/0
    passive-interface GigabitEthernet0/1
    network 172.16.128.0 0.0.15.255 area 0
    network 172.16.144.0 0.0.15.255 area 0
    network 192.168.0.0 0.0.0.3 area 0
    !
    ip access-list extended HQServer
    deny ip any host 172.16.0.1
    permit ip any any
    ipv6 access-list NO-B1
    deny ipv6 host 2001:DB8:ACAD:B1::2 host 2001:DB8:ACAD:B2::3
    permit ipv6 any any

     

    HQ Configuration

     

    hostname HQ
    !
    interface GigabitEthernet0/0
    ip address 172.16.127.254 255.255.192.0
    ip access-group BranchServer in
    no shut
    !
    interface GigabitEthernet0/1
    ip address 172.16.63.254 255.255.192.0
    no shut
    !
    interface Serial0/0/0
    ip address 192.168.0.1 255.255.255.252
    no shut
    !
    interface Serial0/0/1
    ip address 64.104.34.2 255.255.255.252
    no shut
    !
    router ospf 1
    passive-interface GigabitEthernet0/0
    passive-interface GigabitEthernet0/1
    network 172.16.64.0 0.0.63.255 area 0
    network 172.16.0.0 0.0.63.255 area 0
    network 192.168.0.0 0.0.0.3 area 0
    default-information originate
    !
    ip route 0.0.0.0 0.0.0.0 Serial0/0/1
    !
    ip access-list extended BranchServer
    deny tcp any host 172.16.128.1 eq www
    deny tcp any host 172.16.128.1 eq 443
    permit ip any any

    Comments

    comments


Bình luận

About Us

CCNA v5 Answers, CCNA v5 Blog, CCNA 5 Blog, CCNA Blog

Articles

Our Contacts