Tài liệu SBA Instructions doc

IP Routing and Encapsulation ‰ Add IGRP routing to all routers in the 172.50.0.0 network ‰ Configure a single static route from Headquarters to the 172.50.0.0 network ‰ Configure a

SBA Instructions

PLEASE READ

Turn in this form, along with your scenario, when you are finished You will then be given a subnetting exercise to complete

Please study your scenario carefully and read each instruction thoroughly

You will have 1 hour to complete this Skills Based Assessment Use your time wisely If you can’t figure something out, move on and come back to it later

Save your running-config to the startup-config often, so you do not lose your work, should something happen

Let me know when you are finished I will copy your running-config to a floppy disk and grade your Skills Based Assessment by next week You may contact me via email if you want to know how you did

After the 1 hour is up, you will have 15 minutes to complete the subnetting exercise Please use one of the desks in the back of the room, so the next person can take the Skills Based

Assessment

Note: Some interface will have the host IP address while others will need you to figure out a valid host IP address

-

If your scenario involves two routers, the router on your left will be the Headquarters router, and the router on your right will be the MainOffice router

Station routers:

Start Time: (you have one hour)

HeadQuarters MainOffice SalesOffice Switch

202.168.10.0/24

172.50.0.0/24 172.50.1.0/24

Serial 172.50.2.0/24

S0/.1 (DCE)

(DCE)

S1

Frame Relay

Network

RemoteOffice

172.16.1.99/24

DLCI 201

172.16.1.88/24

DLCI 101

Configuring the Headquarters & MainOffice

Routers

NOTE: You will only be configuring the Headquarters and MainOffice routers Assume all other

routers have been configured Because the RemoteOffice and SalesOffice routers are not physically present, the Headquarters and MainOffice routers will not show any connectivity to these routers and their

networks Use good time management! If you can’t figure something out, move on and come back

to it later

The Basics: On both MainOffice and Headquarters Routers

‰ Configure the hostnames

‰ Configure proper host IP addresses including any other parameters Configure all interfaces shown in the diagram above for both routers If the host IP address is not shown in the diagram, use any valid host IP address for that subnet

‰ Configure the enable secret password to be “class”

On the MainOffice Router only

‰ Add a description to the Ethernet interface describing the link

‰ Configure the password to be “cisco” when someone tries to log in from the console port

‰ Configure the password to be “cisco” when someone tries to telnet into the router

‰ Configure a static hostname mapping for the SalesOffice router, so the user can “ping SalesOffice”

instead of using “ping 172.50.1.x”

‰ Configure the router to use the domain name server at 172.50.1.10

‰ Add a message of “Authorized access only!” for anyone to see if when they log into the router

IP Routing and Encapsulation

‰ Add IGRP routing to all routers in the 172.50.0.0 network

‰ Configure a single static route from Headquarters to the 172.50.0.0 network

‰ Configure a default route so that all traffic leaving the 172.50.0.0 network will travel to the

Headquarters router

‰ Between Headquarters and MainOffice, use PPP encapsulation with CHAP authentication

Access Lists

‰ Add an access list to the MainOffice Router that will deny telnets from outside the 172.50.0.0

network, into the 172.50.1.0 subnet All other traffic is permitted

172.16.1.88/24 DLCI 16 172.16.1.99/24 DLCI 18

HeadQuarters MainOffice SalesOffice Switch

192.168.10.64/30

172.50.0.0/24 172.50.1.0/24

Serial 172.50.2.0/24

S0 (DCE)

(DCE)

BRI 0

or S1

ISDN Network

RemoteOffice

172.16.1.99/24

8315551234

172.16.1.88/24

4085559876

Configuring the Headquarters & MainOffice

Routers

NOTE: You will only be configuring the Headquarters and MainOffice routers Assume all other

routers have been configured Because the RemoteOffice and SalesOffice routers are not physically present, the Headquarters and MainOffice routers will not show any connectivity to these routers and their

networks Use good time management! If you can’t figure something out, move on and come back

to it later

The Basics: On both MainOffice and Headquarters Routers

‰ Configure the hostnames

‰ Configure proper host IP addresses including any other parameters Configure all interfaces shown in the diagram above for both routers If the host IP address is not shown in the diagram, use any valid host IP address for that subnet

‰ Configure the enable secret password to be “class”

On the MainOffice Router only

‰ Add a description to the Ethernet interface describing the link

‰ Configure the password to be “cisco” when someone tries to log in from the console port

‰ Configure the password to be “cisco” when someone tries to telnet into the router

‰ Configure a static hostname mapping for the SalesOffice router, so the user can “ping SalesOffice”

instead of using “ping 172.50.1.x”

‰ Set the clock on the router to show the current date and time

‰ Add a message of “Authorized access only!” for anyone to see if when they log into the router

IP Routing and Encapsulation

‰ Add RIP routing to all routers in the 172.50.0.0 network

‰ Configure a single static route from Headquarters to the 172.50.0.0 network

‰ Configure a default route so that all traffic leaving the 172.50.0.0 network will travel to the

Headquarters router

‰ Between Headquarters and MainOffice, use PPP encapsulation with CHAP authentication

Access Lists

‰ Add an access list to the MainOffice Router that will deny telnets from outside the 172.50.0.0

network, into the 172.50.1.0 subnet All other traffic is permitted

WAN - ISDN: Headquarters

‰ Configure the Serial 1 interface with an IP address and for PPP encapsulation (NO CHAP or PAP)

‰ Configure Headquarters router to include: The ISDN switch type that Headquarters connects to is an AT&T basic-5ess, and the proper dialer map.

HeadQuarters MainOffice

Serial

202.168.10.0/24

HQ Network

S0/.1 (DCE)

S0/.2 E0

S1

Frame Relay Network

RemoteOffice

172.16.1.99/24 DLCI 201

172.16.1.88/24 DLCI 101

Headquarters Router

SalesOffice

Switch Switch

E1

Switch

172.16.0.0/16 MainOffice Network

NOTE: You will only be configuring the Headquarters router Assume all other routers have been

configured Because the MainOffice, RemoteOffice and SalesOffice routers are not physically present,

the Headquarters router will not show any connectivity to these routers and their networks Use good time management! If you can’t figure something out, move on and come back to it later

The Basics:

‰ Configure the hostname

‰ Configure proper host IP addresses including any other parameters Configure all interfaces shown in the diagram above for the Headquarters router If the host IP address is not shown in the diagram, use any valid host IP address for that subnet

‰ Configure the enable secret password to be “class”

More Basics

‰ Add a description to the Ethernet interface describing the link

‰ Configure the password to be “cisco” when someone tries to log in from the console port

‰ Configure the password to be “cisco” when someone tries to telnet into the router

‰ Configure a static hostname mapping for the MainOffice router, so the user can “ping MainOffice”

instead of using “ping 172.16.0.x”

‰ Configure the router to use the domain name server at 172.50.1.10

‰ Add a message of “Authorized access only!” for anyone to see if when they log into the router

IP Routing and Encapsulation

‰ Add IGRP routing to all routers in the 172.50.0.0 network

‰ Configure a single static route from Headquarters to the 172.16.0.0 network

‰ Configure a default route so that all traffic leaving the 172.50.0.0 network will travel to the

RemoteOffice router

‰ Between Headquarters and MainOffice, use PPP encapsulation with CHAP authentication

Access Lists

‰ Add an access list to the Headquarters Router that will deny telnets from outside the 172.50.0.0 network, into the 172.50.1.0 subnet All other traffic is permitted

172.16.1.88/24 DLCI 16 172.16.1.99/24 DLCI 18

HeadQuarters MainOffice

Serial

202.168.10.0/24

172.50.1.0/24

HQ Network

S0/.1 (DCE)

S0/.2 E0

BRI 0

or S1

ISDN Network

RemoteOffice

172.16.1.99/24 8315551234

172.16.1.88/24 4085559876

Configuring the

Headquarters Router

SalesOffice

172.50.2.0/24 Sales Network

Switch Switch

E1

Switch

172.16.0.0/16 MainOffice Network

NOTE: You will only be configuring the Headquarters router Assume all other routers have been

configured Because the MainOffice, RemoteOffice and SalesOffice routers are not physically present,

the Headquarters router will not show any connectivity to these routers and their networks Use good time management! If you can’t figure something out, move on and come back to it later

The Basics:

‰ Configure the hostname

‰ Configure proper host IP addresses including any other parameters Configure all interfaces shown in the diagram above for the Headquarters router If the host IP address is not shown in the diagram, use any valid host IP address for that subnet

‰ Configure the enable secret password to be “class”

More Basics

‰ Add a description to the Ethernet interface describing the link

‰ Configure the password to be “cisco” when someone tries to log in from the console port

‰ Configure the password to be “cisco” when someone tries to telnet into the router

‰ Configure a static hostname mapping for the MainOffice router, so the user can “ping MainOffice”

instead of using “ping 172.16.0.x”

‰ Configure the router to use the domain name server at 172.50.1.10

‰ Add a message of “Authorized access only!” for anyone to see if when they log into the router

IP Routing and Encapsulation

‰ Add IGRP routing to all routers in the 172.50.0.0 network

‰ Configure a single static route from Headquarters to the 172.16.0.0 network

‰ Configure a default route so that all traffic leaving the 172.50.0.0 network will travel to the

RemoteOffice router

‰ Between Headquarters and MainOffice, use PPP encapsulation with CHAP authentication

Access Lists

‰ Add an access list to the Headquarters Router that will deny telnets from outside the 172.50.0.0 network, into the 172.50.1.0 subnet All other traffic is permitted

WAN - ISDN: Headquarters

‰ Configure the Serial 1 interface with an IP address and for PPP encapsulation (NO CHAP or PAP)

‰ Configure Headquarters router to include: The ISDN switch type that Headquarters connects to is an AT&T basic-5ess, and the proper dialer map.

HeadQuarters MainOffice SalesOffice Switch

202.168.10.0/24

172.50.0.0/24 172.50.1.0/24

Serial 172.50.2.0/24

S0/.1 (DCE)

(DCE)

S1

Frame Relay

Network

RemoteOffice

172.16.1.99/24

DLCI 201

172.16.1.88/24

DLCI 101

Configuring the Headquarters & MainOffice

Routers

NOTE: You will only be configuring the Headquarters and MainOffice routers Assume all other

routers have been configured Because the RemoteOffice and SalesOffice routers are not physically present, the Headquarters and MainOffice routers will not show any connectivity to these routers and their

networks Use good time management! If you can’t figure something out, move on and come back

to it later

The Basics: On both MainOffice and Headquarters Routers

‰ Configure the hostnames

‰ Configure proper host IP addresses including any other parameters Configure all interfaces shown in the diagram above for both routers If the host IP address is not shown in the diagram, use any valid host IP address for that subnet

‰ Configure the enable secret password to be “class”

On the MainOffice Router only

‰ Add a description to the Ethernet interface describing the link

‰ Configure the password to be “cisco” when someone tries to log in from the console port

‰ Configure the password to be “cisco” when someone tries to telnet into the router

‰ Configure a static hostname mapping for the SalesOffice router, so the user can “ping SalesOffice”

instead of using “ping 172.50.1.x”

‰ Configure the router to use the domain name server at 172.50.1.10

‰ Add a message of “Authorized access only!” for anyone to see if when they log into the router

IP Routing and Encapsulation

‰ Add IGRP routing to all routers in the 172.50.0.0 network

‰ Configure a single static route from Headquarters to the 172.50.0.0 network

‰ Configure a default route so that all traffic leaving the 172.50.0.0 network will travel to the

Headquarters router

‰ Between Headquarters and MainOffice, use PPP encapsulation with CHAP authentication

Access Lists

‰ Add an access list to the MainOffice Router that will deny telnets from outside the 172.50.0.0

network, into the 172.50.1.0 subnet All other traffic is permitted

172.16.1.88/24 DLCI 16 172.16.1.99/24 DLCI 18

HeadQuarters MainOffice

Serial

202.168.10.0/24

172.50.1.0/24

HQ Network

S0/.1 (DCE)

S0/.2 E0

S1

Frame Relay Network

RemoteOffice

172.16.1.99/24 DLCI 201

172.16.1.88/24 DLCI 101

Configuring the

Headquarters Router

SalesOffice

172.50.2.0/24 Sales Network

Switch Switch

E1

Switch

172.16.0.0/16 MainOffice Network

NOTE: You will only be configuring the Headquarters router Assume all other routers have been

configured Because the MainOffice, RemoteOffice and SalesOffice routers are not physically present,

the Headquarters router will not show any connectivity to these routers and their networks Use good time management! If you can’t figure something out, move on and come back to it later

The Basics:

‰ Configure the hostname

‰ Configure proper host IP addresses including any other parameters Configure all interfaces shown in the diagram above for the Headquarters router If the host IP address is not shown in the diagram, use any valid host IP address for that subnet

‰ Configure the enable secret password to be “class”

More Basics

‰ Add a description to the Ethernet interface describing the link

‰ Configure the password to be “cisco” when someone tries to log in from the console port

‰ Configure the password to be “cisco” when someone tries to telnet into the router

‰ Configure a static hostname mapping for the MainOffice router, so the user can “ping MainOffice”

instead of using “ping 172.16.0.x”

‰ Configure the router to use the domain name server at 172.50.1.10

‰ Add a message of “Authorized access only!” for anyone to see if when they log into the router

IP Routing and Encapsulation

‰ Add IGRP routing to all routers in the 172.50.0.0 network

‰ Configure a single static route from Headquarters to the 172.16.0.0 network

‰ Configure a default route so that all traffic leaving the 172.50.0.0 network will travel to the

RemoteOffice router

‰ Between Headquarters and MainOffice, use PPP encapsulation with CHAP authentication

Access Lists

‰ Add an access list to the Headquarters Router that will deny telnets from outside the 172.50.0.0 network, into the 172.50.1.0 subnet All other traffic is permitted

Routing IPX

‰ On the Headquarters router add IPX routing for the Ethernet 0 interface The IPX network address is

4abc and the layer 2 encapsulation is sap

There is NO WAN configuration for this scenario

172.16.1.88/24 DLCI 16 172.16.1.99/24 DLCI 18

Subnetting: Exercise A

Show all work!

Host IP

Address

Subnet Mask Class

Maximum number of usable subnets

Maximum number of usable hosts per subnet

Major Network Address

(Classful network address)

131.108.1.77 255.255.255.240

Subnet Address of This

Subnet or Wire

Range of Host Addresses For this subnet

Broadcast Address of This Subnet

Start time: _ (you have 15 minutes)

Subnetting: Exercise B

Show all work!

Host IP

Address

Subnet Mask Class

Maximum number of usable subnets

Maximum number of usable hosts per subnet

Major Network Address

(Classful network address)

200.108.1.77 255.255.255.224

Subnet Address of This

Subnet or Wire

Range of Host Addresses For this subnet

Broadcast Address of This Subnet

Subnetting: Exercise C

Show all work!

Host IP

Address

Subnet Mask Class

Maximum number of usable subnets

Maximum number of usable hosts per subnet

Major Network Address

(Classful network address)

201.108.1.77 255.255.255.248

Subnet Address of This

Subnet or Wire

Range of Host Addresses For this subnet

Broadcast Address of This Subnet