8.6.1 Pt Answers

23
!!!!!HQ en conf t hostname HQ enable secret class no ip domain-lookup line con 0 password cisco login logging synch line vty 0 4 password cisco login exit int fa0/0 ip address 10.0.1.1 255.255.255.0 no shutdown exit Int s0/0/0 no ip address encapsulation frame-relay frame-relay lmi-type q933a no shutdown int s0/0/0.41 point-to-point ip address 10.255.255.1 255.255.255.252 frame-relay interface-dlci 41 int s0/0/0.42 point-to-point ip address 10.255.255.5 255.255.255.252 frame-relay interface-dlci 42 int s0/0/0.43 point-to-point ip address 10.255.255.9 255.255.255.252 frame-relay interface-dlci 43 exit int fa0/0 description Servers

Transcript of 8.6.1 Pt Answers

Page 1: 8.6.1 Pt Answers

!!!!!HQ

en

conf t

hostname HQ

enable secret class

no ip domain-lookup

line con 0

password cisco

login

logging synch

line vty 0 4

password cisco

login

exit

int fa0/0

ip address 10.0.1.1 255.255.255.0

no shutdown

exit

Int s0/0/0

no ip address

encapsulation frame-relay

frame-relay lmi-type q933a

no shutdown

int s0/0/0.41 point-to-point

ip address 10.255.255.1 255.255.255.252

frame-relay interface-dlci 41

int s0/0/0.42 point-to-point

ip address 10.255.255.5 255.255.255.252

frame-relay interface-dlci 42

int s0/0/0.43 point-to-point

ip address 10.255.255.9 255.255.255.252

frame-relay interface-dlci 43

exit

int fa0/0

description Servers

ip address 10.0.1.1 255.255.255.0

no shutdown

exit

username ISP password ciscochap

int s0/1/0

description Link to ISP

Page 2: 8.6.1 Pt Answers

ip address 209.165.201.1 255.255.255.252

encapsulation ppp

ppp authentication chap

no shutdown

exit

username NewB password ciscopap

int s0/0/1

description Link to NewB

ip address 10.255.255.253 255.255.255.252

encapsulation ppp

ppp authentication pap

ppp pap sent-username HQ password 0 ciscopap

clock rate 64000

no shutdown

exit

ip access-list standard NAT_LIST

permit 10.0.0.0 0.255.255.255

exit

ip nat pool XYZCORP 209.165.200.241 209.165.200.245 netmask 255.255.255.248

ip nat inside source list NAT_LIST pool XYZCORP overload

ip nat inside source static 10.0.1.2 209.165.200.246

int fa0/0

ip nat inside

int s0/0/0.41 point-to-point

ip nat inside

int s0/0/0.42 point-to-point

ip nat inside

int s0/0/0.43 point-to-point

ip nat inside

int s0/0/1

ip nat inside

int s0/1/0

ip nat outside

exit

ip route 0.0.0.0 0.0.0.0 serial0/1/0

ip route 10.4.5.0 255.255.255.0 serial0/0/1

router eigrp 100

passive-interface fa0/0

passive-interface s0/0/1

passive-interface s0/1/0

network 10.0.0.0

Page 3: 8.6.1 Pt Answers

no auto-summary

exit

ip access-list extended FIREWALL

!permit tcp any host 209.165.200.244 eq www

permit tcp any host 209.165.200.246 eq www

permit tcp any any established

permit icmp any any echo-reply

deny ip any any

exit

int s0/1/0

ip access-group FIREWALL in

!!!!!B1

en

conf t

hostname B1

enable secret class

no ip domain-lookup

line con 0

password cisco

login

logging synch

line vty 0 4

password cisco

login

exit

int s0/0/0

ip address 10.255.255.2 255.255.255.252

encapsulation frame-relay

frame-relay lmi-type q933a

no shutdown

exit

ip route 0.0.0.0 0.0.0.0 10.255.255.1

int fa0/0

no shutdown

int fa0/0.10

description Admin VLAN 10

encapsulation dot1Q 10

ip address 10.1.10.1 255.255.255.0

int fa0/0.20

description Sales VLAN 20

encapsulation dot1Q 20

Page 4: 8.6.1 Pt Answers

ip address 10.1.20.1 255.255.255.0

int fa0/0.30

description Production VLAN 30

encapsulation dot1Q 30

ip address 10.1.30.1 255.255.255.0

int fa0/0.88

description Wireless VLAN 88

encapsulation dot1Q 88

ip address 10.1.88.1 255.255.255.0

int fa0/0.99

description Management&Native VLAN 99

encapsulation dot1Q 99 native

ip address 10.1.99.1 255.255.255.0

exit

router eigrp 100

passive-interface fastethernet0/0.10

passive-interface fastethernet0/0.20

passive-interface fastethernet0/0.30

passive-interface fastethernet0/0.99

network 10.0.0.0

no auto-summary

exit

int s0/0/0

ip summary-address eigrp 100 10.1.0.0 255.255.0.0

exit

ip dhcp excluded-address 10.1.10.1 10.1.10.10

ip dhcp excluded-address 10.1.20.1 10.1.20.10

ip dhcp excluded-address 10.1.30.1 10.1.30.10

ip dhcp excluded-address 10.1.88.1 10.1.88.24

ip dhcp pool B1_VLAN10

network 10.1.10.0 255.255.255.0

default-router 10.1.10.1

dns-server 10.0.1.4

exit

ip dhcp pool B1_VLAN20

network 10.1.20.0 255.255.255.0

default-router 10.1.20.1

dns-server 10.0.1.4

exit

ip dhcp pool B1_VLAN30

network 10.1.30.0 255.255.255.0

Page 5: 8.6.1 Pt Answers

default-router 10.1.30.1

dns-server 10.0.1.4

exit

ip dhcp pool B1_VLAN88

network 10.1.88.0 255.255.255.0

default-router 10.1.88.1

dns-server 10.0.1.4

!!!!!B2

en

conf t

hostname B2

enable secret class

no ip domain-lookup

line con 0

password cisco

login

logging synch

line vty 0 4

password cisco

login

exit

int s0/0/0

ip address 10.255.255.6 255.255.255.252

encapsulation frame-relay

frame-relay lmi-type q933a

no shutdown

exit

ip route 0.0.0.0 0.0.0.0 10.255.255.5

int fa0/0

no shutdown

int fa0/0.10

description Admin VLAN 10

encapsulation dot1Q 10

ip address 10.2.10.1 255.255.255.0

int fa0/0.20

description Sales VLAN 20

encapsulation dot1Q 20

ip address 10.2.20.1 255.255.255.0

int fa0/0.30

description Production VLAN 30

encapsulation dot1Q 30

Page 6: 8.6.1 Pt Answers

ip address 10.2.30.1 255.255.255.0

int fa0/0.88

description Wireless VLAN 88

encapsulation dot1Q 88

ip address 10.2.88.1 255.255.255.0

int fa0/0.99

description Management&Native VLAN 99

encapsulation dot1Q 99 native

ip address 10.2.99.1 255.255.255.0

exit

router eigrp 100

passive-interface fastethernet0/0.10

passive-interface fastethernet0/0.20

passive-interface fastethernet0/0.30

passive-interface fastethernet0/0.99

network 10.0.0.0

no auto-summary

exit

int s0/0/0

ip summary-address eigrp 100 10.2.0.0 255.255.0.0

exit

ip dhcp excluded-address 10.2.10.1 10.2.10.10

ip dhcp excluded-address 10.2.20.1 10.2.20.10

ip dhcp excluded-address 10.2.30.1 10.2.30.10

ip dhcp excluded-address 10.2.88.1 10.2.88.24

ip dhcp pool B2_VLAN10

network 10.2.10.0 255.255.255.0

default-router 10.2.10.1

dns-server 10.0.1.4

exit

ip dhcp pool B2_VLAN20

network 10.2.20.0 255.255.255.0

default-router 10.2.20.1

dns-server 10.0.1.4

exit

ip dhcp pool B2_VLAN30

network 10.2.30.0 255.255.255.0

default-router 10.2.30.1

dns-server 10.0.1.4

exit

ip dhcp pool B2_VLAN88

Page 7: 8.6.1 Pt Answers

network 10.2.88.0 255.255.255.0

default-router 10.2.88.1

dns-server 10.0.1.4

!!!!!B3

en

conf t

hostname B3

enable secret class

no ip domain-lookup

line con 0

password cisco

login

logging synch

line vty 0 4

password cisco

login

exit

int s0/0/0

ip address 10.255.255.10 255.255.255.252

encapsulation frame-relay ietf

frame-relay lmi-type ansi

no shutdown

exit

ip route 0.0.0.0 0.0.0.0 10.255.255.9

int fa0/0

no shutdown

int fa0/0.10

description Admin VLAN 10

encapsulation dot1Q 10

ip address 10.3.10.1 255.255.255.0

int fa0/0.20

description Sales VLAN 20

encapsulation dot1Q 20

ip address 10.3.20.1 255.255.255.0

int fa0/0.30

description Production VLAN 30

encapsulation dot1Q 30

ip address 10.3.30.1 255.255.255.0

int fa0/0.88

description Wireless VLAN 88

encapsulation dot1Q 88

Page 8: 8.6.1 Pt Answers

ip address 10.3.88.1 255.255.255.0

int fa0/0.99

description Management&Native VLAN 99

encapsulation dot1Q 99 native

ip address 10.3.99.1 255.255.255.0

exit

router eigrp 100

passive-interface fastethernet0/0.10

passive-interface fastethernet0/0.20

passive-interface fastethernet0/0.30

passive-interface fastethernet0/0.99

network 10.0.0.0

no auto-summary

exit

int s0/0/0

ip summary-address eigrp 100 10.3.0.0 255.255.0.0

exit

ip dhcp excluded-address 10.3.10.1 10.3.10.10

ip dhcp excluded-address 10.3.20.1 10.3.20.10

ip dhcp excluded-address 10.3.30.1 10.3.30.10

ip dhcp excluded-address 10.3.88.1 10.3.88.24

ip dhcp pool B3_VLAN10

network 10.3.10.0 255.255.255.0

default-router 10.3.10.1

dns-server 10.0.1.4

exit

ip dhcp pool B3_VLAN20

network 10.3.20.0 255.255.255.0

default-router 10.3.20.1

dns-server 10.0.1.4

exit

ip dhcp pool B3_VLAN30

network 10.3.30.0 255.255.255.0

default-router 10.3.30.1

dns-server 10.0.1.4

exit

ip dhcp pool B3_VLAN88

network 10.3.88.0 255.255.255.0

default-router 10.3.88.1

dns-server 10.0.1.4

Page 9: 8.6.1 Pt Answers

!!!!!B1-S1

en

conf t

hostname B1-S1

enable secret class

no ip domain-lookup

line con 0

password cisco

login

logging synch

line vty 0 4

password cisco

login

exit

vtp mode server

vtp domain xyzcorp

vtp password xyzvtp

int fa0/1

switchport trunk native vlan 99

switchport mode trunk

int fa0/2

switchport trunk native vlan 99

switchport mode trunk

int fa0/3

switchport trunk native vlan 99

switchport mode trunk

int fa0/4

switchport trunk native vlan 99

switchport mode trunk

int fa0/5

switchport trunk native vlan 99

switchport mode trunk

exit

int vlan 99

ip address 10.1.99.21 255.255.255.0

no shutdown

exit

ip default-gateway 10.1.99.1

vlan 10

name Admin

vlan 20

Page 10: 8.6.1 Pt Answers

name Sales

vlan 30

name Production

vlan 88

name Wireless

vlan 99

name Mgmt&Native

exit

spanning-tree vlan 1 priority 4096

spanning-tree vlan 10 priority 4096

spanning-tree vlan 20 priority 4096

spanning-tree vlan 30 priority 4096

spanning-tree vlan 88 priority 4096

spanning-tree vlan 99 priority 4096

!!!!!B1-S2

en

conf t

hostname B1-S2

enable secret class

no ip domain-lookup

line con 0

password cisco

login

logging synch

line vty 0 4

password cisco

login

exit

vtp mode client

vtp domain xyzcorp

vtp password xyzvtp

int fa0/1

switchport trunk native vlan 99

switchport mode trunk

int fa0/2

switchport trunk native vlan 99

switchport mode trunk

int fa0/3

switchport trunk native vlan 99

switchport mode trunk

int fa0/4

Page 11: 8.6.1 Pt Answers

switchport trunk native vlan 99

switchport mode trunk

exit

int vlan 99

ip address 10.1.99.22 255.255.255.0

no shut

exit

ip default-gateway 10.1.99.1

int fa0/6

switchport access vlan 10

switchport mode access

switchport port-security

switchport port-security maximum 1

switchport port-security mac-address sticky

switchport port-security violation shutdown

int fa0/11

switchport access vlan 20

switchport mode access

switchport port-security

switchport port-security maximum 1

switchport port-security mac-address sticky

switchport port-security violation shutdown

int fa0/16

switchport access vlan 30

switchport mode access

switchport port-security

switchport port-security maximum 1

switchport port-security mac-address sticky

switchport port-security violation shutdown

!!!!!B1-S3

en

conf t

hostname B1-S3

enable secret class

no ip domain-lookup

line con 0

password cisco

login

logging synch

line vty 0 4

password cisco

Page 12: 8.6.1 Pt Answers

login

exit

vtp mode client

vtp domain xyzcorp

vtp password xyzvtp

int fa0/1

switchport trunk native vlan 99

switchport mode trunk

int fa0/2

switchport trunk native vlan 99

switchport mode trunk

int fa0/3

switchport trunk native vlan 99

switchport mode trunk

int fa0/4

switchport trunk native vlan 99

switchport mode trunk

exit

int vlan 99

ip address 10.1.99.23 255.255.255.0

no shutdown

exit

ip default-gateway 10.1.99.1

int fa0/7

switchport access vlan 88

switchport mode access

exit

spanning-tree vlan 1 priority 8192

spanning-tree vlan 10 priority 8192

spanning-tree vlan 20 priority 8192

spanning-tree vlan 30 priority 8192

spanning-tree vlan 88 priority 8192

spanning-tree vlan 99 priority 8192

!!!!B2-S1

en

conf t

hostname B2-S1

enable secret class

no ip domain-lookup

line con 0

password cisco

Page 13: 8.6.1 Pt Answers

login

logging synch

line vty 0 4

password cisco

login

exit

vtp mode server

vtp domain xyzcorp

vtp password xyzvtp

int fa0/1

switchport trunk native vlan 99

switchport mode trunk

int fa0/2

switchport trunk native vlan 99

switchport mode trunk

int fa0/3

switchport trunk native vlan 99

switchport mode trunk

int fa0/4

switchport trunk native vlan 99

switchport mode trunk

int fa0/5

switchport trunk native vlan 99

switchport mode trunk

exit

int vlan 99

ip address 10.2.99.21 255.255.255.0

no shutdown

exit

ip default-gateway 10.2.99.1

vlan 10

name Admin

vlan 20

name Sales

vlan 30

name Production

vlan 88

name Wireless

vlan 99

name Mgmt&Native

exit

Page 14: 8.6.1 Pt Answers

spanning-tree vlan 1 priority 4096

spanning-tree vlan 10 priority 4096

spanning-tree vlan 20 priority 4096

spanning-tree vlan 30 priority 4096

spanning-tree vlan 88 priority 4096

spanning-tree vlan 99 priority 4096

!!!!!B2-S2

en

conf t

hostname B2-S2

enable secret class

no ip domain-lookup

line con 0

password cisco

login

logging synch

line vty 0 4

password cisco

login

exit

vtp mode client

vtp domain xyzcorp

vtp password xyzvtp

int fa0/1

switchport trunk native vlan 99

switchport mode trunk

int fa0/2

switchport trunk native vlan 99

switchport mode trunk

int fa0/3

switchport trunk native vlan 99

switchport mode trunk

int fa0/4

switchport trunk native vlan 99

switchport mode trunk

exit

int vlan 99

ip address 10.2.99.22 255.255.255.0

no shut

exit

ip default-gateway 10.2.99.1

Page 15: 8.6.1 Pt Answers

int fa0/6

switchport access vlan 10

switchport mode access

switchport port-security

switchport port-security maximum 1

switchport port-security mac-address sticky

switchport port-security violation shutdown

int fa0/11

switchport access vlan 20

switchport mode access

switchport port-security

switchport port-security maximum 1

switchport port-security mac-address sticky

switchport port-security violation shutdown

int fa0/16

switchport access vlan 30

switchport mode access

switchport port-security

switchport port-security maximum 1

switchport port-security mac-address sticky

switchport port-security violation shutdown

!!!!!B2-S3

en

conf t

hostname B2-S3

enable secret class

no ip domain-lookup

line con 0

password cisco

login

logging synch

line vty 0 4

password cisco

login

exit

vtp mode client

vtp domain xyzcorp

vtp password xyzvtp

int fa0/1

switchport trunk native vlan 99

Page 16: 8.6.1 Pt Answers

switchport mode trunk

int fa0/2

switchport trunk native vlan 99

switchport mode trunk

int fa0/3

switchport trunk native vlan 99

switchport mode trunk

int fa0/4

switchport trunk native vlan 99

switchport mode trunk

exit

int vlan 99

ip address 10.2.99.23 255.255.255.0

no shut

exit

ip default-gateway 10.2.99.1

int fa0/7

switchport access vlan 88

switchport mode access

exit

spanning-tree vlan 1 priority 8192

spanning-tree vlan 10 priority 8192

spanning-tree vlan 20 priority 8192

spanning-tree vlan 30 priority 8192

spanning-tree vlan 88 priority 8192

spanning-tree vlan 99 priority 8192

!!!!!B3-S1

en

conf t

hostname B3-S1

enable secret class

no ip domain-lookup

line con 0

password cisco

login

logging synch

line vty 0 4

password cisco

login

exit

Page 17: 8.6.1 Pt Answers

vtp mode server

vtp domain xyzcorp

vtp password xyzvtp

int fa0/1

switchport trunk native vlan 99

switchport mode trunk

int fa0/2

switchport trunk native vlan 99

switchport mode trunk

int fa0/3

switchport trunk native vlan 99

switchport mode trunk

int fa0/4

switchport trunk native vlan 99

switchport mode trunk

int fa0/5

switchport trunk native vlan 99

switchport mode trunk

exit

int vlan 99

ip address 10.3.99.21 255.255.255.0

no shutdown

exit

ip default-gateway 10.3.99.1

vlan 10

name Admin

vlan 20

name Sales

vlan 30

name Production

vlan 88

name Wireless

vlan 99

name Mgmt&Native

exit

spanning-tree vlan 1 priority 4096

spanning-tree vlan 10 priority 4096

spanning-tree vlan 20 priority 4096

spanning-tree vlan 30 priority 4096

spanning-tree vlan 88 priority 4096

spanning-tree vlan 99 priority 4096

Page 18: 8.6.1 Pt Answers

!!!!!B3-S2

en

conf t

hostname B3-S2

enable secret class

no ip domain-lookup

line con 0

password cisco

login

logging synch

line vty 0 4

password cisco

login

exit

vtp mode client

vtp domain xyzcorp

vtp password xyzvtp

int fa0/1

switchport trunk native vlan 99

switchport mode trunk

int fa0/2

switchport trunk native vlan 99

switchport mode trunk

int fa0/3

switchport trunk native vlan 99

switchport mode trunk

int fa0/4

switchport trunk native vlan 99

switchport mode trunk

exit

int vlan 99

ip address 10.3.99.22 255.255.255.0

no shut

exit

ip default-gateway 10.3.99.1

int fa0/6

switchport access vlan 10

switchport mode access

switchport port-security

switchport port-security maximum 1

switchport port-security mac-address sticky

Page 19: 8.6.1 Pt Answers

switchport port-security violation shutdown

int fa0/11

switchport access vlan 20

switchport mode access

switchport port-security

switchport port-security maximum 1

switchport port-security mac-address sticky

switchport port-security violation shutdown

int fa0/16

switchport access vlan 30

switchport mode access

switchport port-security

switchport port-security maximum 1

switchport port-security mac-address sticky

switchport port-security violation shutdown

!!!!!B3-S3

en

conf t

hostname B3-S3

enable secret class

no ip domain-lookup

line con 0

password cisco

login

logging synch

line vty 0 4

password cisco

login

exit

vtp mode client

vtp domain xyzcorp

vtp password xyzvtp

int fa0/1

switchport trunk native vlan 99

switchport mode trunk

int fa0/2

switchport trunk native vlan 99

switchport mode trunk

int fa0/3

switchport trunk native vlan 99

switchport mode trunk

Page 20: 8.6.1 Pt Answers

int fa0/4

switchport trunk native vlan 99

switchport mode trunk

exit

int vlan 99

ip address 10.3.99.23 255.255.255.0

no shut

exit

ip default-gateway 10.3.99.1

int fa0/7

switchport access vlan 88

switchport mode access

exit

spanning-tree vlan 1 priority 8192

spanning-tree vlan 10 priority 8192

spanning-tree vlan 20 priority 8192

spanning-tree vlan 30 priority 8192

spanning-tree vlan 88 priority 8192

spanning-tree vlan 99 priority 8192

You will still have to configure pc's and wireless routers.