Computer Networking Hardware Operations II€¦ · Configure standard ACLs. 149 Configure numbered...

70
1 Computer Networking Hardware Operations II 8543 18 weeks / 70 hours Table of Contents Acknowledgments......................................................................................................................................... 1 Course Description........................................................................................................................................ 2 Task Essentials List....................................................................................................................................... 3 Curriculum Framework............................................................................................................................... 12 Exploring Routing Concepts ....................................................................................................................... 12 Static Routing.............................................................................................................................................. 18 Examining Dynamic Routing ..................................................................................................................... 25 Working with Switched Networks .............................................................................................................. 28 Configuring Switches.................................................................................................................................. 30 Exploring VLANs ....................................................................................................................................... 33 Using Access Control Lists......................................................................................................................... 42 Exploring Dynamic Host Configuration Protocol (DHCP) ........................................................................ 46 Exploring Network Address Translation for IPv4 ...................................................................................... 52 Discovering Devices ................................................................................................................................... 56 SOL Correlation by Task ............................................................................................................................ 62 Transportation Career Modules .................................................................................................................. 67 Cyber Security and Cyber Forensics Infusion Units ................................................................................... 67 Entrepreneurship Infusion Units ................................................................................................................. 68 Appendix: Credentials, Course Sequences, and Career Cluster Information ............................................. 69 Acknowledgments The components of this instructional framework were developed by

Transcript of Computer Networking Hardware Operations II€¦ · Configure standard ACLs. 149 Configure numbered...

  • 1

    Computer Networking Hardware Operations II 8543 18 weeks / 70 hours

    Table of Contents Acknowledgments ......................................................................................................................................... 1

    Course Description ........................................................................................................................................ 2

    Task Essentials List ....................................................................................................................................... 3

    Curriculum Framework ............................................................................................................................... 12

    Exploring Routing Concepts ....................................................................................................................... 12

    Static Routing.............................................................................................................................................. 18

    Examining Dynamic Routing ..................................................................................................................... 25

    Working with Switched Networks .............................................................................................................. 28

    Configuring Switches .................................................................................................................................. 30

    Exploring VLANs ....................................................................................................................................... 33

    Using Access Control Lists ......................................................................................................................... 42

    Exploring Dynamic Host Configuration Protocol (DHCP) ........................................................................ 46

    Exploring Network Address Translation for IPv4 ...................................................................................... 52

    Discovering Devices ................................................................................................................................... 56

    SOL Correlation by Task ............................................................................................................................ 62

    Transportation Career Modules .................................................................................................................. 67

    Cyber Security and Cyber Forensics Infusion Units ................................................................................... 67

    Entrepreneurship Infusion Units ................................................................................................................. 68

    Appendix: Credentials, Course Sequences, and Career Cluster Information ............................................. 69

    Acknowledgments The components of this instructional framework were developed by

  • 2

    Peyton Chichester, Chesterfield Career and Technical Center at Courthouse, Chesterfield County Public Schools Stephanie Evers, Battlefield High School, Prince William County Public Schools James Harper, Pittsylvania Career and Technical Center, Pittsylvania County Public Schools David Houchins, N.B. Handy Company, Lynchburg Randy Woodward, Washington County Career and Technical Education Center, Washington County Public Schools

    Correlations to the Virginia Standards of Learning were reviewed and updated by

    Norma J. Bonney, Kempsville High School, Virginia Beach City Public Schools Vickie L. Inge, Mathematics Committee Member, Virginia Mathematics and Science Coalition Anne F. Markwith, New Teacher Mentor, Gloucester County Public Schools Cathy Nichols-Cocke, PhD, Fairfax High School, Fairfax County Public Schools Caroline C. Wheeler, M.T., Secondary English, Richmond

    The framework was edited and produced by the CTE Resource Center:

    Debi F. Coleman, Writer/Editor Nathan K. Pope, Writer/Editor Kevin P. Reilly, Administrative Coordinator

    J. Anthony Williams, Specialist, Trade and Industrial Education and Related Clusters Office of Career, Technical, and Adult Education

    Virginia Department of Education

    Tricia S. Jacobs, PhD, CTE Coordinator of Curriculum and Instruction Office of Career, Technical, and Adult Education

    Virginia Department of Education

    Copyright © 2017

    Course Description Suggested Grade Level: 10 or 11 Prerequisites: 8542

    This course prepares students for jobs as network technicians and helps them develop additional skills required for computer technicians and help desk technicians. It provides a basic overview of routing and remote access, addressing, and security. It also familiarizes students with servers that provide e-mail services, Web space, and authenticated access. Students learn about the soft

  • 3

    skills required for help desk and customer service positions, and the final chapter helps them prepare for the CCENT certification exam. Network monitoring and basic troubleshooting skills are taught in context.

    Task Essentials List • Tasks/competencies designated by plus icons ( ) in the left-hand column(s) are essential • Tasks/competencies designated by empty-circle icons ( ) are optional • Tasks/competencies designated by minus icons ( ) are omitted • Tasks marked with an asterisk (*) are sensitive.

    Task Number 8543 Tasks/Competencies

    Exploring Routing Concepts 39

    Describe the primary functions and features of a router.

    40

    Identify router components.

    41

    Use traceroute to discover the network.

    42

    Map the Internet.

    43

    Enable Internet protocol (IP) on a switch.

    44

    Document an addressing scheme.

    45

    Document the network.

    46

    Configure basic router settings.

    47

    Configure an IPv4 router interface.

    48

    Configure an IPv6 router interface.

    49

    Configure IPv4 and IPv6 interfaces.

    50

    Verify interface settings.

    51

    Filter show command output.

  • 4

    Task Number 8543 Tasks/Competencies

    52

    Use command history feature.

    53

    Configure and verify a small network.

    54

    Configure basic router settings with IOS CLI.

    55

    Match layer 2 and layer 3 addressing.

    56

    Order the steps in the packet-forwarding process.

    57

    Interpret the content of a routing table.

    58

    Directly connect.

    59

    Investigate directly connected routes.

    60

    Describe static routes.

    61

    Describe three types of routes that are populated in a routing table.

    Static Routing 62

    Identify the advantages and disadvantages of static routing.

    63

    Identify the type of static route.

    64

    Configure a next-hop static route.

    65

    Configure a directly connected static route.

    66

    Configure a fully specified static route.

    67

    Configure IPv4 static and default routes.

    68

    Configure IPv4 static and default routes in hands-on lab.

    69

    Explain the IPv6 route command.

    70

    Configure a next-hop static IPv6 route.

  • 5

    Task Number 8543 Tasks/Competencies

    71

    Configure a directly connected static IPv6 route.

    72

    Configure a fully specified static IPv6 route.

    73

    Configure IPv6 static and default routes.

    74

    Configure and verify an IPv4 floating static route.

    75

    Configure floating static routes.

    76

    Troubleshoot static routes.

    77

    Troubleshoot static routes in a hands-on lab.

    78

    Design and implement a variable-length subnet mask (VLSM) addressing scheme.

    79

    Design and implement IPv4 addressing with VLSM.

    80

    Determine the summary network address and prefix.

    81

    Configure IPv4 route summarization in two scenarios.

    82

    Configure IPv6 route summarization.

    83

    Calculate summary routes with IPv4 and IPv6.

    84

    Configure a floating static route.

    Examining Dynamic Routing 85

    Explain the operation of dynamic routing protocols.

    86

    Compare static and dynamic routing.

    87

    Advertise appropriate networks.

    88

    Enable RIP routing.

  • 6

    Task Number 8543 Tasks/Competencies

    89

    Disable auto summarization.

    90

    Propagate a default route.

    91

    Configure basic RIPv2.

    92

    Identify parts of an IPv4 routing table entry.

    93

    Identify parent and child IPv4 routes.

    94

    Determine the longest match route.

    95

    Identify parts of an IPv6 routing table entry.

    96

    Analyze a routing table.

    Working with Switched Networks 97

    Explain various ways data is sent and received.

    98

    Identify switched network terminology.

    99

    Identify switch hardware.

    100

    Identify frame forwarding methods.

    101

    Determine how a switch forwards a frame.

    102

    Determine broadcast and collision domains.

    103

    Describe switch features.

    Configuring Switches 104

    Explain the difference between unicast, multicast, and broadcast packets.

    105

    Configure basic switch setting.

    106

    Configure switch ports at the physical layer.

  • 7

    Task Number 8543 Tasks/Competencies

    107

    Configure SSH.

    108

    Configure switch port security.

    109

    Troubleshoot switch port security.

    110

    Configure switch security features.

    111

    Implement Layer 5 configuration.

    112

    Configure various switch settings.

    113

    Identify common security attacks.

    Exploring VLANs 114

    Identify the purpose of VLANS.

    115

    Identify broadcast traffic.

    116

    Predict switch behavior.

    117

    Investigate a VLAN implementation.

    118

    Create a VLAN.

    119

    Assign ports to VLANs.

    120

    Change VLAN port membership.

    121

    Verify VLAN information.

    122

    Configure VLANs.

    123

    Verify trunk configuration

    124

    Configure trunks.

    125

    Configure VLANs and trunks.

  • 8

    Task Number 8543 Tasks/Competencies

    126

    Troubleshoot a VLAN implementation.

    127

    Troubleshoot VLAN configurations.

    128

    Identify the types of inter-VLAN routing.

    129

    Configure per-interface inter-VLAN routing.

    130

    Configure router-on-a-stick subinterfaces.

    131

    Configure router-on-a-stick inter-VLAN routing.

    132

    Configure 802.1Q routing.

    133

    Configure inter-VLAN routing.

    134

    Explain data forwarding.

    135

    Integrate VLAN skills.

    136

    Negotiate interface modes.

    137

    Troubleshoot a VLAN implementation in two scenarios.

    138

    Troubleshoot VLAN configurations in a hands-on lab.

    139

    Configure the PVLAN edge feature.

    140

    Identify the VLAN attacks.

    141

    Implement VLAN security.

    142

    Implement a VLAN.

    143

    Demonstrate various VLAN skills.

    Using Access Control Lists

    144

    Demonstrate the use of ACL.

  • 9

    Task Number 8543 Tasks/Competencies

    145

    Determine the correct wildcard mask.

    146

    Determine the permit or deny control.

    147

    Configure ACL statements.

    148

    Configure standard ACLs.

    149

    Configure numbered standard IPv4 ACLs.

    150

    Configure and modify standard IPv4 ACLs.

    151

    Use the access-class command.

    152

    Configure an ACL on VTY lines.

    153

    Configure and verify VTY restrictions.

    154

    Troubleshoot standard IPv4 ACLs.

    155

    Control FTP access.

    156

    Demonstrate ACL skills.

    Exploring Dynamic Host Configuration Protocol (DHCP)

    157

    Identify the steps in DHCPv4 operation.

    158

    Configure a basic DCHPv4 server.

    159

    Configure DHCPv4 relay commands.

    160

    Configure basic DHCPv4 on a router in a hands-on lab.

    161

    Configure basic DHCPv4 on a switch in a hands-on lab.

    162

    Configure a router as a DHCPv4 client.

    163

    Configure DHCPv4 using Cisco IOS.

  • 10

    Task Number 8543 Tasks/Competencies

    164

    Troubleshoot DHCPv4 in a hands-on lab.

    165

    Identify the steps in DHCPv6 operation.

    166

    Verify stateless DHCPv6.

    167

    Verify stateful DHCPv6.

    168

    Configure a router as a DHCPv6 relay agent.

    169

    Configure stateless and stateful DHCPv6 in a hands-on lab.

    170

    Troubleshoot DHCPv6 in a hands-on lab.

    171

    Configure Internet of Everything (IoE) and DHCP.

    172

    Demonstrate DHCP skills.

    Exploring Network Address Translation for IPv4

    173

    Identify NAT terminology.

    174

    Investigate NAT operation.

    175

    Configure static NAT.

    176

    Configure dynamic NAT.

    177

    Configure dynamic and static NAT in a hands-on lab.

    178

    Configure PAT.

    179

    Identify the address information at each hop.

    180

    Implement static and dynamic NAT.

    181

    Configure port address tranlsation (PAT) in a hands-on lab.

    182

    Configure port forwarding on a Linksys router.

  • 11

    Task Number 8543 Tasks/Competencies

    183

    Verify NAT configurations.

    184

    Troubleshoot NAT configurations in a hands-on-lab.

    185

    Check NAT.

    186

    Demonstrate NAT skills.

    Discovering Devices

    187

    Map a network using Cisco Discovery Protocol (CDP).

    188

    Compare CDP and Link Layer Discovery Protocol (LLDP).

    189

    Configure CDP and LLDP.

    190

    Configure Network Time Protocol (NTP).

    191

    Configure syslog and NTP.

    192

    Configure syslog and NTP in a hands-on lab.

    193

    Back up and configure files.

    194

    Manage router configuration files with Tera Term in a hands-on lab.

    195

    Manage device configuration files using TFTP, Flash, and USB in a hands-on lab.

    196

    Research password recovery procedures in a hands-on lab.

    197

    Confirm steps to backup IOS image to TFTP server.

    198

    Use a TFTP server to upgrade a Cisco IOS image.

    199

    Demonstrate router licensing skills.

    200

    Demonstrate integration skills.

    Legend: Essential Non-essential Omitted

  • 12

    Curriculum Framework

    Exploring Routing Concepts Task Number 39

    Describe the primary functions and features of a router.

    Definition

    Description should include the functions and features of a router.

    Task Number 40

    Identify router components.

    Definition

    Identification should include

    • router memory types • physical router components.

    Task Number 41

    Use traceroute to discover the network.

    Definition

    Using traceroute should include the following steps:

    • Verify network connectivity and use the tracert command to determine the path to a location.

    • Connect to an edge router to determine the attached devices and networks.

  • 13

    • Make use of show commands to gather the necessary information to document the network addressing scheme.

    • Make use of show commands to create a diagram of the topology.

    Task Number 42

    Map the Internet.

    Definition

    Mapping should include

    • determining network connectivity to a destination host • tracing a route to a remote server using tracert.

    Task Number 43

    Enable Internet protocol (IP) on a switch.

    Definition

    Enabling should include

    • configuring a port to use a specific IP address within a network • activating the port.

    Task Number 44

    Document an addressing scheme.

    Definition

    Documentation should include identifying network addresses based on a given topology and an address table for the topology.

  • 14

    Task Number 45

    Document the network.

    Definition

    Documentation should include using various network commands to document an addressing scheme and connections.

    Task Number 46

    Configure basic router settings.

    Definition

    Configuring should include initial settings on a router.

    Task Number 47

    Configure an IPv4 router interface.

    Definition

    Configuring should include

    • configuring router interfaces using IPv4 addressing • activating the interfaces.

    Task Number 48

    Configure an IPv6 router interface.

    Definition

    Configuring should include

    • configuring router interfaces using IPv6 addressing • activating the interfaces.

  • 15

    Task Number 49

    Configure IPv4 and IPv6 interfaces.

    Definition

    Configuring should include

    • configuring IPv4 addressing and verifying connectivity • configuring IPv6 addressing and verifying connectivity.

    Task Number 50

    Verify interface settings.

    Definition

    Verification should include router interface settings.

    Task Number 51

    Filter show command output.

    Definition

    Filtering should include using filtered show commands to verify router interface settings.

    Task Number 52

    Use command history feature.

    Definition

    Use of command history feature should include configuring a router to set and display the number of lines to be included.

  • 16

    Task Number 53

    Configure and verify a small network.

    Definition

    Configuring should include

    • configuring devices and verifying connectivity • gathering information with show commands.

    Task Number 54

    Configure basic router settings with IOS CLI.

    Definition

    Configuring should include

    • setting up the topology and initializing devices • configuring devices and verifying connectivity • displaying router information • configuring IPv6 and verifying connectivity.

    Task Number 55

    Match layer 2 and layer 3 addressing.

    Definition

    Matching should include building a frame using layer 2 and layer 3 addressing shown on the scenario topologies.

    Task Number 56

    Order the steps in the packet-forwarding process.

  • 17

    Definition

    Ordering the steps should include identifying them and placing them in the correct sequence according to the packet-forwarding process.

    Task Number 57

    Interpret the content of a routing table.

    Definition

    Interpretation should include creating a routing table entry based on a given scenario and physical topology.

    Task Number 58

    Directly connect.

    Definition

    Directly connecting should include

    • configuring directly connected interfaces on a router • configuring an interface description • activating the interface • using the routing table to verify directly connected interfaces.

    Task Number 59

    Investigate directly connected routes.

    Definition

    Investigation should include IPv4 directly connected routes and IPv6 directly connected routes.

    Task Number 60

  • 18

    Describe static routes.

    Definition

    Description should include

    • configuration and verification of a default static route • configuration and verification of static routes using exit interface/next-hop address pairs.

    Task Number 61

    Describe three types of routes that are populated in a routing table.

    Definition

    Description should include directly connected, static, and dynamic routes.

    Static Routing Task Number 62

    Identify the advantages and disadvantages of static routing.

    Definition

    Identification should include determining whether the static routing descriptors are advantages or disadvantages of static routing.

    Task Number 63

    Identify the type of static route.

    Definition

    Identification should include determining the static route type, based on provided descriptors.

  • 19

    Task Number 64

    Configure a next-hop static route.

    Definition

    Configuring should include configuring a static route to other networks using next-hop addresses.

    Task Number 65

    Configure a directly connected static route.

    Definition

    Configuring should include configuring and verifying a static route to a directly connected network, using and exit interface.

    Task Number 66

    Configure a fully specified static route.

    Definition

    Configuring should include configuring and verifying a fully specified static route.

    Task Number 67

    Configure IPv4 static and default routes.

    Definition

    Configuring should include

    • examining the network and evaluating the need for static routing • configuring static and default routes • verifying connectivity.

  • 20

    Task Number 68

    Configure IPv4 static and default routes in hands-on lab.

    Definition

    Configuring should include

    • setting up the topology and initializing devices • configuring basic device settings and verifying connectivity • configuring static routes • configuring and verifying a default route.

    Use the following equipment:

    • 2 routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable) • 2 switches (Cisco 2920 with Cisco IOS Release 15.0(2) lanbase9 image or comparable) • 2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology

    Task Number 69

    Explain the IPv6 route command.

    Definition

    Explanation should include the use of the route command to enable IPv6 unicast routing.

    Task Number 70

    Configure a next-hop static IPv6 route.

    Definition

    Configuring should include using the next-hop IPv6 address to configure an IPv6 route.

    Task Number 71

  • 21

    Configure a directly connected static IPv6 route.

    Definition

    Configuring should include using exit interface IPv6 addresses to configure and verify IPv6 routes to networks.

    Task Number 72

    Configure a fully specified static IPv6 route.

    Definition

    Configuring should include using the router link-local address as the next-hop address to configure and verify a fully specified static IPv6 route to a LAN.

    Task Number 73

    Configure IPv6 static and default routes.

    Definition

    Configuring should include

    • building the network and configuring basic device settings • configuring IPv6 static and default routes.

    The following equipment should be used:

    • 2 routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable) • 2 switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable) • 2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology

    Task Number 74

    Configure and verify an IPv4 floating static route.

  • 22

    Definition

    Configuring an IPv4 floating static route should include using the next-hop address to verify a default route.

    Task Number 75

    Configure floating static routes.

    Definition

    Configuring floating static routes should include

    • examining the network and evaluating the need for floating static routing • configuring IPv6 static and default routes • verifying connectivity.

    Task Number 76

    Troubleshoot static routes.

    Definition

    Troubleshooting should include

    • locating a network problem • determining the solution to the problem • implementing the solution to the problem • verifying that the issue has been resolved.

    Task Number 77

    Troubleshoot static routes in a hands-on lab.

    Definition

    Troubleshooting should include

  • 23

    • locating a network problem • determining the solution to the problem • implementing the solution to the problem • verifying that the issue has been resolved.

    The following equipment should be used:

    • 2 routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable) • 2 switches (Cisco 2920with Cisco IOS Release 15.0(2) lanbase9 image or comparable) • 2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology

    Task Number 78

    Design and implement a variable-length subnet mask (VLSM) addressing scheme.

    Definition

    Implementation should include

    • examining the network requirements • designing the VLSM addressing scheme • assigning IP addresses to devices and verifying connectivity.

    Task Number 79

    Design and implement IPv4 addressing with VLSM.

    Definition

    Implementation should include

    • examining the network requirements • designing the VLSM address scheme • cabling and configuring the IPv4 addressing with VLSM.

  • 24

    Task Number 80

    Determine the summary network address and prefix.

    Definition

    Determining should include summarizing network addresses and prefixes into a summary route based upon data from three different network topology scenarios.

    Task Number 81

    Configure IPv4 route summarization in two scenarios.

    Definition

    Configuring should include

    • calculating summary routes • configuring summary routes • verifying connectivity.

    Task Number 82

    Configure IPv6 route summarization.

    Definition

    Configuring should include

    • calculating a summary route for R1 • configuring the summary route and verifying connectivity.

    Task Number 83

    Calculate summary routes with IPv4 and IPv6.

    Definition

  • 25

    Calculation should include IPv4 summary routes and IPv6 summary routes.

    Task Number 84

    Configure a floating static route.

    Definition

    Configuring a floating static route should include

    • configuring and verifying a default route using the next-hop address • configuring a floating static route • testing failover to the backup route.

    Examining Dynamic Routing Task Number 85

    Explain the operation of dynamic routing protocols.

    Definition

    Explanation should include completing activity statements.

    Task Number 86

    Compare static and dynamic routing.

    Definition

    Comparison should include classifying activity statements as static or dynamic routing processes.

    Task Number 87

    Advertise appropriate networks.

    Definition

  • 26

    Advertising appropriate networks should include configuring Routing Information Protocol (RIP) on a router using networks based on the topology.

    Task Number 88

    Enable RIP routing.

    Definition

    Enabling RIP routing should include

    • displaying routing table entries on routers using RIP • verifying RIP settings and routes on two routers.

    Task Number 89

    Disable auto summarization.

    Definition

    Disabling auto summarization should include

    • disabling automatic summarization on two routers • verifying the RIP protocol settings on two routers.

    Task Number 90

    Propagate a default route.

    Definition

    Propagating a default route should include configuring and verifying router gateways of last resort.

    Task Number 91

  • 27

    Configure basic RIPv2.

    Definition

    Configuring basic RIPv2 should include

    • building a network and configuring basic settings • configuring and verifying RIPv2 • configuring IPv6 on devices • configuring and verifying RIPng routing.

    The following equipment should be used:

    • 2 routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable) • 2 switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbase9 image or comparable) • 2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology

    Task Number 92

    Identify parts of an IPv4 routing table entry.

    Definition

    Identifying parts of an IPv4 routing table entry should include analyzing the routes in the routing table to determine the route source, administrative distance, and metric

    Task Number 93

    Identify parent and child IPv4 routes.

    Definition

    Identifying parent and child IPv4 routes should include

    • using a routing table example to locate networks • identifying the Level 1, Level 1 parent, or Level 2 child routes.

  • 28

    Task Number 94

    Determine the longest match route.

    Definition

    Determining the longest match route should include matching the longest-match IPv4 and IPv6 routes to the best route choice.

    Task Number 95

    Identify parts of an IPv6 routing table entry.

    Definition

    Identifying part of an IPv6 routing table entry should include analyzing two IPv6 routing tables to determine the route source, administrative distance, and outgoing interface for the specified networks.

    Task Number 96

    Analyze a routing table.

    Definition

    Analyzing a routing table for a given IPv4 and IPv6 network routes should include

    • determining the route source • determining the administrative distance • determining the metric.

    Working with Switched Networks Task Number 97

    Explain various ways data is sent and received.

    Definition

  • 29

    Explanation should include various ways hosts send and receive data, voice, and streaming video.

    Task Number 98

    Identify switched network terminology.

    Definition

    Identification should include terminology as compared to listed definitions.

    Task Number 99

    Identify switch hardware.

    Definition

    Identify switch hardware terminology as compared to switch selection criteria.

    Task Number 100

    Identify frame forwarding methods.

    Definition

    Identify switch frame forwarding methods by matching the methods to the descriptions.

    Task Number 101

    Determine how a switch forwards a frame.

    Definition

    Determine how a switch forwards a frame based on the source and destination MAC addresses and provided MAC table.

  • 30

    Task Number 102

    Determine broadcast and collision domains.

    Definition

    Determine the broadcast or collision domains based on physical topology representations.

    Task Number 103

    Describe switch features.

    Definition

    Description should include features available for switches to support requirements of a small to medium-sized business network.

    Configuring Switches Task Number 104

    Explain the difference between unicast, multicast, and broadcast packets.

    Definition

    Explanation should include the role of unicast, broadcast, and multicast in a switched network.

    Task Number 105

    Configure basic switch setting.

    Definition

    Configuring should include

    • cabling the network and verifying the default switch configuration • configuring basic network device settings

  • 31

    • verifying and testing network connectivity • managing the MAC address table.

    Task Number 106

    Configure switch ports at the physical layer.

    Definition

    Configuring should include

    • switch port duplex and speed settings • MDIX auto feature.

    Task Number 107

    Configure SSH.

    Definition

    Configuring should include

    • configuring SSH on VTY lines • securing switch passwords • encrypting communications • verifying SSH implementation.

    Task Number 108

    Configure switch port security.

    Definition

    Configure and verify port security.

  • 32

    Task Number 109

    Troubleshoot switch port security.

    Definition

    Troubleshooting should include

    • disconnecting a device from a network • connecting a different device to a network • verifying port status • enabling port operation • verifying network connectivity.

    Task Number 110

    Configure switch security features.

    Definition

    Configuring switch security features should include

    • setting up the topology and initializing devices • configuring basic device settings and verifying connectivity • configuring and verifying SSH access on a switch • configuring and verifying security features on a switch.

    Task Number 111

    Implement Layer 5 configuration.

    Definition

    Implementation should include

    • verifying the Layer 5 configuration of a switch port connected to an end station • implementing port security.

  • 33

    Task Number 112

    Configure various switch settings.

    Definition

    Configuration should include

    • configuring a switch with initial settings • configuring SSH to secure remote access on the network • configuring the port security feature to restrict network access.

    Task Number 113

    Identify common security attacks.

    Definition

    Identify the common security attack types by descriptions.

    Exploring VLANs Task Number 114

    Identify the purpose of VLANS.

    Definition

    Explain the purpose of VLANs in a switched network.

    Task Number 115

    Identify broadcast traffic.

    Definition

    Identification should include observing the broadcast traffic in a VLAN implementation and using section knowledge to complete review questions.

  • 34

    Task Number 116

    Predict switch behavior.

    Definition

    Predicting should include identifying which hosts will receive network broadcast transmissions.

    Task Number 117

    Investigate a VLAN implementation.

    Definition

    Investigation should include

    • observing broadcast traffic in a VLAN implementation • observing broadcast traffic without VLANs • using section knowledge to complete review questions.

    Task Number 118

    Create a VLAN.

    Definition

    Creation should include assigning the VLAN name.

    Task Number 119

    Assign ports to VLANs.

    Definition

    Assigning ports to VLANs should include

  • 35

    • showing brief VLAN information for a network • assigning a port to a VLAN.

    Task Number 120

    Change VLAN port membership.

    Definition

    Changing VLAN port membership should include:

    • showing brief VLAN information for a network • assigning a port to a VLAN • verifying interface and VLAN membership status.

    Task Number 121

    Verify VLAN information.

    Definition

    Verification should include displaying information for a specific VLAN.

    Task Number 122

    Configure VLANs.

    Definition

    Configuring should include

    • verifying the default VLAN configuration • configuring VLANs • assigning ports to VLANs.

  • 36

    Task Number 123

    Verify trunk configuration

    Definition

    Configure and verify port trunking on an interface.

    Task Number 124

    Configure trunks.

    Definition

    Configuring should include verify VLANs and configuring VLAN trunks.

    Task Number 125

    Configure VLANs and trunks.

    Definition

    Configuring VLANs and trunks should include:

    • building a network and configuring basic device settings • creating VLANs and assigning switch ports • maintaining VLAN port assignments and the VLAN database • configuring an 802.1Q trunk between switches • deleting the VLAN database.

    Task Number 126

    Troubleshoot a VLAN implementation.

    Definition

    Troubleshoot connectivity problems between PCs on the same VLAN in two scenarios.

  • 37

    Task Number 127

    Troubleshoot VLAN configurations.

    Definition

    Troubleshooting should include

    • building the network and configuring basic device settings • troubleshooting VLAN 10 • troubleshooting VLAN 20.

    Task Number 128

    Identify the types of inter-VLAN routing.

    Definition

    Identify the topologies as either legacy, router-on-a-stick, or multilayer switch inter-VLAN routing types.

    Task Number 129

    Configure per-interface inter-VLAN routing.

    Definition

    Configuring inter-VLAN routing should include

    • building the network and configuring basic device settings • configuring switches with VLANs and trunking • verifying trunking, VLANs, routing, and connectivity.

    Task Number 130

    Configure router-on-a-stick subinterfaces.

  • 38

    Definition

    Configuration should include

    • creating a subinterface on a router • configuring VLAN encapsulation • assigning an IP address to a subinterface.

    Task Number 131

    Configure router-on-a-stick inter-VLAN routing.

    Definition

    Configuration should include

    • testing connectivity without inter-VLAN routing • adding VLANs to a switch • configuring subinterfaces • testing connectivity with inter-VLAN routing.

    Task Number 132

    Configure 802.1Q routing.

    Definition

    Configuring 802.1Q trunk-based inter-VLAN routing should include

    • building the network and configuring basic device settings • configuring switches with VLANs and trunking • configuring trunk-based inter-VLAN routing.

    Task Number 133

    Configure inter-VLAN routing.

  • 39

    Definition

    Configuring inter-VLAN routing should include

    • assigning IP addressing to R1 and S1 based on the addressing table • creating, naming and asigning VLANs on S1 based on the VLAN and port assignments

    table. Ports should be in access mode. • configuring S1 to trunk, allowing only the VLANS in the VLAN and port assignments

    table • configuring the default gateway on S1 • disabling all ports not assigned to a VLAN • configuring inter-VLAN routing on R1 based on the addressing table • verifying connectivity, ensuring R1, S1, and all PCs are able to ping each other and the

    cisco.pka server.

    Task Number 134

    Explain data forwarding.

    Definition

    Explanation should include how Layer 3 switches forward data in a small to medium-sized business LAN.

    Task Number 135

    Integrate VLAN skills.

    Definition

    Integration should include

    • implementing inter-VLAN routing on a network • configuring basic device settings • configuring VLANs, trunking, and subinterfaces • verifying network connectivity.

    Task Number 136

  • 40

    Negotiate interface modes.

    Definition

    Negotiating interface modes should include verifying dynamic trunk protocol (DTP) mode.

    Task Number 137

    Troubleshoot a VLAN implementation in two scenarios.

    Definition

    Troubleshooting a VLAN implementation should include

    • testing connectivity between PCs on the same VLAN • investigating connectivity problems by gathering data • implementing a solution and testing connectivity • finding and correcting network errors • documenting the corrections to the network • implementing solutions and testing connectivity.

    Task Number 138

    Troubleshoot VLAN configurations in a hands-on lab.

    Definition

    Troubleshooting should include

    • uilding the network and configuring basic device settings • troubleshooting VLAN 10 • troubleshooting VLAN 20.

    Use the following equipment:

    • 2 switches (Cisco 2960with Cisco IOS Release 15.0(2) lanbasek9 image or comparable) • 3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology

  • 41

    Task Number 139

    Configure the PVLAN edge feature.

    Definition

    Configure and verify the PVLAN edge feature.

    Task Number 140

    Identify the VLAN attacks.

    Definition

    Identify the VLAN attack types, mitigation techniques, and security features.

    Task Number 141

    Implement VLAN security.

    Definition

    Implementing should include

    • building the network and configuring basic device settings • implementing VLAN security on switches.

    Task Number 142

    Implement a VLAN.

    Definition

    Implement VLANs to segment a small-to-medium-sized network.

  • 42

    Task Number 143

    Demonstrate various VLAN skills.

    Definition

    Demonstration should include

    • assigning IP addresses to the switch virtual interface • configuring VLANs • assigning VLANs to specific interfaces • configuring trunking • performing basic switch security • verifying PC connectivity within the same VLAN.

    Using Access Control Lists Task Number 144

    Demonstrate the use of ACL.

    Definition

    Demonstrating should include

    • verifying local connectivity and testing an access control list • removing the access control list and verifying the network.

    Task Number 145

    Determine the correct wildcard mask.

    Definition

    Identify the wildcard mask based upon ACL descriptive statements.

    Task Number 146

  • 43

    Determine the permit or deny control.

    Definition

    Identify the permit or deny result of the access control list statements as compared to specific IP addresses.

    Task Number 147

    Configure ACL statements.

    Definition

    Determine the word or phrase to complete the access control list operation statements.

    Task Number 148

    Configure standard ACLs.

    Definition

    Use one network topology diagram for three different scenarios to determine the ACL configurations.

    Task Number 149

    Configure numbered standard IPv4 ACLs.

    Definition

    Configuring numbered standard IPv4 ACLs should include

    • Plan an ACL implementation. • Configure, apply, and verify a standard ACL. • Configure and apply a named standard ACL. • Verify an ACL implementation.

  • 44

    Task Number 150

    Configure and modify standard IPv4 ACLs.

    Definition

    Configuring standard IPv4 ACLs should include

    • Set up the topology and initialize devices. • Configure devices and verify connectivity. • Configure and verify standard, numbered, and named ACLs. • Modify a standard ACL.

    Task Number 151

    Use the access-class command.

    Definition

    Configure the VTY lines to accept incoming SSH connections using an ACL.

    Task Number 152

    Configure an ACL on VTY lines.

    Definition

    Configuring an ACL on VTY lines should include

    • configuring and applying an ACL to VTY lines • verifying the ACL implementation.

    Task Number 153

    Configure and verify VTY restrictions.

    Definition

  • 45

    Configuring and verifying VTY restrictions should include

    • Configure basic device settings. • Configure and apply the ACL on a router. • Verify the ACL using telnet. • Configure and apply the ACL to a switch. (challenge)

    Task Number 154

    Troubleshoot standard IPv4 ACLs.

    Definition

    Troubleshoot three different scenarios based upon ACL policies to be implemented on the networks.

    Task Number 155

    Control FTP access.

    Definition

    Implement packet filtering using IPv4 ACLs according to network scenario requirements (named and numbered ACLs).

    Task Number 156

    Demonstrate ACL skills.

    Definition

    Demonstration of ACL skills should include

    • completing the network addressing scheme • configuring routing • implementing named ACLs.

  • 46

    Exploring Dynamic Host Configuration Protocol (DHCP) Task Number 157

    Identify the steps in DHCPv4 operation.

    Definition

    Identifying the steps in DHCPv4 operation should include ordering the steps in the DHCPv4 lease origination process.

    Task Number 158

    Configure a basic DCHPv4 server.

    Definition

    Configuring a basic DHCPv4 server should include

    • configuring DHCP excluded network range addresses. • configuring the DHCPv4 LAN pool of addresses. • configuring the default gateway address. • configuring the DNS server address. • configuring the domain name for the server.

    Task Number 159

    Configure DHCPv4 relay commands.

    Definition

    Configure the DHCPv4 relay commands on a router for PCs to receive IPv4 addresses and other parameters from the DHCP server.

    Task Number 160

  • 47

    Configure basic DHCPv4 on a router in a hands-on lab.

    Definition

    Configuring basic DHCPv4 on a router should include

    • building the network and configuring basic device settings • configuring a DHCPv4 server and a DHCP relay agent.

    Use the following equipment:

    • 3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)

    • 2 Switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbase9 image or comparable) • 2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology.

    Task Number 161

    Configure basic DHCPv4 on a switch in a hands-on lab.

    Definition

    Configuring basic DHCPv4 on a switch should include

    • building the network and configuring basic device settings • changing the SDM preference • configuring DHCPv4 • configuring DHCP for multiple VLANs • enabling IP routing.

    The following equipment should be used:

    • 1 Router (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable) • 2 Switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbase9 image or comparable) • 2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology.

  • 48

    Task Number 162

    Configure a router as a DHCPv4 client.

    Definition

    Configure an interface connected to an ISP to acquire a DHCP address from the server.

    Task Number 163

    Configure DHCPv4 using Cisco IOS.

    Definition

    Configuring DHCPv4 using Cisco IOS should include

    • configuring a router as a DHCP server • configuring DHCP relay. • configuring a router as a DHCP client. • verifying DHCP and network connectivity.

    Task Number 164

    Troubleshoot DHCPv4 in a hands-on lab.

    Definition

    Troubleshooting DHCPv4 should include

    • building the network and configuring basic device settings • troubleshooting DHCPV4 issues.

    The following equipment should be used:

    • 3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)

    • 2 Switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbase9 image or comparable) • 2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology.

  • 49

    Task Number 165

    Identify the steps in DHCPv6 operation.

    Definition

    Identify the steps in DHCPv6 operation by choosing the process steps order for the DHCPv6 lease origination process.

    Task Number 166

    Verify stateless DHCPv6.

    Definition

    Verifying stateless DHCPv6 should include

    • enabling IPv6 routing • configuring an IPv6 DHCP pool with a server and a domain name • verifying the IPv6 settings on the interface • using debug to view detailed IPv6 DHCP packets.

    Task Number 167

    Verify stateful DHCPv6.

    Definition

    Verifying stateful DHCPv6 should include

    • enabling IPv6 routing. • configuring the DNS server and domain name settings • configuring the router interface DHCP settings • configuring the router as a stateful DHCPv6 client • verifying the IPv6 DHCP settings on the router • verifying the DHCP server bindings on the router • verifying the stateful IPv6 settings on the interface client.

  • 50

    Task Number 168

    Configure a router as a DHCPv6 relay agent.

    Definition

    Configuring a router as a DHCPv6 relay agent should include configuring DHCPv6 relay commands on the router for a PC to receive an IP address and other parameters from the DHCP server.

    Task Number 169

    Configure stateless and stateful DHCPv6 in a hands-on lab.

    Definition

    Configuring stateless and stateful DHCPv6 should include

    • building the network and configuring basic device settings • configuring the network for SLAAC • configuring the network for stateless DHCPv6 • configuring the network for stateful DHCPv6

    The following equipment should be used:

    • 1 Router (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable) • 1 Switch (Cisco 2960 with Cisco IOS Release 15.0(2) lanbase9 image or comparable) • 1 PC (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology.

    Task Number 170

    Troubleshoot DHCPv6 in a hands-on lab.

    Definition

    Troubleshooting DHCPv6 should include

  • 51

    • building the network and configuring basic device settings • troubleshooting IPv6 connectivity • troubleshooting stateless DHCPv6.

    The following equipment should be used:

    • 1 Router (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable) • 1 Switch (Cisco 2960 with Cisco IOS Release 15.0(2) lanbase9 image or comparable) • 1 PC (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology.

    Task Number 171

    Configure Internet of Everything (IoE) and DHCP.

    Definition

    Configuring IoE and DHCP should include configuring DHCP for IPv4 or IPv6 on a Cisco 1941 router.

    Task Number 172

    Demonstrate DHCP skills.

    Definition

    Demonstration of DHCP skills should include

    • Ÿcreating VLANs on a switch and assign VLANs to the appropriate ports • Ÿconfiguring switch ports for trunking • Ÿconfiguring all non-trunk ports on a switch as access ports • Ÿconfiguring the router to route between VLANs • Ÿconfiguring a router to act as a DHCP server for switch VLANs • verifying that each PC has an IP address assigned from the correct DHCP pool • Ÿconfiguring a router as a DHCP client so that it receives an IP address from the ISP

    network • verifying that all devices can ping each other and the specified URL.

  • 52

    Exploring Network Address Translation for IPv4 Task Number 173

    Identify NAT terminology.

    Definition

    Identifying NAT terminology should include placing the terms in their correct locations on a topology diagram representation.

    Task Number 174

    Investigate NAT operation.

    Definition

    Investigating should include

    • investigating NAT operation across an intranet • investigating NAT operation across an internet • conducting other NAT investigations using HTTP and HTTPs protocols.

    Task Number 175

    Configure static NAT.

    Definition

    Configuring static NAT should include

    • configuring static translation with specific inside local and inside global IP addresses • testing network access without NAT • configuring static NAT • testing network access with NAT.

  • 53

    Task Number 176

    Configure dynamic NAT.

    Definition

    Configuring dynamic NAT should include

    • configuring NAT to include the IP NAT pool, ACL, and applied inside and outside interfaces

    • configuring dynamic NAT traffic, pools, associations, and interfaces • verifying NAT implementation by accessing internet services and viewing NAT

    translations.

    Task Number 177

    Configure dynamic and static NAT in a hands-on lab.

    Definition

    Configuring dynamic and static NAT should include

    • building the network and verifying connectivity • configuring and verifying static NAT • configuring and verifying dynamic NAT.

    Use the following equipment:

    • 2 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)

    • 1 Switch (Cisco 2960 with Cisco IOS Release 15.0(2) lanbase9 image or comparable) • 2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology.

    Task Number 178

    Configure PAT.

  • 54

    Definition

    Configuring PAT should include

    • defining a pool of public IPv4 addresses to use with PAT • configuring and applying the NAT pool and ACL on the router • binding the NAT pool overload with the ACL • configuring and applying the inside and outside NAT interfaces.

    Task Number 179

    Identify the address information at each hop.

    Definition

    Identification should include NAT source address, destination address, and port number changes for four scenarios based on the specified next-hop locations.

    Task Number 180

    Implement static and dynamic NAT.

    Definition

    Implementing static and dynamic NAT should include

    • configuring dynamic NAT with PAT • configuring static NAT • verifying NAT implementation.

    Task Number 181

    Configure port address tranlsation (PAT) in a hands-on lab.

    Definition

    Configuring PAT should include

  • 55

    • building the network and verifying connectivity • configuring and verifying NAT pool overload • configuring and verifying PAT.

    The following equipment should be used:

    • 2 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)

    • 1 Switch (Cisco 2960 with Cisco IOS Release 15.0(2) lanbase9 image or comparable) • 3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology.

    Task Number 182

    Configure port forwarding on a Linksys router.

    Definition

    Configure port forwarding on a Linksys router and verify remote connectivity to a server.

    Task Number 183

    Verify NAT configurations.

    Definition

    Verifying NAT configurations should include

    • isolating network problems • troubleshooting NAT configuration • verifying network connectivity.

    Task Number 184

    Troubleshoot NAT configurations in a hands-on-lab.

    Definition

  • 56

    Troubleshooting NAT configurations should include

    • building the network and configuring basic device settings • troubleshooting static NAT • troubleshooting dynamic NAT.

    The following equipment should be used:

    • 2 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)

    • 1 Switch (Cisco 2960 with Cisco IOS Release 15.0(2) lanbase9 image or comparable) • 2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology.

    Task Number 185

    Check NAT.

    Definition

    Configure and analyze static NAT, dynamic NAT, and NAT with overloading.

    Task Number 186

    Demonstrate NAT skills.

    Definition

    Demonstrating NAT skills should include

    • completing network documentation • configuring VLANs, trunking, port security, and SSH remote access on a switch • implementing inter-VLAN routing and NAT • verifying end-to-end network connectivity.

    Discovering Devices Task Number 187

  • 57

    Map a network using Cisco Discovery Protocol (CDP).

    Definition

    Mapping a network should include using CDP and SSH remote access.

    Task Number 188

    Compare CDP and Link Layer Discovery Protocol (LLDP).

    Definition

    Comparison should include checking the appropriate field next to each characteristic to indicate your answers.

    Task Number 189

    Configure CDP and LLDP.

    Definition

    Configuring CDP and LDP should include

    • building the network and verifying conectivity • performing network discovery with CDP • performing network discovery with LLDP.

    Task Number 190

    Configure Network Time Protocol (NTP).

    Definition

    Configuring NTP should include

    • configuring NTP on R1 and R2 to allow time synchronization • verifying NTP.

  • 58

    Task Number 191

    Configure syslog and NTP.

    Definition

    Configuring syslog and NTP should include

    • configuring syslog service • generating logged events • manually setting switch clocks • configuring NTP service • verifying timestamped logs.

    Task Number 192

    Configure syslog and NTP in a hands-on lab.

    Definition

    Configuring syslog and NTP should include

    • configuring basic device settings • configuring NTP • configuring syslog.

    The following equipment should be used:

    • 2 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)

    • 1 PC (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term, and Syslog software, such as Tftpd32)

    • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology.

    Task Number 193

  • 59

    Back up and configure files.

    Definition

    Backing up and configuring files should include

    • establishing connectivity to Trivial File Transfer Protocol (TFTP) server • transferring configuration from TFTP server • backing up configuration and IOS to TFTP server.

    Task Number 194

    Manage router configuration files with Tera Term in a hands-on lab.

    Definition

    Managing router configuration files should include

    • configuring basic device settings • using terminal emulation software to create backup configuration files • using a backup configuration files to restore a router.

    The following equipment should be used:

    • 1 router (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable) • 1 switch (Cisco2960 with Cisco IOS release 14.0(2) lanbasek9 image or comparable) • 1 PC (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology.

    Task Number 195

    Manage device configuration files using TFTP, Flash, and USB in a hands-on lab.

    Definition

  • 60

    Managing device configuration files should include

    • building the network and configuring basic device settings • downloading TFTP server software (optional) • using TFTP to backup and restore the switch running configuration • using TFTP to back up and restore the router running configuration • backing up and restoring running configurations using router flash memory • using a USB drive to backup and restore the running configuration (optional).

    The following equipment should be used:

    • 1 router (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable) • 1 switch (Cisco 2960 with Cisco IOS release 15.0(2) lanbasek9 image or comparable) • 1 PC (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports • Ethernet and serial cables as shown in the topology • USB flash drive (optional).

    Task Number 196

    Research password recovery procedures in a hands-on lab.

    Definition

    Researching password recovery procedures should include

    • configuring basic device settings • rebooting router and entering ROMMON • resetting password and saving new configuration • verifying the router is loading correctly.

    Use the following equipment:

    • 1 router (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable) • 1 PC (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term) • Console cables to configure the Cisco IOS devices via the console ports.

    Task Number 197

    Confirm steps to backup IOS image to TFTP server.

  • 61

    Definition

    Confirming steps to backup IOS image to TFTP server should include copying the IOS to a TFTP server.

    Task Number 198

    Use a TFTP server to upgrade a Cisco IOS image.

    Definition

    Using a TFTP server to upgrade a Cisco IOS image should include

    • upgrading an IOS image on a Cisco device • backing up an IOS image on a TFTP server.

    Task Number 199

    Demonstrate router licensing skills.

    Definition

    Demonstrating router licensing skills should include

    • determining the UDI on router R2 • installing a permanent license file on router R2 • accepting the EULA and activating an evaluation RTU data package license on the 1900

    router • saving all license files on router R2 • uninstalling the security license on router R2.

    Task Number 200

    Demonstrate integration skills.

    Definition

    Demonstrating integration skills should include

  • 62

    • finishing the addressing scheme • configuring routing • implementing named access control lists.

    SOL Correlation by Task 39 Describe the primary functions and features of a

    router. English: 10.3, 11.3, 12.3

    40 Identify router components. English: 10.5, 11.5, 12.5 41 Use traceroute to discover the network.

    42 Map the Internet. History and Social Science: VUS.14, WG.17, WHII.14 43 Enable Internet protocol (IP) on a switch.

    44 Document an addressing scheme. English: 10.6, 11.6, 12.6 45 Document the network. English: 10.6, 11.6, 12.6 46 Configure basic router settings.

    47 Configure an IPv4 router interface.

    48 Configure an IPv6 router interface.

    49 Configure IPv4 and IPv6 interfaces.

    50 Verify interface settings.

    51 Filter show command output.

    52 Use command history feature.

    53 Configure and verify a small network.

    54 Configure basic router settings with IOS CLI.

    55 Match layer 2 and layer 3 addressing.

    56 Order the steps in the packet-forwarding process. English: 10.5, 11.5, 12.5 57

    Interpret the content of a routing table.

    English: 10.5, 11.5, 12.5

    History and Social Science: GOVT.6, VUS.14, WG.17, WHII.14

    58 Directly connect.

    59 Investigate directly connected routes. English: 10.5, 11.5, 12.5 60 Describe static routes. English: 10.5, 11.5, 12.5 61 Describe three types of routes that are populated in

    a routing table. English: 10.5, 11.5, 12.5

    62 Identify the advantages and disadvantages of static routing. English: 10.5, 11.5, 12.5

    63 Identify the type of static route. English: 10.5, 11.5, 12.5

  • 63

    64 Configure a next-hop static route.

    65 Configure a directly connected static route.

    66 Configure a fully specified static route.

    67 Configure IPv4 static and default routes. History and Social Science: WHII.14 68 Configure IPv4 static and default routes in hands-

    on lab.

    69 Explain the IPv6 route command. English: 10.5, 11.5, 12.5 70 Configure a next-hop static IPv6 route.

    71 Configure a directly connected static IPv6 route.

    72 Configure a fully specified static IPv6 route.

    73 Configure IPv6 static and default routes.

    74 Configure and verify an IPv4 floating static route.

    75 Configure floating static routes.

    76 Troubleshoot static routes. English: 10.5, 11.5, 12.5 77 Troubleshoot static routes in a hands-on lab. English: 10.5, 11.5, 12.5 78 Design and implement a variable-length subnet

    mask (VLSM) addressing scheme.

    79 Design and implement IPv4 addressing with VLSM.

    80 Determine the summary network address and prefix. English: 10.5, 11.5, 12.5

    81 Configure IPv4 route summarization in two scenarios.

    82 Configure IPv6 route summarization.

    83 Calculate summary routes with IPv4 and IPv6.

    84 Configure a floating static route.

    85 Explain the operation of dynamic routing protocols. English: 10.5, 11.5, 12.5

    86 Compare static and dynamic routing. English: 10.5, 11.5, 12.5 87 Advertise appropriate networks.

    88 Enable RIP routing.

    89 Disable auto summarization.

    90 Propagate a default route.

    91 Configure basic RIPv2.

    92 Identify parts of an IPv4 routing table entry. English: 10.5, 11.5, 12.5 93 Identify parent and child IPv4 routes. English: 10.5, 11.5, 12.5 94 Determine the longest match route. English: 10.5, 11.5, 12.5

  • 64

    95 Identify parts of an IPv6 routing table entry. English: 10.5, 11.5, 12.5 96 Analyze a routing table. English: 10.5, 11.5, 12.5 97 Explain various ways data is sent and received. English: 10.5, 11.5, 12.5 98 Identify switched network terminology. English: 10.5, 11.5, 12.5 99 Identify switch hardware. English: 10.5, 11.5, 12.5 100 Identify frame forwarding methods. English: 10.5, 11.5, 12.5 101 Determine how a switch forwards a frame. English: 10.5, 11.5, 12.5 102 Determine broadcast and collision domains. English: 10.5, 11.5, 12.5 103 Describe switch features. English: 10.5, 11.5, 12.5 104 Explain the difference between unicast, multicast,

    and broadcast packets. English: 10.5, 11.5, 12.5

    105 Configure basic switch setting.

    106 Configure switch ports at the physical layer.

    107 Configure SSH.

    108 Configure switch port security.

    109 Troubleshoot switch port security.

    110 Configure switch security features. History and Social Science: VUS.14 111 Implement Layer 5 configuration.

    112 Configure various switch settings.

    113 Identify common security attacks.

    English: 10.5, 11.5, 12.5

    History and Social Science: VUS.14 114 Identify the purpose of VLANS. English: 10.5, 11.5, 12.5 115 Identify broadcast traffic. English: 10.5, 11.5, 12.5 116 Predict switch behavior. English: 10.5, 11.5, 12.5 117 Investigate a VLAN implementation. English: 10.5, 11.5, 12.5 118 Create a VLAN.

    119 Assign ports to VLANs.

    120 Change VLAN port membership.

    121 Verify VLAN information. English: 10.5, 11.5, 12.5 122 Configure VLANs.

    123 Verify trunk configuration

    124 Configure trunks.

    125 Configure VLANs and trunks.

    126 Troubleshoot a VLAN implementation.

    127 Troubleshoot VLAN configurations.

    128 Identify the types of inter-VLAN routing. English: 10.5, 11.5, 12.5

  • 65

    129 Configure per-interface inter-VLAN routing.

    130 Configure router-on-a-stick subinterfaces.

    131 Configure router-on-a-stick inter-VLAN routing.

    132 Configure 802.1Q routing.

    133 Configure inter-VLAN routing.

    134 Explain data forwarding. English: 10.5, 11.5, 12.5 135 Integrate VLAN skills. English: 10.5, 11.5, 12.5 136 Negotiate interface modes. English: 10.5, 11.5, 12.5

    137 Troubleshoot a VLAN implementation in two scenarios.

    138 Troubleshoot VLAN configurations in a hands-on lab.

    139 Configure the PVLAN edge feature.

    140 Identify the VLAN attacks. English: 10.5, 11.5, 12.5 141 Implement VLAN security.

    142 Implement a VLAN.

    143 Demonstrate various VLAN skills.

    144 Demonstrate the use of ACL.

    145 Determine the correct wildcard mask. English: 10.5, 11.5, 12.5 146 Determine the permit or deny control. English: 10.5, 11.5, 12.5 147 Configure ACL statements. English: 10.3, 11.3, 12.3 148 Configure standard ACLs.

    149 Configure numbered standard IPv4 ACLs.

    150 Configure and modify standard IPv4 ACLs.

    151 Use the access-class command.

    152 Configure an ACL on VTY lines.

    153 Configure and verify VTY restrictions.

    154 Troubleshoot standard IPv4 ACLs.

    155 Control FTP access.

    156 Demonstrate ACL skills.

    157 Identify the steps in DHCPv4 operation. English: 10.5, 11.5, 12.5 158 Configure a basic DCHPv4 server.

    159 Configure DHCPv4 relay commands.

    160 Configure basic DHCPv4 on a router in a hands-on lab.

    161 Configure basic DHCPv4 on a switch in a hands-on lab.

  • 66

    162 Configure a router as a DHCPv4 client.

    163 Configure DHCPv4 using Cisco IOS.

    164 Troubleshoot DHCPv4 in a hands-on lab.

    165 Identify the steps in DHCPv6 operation. English: 10.5, 11.5, 12.5 166 Verify stateless DHCPv6.

    167 Verify stateful DHCPv6.

    168 Configure a router as a DHCPv6 relay agent.

    169 Configure stateless and stateful DHCPv6 in a hands-on lab.

    170 Troubleshoot DHCPv6 in a hands-on lab.

    171 Configure Internet of Everything (IoE) and DHCP.

    172 Demonstrate DHCP skills.

    173 Identify NAT terminology. English: 10.5, 11.5, 12.5 174 Investigate NAT operation. English: 10.5, 11.5, 12.5 175 Configure static NAT.

    176 Configure dynamic NAT.

    177 Configure dynamic and static NAT in a hands-on lab.

    178 Configure PAT.

    179 Identify the address information at each hop. English: 10.5, 11.5, 12.5 180 Implement static and dynamic NAT.

    181 Configure port address tranlsation (PAT) in a hands-on lab.

    182 Configure port forwarding on a Linksys router.

    183 Verify NAT configurations.

    184 Troubleshoot NAT configurations in a hands-on-lab.

    185 Check NAT.

    186 Demonstrate NAT skills.

    187 Map a network using Cisco Discovery Protocol (CDP).

    188 Compare CDP and Link Layer Discovery Protocol (LLDP). English: 10.5, 11.5, 12.5

    189 Configure CDP and LLDP.

    190 Configure Network Time Protocol (NTP).

    191 Configure syslog and NTP.

    192 Configure syslog and NTP in a hands-on lab.

  • 67

    193 Back up and configure files.

    194 Manage router configuration files with Tera Term in a hands-on lab.

    195 Manage device configuration files using TFTP, Flash, and USB in a hands-on lab.

    196 Research password recovery procedures in a hands-on lab.

    English: 10.8, 11.8, 12.8

    History and Social Science: VUS.14

    197 Confirm steps to backup IOS image to TFTP server.

    198 Use a TFTP server to upgrade a Cisco IOS image.

    199 Demonstrate router licensing skills.

    200 Demonstrate integration skills.

    Transportation Career Modules The following transportation career modules were correlated to this course in March 2012 as part of Careers in Transportation Curriculum Project funded by the US Department of Transportation. Modules include field-tested activities and lesson plans that require students to apply knowledge and skills learned in this course and may encourage students to explore related careers in the Transportation, Distribution, and Logistics Career Cluster. Click on the link to access the Careers in Transportation Curriculum Project site and scroll down to search for modules by ID number and title. Related Career Module(s):

    • ID#: LPMS701-113 Title: Graphical Linear Programming

    Cyber Security and Cyber Forensics Infusion Units Cyber Security and Cyber Forensics Infusion Units were designed to be infused with designated CTE courses to help students in those programs achieve additional, focused, validated tasks/competencies in personal and professional cyber security skills. These units are not mandatory, and, as such, the tasks/competencies are marked as "optional," to be taught at the instructor's discretion. Teachers can find the infusion/unit in the course listing.

    https://www.transportation.gov/careers

  • 68

    Entrepreneurship Infusion Units Entrepreneurship Infusion Units may be used to help students achieve additional, focused competencies and enhance the validated tasks/competencies related to identifying and starting a new business venture. Because the unit is a complement to certain designated courses and is not mandatory, all tasks/competencies are marked “optional.” Teachers can find the infusion/unit in the course listing.

  • 69

    Appendix: Credentials, Course Sequences, and Career Cluster Information Industry Credentials: Only apply to 36-week courses

    • A+ Certification Examination • Business Information Processing Assessment • Cisco Certified CyberOps Associate Examination • Cisco Certified DevNet Associate Examination • Cisco Certified Networking Associate (CCNA) Examination • Cisco Certified Networking Professional (CCNP) Automation for Cisco Enterprise Solutions

    Examination • Cisco Certified Networking Professional (CCNP) Cisco Enterprise Networks Examination • Cisco Certified Networking Professional (CCNP) Cisco SD-WAN Solutions Examination • Cisco Certified Networking Professional (CCNP) Designing Enterprise Wireless Networks Examination • Cisco Certified Networking Professional (CCNP) Enterprise Advanced Routing and Services

    Examination • Cisco Certified Networking Professional (CCNP) Enterprise Network Core Technologies Examination • Cisco Certified Networking Professional (CCNP) Implementing Enterprise Wireless Networks

    Examination • College and Work Readiness Assessment (CWRA+) • Computer Networking Fundamentals Assessment • Customer Service Specialist (CSS) Examination • Internetworking Examination • IT Fundamentals+ Certification Examination • Microsoft 365 Fundamentals Examination • Microsoft Certified Azure Fundamentals Examination • Microsoft Dynamics 365 Fundamentals Examination • Microsoft Office Specialist (MOS) Examinations • Microsoft Technology Associate (MTA) Examinations • Network Administration Certification Tests • Network+ Certification Examination • Professional Communications Certification Examination • Security+ Certification Examination • Technical Support Certification Tests • Workplace Readiness Skills for the Commonwealth Examination

    Concentration sequences: A combination of this course and those below, equivalent to two 36-week courses, is a concentration sequence. Students wishing to complete a specialization may take additional courses based on their career pathways. A program completer is a student who has met the requirements for a CTE concentration sequence and all other requirements for high school graduation or an approved alternative education program.

  • 70

    • Computer Networking Hardware Operations I (8542/18 weeks, 70 hours) • Computer Networking Hardware Operations III (8544/18 weeks, 70 hours) • Computer Networking Hardware Operations IV (8545/18 weeks, 70 hours)

    Career Cluster: Information Technology

    Pathway Occupations

    Information Support and Services

    Applications Integrator Computer Support Specialist Computer Systems Engineer, Architect Database Administrator Database Analyst Information Systems Analyst Information Systems Security Developer Information Systems Security Manager Maintenance Technician Network Systems and Data Communication Analyst Software Test Engineer Systems Analyst Technical Writer

    Network Systems

    Computer and Information Systems Administrator Computer Operator Computer Security Specialist Computer Software Engineer Computer Support Specialist Computer Systems Engineer, Architect Database Analyst Information Security Analyst Network and Computer Systems Administrator Network Architect Network Systems and Data Communication Analyst Software Test Engineer Systems Analyst Telecommunications Equipment Installer, Repairer Telecommunications Specialist

    Programming and Software Development

    Computer Software Engineer Information Security Analyst Network Systems and Data Communication Analyst Programmer Project Manager Software Applications Engineer Software Test Engineer Systems Analyst

    Web and Digital Communications

    Computer Support Specialist Computer Systems Engineer, Architect Project Manager Software Test Engineer Systems Analyst

    Computer Networking Hardware Operations II8543 18 weeks / 70 hoursTable of ContentsAcknowledgmentsCourse DescriptionTask Essentials ListCurriculum FrameworkExploring Routing ConceptsTask Number 39Describe the primary functions and features of a router.Definition

    Task Number 40Identify router components.Definition

    Task Number 41Use traceroute to discover the network.Definition

    Task Number 42Map the Internet.Definition

    Task Number 43Enable Internet protocol (IP) on a switch.Definition

    Task Number 44Document an addressing scheme.Definition

    Task Number 45Document the network.Definition

    Task Number 46Configure basic router settings.Definition

    Task Number 47Configure an IPv4 router interface.Definition

    Task Number 48Configure an IPv6 router interface.Definition

    Task Number 49Configure IPv4 and IPv6 interfaces.Definition

    Task Number 50Verify interface settings.Definition

    Task Number 51Filter show command output.Definition

    Task Number 52Use command history feature.Definition

    Task Number 53Configure and verify a small network.Definition

    Task Number 54Configure basic router settings with IOS CLI.Definition

    Task Number 55Match layer 2 and layer 3 addressing.Definition

    Task Number 56Order the steps in the packet-forwarding process.Definition

    Task Number 57Interpret the content of a routing table.Definition

    Task Number 58Directly connect.Definition

    Task Number 59Investigate directly connected routes.Definition

    Task Number 60Describe static routes.Definition

    Task Number 61Describe three types of routes that are populated in a routing table.Definition

    Static RoutingTask Number 62Identify the advantages and disadvantages of static routing.Definition

    Task Number 63Identify the type of static route.Definition

    Task Number 64Configure a next-hop static route.Definition

    Task Number 65Configure a directly connected static route.Definition

    Task Number 66Configure a fully specified static route.Definition

    Task Number 67Configure IPv4 static and default routes.Definition

    Task Number 68Configure IPv4 static and default routes in hands-on lab.Definition

    Task Number 69Explain the IPv6 route command.Definition

    Task Number 70Configure a next-hop static IPv6 route.Definition

    Task Number 71Configure a directly connected static IPv6 route.Definition

    Task Number 72Configure a fully specified static IPv6 route.Definition

    Task Number 73Configure IPv6 static and default routes.Definition

    Task Number 74Configure and verify an IPv4 floating static route.Definition

    Task Number 75Configure floating static routes.Definition

    Task Number 76Troubleshoot static routes.Definition

    Task Number 77Troubleshoot static routes in a hands-on lab.Definition

    Task Number 78Design and implement a variable-length subnet mask (VLSM) addressing scheme.Definition

    Task Number 79Design and implement IPv4 addressing with VLSM.Definition

    Task Number 80Determine the summary network address and prefix.Definition

    Task Number 81Configure IPv4 route summarization in two scenarios.Definition

    Task Number 82Configure IPv6 route summarization.Definition

    Task Number 83Calculate summary routes with IPv4 and IPv6.Definition

    Task Number 84Configure a floating static route.Definition

    Examining Dynamic RoutingTask Number 85Explain the operation of dynamic routing protocols.Definition

    Task Number 86Compare static and dynamic routing.Definition

    Task Number 87Advertise appropriate networks.Definition

    Task Number 88Enable RIP routing.Definition

    Task Number 89Disable auto summarization.Definition

    Task Number 90Propagate a default route.Definition

    Task Number 91Configure basic RIPv2.Definition

    Task Number 92Identify parts of an IPv4 routing table entry.Definition

    Task Number 93Identify parent and child IPv4 routes.Definition

    Task Number 94Determine the longest match route.Definition

    Task Number 95Identify parts of an IPv6 routing table entry.Definition

    Task Number 96Analyze a routing table.Definition

    Working with Switched NetworksTask Number 97Explain various ways data is sent and received.Definition

    Task Number 98Identify switched network terminology.Definition

    Task Number 99Identify switch hardware.Definition

    Task Number 100Identify frame forwarding methods.Definition

    Task Number 101Determine how a switch forwards a frame.Definition

    Task Number 102Determine broadcast and collision domains.Definition

    Task Number 103Describe switch features.Definition

    Configuring SwitchesTask Number 104Explain the difference between unicast, multicast, and broadcast packets.Definition

    Task Number 105Configure basic switch setting.Definition

    Task Number 106Configure switch ports at the physical layer.Definition

    Task Number 107Configure SSH.Definition

    Task Number 108Configure switch port security.Definition

    Task Number 109Troubleshoot switch port security.Definition

    Task Number 110Configure switch security features.Definition

    Task Number 111Implement Layer 5 configuration.Definition

    Task Number 112Configure various switch settings.Definition

    Task Number 113Identify common security attacks.Definition

    Exploring VLANsTask Number 114Identify the purpose of VLANS.Definition

    Task Number 115Identify broadcast traffic.Definition

    Task Number 116Predict switch behavior.Definition

    Task Number 117Investigate a VLAN implementation.Definition

    Task Number 118Create a VLAN.Definition

    Task Number 119Assign ports to VLANs.Definition

    Task Number 120Change VLAN port membership.Definition

    Task Number 121Verify VLAN information.Definition

    Task Number 122Configure VLANs.Definition

    Task Number 123Verify trunk configurationDefinition

    Task Number 124Configure trunks.Definition

    Task Number 125Configure VLANs and trunks.Definition

    Task Number 126Troubleshoot a VLAN implementation.Definition

    Task Number 127Troubleshoot VLAN configurations.Definition

    Task Number 128Identify the types of inter-VLAN routing.Definition

    Task Number 129Configure per-interface inter-VLAN routing.Definition

    Task Number 130Configure router-on-a-stick subinterfaces.Definition

    Task Number 131Configure router-on-a-stick inter-VLAN routing.Definition

    Task Number 132Configure 802.1Q routing.Definition

    Task Number 133Configure inter-VLAN routing.Definition

    Task Number 134Explain data forwarding.Definition

    Task Number 135Integrate VLAN skills.Definition

    Task Number 136Negotiate interface modes.Definition

    Task Number 137Troubleshoot a VLAN implementation in two scenarios.Definition

    Task Number 138Troubleshoot VLAN configurations in a hands-on lab.Definition

    Task Number 139Configure the PVLAN edge feature.Definition

    Task Number 140Identify the VLAN attacks.Definition

    Task Number 141Implement VLAN security.Definition

    Task Number 142Implement a VLAN.Definition

    Task Number 143Demonstrate various VLAN skills.Definition

    Using Access Control ListsTask Number 144Demonstrate the use of ACL.Definition

    Task Number 145Determine the correct wildcard mask.Definition

    Task Number 146Determine the permit or deny control.Definition

    Task Number 147Configure ACL statements.Definition

    Task Number 148Configure standard ACLs.Definition

    Task Number 149Configure numbered standard IPv4 ACLs.Definition

    Task Number 150Configure and modify standard IPv4 ACLs.Definition

    Task Number 151Use the access-class command.Definition

    Task Number 152Configure an ACL on VTY lines.Definition

    Task Number 153Configure and verify VTY restrictions.Definition

    Task Number 154Troubleshoot standard IPv4 ACLs.Definition

    Task Number 155Control FTP access.Definition

    Task Number 156Demonstrate ACL skills.Definition

    Exploring Dynamic Host Configuration Protocol (DHCP)Task Number 157Identify the steps in DHCPv4 operation.Definition

    Task Number 158Configure a basic DCHPv4 server.Definition

    Task Number 159Configure DHCPv4 relay commands.Definition

    Task Number 160Configure basic DHCPv4 on a router in a hands-on lab.D