DRSEnt OSPF/ACL PT Practice SBA

DRSEnt OSPF/ACL PT Practice SBA

A few things to keep in mind while completing this activity:

1. Do not use the browser Back button or close or reload any exam windows during the exam.
2. Do not close Packet Tracer when you are done. It will close automatically.
3. Click the Submit Assessment button to submit your work.

Introduction

In this practice Packet Tracer Skills Exam, you will do as follows:

·         finish the configuration of a partially configured network

·         establish connectivity within the enterprise and to the Internet

·         implement access control lists based on a set of security policies

Addressing Table

NOTE: The password for user EXEC mode is cisco. The password for privileged EXEC mode is class.

Step 1: Configure the Device Basics.

Use the IP addresses in the Addressing Table and your subnetting skills to determine the missing IP addresses according to the following guidelines:

a.     Configure Fa0/1 interface on R2 with the highest (last) host IP address in the subnet.

b.    Configure H3 with the highest (last) host IP address in the subnet

c.     Verify connectivity.

Step 2: Configure OSPF.

a.     Use the following requirements to configure OSPF on HQ, R1, and R2.

·         Use the process ID 1.

·         Advertise each subnet individually in area 0 with its corresponding wildcard mask. (HQ should not advertise the link to the Internet.)

·         Verify OSPF convergence.

b.    Configure OSPF authentication on the links between R1 and R2, R1 and HQ, and R2 and HQ.

·         Encrypt the updates using MD5 authentication. Authentication should be enabled for the entire area 0.

·         On the appropriate interfaces, use a key ID of 5 and the password itsasecret.

·         Verify OSPF convergence.

c.     Modify the OSPF configuration.

·         Modify both sides of the link between HQ and R2 to reflect the actual bandwidth of 384 Kb/s.

·         Change the priority on R1 so that it is the preferred DR for the LAN it shares with R2.

d.    Propagate a default route in the OSPF updates.

·         Configure a default route on HQ and point it to the Internet. Use the outbound interface argument.

·         Configure OSPF to advertise the default route to neighbors.

e.     Verify connectivity.

Step 3: Configure Access Control Lists.

a.     Filter inbound traffic from the Internet. Configure and apply a single ACL numbered 100 on the correct router that will implement the following policy in order:

·         Allow only HTTP access to the Inside Web Server at its public address 128.107.0.10.

·         Allow all established TCP connections.

·         Allow all ICMP replies and unreachable messages.

b.    Verify that the policy is successfully implemented.

c.     Filter traffic from the R2 LAN. Configure and apply on the router a single ACL numbered 115 that will limit network traffic and will implement the following policy:

·         Hosts from the LAN connected to the Fa0/0 interface of R2 are blocked from accessing hosts on the R1 R&D LAN.

·         All other traffic is allowed anywhere.

d.    Verify that the policy is successfully implemented.

Step 4: Verify Connectivity.

Using tools such as ping and show commands, verify authorized connectivity in the network.

Version 2.0
Created in Packet Tracer 5.3.2.0027 and Marvel 1.0.1
All contents are Copyright © 1992 - 2011 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.

 http://www.docshut.com/kwrxhi/drsent-pt-practice-sba-ospf.html

Step 1&2: Configure the Device Basics
Configure addressing on R2

R2(config)#int fa0/0
R2(config-if)#ip add 172.16.100.1 255.255.255.192
R2(config-if)#no shut

R2(config-if)#
%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up

R2(config-if)#exit
R2(config)#int fa0/1

R2(config-if)#ip add 172.16.100.118 255.255.255.248
R2(config-if)#no shut

R2(config-if)#
%LINK-5-CHANGED: Interface FastEthernet0/1, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up

R2(config-if)#exit
R2(config)#int s0/0/0
R2(config-if)#ip add 172.16.100.126 255.255.255.252
R2(config-if)#no shut

%LINK-5-CHANGED: Interface Serial0/0/0, changed state to up
R2(config-if)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to up

R2(config-if)#exit
R2(config)#int loopback0

R2(config-if)#
%LINK-5-CHANGED: Interface Loopback0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up

R2(config-if)#ip add 10.0.0.2 255.255.255.255
R2(config-if)#no shut
R2(config-if)#exit
R2(config)#

Configure H3 IP address

IP Address : 172.16.100.94
Subnet Mask : 255.255.255.224
Default Gateway : 172.16.100.65

Step 3: Configure OSPF.
Use the process ID 1

R1(config)#router ospf 1
R1(config-router)#network 172.16.100.120 0.0.0.3 area 0
R1(config-router)#network 172.16.100.64 0.0.0.31 area 0
R1(config-router)#network 172.16.100.112 0.0.0.7 area 0

For complete answer click this link to download http://www.mediafire.com/download/39tw9a7ao9e2i66/Step+by+step+OSPF_SBA_D3.doc