EWAN NAT/ACL PT Practise SBA 100%

SPE-PO

2013

Slovakia

Solution:
SOUTH
Building configuration...
Current configuration : 1244 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname SOUTH
!
!
!
enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1
!
!
ip dhcp excluded-address 10.10.10.65 10.10.10.69
!
ip dhcp pool SOUTH_DHCP
network 10.10.10.64 255.255.255.224
default-router 10.10.10.65
!
!
!
username NORTH password 0 NSchap

SPE-PO

2013

Slovakia

!
!
!
!
!
ip ssh version 1
!
!
spanning-tree mode pvst
!
!
!
!
interface FastEthernet0/0
ip address 10.10.10.65 255.255.255.224
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Serial0/0/0
ip address 10.255.1.2 255.255.255.252
!
interface Serial0/0/1
ip address 10.255.1.5 255.255.255.252
encapsulation ppp
ppp authentication chap
clock rate 2000000
!
interface Vlan1
no ip address
shutdown
!
router eigrp 50
network 10.0.0.0
no auto-summary
!
ip classless
!
!
!
banner motd ^CAuthorized Access Only!^C
!
!
!
!
logging trap debugging
line con 0
exec-timeout 0 0
password cisco

SPE-PO

2013

Slovakia

logging synchronous
login
line vty 0 4
exec-timeout 0 0
password cisco
logging synchronous
login
line vty 5 15
exec-timeout 0 0
password cisco
logging synchronous
login
!
!
ntp update-calendar
!
end

NORTH
Building configuration...
Current configuration : 1723 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname NORTH
!
!
!
enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1
!
!
!
!
!
!
username SOUTH password 0 NSchap
!
!
!
!
!
ip ssh version 1
!
!
spanning-tree mode pvst
!
!
!
!
interface FastEthernet0/0

SPE-PO

2013

Slovakia

no ip address
duplex auto
speed auto
shutdown
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Serial0/0/0
ip address 10.255.1.6 255.255.255.252
encapsulation ppp
ppp authentication chap
ip nat inside
!
interface Serial0/0/1
no ip address
encapsulation frame-relay
!
interface Serial0/0/1.35 point-to-point
ip address 192.168.20.2 255.255.255.252
frame-relay interface-dlci 35
ip nat inside
clock rate 2000000
!
interface Serial0/1/0
ip address 198.133.219.2 255.255.255.252
ip access-group FILTER-IN in
ip nat outside
!
interface Serial0/1/1
no ip address
shutdown
!
interface Vlan1
no ip address
shutdown
!
router eigrp 50
redistribute static
passive-interface Serial0/1/0
network 10.0.0.0
network 192.168.20.0
no auto-summary
!
ip nat inside source list 5 interface Serial0/1/0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/1/0
!
!
access-list 5 permit 10.10.10.64 0.0.0.63
ip access-list extended FILTER-IN

SPE-PO

2013

Slovakia

deny icmp any any echo

deny tcp any any eq telnet
deny tcp any any eq www
permit ip any any
!
banner motd ^CAuthorized Access Only!^C
!
!
!
!
logging trap debugging
line con 0
exec-timeout 0 0
password cisco
logging synchronous
login
line vty 0 4
exec-timeout 0 0
password cisco
logging synchronous
login
line vty 5 15
exec-timeout 0 0
password cisco
logging synchronous
login
!
!
!
end

EAST
Building configuration...
Current configuration : 1276 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname EAST
!
!
!
enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1
!
!
!
!
!
!
!
!

SPE-PO

2013

Slovakia

!
!
ip ssh version 1
!
!
spanning-tree mode pvst
!
!
!
!
interface FastEthernet0/0
ip address 10.10.10.97 255.255.255.240
ip access-group 60 out
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Serial0/0/0
ip address 10.255.1.1 255.255.255.252
clock rate 2000000
!
interface Serial0/0/1
no ip address
encapsulation frame-relay
!
interface Serial0/0/1.25 point-to-point
ip address 192.168.20.1 255.255.255.252
frame-relay interface-dlci 25
clock rate 2000000
!
interface Vlan1
no ip address
shutdown
!
router eigrp 50
network 192.168.20.0
network 10.0.0.0
no auto-summary
!
ip classless
!
!
access-list 60 deny 10.10.10.64 0.0.0.31
access-list 60 permit any
!
banner motd ^CAuthorized Access Only!^C
!
!
!

SPE-PO

2013

Slovakia

!
logging trap debugging
line con 0
exec-timeout 0 0
password cisco
logging synchronous
login
line vty 0 4
exec-timeout 0 0
password cisco
logging synchronous
login
line vty 5 15
exec-timeout 0 0
password cisco
logging synchronous
login
!
!
ntp update-calendar
!
end

SPE-PO

2013

Slovakia