CST2510 Lab Test 1

CST2510 Lab Test 1

Student Number: __________ Student Name: _______________
Note: this document serves as the configuration instructions/specifications and also
the document for Verifications/Tests/Questions. You need to document the items
highlighted in blue which are related to Verifications/Tests/Questions.

Topology

Address Table
Networks Address Space
209.165.200.232/29
Network between R2 G0/0 and Internet Server 2001:DB8:ACAD:A::/64
Network between R2 G0/1 and Web Server 10.10.10.0/24

Network between R1 S0/0/0 and R2 S0/0/0 IPv4 Subnet:

(Refer to Packet Tracer Instruction Window for the
IPv4 subnet information) 2001:DB8:ACAD:1::/64

Network between R2 S0/0/1 and R3 S0/0/1 IPv4 Subnet:

(Refer to Packet Tracer Instruction Window for the
IPv4 subnet information) 201:DB8:ACAD:2::/64

Page 1 of 13
CST2510 Lab Test 1

Lo4: 192.168.4.0/24
Lo5: 192.168.5.0/24
Lo6: 192.168.6.0/24
Networks on R3 Loopback Interfaces Lo7: 2001:DB8:ACAD:3::/64

VLANs IPv4 Address Name

21 192.168.21.0/24 Accounting
23 192.168.23.0/24 Engineering
99 192.168.99.0/24 Management

Device IP Address Default Gateway VLAN

209.165.200.238/29 209.165.200.233
Internet Server 2001:DB8:ACAD:A::38/64 2001:DB8:ACAD:A::1 N/A
Web Server 10.10.10.10/24 10.10.10.1 N/A
S1 Management VLAN 192.168.99.2/24 192.168.99.1 99
S3 Management VLAN 192.168.99.3/24 192.168.99.1 99
PC-A DHCP Assigned DHCP Assigned 21
PC-C DHCP Assigned DHCP Assigned 23

Assessment Objectives
Part 1: Configure Device Basic Settings
Part 2: Configure Switch Security, VLANs, and Inter-VLAN Routing
Part 3: Configure RIPv2 Dynamic Routing Protocol
Part 4: Implement DHCP and NAT for IPv4
Part 5: Configure NTP
Part 6: Configure and Verify Access Control Lists (ACLs)

Scenario
In this Skills Assessment (SA) you will configure a small network to support IPv4 and IPv6 connectivity, switch
security, inter VLAN routing, RIPv2 dynamic routing protocol, Dynamic Host Configuration Protocol (DHCP),
dynamic and static Network Address Translation (NAT), Access Control Lists (ACLs), and server/client
Network Time Protocol (NTP). You will test and document the network using common CLI commands
throughout the assessment.

Part 1: Configure Device Basic Settings

Step 1: Configure the Internet Server and Web Server.
Configuration tasks for the Internet Server and the Web Server include the following (refer to the Topology
and Address Table for IP address information):

Page 2 of 13
CST2510 Lab Test 1

Internet Server Specification

IPv4 Address
IPv4 Subnet Mask
Default Gateway 209.165.200.233
IPv6 Address/Subnet
IPv6 Default Gateway 2001:DB8:ACAD:A::1

Web Server Specification

IPv4 Address
IPv4 Subnet Mask
Default Gateway

Step 2: Configure R1.

Configuration tasks for R1 include the following:
(Tips: the following basic configurations are the identical on all network devices: Disable DNS lookup,
Encrypted privileged exec password, Console access password, Telnet access password, Encrypt the clear
text passwords, and MOTD banner. You can put those basic configuration commands in a text file, then copy
and paste into each device.)

Page 3 of 13
CST2510 Lab Test 1

Configuration Item or Task Specification

Disable DNS lookup

Router name R1
Encrypted privileged exec password class
Console access password cisco
Telnet access password cisco
Encrypt the clear text passwords
MOTD banner Unauthorized Access is Prohibited!
Set the description Connection to R2
Set the IPv4 address. Use the first usable address in the subnet
Interface S0/0/0 Set the IPv6 address. Use the first usable address in the subnet
Set the clocking rate to 128000
Activate Interface
Configure a default IPv4 route out S0/0/0
Default routes
Configure a default IPv6 route out S0/0/0

Step 3: Configure R2.

Configuration tasks for R2 include the following:

Page 4 of 13
CST2510 Lab Test 1

Configuration Item or Task Specification

Disable DNS lookup

Router name R2
Encrypted privileged exec password class
Console access password cisco
Telnet access password cisco
Encrypt the clear text passwords
MOTD banner Unauthorized Access is Prohibited!
Set the description Connection to R1
Set the IPv4 address. Use the next available address in the subnet.
Interface S0/0/0
Set the IPv6 address. Use the next available address in the subnet.
Activate Interface
Set the description Connection to R3
Set the IPv4 address. Use the second available address in the subnet.
Interface S0/0/1 Set the IPv6 address. Use the second available address in the subnet.
Set clocking rate to 128000
Activate Interface
Set the Description Connection to ISP
Set the IPv4 address. Use the first available address in the subnet.
Interface G0/0 (Simulated Internet)
Set the IPv6 address. Use the first available address in the subnet.
Activate Interface
Set the description Connection to Web Server
Interface G0/1 Set the IPv4 address. Use the first available address in the subnet
Activate Interface
Configure a default IPv4 route out G0/0.
Default route
Configure a default IPv6 route out G0/0.

Step 4: Configure R3.

Configuration tasks for R3 include the following:

Page 5 of 13
CST2510 Lab Test 1

Configuration Item or Task Specification

Disable DNS lookup

Router name
Encrypted privileged exec password
Console access password
Telnet access password
Encrypt the clear text passwords
MOTD banner
Interface S0/0/1
Interface Loopback 4
Interface Loopback 5
Interface Loopback 6
Interface Loopback 7
Default routes
R3
class
cisco
cisco
Unauthorized Access is Prohibited!
Set the description Connection to R2
Set the IPv4 address. Use the first usable address in the subnet.
Set the IPv6 address. Use the first usable address in the subnet..
Activate Interface
Set the IPv4 address. Use the first available address in the subnet.
Set the IPv4 address. Use the first available address in the subnet.
Set the IPv4 address. Use the first available address in the subnet.
Set the IPv6 address. Use the first available address in the subnet.
Configure a default IPv4 route out S0/0/1.
Configure a default IPv6 route out S0/0/1

Step 5: Configure S1.

Configuration tasks for S1 include the following:

Configuration Item or Task Specification

Disable DNS lookup

Switch name S1
Encrypted privileged exec password class
Console access password cisco
Telnet access password cisco
Encrypt the clear text passwords
MOTD banner Unauthorized Access is Prohibited!

Step 6: Configure S3
Configuration tasks for S3 include the following:

Page 6 of 13
CST2510 Lab Test 1

Configuration Item or Task Specification

Disable DNS lookup

Switch name S3
Encrypted privileged exec password class
Console access password cisco
Telnet access password cisco
Encrypt the clear text passwords
MOTD banner Unauthorized Access is Prohibited!

Step 7: Verify network connectivity.

Use the ping command to test connectivity between network devices.
Use the following table to methodically verify connectivity with each network device. Take corrective
action to establish connectivity if a test fails:

From To Destination IP Address Document Ping Results

R1 R2, S0/0/0
R2 R3, S0/0/1
Internet Server Default Gateway

Part 2: Configure Switch Security, VLANS, and Inter VLAN Routing

Step 1: Configure S1.
Configuration tasks for S1 include the following:

Page 7 of 13
CST2510 Lab Test 1

Configuration Item or Task Specification

Create the VLAN database
Assign the management IP address.
Assign the default-gateway
Force trunking on Interface F0/3
Force trunking on Interface F0/5
Configure all other ports as access ports
Assign F0/6 to VLAN 21
Shutdown all unused ports
Use VLANs Address Table to create and name each of the listed
VLANS.
Assign the IPv4 address to the Management VLAN. Use the IP
address assigned to S1 in the Address Table.
Assign the first IPv4 address in the subnet as the default-gateway.
Use VLAN 1 as the native VLAN.
Use VLAN 1 as the native VLAN.
Use the interface range command.

Step 2: Configure S3.

Configuration tasks for S3 include the following:

Configuration Item or Task Specification

Use VLANs Address Table to create each of the listed VLANS.

Create the VLAN database
Assign the management IP address
Assign the default-gateway
Force trunking on Interface F0/3
Configure all other ports as access ports
Assign F0/18 to VLAN 23
Shutdown all unused ports
Name each VLAN.
Assign the IPv4 address to the Management VLAN. Use the IP
address assigned to S3 in the Address Table.
Assign the first IP address in the subnet as the default-gateway.
Use VLAN 1 as the native VLAN.
Use the interface range command.

Step 3: Configure R1.

Configuration tasks for R1 include the following:

Page 8 of 13
CST2510 Lab Test 1

Configuration Item or Task Specification

Description Accounting LAN

Configure 802.1Q subinterface .21 on G0/1
Configure 802.1Q subinterface .23 on G0/1
Configure 802.1Q subinterface .99 on G0/1
Activate Interface G0/1
Assign VLAN 21.
Assign the first available address to this interface.
Description Engineering LAN
Assign VLAN 23.
Assign the first available address to this interface.
Description Management LAN
Assign VLAN 99.
Assign the first available address to this interface.

Step 4: Verify network connectivity.

Use the ping command to test connectivity between the switches and R1.
Use the following table to methodically verify connectivity with each network device. Take corrective
action to establish connectivity if a test fails:

From To Destination IP Address Document Ping Results

S1 R1, VLAN 99
address
S3 R1, VLAN 99
address
S1 R1, VLAN 21
address
S3 R1, VLAN 23
address

Part 3: Configure RIPv2 Dynamic Routing Protocol

Step 1: Configure RIPv2 on R1.

Configuration tasks for R1 include the following:

Page 9 of 13
CST2510 Lab Test 1

Configuration Item or Task Specification

Configure RIP Version 2

Advertise directly connected Networks Assign all directly connected networks.
Set all LAN interfaces as passive
Disable automatic summarization no auto-summary

Step 2: Configure RIPv2 on R2.

Configuration tasks for R2 include the following:

Configuration Item or Task Specification

Configure RIP Version 2

Advertise directly connected Networks Note: Omit the G0/0 network.
Set the LAN (G0/1) interface as passive
Disable automatic summarization

Step 3: Configure RIPv2 on R3.

Configuration tasks for R3 include the following:

Configuration Item or Task Specification

Configure RIP Version 2

Advertise directly connected IPv4 Networks
Set all IPv4 LAN (Loopback) interfaces as passive
Disable automatic summarization

Step 4: Verify RIP information.

Verify that RIP is functioning as expected. Enter the appropriate CLI command to discover the
following information:

Question Response

What command displays the RIP Process ID, Router ID, Routing Networks,
and passive interfaces configured on a router?
What command displays only RIP routes?

Page 10 of 13
CST2510 Lab Test 1

Part 4: Implement DHCP and NAT for IPv4

Step 1: Configure R1 as the DHCP server for VLANs 21 and 23.

Configuration tasks for R1 include the following:

Configuration Item or Task Specification

Reserve the first 20 IP addresses in

VLAN 21 for static configurations
Reserve the first 20 IP addresses in
VLAN 23 for static configurations
Name: ACCT
Create a DHCP pool for VLAN 21 DNS-Server: 10.10.10.10
Set the default gateway.
Name: ENGNR
Create a DHCP pool for VLAN 23 DNS-Server: 10.10.10.10
Set the default gateway.

Step 2: Configure Static and Dynamic NAT on R2.

Configuration tasks for R2 include the following:

Configuration Item or Task Specification

Create a static NAT to the Web Server Inside Global Address: 209.165.200.237
Access List: 1
Allow the Accounting and Engineering networks on R1 to
Configure the dynamic NAT inside private
be translated.
ACL
Allow a summary of the LANs (loopback) networks on
R3 to be translated.
Pool Name: INTERNET
Define the pool of usable public IP
Pool of addresses include:
addresses
209.165.200.234 – 209.165.200.236
Define the dynamic NAT translation
Assign the inside and outside interface for
the NAT

Step 3: Verify DHCP and Static NAT.

Use the following tasks to verify that DHCP and Static NAT settings are functioning correctly. It may
be necessary to disable the PC firewall for pings to be successful:

Page 11 of 13
CST2510 Lab Test 1

Test Document the Results

(document the output of command ipconfig on PC-

Verify that PC-A acquired IP information from the A):
DHCP server

(document the output of command ipconfig on PC-

Verify that PC-C acquired IP information from the C):
DHCP server

(document the output of the ping command):

Verify that PC-A can ping PC-C.

Use a Web browser on the Internet Server to (capture the screenshot of the web access):
access the Web server (209.165.200.237).

Part 5: Configure NTP

Configuration Item or Task Specification / (Results)

(document system clock info here)

Verify system clock information on R1 – R1# show clock
Use the Internet Server as NTP server – make sure the NTP
service on the Internet Server is turned on
Configure R1 as an NTP client. Server: 209.165.200.238
Configure R1 for periodical calendar updates with NTP time.
(document system clock info here)
Verify system clock information on R1 again

Part 6: Configure and Verify Access Control Lists (ACLs)

Step 1: Restrict access to VTY lines on R2.

Page 12 of 13
CST2510 Lab Test 1

Configuration Item or Task Specification / Verification

Configure a named access list to only allow R1 to telnet to R2 ACL Name: ADMIN-MGT
Apply the named ACL to the VTY lines
Allow telnet access to VTY lines
telnet from R1 to R2, document the output:

telnet from R3 to R2, document the output:

Verify ACL is working as expected

Step 2: Enter the appropriate CLI command needed to display the following:

Command Description Student Input (command)

Display the matches an access-list has received since the

last reset.
What command is used to display what ACL is applied to an
interface and the direction that it is applied?
What command displays the NAT translations?
What command is used to clear dynamic NAT translations?

Submission
Fill the required information (verifications/Tests/Questions) indicated in this word document. Save this word
document and also your packet tracer file. Submit both files via Unihub before the end of the Lab test session.

Marking Scheme: Packet Tracer Configuration: 60%; Verifications/Tests/Questions (this document): 40%

Page 13 of 13