Packet Tracer – Troubleshooting Standard IPv4 ACLs Addressing Table Objectives Part 1: Troubleshoot ACL Issue 1 Part 2: Troubleshoot ACL Issue 2 Part 3: Troubleshoot ACL Issue 3 Scenario This network is meant to have the following three policies implemented: Hosts from the 192.168.0.0/24 network are unable to access network 10.0.0.0/8.

2.2.2.4 Packet Tracer – Configuring IPv4 Static and Default Routes

From year to year, Cisco has updated many versions with difference questions. The latest version is version 6.0 in 2018. What is your version? It depends on your instructor creating your class. We recommend you to go thought all version if you are not clear. While you take online test with netacad.com, You may get random questions from all version. Each version have 1 to 10 different questions or more. After you review all questions, You should practice with our online test system by go to 'Online Test' link below.

Packet Tracer – Configuring IPv4 Static and Default Routes (Answer Version)

1. The packet tracer is improved in each version, a practice lab created in one version may or may not work in another version. If you do not have a practice lab built in an earlier version or have just started learning from scratch, you may consider downloading the latest version of Packet Tracer.
2. Packet tracer configuring trunks topology addressing table device interfac switch port pc1 nic 172.17.10.21 255.255.255.0 s2 10 pc2 nic 172.17.20.22 255.255.255.

Answer Note: Red font color or Gray highlights indicate text that appears in the Answer copy only.

Topology

2.2.2.4 Packet Tracer – Configuring IPv4 Static and Default Routes

Addressing Table

Objectives

Part 1: Examine the Network and Evaluate the Need for Static Routing

Part 2: Configure Static and Default Routes

Part 3: Verify Connectivity

Background

In this activity, you will configure static and default routes. A static route is a route that is entered manually by the network administrator to create a reliable and safe route. There are four different static routes that are used in this activity: a recursive static route, a directly attached static route, a fully specified static route, and a default route.

Part 1: Examine the Network and Evaluate the Need for Static Routing

1. Looking at the topology diagram, how many networks are there in total? 5
2. How many networks are directly connected to R1, R2, and R3? R1 has 2, R2 has 3, and R3 has 2.
3. How many static routes are required by each router to reach networks that are not directly connected? R1 needs 3 static routes, R2 needs 2 static routes, and R3 needs 3 static routes.
4. Test connectivity to the R2 and R3 LANs by pinging PC2 and PC3 from PC1.
   • Why were you unsuccessful? Because there are no routes to these networks on R1.

Part 2: Configure Static and Default Routes

Step 1: Configure recursive static routes on R1.

1. What is recursive static route? A recursive static route relies on the next hop router in order for packets to be sent to its destination. A recursive static route requires two routing table lookups.
2. Why does a recursive static route require two routing table lookups? It must first look in the routing table for the destination network and then look up the exit interface/direction of the network for the next hop router.
3. Configure a recursive static route to every network not directly connected to R1, including the WAN link between R2 and R3.
   • ip route 172.31.0.0 255.255.255.0 172.31.1.193
   • ip route 172.31.1.196 255.255.255.252 172.31.1.193
   • ip route 172.31.1.128 255.255.255.192 172.31.1.193
4. Test connectivity to the R2 LAN and ping the IP addresses of PC2 and PC3.
   • Why were you unsuccessful? R1 has a route to the R2 and R3 LANs, but R2 and R3 do not have a routes to R1.

Step 2: Configure directly attached static routes on R2.

1. How does a directly attached static route differ from a recursive static route? A directly attached static route relies on its exit interface in order for packets to be sent to its destination, while a recursive static route uses the IP address of the next hop router.
2. Configure a directly attached static route from R2 to every network not directly connected.
   • ip route 172.31.1.0 255.255.255.128 Serial0/0/0
   • ip route 172.31.1.128 255.255.255.192 Serial0/0/1
3. Which command only displays directly connected networks? show ip route connected
4. Which command only displays the static routes listed in the routing table? show ip route static
5. When viewing the entire routing table, how can you distinguish between a directly attached static route and a directly connected network? The static route has an S and a directly connected network has a C.

Step 3: Configure a default route on R3.

1. How does a default route differ from a regular static route? A default route, also known as the gateway of last resort, is the network route used by a router when no other known route exists for a destination network. A static route is used to route traffic to a specific network.
2. Configure a default route on R3 so that every network not directly connected is reachable.
   • ip route 0.0.0.0 0.0.0.0 Serial0/0/1
3. How is a static route displayed in the routing table? S* 0.0.0.0/0

Step 4: Document the commands for fully specified routes.

Note: Packet Tracer does not currently support configuring fully specified static routes. Therefore, in this step, document the configuration for fully specified routes.

1. Explain a fully specified route. A fully specified route is a static route that is configured with an exit interface and the next hop address.
2. Which command provides a fully specified static route from R3 to the R2 LAN?
   • R3(config)# ip route 172.31.0.0 255.255.255.0 s0/0/1 172.31.1.197
3. Write a fully specified route from R3 to the network between R2 and R1. Do not configure the route; just calculate it.
   • R3(config)# ip route 172.31.1.192 255.255.255.252 s0/0/1 172.31.1.197
4. Write a fully specified static route from R3 to the R1 LAN. Do not configure the route; just calculate it.
   • R3(config)# ip route 172.31.1.0 255.255.255.128 s0/0/1 172.31.1.197

Step 5: Verify static route configurations.

Use the appropriate show commands to verify correct configurations.

Which show commands can you use to verify that the static routes are configured correctly? show ip route, show ip route static, and the show ip route [network] commands

Part 3: Verify Connectivity

Every device should now be able to ping every other device. If not, review your static and default route configurations.

From year to year, Cisco has updated many versions with difference questions. The latest version is version 6.0 in 2018. What is your version? It depends on your instructor creating your class. We recommend you to go thought all version if you are not clear. While you take online test with netacad.com, You may get random questions from all version. Each version have 1 to 10 different questions or more. After you review all questions, You should practice with our online test system by go to 'Online Test' link below.

Suggested Scoring Rubric

6.2.4.4 Packet Tracer – Router and Switch Resilience Answers

Packet Tracer – Router and Switch Resilience (Answers Version)

Answers Note: Red font color or gray highlights indicate text that appears in the Answers copy only.

Addressing Table

Objectives

Packet Tracer 6.2 2.4 Free Download

Part 1: Hardening the IOS Configuration

Part 2: Activating the Cisco IOS Resilient Configuration Feature

Background

In this activity, you will harden the IOS configuration of a router within the Metropolis network. Afterwards, you will enable the IOS resiliency feature on a Cisco router. The IP addressing, network configuration, and service configurations are already complete. You will use the client devices in the Metropolis network to deploy the IOS resiliency configuration.

Part 1: Hardening the IOS configuration

Step 1: Access the command prompt on Sally’s computer.

6.4.1.2 Packet Tracer

1. Click the Metropolis Bank HQ site and then click the computer Sally.
2. Click the Desktop tab and then click Command Prompt.

Step 2: Remotely connect to the router HQ_Router.

1. SSH to the HQ_Router by entering ssh –l admin 10.44.1.1 in the command prompt. Use the password of cisco12345 when prompted.
2. At the prompt, type enable and enter the enable password class when prompted.
   Your prompt should display:
   HQ_Router#
3. Were you prompted with any warning message preventing unauthorized users from accessing the HQ_Router?____________________________________________________________________________________
   No

Step 3: Create a legal notification message on the HQ_Router.

Packet Tracer 6.2.2.4 Answers

1. At the HQ_Router# prompt, enter global configuration mode using the configure terminal command.
2. At the HQ_Router(config)# prompt, paste in the following commands:
   banner motd #
   UNAUTHORIZED ACCESS TO THIS DEVICE IS PROHIBITED
   You must have explicit, authorized permission to access or configure this device.
   Unauthorized attempts and actions to access or use this system may result in civil and/or
   criminal penalties.
   All activities performed on this device are logged and monitored.
   #
3. At the HQ_Router(config)# prompt use the end and logout command to end your connection to HQ_Router.
4. SSH into the HQ_Router again from the computer Sally. The SSH password is cisco12345.
   Were you prompted with any additional text/information when you connected successfully to the HQ_Router? What is shown?________________________________________________________________________________________________________________________________________________________________________
   Yes, the MOTD banner configured in step 3.b is displayed after successfully forming an SSH connection with router HQ_Router.

Step 4: Enforce password security on the HQ_Router.

1. At the prompt, type enable and enter the enable password class when prompted.
2. Enter global configuration mode using the configure terminal command. At the HQ_Router(config)# prompt, paste in the following commands:
   !encrypts plain-text passwords in the running-config
   service password-encryption
   !enforces any new configured passwords to have a minimum of 10 characters
   security passwords min-length 10

Part 2: Activating the Cisco IOS Resilient Configuration Feature

Step 1: View the current IOS image.

Packet Tracer 6.2.4 Configure Etherchannel

1. While connected via SSH from Sally’s computer, enter the exit command to return to the HQ_Router# prompt.
2. Enter the command dir flash: to view the current IOS.bin file.
   What is the name of the current .bin file in flash?____________________________________________________________________________________
   c2900-universalk9-mz.SPA.151-4.M4.bin

Step 2: Secure the running image and configuration.

1. At the HQ_Router# prompt, enter global configuration mode using the configure terminal command.
2. Use the secure boot-image command within the HQ_Router(config)# prompt to activate IOS image resilience and prevent the IOS file from both showing in the directory output and prevents the deletion of the secured IOS file.
3. Use the secure boot-config command within the HQ_Router(config)# prompt to store a secure copy of the running configuration and prevent deletion of the secured configuration file.
4. Return to privileged EXEC mode by entering the exit command. Now enter the command dir flash: to view the current IOS.bin file.
   Are there any IOS.bin file listed?____________________________ No
5. At the HQ_Router# prompt, enter the command show secure bootset to view the status of the Cisco IOS image and configuration resilience.

Suggested Scoring Rubric

Packet Tracer 6.2.4.4