Challenge Lab 1.

Solution

Show Runs

RouterA

interface Loopback0
ip address 192.168.1.1 255.255.255.240
!
interface Loopback1
ip address 192.168.2.1 255.255.255.224
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
ip address 10.0.0.1 255.255.255.0
ip access-group stop_ping in
clock rate 2000000
!
ip route 172.16.0.0 255.255.240.0 Serial0/0
ip route 172.20.0.0 255.255.252.0 Serial0/0
!
no ip http server
no ip http secure-server
!
ip access-list extended stop_ping
permit icmp 172.16.1.0 0.0.15.255 192.168.2.0 0.0.0.31
deny icmp any any
 permit ip any any
!
control-plane
!

line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
login
!
!
end

RouterB

interface Loopback0
ip address 172.16.1.1 255.255.240.0
!
interface Loopback1
ip address 172.20.1.1 255.255.252.0
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
ip address 10.0.0.2 255.255.255.0
ip access-group 100 in
clock rate 2000000
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Serial0/0
!
!
no ip http server
no ip http secure-server
!
access-list 100 permit tcp any host 172.16.1.1 eq telnet
access-list 100 deny tcp any any eq telnet
access-list 100 permit ip any any
!
control-plane
!
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4
password cisco
login
line vty 5 903
password cisco
login
!
 !
end

Test:
R1#telnet 172.20.1.1
Trying 172.20.1.1 ...
% Destination unreachable; gateway or host down

R1#telnet 172.16.1.1
Trying 172.16.1.1 ... Open

User Access Verification

Password:

Test:
R2#ping
Protocol [ip]:
Target IP address: 192.168.2.1
Repeat count [5]:
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: 172.16.1.1
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:
Packet sent with a source address of 172.16.1.1
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/5/16 ms
R2#ping
Protocol [ip]:
Target IP address: 192.168.2.1
Repeat count [5]:
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Source address or interface: 172.20.1.1
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.2.1, timeout is 2 seconds:
Packet sent with a source address of 172.20.1.1
U.U.U
Success rate is 0 percent (0/5)
R2#