P1

This is a lab item in which tasks will be performed on virtual devices.

1. Refer to the tasks tab to view the tasks for this lab item.
2. Refer to the topology tab to access the device console(s) and perform the tasks.
3. Console access is available for all required devices by clicking the device icon or using
the tab(s) above the console window.
4. All necessary preconfigurations have been applied.
5. Do not change the enable password or hostname for any advice.
6. Save your configurations to NVRAM before moving to the next item.
7. Click next at the bottom of the screen to submit this lab and move to the next
question.
8. When Next is clicked, the lab closes and cannot be reopened.

Tasks

All physical cabling between the two switches is installed. Configure the network connectivity
between the switches using the designated VLANs and interfaces.

1. Configure VLAN 12 named Compute and VLAN 34 named Telephony where required
for each task.
2. Configure Ethernet0/1 on SW2 to use the existing VLAN name Available.
3. Configure the connection between the switches using access ports.
4. Configure Ethernet0/1 on SW1 using data and voice VLANs.
5. Configure Ethernet0/1 on SW2 so that the Cisco proprietary neighbor discovery
protocol is turned off the designated interface only.

e0/0 Vlan 12 e0/0

SW1 SW2

e0/1 e0/1

Vlan 12 Vlan
Vlan 34 “Available”

Telephone Compute PC
A. SW1
SW1>enable
SW1#config
SW1(config)#vlan 12
SW1(config-vlan)#name Compute
SW1(config-vlan)#vlan 34
SW1(config-vlan)#name Telephone
SW1(config-vlan)#int e0/0
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 12
SW1(config-vlan)#int e0/1
SW1(config-if)#switchport mode access
SW1(config-if)#switchport access vlan 12
SW1(config-if)#switchport voice vlan 34
SW1(config-if)#end
SW1#wr

B. SW2
SW2>enable
SW2#config
SW2(config)#vlan 12
SW2(config-vlan)#name Compute
SW2(config-vlan)#vlan 34
SW2(config-vlan)#name Telephone
SW2(config-vlan)#int e0/0
SW2(config-if)#switchport mode access
SW2(config-if)#switchport access vlan 12
SW2(config-vlan)#int e0/1
SW2(config-if)#switchport mode access
SW2(config-if)#switchport access vlan 99
SW2(config-if)#no cdp enable
SW2(config-if)#end
SW2#wr
P2. Connectivity between three routers has been established, and IP services must
be configured in the order presented to complete the implementation. Tasks
assigned include configuration of NAT, NTP, DHCP, and SSH services.

1. All traffic sent from R3 to the R1 Loopback address must be configured for NAT
on R2. All source addresses must be configured from R3 to the IP address of
Ethernet0/0 on R2, while using only a standard access list named PUBNET. To
verify, a ping must be successful to the R1 Loopback address sourced from R3.
Do not use NVI NAT configuration.
2. Configure R1 as an NTP server and R2 as a client, not as a peer, using the IP
address of the R1 Ethernet0/2 interface. Set the clock on the NTP server for
midnight on May 1, 2018.
3. Configure R1 as a DHCP server for the network 10.1.3.0/24 in a pool named
TEST. Using a single command, excluded addresses 1-10 from the range.
Interface Ethernet0/2 on R3 must be issued the IP address of 10.1.3.11 via
DHCP.
4. Configure SSH connectivity from R1 to R3, while excluding access via other
remote connection protocols. Access for user root and password cisco must be
set on router R3 using RSA and 1024 bits. Verify connectivity using a SSH
session from router R1 using a destination address of 10.1.3.11. Do not modify
console access or line numbers to accomplish this task.

Lo1: 192.168.1.1 Lo1: 192.168.2.1

10.1.2.1 10.1.2.2
E0/0 E0/0
E0/2 E0/1
10.1.3.1 10.2.3.2
E0/2 E0/1
10.1.3.11 10.2.3.3

Lo1: 192.168.3.1
A. 1

R2>enable
R2#configure terminal
R2(config)#ip access-list standard PUBNET
R2(config-std-nacl)#permit 10.2.3.0 0.0.0.255
R2(config-std-nacl)#exit
R2(config)#ip nat inside source list PUBNET interface e0/0 overload
R2(config)#int e0/0
R2(config-int)#ip nat outside
R2(config-int)# int e0/1
R2(config-int)#ip nat inside

2
R1>enable
R1#clock set 00:00:00 1 may 2018
R1#configure terminal
R1(config)#ntp master 1
R1(config)#ntp source e0/2

R2(config)#ntp server 10.1.3.1

3
R1(config)#ip dhcp excluded-address 10.1.3.1 10.1.3.10
R1(config)#ip dhcp pool TEST
R1(dhcp-config)#network 10.1.3.0 255.255.255.0
R1(dhcp-config)#default-router 10.1.3.1
R1(dhcp-config)#exit

R3>enable
R3>configure terminal
R3(config)#interface e0/2
R3(config-if)#ip address dhcp
R3(config-if)#exit

4
R3(config)#username root password cisco
R3(config)#crypto key generate rsa modulus 1024
R3(config)#line vty 0 4
R3(config-line)#login local
R3(config-line)#transport input ssh
R3(config-line)#exit

5.
R1(config)#do write
R2(config)#do write
R(config)#do write