Table of Contents

Introduction xx
Chapter 1 Introduction to WANs 1
Providing Integrated Services to the Enterprise 2
Review Question 2
Exercise 1-1: Browsing Through Internet Routing Tables 2
Exercise 1-2: Tracing a Path Through the Internet 4
WAN Technology Concepts 6
Review Question 6
WAN Connection Options 6
Review Questions 7
Chapter Review Vocabulary Exercise: Matching 8
Chapter Review Multiple-Choice Questions 9
Lab 1-1: Challenge Review Lab (1.4.1) 13
Scenario 14
Task 1: Prepare the Network 14
Task 2: Perform Basic Device Configurations 15
Task 3: Configure and Activate Serial and Ethernet Addresses 15
Task 4: Configure STP 15
Task 5: Configure VTP 15
Task 6: Configure VLANs 15
Task 7: Configure RIP Routing 15
Task 8: Configure OSPF Routing 16
Task 9: Configure EIGRP Routing 16
Task 10: Document the Router Configurations 16
Task 11: Clean Up 16
Packet Tracer Exercise: Comprehensive WAN Fundamentals 16
Packet Tracer Skills Integration Challenge 16
Task 1: Configure Static and Default Routing 18
Task 2: Add and Connect the BRANCH Router 19
Task 3: Add and Connect the Switches 19
Task 4: Add and Connect the PCs 19
Task 5: Perform Basic Device Configuration 20
Task 6: Configure OSPF Routing 20
Task 7: Configure STP 21
Task 8: Configure VTP 21
Task 9: Configure Trunking 21
Task 10: Configure VLANs 21
Task 11: Verify End-to-End Connectivity 22
Chapter 2 PPP 23
Serial Point-to-Point Links 24
Review Questions 25
PPP Concepts 25
Vocabulary Exercise: Matching 26
Configuring PPP 27
Review Questions 27
Configuring PPP with Authentication 27
Review Questions 28
Chapter Review: Multiple-Choice Questions 28
Chapter Review Exercise 32
Lab 2-1: Basic PPP Configuration Lab (2.5.1) 33
Scenario 34
Task 1: Prepare the Network 34
Task 2: Perform Basic Router Configuration 34
Task 3: Configure and Activate Serial and Ethernet Addresses 35
Task 4: Configure OSPF on the Routers 35
Task 5: Configure PPP Encapsulation on Serial Interfaces 37
Task 6: Break and Restore PPP Encapsulation 44
Task 7: Configure PPP Authentication 45
Task 8: Intentionally Break and Restore PPP CHAP Authentication 49
Task 9: Document the Router Configurations 51
Task 10: Clean Up 54

Packet Tracer Companion: Basic PPP Configuration (2.5.1) 54

Lab 2-2: Challenge PPP Configuration (2.5.2) 55
Scenario 56
Task 1: Prepare the Network 56
Task 2: Perform Basic Router Configuration 56
Task 3: Configure and Activate Serial and Ethernet Addresses 56
Task 4: Configure OSPF on Routers 57
Task 5: Configure PPP Encapsulation on Serial Interfaces 57
Task 6: Intentionally Break and Restore PPP Encapsulation 57
Task 7: Configure PPP CHAP Authentication 57
Task 8: Intentionally Break and Restore PPP CHAP Authentication 57
Task 9: Document the Router Configurations 57
Task 10: Clean Up 57
Packet Tracer Companion: Challenge PPP Configuration (2.5.2) 57
Lab 2-3: Troubleshooting PPP Configuration (2.5.3) 58
Scenario 59
Task 1: Load Routers with the Supplied Scripts 59
Task 2: Find and Correct Network Errors 64
Task 3: Document the Corrected Network 64
Task 4: Clean Up 64
Packet Tracer Companion: Troubleshooting PPP Configuration (2.5.3) 64
Packet Tracer Exercise 2-1: PPP 64
Packet Tracer Exercise 2-2: PPP Troubleshooting 65
Packet Tracer Skills Integration Challenge 65
Task 1: Configure Static and Default Routing 66
Task 2: Add and Connect a Router 67
Task 3: Design and Document an Addressing Scheme 67
Task 4: Add and Connect the Devices in the Address Space 68
Task 5: Configure Basic Device Settings 68
Task 6: Configure PPP Encapsulation with CHAP Authentication 69
Task 7: Configure OSPF Routing 69
Task 8: Configure VLANs 69
Task 9: Verify Connectivity 70
Chapter 3 Frame Relay 71
Basic Frame Relay Concepts 72
Review Questions 73
Configuring Frame Relay 73
Vocabulary Exercise: Matching Terms 74
Advanced Frame Relay Concepts 74
Fill-in-the-Blank Exercise 75
Configuring Advanced Frame Relay 75
Vocabulary Exercise: Matching Commands 76
Chapter Review Multiple-Choice Questions 78
Lab 3-1: Basic Frame Relay (3.5.1) 82
Scenario 83
Task 1: Prepare the Network 83
Task 2: Perform Basic Router Configuration 84
Task 3: Configure Frame Relay 85
Task 4: Verify the Configuration 90
Task 5: Troubleshoot Frame Relay 94
Task 6: Configure a Frame Relay Subinterface 99
Lab 3-2: Challenge Frame Relay Configuration (3.5.2) 105
Scenario 106
Task 1: Prepare the Network 106
Task 2: Perform Basic Router Configuration 106
Task 3: Configure IP Addresses 106
Task 4: Configure EIGRP on Routers R1 and R2 107
Task 5: Configure Frame Relay PVC Between R1 and R2 107
Task 6: Intentionally Break the PVC, and Then Restore It 107
Task 7: Configure Frame Relay Subinterfaces 107
Task 8: Intentionally Break the PVC, and Then Restore It 107
Task 9: Document the Router Configurations 107
Task 10: Clean Up 107
Lab 3-3: Troubleshooting Frame Relay (3.5.3) 108
Scenario 108
Task 1: Prepare the Network 108

Task 2: Troubleshoot and Repair the Frame Relay Connection Between R1 and
R2 112
Task 3: Document the Router Configurations 112
Task 4: Clean Up 112
Lab 3-4: Frame Relay with Subinterfaces 112
Scenario 114
Task 1: Configure the HQ Router 114
Task 2: Configure Subinterfaces on the HQ Router 114
Task 3: Configure the Serial Interface on the Branch 1 Router 114
Task 4: Configure the Serial Interface on the Branch 2 Router 115
Task 5: Configure the Serial Interface on the Branch 3 Router 115
Task 6: Configure the FastEthernet Interface on the Branch 1 LAN 115
Task 7: Configure the FastEthernet Interface on the Branch 2 LAN 115
Task 8: Configure the FastEthernet Interface on the Branch 3 LAN 115
Task 9: Configure EIGRP 116
Task 10: Verify the Configurations 116
Packet Tracer Companion: Frame Relay Full Mesh 116
Packet Tracer Skills Integration Challenge 116
Task 1: Configure PPP with CHAP Between Devices 118
Task 2: Configure Full-Mesh Frame Relay 119
Task 3: Configure Static and Default Routing 120
Task 4: Configure and Test Inter-VLAN Routing 121
Task 5: Configure VTP and Trunking on the Switches 121
Task 6: Configure VLANs on the Switch 122
Task 7: Configure and Verify VLAN 99 123
Task 8: Configure S1 as Root for All Spanning Trees 123
Task 9: Assign Ports to VLANs 124
Task 10: Test End-to-End Connectivity 124
Chapter 4 Network Security 125
Introduction to Network Security 126
Vocabulary Exercise: Matching 126
Vocabulary Exercise: Completion 127
Securing Cisco Routers 128
Describe Good Password Practices 128
Configuring Router Passwords 128
Secure Router Network Services 129
Vulnerable Router Services Exercise 130
Securing Routing Protocols: Completion 130
Using Cisco Security Device Manager 131
Preparing a Router for SDM 131
Secure Router Management 132
Managing Cisco IOS Images: Identify Commands 132
Managing Cisco IOS Images: Short Answer 132
Password-Recovery Exercise 133
Lab 4-1: Basic Security Configuration (4.6.1) 135
Scenario 135
Task 1: Prepare the Network 136
Task 2: Perform Basic Router Configurations 137
Task 3: Secure the Router from Unauthorized Access 137
Task 4: Secure Access to the Network 140
Task 5: Logging Activity with SNMP (Simple Network Management Protocol) 143
Task 6: Disabling Unused Cisco Network Services 144
Task 7: Managing Cisco IOS and Configuration Files 150
Task 8: Using SDM to Secure a Router 159
Task 9: Document the Router Configurations 165
Task 10: Clean Up 165
Lab 4-2: Challenge Security Configuration (4.6.2) 165
Scenario 166
Task 1: Prepare the Network 167
Task 2: Perform Basic Router Configurations 167
Task 3: Secure Access to Routers 168
Task 4: Secure Access to the Network 168
Task 5: Logging Activity with SNMP (Simple Network Management Protocol) 168
Task 6: Disabling Unused Cisco Network Services 168
Task 7: Managing Cisco IOS and Configuration Files 169
Task 8: Using SDM to Secure R2 169

Task 9: Document the Router Configurations 169

Task 10: Clean Up 169
Lab 4-3: Troubleshooting Security Configuration (4.6.3) 170
Scenario 170
Task 1: Load Routers with the Supplied Scripts 171
Task 2: Find and Correct All Network Errors 179
Task 3: Document the Corrected Network 180
Task 4: Clean Up 180
Packet Tracer Skills Integration Challenge 180
Task 1: Configure Routing 181
Task 2: Configure OSPF Authentication 182
Task 3: Upgrade the Cisco IOS Image 182
Chapter 5 ACLs 183
Using ACLs to Secure Networks 184
Multiple-Choice Questions 185
Configuring Standard ACLs: Command Exercise 187
Configuring Extended ACLs 189
Vocabulary Exercise: Matching Terms 189
Extended ACL Command Exercise 190
Configuring Complex ACLs 191
Review Questions 191
Vocabulary Exercise: Matching Terms 192
Lab 5-1: Basic Access Control Lists (5.5.1) 193
Scenario 194
Task 1: Prepare the Network 194
Task 2: Perform Basic Router Configurations 194
Task 3: Configure a Standard ACL 195
Task 4: Configure an Extended ACL 197
Task 5: Control Access to the VTY Lines with a Standard ACL 198
Task 6: Troubleshoot ACLs 200
Task 7: Document the Router Configurations 201
Task 8: Clean Up 201
Packet Tracer Companion: Basic Access Control Lists (5.5.1) 201
Lab 5-2: Access Control Lists Challenge (5.5.2) 202
Task 1: Prepare the Network 203
Task 2: Perform Basic Router Configurations 203
Task 3: Configure Standard ACLs 203
Task 4: Configure Extended ACLs 203
Task 5: Verify an ACL 204
Task 6: Document the Router Configurations 204
Task 7: Clean Up 205
Packet Tracer Companion: Challenge Access Control Lists (5.5.2) 205
Lab 5-3: Troubleshooting Access Control Lists (5.5.3) 205
Scenario 206
Task 1: Load Routers with the Supplied Scripts 206
Task 2: Find and Correct Network Errors 206
Task 3: Document the Corrected Network 206
Task 4: Clean Up 206
Packet Tracer Exercise 5.1: Named Access Control Lists 207
Packet Tracer Exercise 5.2: Access Control Lists 207
Packet Tracer Skills Integration Challenge 207
Introduction 208
Task 1: Configure PPP with CHAP Authentication 208
Task 2: Configure Default Routing 209
Task 3: Configure OSPF Routing 209
Task 4: Implement Multiple ACL Security Policies 210
Chapter 6 Teleworker Services 213
Business Requirements for Teleworker Services 214
Review Questions 214
Broadband Services: Fill-in-the-Blank Exercise 215
VPN Technology 216
Vocabulary Exercise: Matching 216
Multiple-Choice Questions 217
Packet Tracer Exercise 6-1: DSL/Cable Configuration 219
Packet Tracer Exercise 6-2: Wireless Configuration 219

Packet Tracer Skills Integration Challenge 219

Task 1: Apply Basic Router Configurations 221
Task 2: Configure Dynamic and Default Routing 221
Task 3: Establish Teleworker Services 221
Task 4: Test Connectivity Before ACL Configuration 222
Task 5: Apply ACL Policies 222
Task 6: Test Connectivity After ACL Configuration 222
Chapter 7 IP Addressing Services 223
DHCP 224
Vocabulary Exercise: Matching 224
Scaling Networks with NAT 225
Fill-in-the-Blank Exercise 225
Vocabulary Exercise: Matching 226
Reasons for Using IPv6 226
Multiple-Choice Questions 227
Concept Questions 230
Lab 7-1: Basic DHCP and NAT Configuration (7.4.1) 231
Scenario 232
Task 1: Prepare the Network 232
Task 2: Perform Basic Router Configurations 232
Task 3: Configure PC1 and PC2 to Receive an IP Address Through DHCP 232
Task 4: Configure a Cisco IOS DHCP Server 234
Task 5: Configure Static and Default Routing 237
Task 6: Configure Static NAT 237
Task 7: Configure Dynamic NAT with a Pool of Addresses 238
Task 8: Configure NAT Overload 240
Task 9: Document the Network 241
Task 10: Clean Up 241
Packet Tracer Companion: Basic DHCP and NAT Configuration (7.4.1) 241
Lab 7-2: Challenge DHCP and NAT Configuration (7.4.2) 242
Scenario 243
Task 1: Prepare the Network 243
Task 2: Perform Basic Router Configurations 243
Task 3: Configure a Cisco IOS DHCP Server 243
Task 4: Configure Static and Default Routing 244
Task 5: Configure Static NAT 245
Task 6: Configure Dynamic NAT with a Pool of Addresses 245
Task 7: Document the Network 246
Task 8: Clean Up 246
Packet Tracer Companion: Challenge DHCP and NAT Configuration (7.4.2) 246
Lab 7-3: Troubleshooting DHCP and NAT (7.4.3) 246
Scenario 247
Task 1: Prepare the Network 247
Task 2: Find and Correct Network Errors 250
Task 3: Document the Router Configurations 251
Task 4: Clean Up 251
Packet Tracer Companion: Troubleshooting DHCP and NAT Configuration (7.4.3) 251
Lab 7-4: IPv6 Basic Configuration Using an Adtran 251
Scenario 251
Task 1: Upgrade IOS to Support IPv6 252
Task 2: Enter Basic Configuration for Each Device 252
Task 3: Enable IPv6 Forwarding 253
Task 4: Configure IPv6 Addresses 254
Task 5: Create and Address Loopbacks 255
Task 6: Configure RIPng Routing 256
Task 7: Test Connectivity 258
Lab 7-5: IPv6 Basic Configuration Using a Frame Switch 259
Scenario 259
Task 1: Upgrade IOS to Support IPv6 259
Task 2: Enter the Basic Configuration for Each Device 260
Task 3: Enable IPv6 Forwarding 261
Task 4: Configure IPv6 Addresses 262
Task 5: Create and Address Loopbacks 263
Task 6: Configure RIPng Routing 265
Task 7: Test Connectivity 269
Task 8: Advertise the Default Route 269

Packet Tracer Exercise 7-1: DHCP 270

Packet Tracer Exercise 7-2: DHCP Troubleshooting 270
Packet Tracer Exercise 7-3: Configuring NAT, PAT, and Static NAT 270
Packet Tracer Exercise 7-4: Double NAT with DHCP 270
Packet Tracer Skills Integration Challenge 270
Task 1: Apply Basic Configurations 272
Task 2: Configure PPP Encapsulation with CHAP 272
Task 3: Configure Dynamic and Default Routing 273
Task 4: Configure Routers Using DHCP 273
Task 5: Verify That PCs Are Automatically Configured with Addressing Details 274
Task 6: Configure a DNS Server with DNS Entries 274
Task 7: Configure an ACL to Permit NAT 274
Task 8: Configure Static NAT 275
Task 9: Configure Dynamic NAT with Overload 275
Task 10: Configure the ISP Router with a Static Route 275
Task 11: Test Connectivity 275
Chapter 8 Network Troubleshooting 277
Documenting Your Network 278
Concept Questions 278
Troubleshooting Methodologies and Tools 279
Multiple-Choice Questions 280
WAN Communications 281
Fill-in-the-Blank Exercise 282
Network Troubleshooting 282
Vocabulary Exercise: Define 283
Activity 8-1: Troubleshooting Role Play (8.3.7) 284
Scenario 284
Task 1: Build the Network 285
Task 2: Test the Network 285
Task 3: Break the Network 285
Task 4: Troubleshoot the Problem 285
Task 5: Gather Symptoms from Suspect Devices 285
Task 6: Correct the Problem 285
Task 7: Document the Problem and Solution 285
Task 8: Reverse the Roles and Start Over 285
Task 9: Clean Up 285
Lab 8-1: Troubleshooting Enterprise Networks 1 (8.5.1) 286
Scenario 287
Task 1: Load Routers with the Supplied Scripts 288
Task 2: Find and Correct All Network Errors 300
Task 3: Verify That Requirements Are Fully Met 300
Task 4: Document the Corrected Network 300
Task 5: Clean Up 300
Packet Tracer Companion: Troubleshooting Enterprise Networks 1 (8.5.1) 300
Lab 8-2: Troubleshooting Enterprise Networks 2 (8.5.2) 301
Scenario 302
Task 1: Load Routers with the Supplied Scripts 303
Task 2: Find and Correct All Network Errors 314
Task 3: Verify That Requirements Are Fully Met 314
Task 4: Document the Corrected Network 314
Task 5: Clean Up 314
Packet Tracer Companion: Troubleshooting Enterprise Networks 2 (8.5.2) 314
Lab 8-3: Troubleshooting Enterprise Networks 3 (8.5.3) 315
Scenario 316
Task 1: Load Routers with the Supplied Scripts 317
Task 2: Find and Correct All Network Errors 328
Task 3: Verify That Requirements Are Fully Met 328
Task 4: Document the Corrected Network 328
Task 5: Clean Up 328
Packet Tracer Companion: Troubleshooting Enterprise Networks 3 (8.5.3) 328
Packet Tracer Exercise 8-1: Comprehensive Network Troubleshooting 329
Packet Tracer Skills Integration Challenge 329
Task 1: Configure Frame Relay in a Hub-and-Spoke Topology 331
Task 2: Configure PPP with CHAP and PAP Authentication 332
Task 3: Configure Static and Dynamic NAT on HQ 332
Task 4: Configure Static and Default Routing 332

Task 5: Configure Inter-VLAN Routing 333

Task 6: Configure and Optimize EIGRP Routing 333
Task 7: Configure VTP, Trunking, the VLAN Interface, and VLANs 333
Task 8: Assign VLANs and Configure Port Security 334
Task 9: Configure STP 334
Task 10: Configure DHCP 334
Task 11: Configure a Firewall ACL 335
Task 12: Configure Wireless Connectivity 335
Task 13: Network Troubleshooting 336
Appendix How to Install SDM 337
Step 1: Preparation 337
Step 2: Prepare the Router for SDM 337
Step 3: Configure Addressing 338
Step 4: Extract SDM on the Host 338
Step 5: Install SDM on the PC 338
Step 6: Run SDM from the PC 339
Step 7: Install SDM to the Router 341
Step 8: Run SDM from the Router 343