DCompNtwk Frame Relay/EIGRP PT Practice SBA

A few things to keep in mind while completing this activity:

1. 2. 3. Do not use the browser Back button or close or reload any Exam windows during the exam. Do not close Packet Tracer when you are done. It will close automatically. Click the Submit Assessment button to submit your work.

Introduction
In this practice Packet Tracer Skills Exam, you will: finish designing the IP addressing scheme implement the addressing in the network to meet the requirements configure Frame Relay and EIGRP to enable communication with the rest of the network configure a backup link in case the Frame Relay network becomes unavailable implement a security policy using access control lists to filter traffic

Addressing Table
Device Interface Fa0/0.1 Fa0/0.10 BR2 Fa0/0.20 Fa0/1 S0/0/0.101 Fa0/0 Edge3 Fa0/1 S0/0/0.201 Fa0/0 ISP Fa0/1 S1 S2 S3 H1 H2 Server VLAN1 VLAN1 VLAN1 NIC NIC NIC 172.16.1.222 172.17.1.6 255.255.255.248 172.17.1.1 172.16.1.227 172.17.1.2 255.255.255.248 172.17.1.1 10.10.10.5 255.255.255.252 n/a 10.10.10.2 172.31.1.1 172.17.1.1 10.10.10.6 172.31.1.2 10.10.10.1 255.255.255.252 255.255.255.252 255.255.255.248 255.255.255.252 255.255.255.252 255.255.255.252 Address Subnet Mask Default Gateway n/a n/a n/a n/a n/a n/a n/a n/a n/a

NOTE: To aid in configuring, verifying and troubleshooting the devices, use a printed version of these instructions to fill in the missing address information in the table during Step 2.

All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.

Page 1 of 4

CCNA Discovery Designing and Supporting Computer Networks DCompNtwk Frame Relay/EIGRP PT Practice SBA

Step 1: Finish the IP Addressing Scheme.

Design an addressing scheme and fill in the Addressing Table based on the following requirements: a. Subnet the address space 172.16.1.128/25 to provide 50 host addresses for the BR2 VLAN 10 while wasting the least amount of address space. b. Assign the first available subnet to the BR2 VLAN 10. c. Assign the first (lowest) address in this subnet to the Fa0/0.10 subinterface on BR2.

d. Assign the last (highest) address in this subnet to H1. e. Subnet the remaining address space to provide 30 host addresses for the BR2 VLAN 20 while wasting the least amount of space. f. Assign the first available subnet to the BR2 VLAN 20.

g. Assign the first (lowest) address in this subnet to the Fa0/0.20 subinterface on BR2. h. Subnet the remaining address space to provide 6 host addresses for the BR2 VLAN 1 while wasting the least amount of space. i. j. k. Assign the first available subnet to the BR2 VLAN 1. Assign the first (lowest) address in this subnet to the Fa0/0.1 subinterface on BR2. Assign the second address in this subnet to the VLAN 1 interface on S1.

Step 2: Configure BR2 with IP Addressing and Inter-VLAN Routing.

NOTE: The user EXEC mode password is cisco and the privileged EXEC mode password is class for BR2 and S1. Finish the basic configuration of BR2 by addressing the interfaces according to your IP addressing scheme completed in Step 1. For each Fast Ethernet subinterface, the VLAN number matches the subinterface number. Wait to configure the serial subinterface IP addressing until Step 5.

Step 3: Configure S1 with IP Address, VLANs and as the STP Root Bridge.
NOTE: S2 is already configured. You do not have access to S2. On S1, you will receive a Domain Mismatch message every 30 seconds until S1 is correctly configured. a. Configure the S1 VLAN interface with the correct IP addressing as determined in Step 1 b. Configure the default gateway. c. Establish an 802.1q trunk with BR2 and with S2. After STP converges, S1 should be able to ping both BR2 and S2.

d. S1 should be configured as a VTP server for the discovery domain. Set the VTP password to cisco. S2 is already configured as a client for this domain. e. Create and name two VLANs on the VTP server. Names are case-sensitive: f. VLAN 10, Name: Staff VLAN 20, Name: Guest

Assign VLAN 10 to the Fa0/10 interface for H1 access.

g. Use a priority of 4096 to set S1 as the STP root for all VLANs.

All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.

Page 2 of 4

CCNA Discovery Designing and Supporting Computer Networks DCompNtwk Frame Relay/EIGRP PT Practice SBA

Step 4: Configure and Verify Host Addressing.

NOTE: H2 is already configured. You cannot access it directly. However, you can use the Add Simple PDU tool to test connectivity from H2 to other devices. a. Configure H1 with IP addressing according to your design in Step 1. b. Verify that H1 can ping the default gateway and H2. c. Use the "Add Simple PDU" tool found on the panel to the right to verify that H2 can ping the default gateway.

Step 5: Configure and Verify Frame Relay.

a. Configure BR2 to use a point-to-point Frame Relay link through the SP-FR cloud to Edge3. c. Configure IP addressing according to the Addressing Table. Assume inverse ARP is disabled and configure DLCI 101.

b. Verify that Frame Relay is operational between BR2 and Edge3. BR2 should be able to ping the directly-connected interface of Edge3.

Step 6: Configure EIGRP Routing on BR2.

a. Configure BR2 for EIGRP routing using the following requirements: c. Use AS 100. Configure the classful network addresses without wildcards. Do not advertise the network shared with the ISP.

b. Verify that BR2 is now neighbors with Edge3. H1 should be able to ping Discovery Server.

d. Use the "Add Simple PDU" tool to verify that H2 can ping Discovery Server.

Step 7: Configure and Verify a Backup Link to Edge3.

a. The link to ISP is used as a backup link in case the Frame Relay network goes down. Configure a floating static route on BR2 to the Edge3 LAN subnet. Use the outbound interface argument in your configuration. Use an administrative distance of 100.

b. Verify that the backup link is operational by temporarily shutting down the Serial 0/0/0 interface. c. H1 and H2 should still be able to ping Discovery Server after the network converges.

d. Restore the Serial 0/0/0 interface and verify the Frame Relay network is operational again.

Step 8: Configure Access Control Lists.

a. Configure and apply an access control list with the case-sensitive name NO_WEB based on the following security policy: VLAN 20 is only allowed web access beyond BR2. All other VLAN 20 access beyond BR2 is denied.

All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.

Page 3 of 4

CCNA Discovery Designing and Supporting Computer Networks DCompNtwk Frame Relay/EIGRP PT Practice SBA

c.

All other traffic is allowed. The access list should still be in effect when the backup link is active.

b. Use the "Add Simple PDU" tool to verify that H2 cannot ping Discovery Server or Edge3. Take the BR2 Frame Relay link down and verify that the same results occur through the backup link.

Last updated: September 2010

All contents are Copyright 19922010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.

Page 4 of 4