CCNA Discovery 4 Module 6, 7, 8, 9 Exam Answers Version 4.0

CCNA Discovery 4 Module 6 Exam Answers Version 4.0

1. A network engineer researched whether there are mechanisms available to help with the transition from an IPv4 addressing structure to IPv6. What three options did the engineer find?(Choose three.)
• A protocol translation mechanism allows communication between the IPv4 and IPv6 networks.
• A packet analyzer determines the addressing structure and converts it to the appropriate IPv4 or IPv6 scheme.
• New Core devices that support IPV6 must be purchased.
• A protocol converter changes IPv4 packets into IPv6 packets and vice versa.
• A dual-stack network design allows both IPv4 and IPv6 addressing to be used on all network devices.
• Tunneling allows IPv4 packets to be encapsulated so that they can traverse IPv6 networks and vice versa.

2. When should the command no auto-summary be used?
• with RIP version 1, to enable classless routing
• with RIP version 2, to enable classless routing
• with RIP version 1, when discontigous networks exist
• with RIP version 2, when discontigous networks exist

3. Refer to the exhibit. What must an administrator do on R3 to ensure that update packets are sent with subnet mask information?
• Add the commands:
R3(config-router)# auto-summary
R3(config-router)# no version 2
• Add the commands:
R3(config-router)# version 2
R3(config-router)# no auto-summary
• Change the network statement on R3:
R3(config)# network 10.10.4.0
• Add the command:
R3(config)# ip route 0.0.0.0 0.0.0.0 s0/0

4. What best describes a discontiguous network?
• combines several classfull networking address
• contains more than one route to a destination
• implements more than one routing protocol
• separated from the rest of the hierarchical group by another network

5. Refer to the exhibit. A company has decided to add a new workgroup. If the subnetting scheme for the network uses contiguous blocks of addresses, what subnet is assigned to WGROUP3?
• 172.16.3.12/29
• 172.16.3.16/29
• 172.16.3.20/29
• 172.16.3.24/29
• 172.16.3.32/29

6. A network administrator is using the 10.0.0.0/8 network for the company. The administrator must create a masking scheme to support 750 users at the main office and 620 users at the remote office. What mask should be assigned to the 10.0.0.0/8 network to preserve the most addresses?
• 255.255.255.0
• /19
• /20
• 255.255.252.0
• /23
• /21

7. What is another format for the IPv6 address 1080:0000:0000:0000:0000:0000:1267:01A2?
• 1080::1267:01A2
• 1080:0:0:0:0:1267:01A2
• 1080::0:1267:01A2
• 1080:::::1267.01A2

8. How many bits make up an IPv6 address?
• 32
• 48
• 64
• 128

9. After activating IPv6 traffic forwarding, configuring IPv6 addresses, and globally configure RIPng, what is the remaining step to activate RIPng?
• Enter the ipv6 router rip name command and then use network statements to activate RIPng on the interfaces.
• Enter the ipv6 router rip name command and then specify which interfaces run RIPng, which are passive, and which only receive.
• Enter the interface mode for each IPv6 interface and enable RIPng with the ipv6 rip name enable command.
• Enter the interface mode for each IPv6 interface and enable the multicast group FF02::9, and then activate RIPng globally using the ipv6 router rip name command.
• Enter the router rip command, and then activate RIPng using the version command.
• RIPng then automatically runs on all IPv6 interfaces.

10. Refer to the exhibit. The IT management has determined that the new subnet for WGROUP3 needs to be broken down into four more subnets. What would the subnet mask be for the four newly created subnets within WGROUP3?
• 255.255.128.0
• 255.255.192.0
• 255.255.224.0
• 255.255.248.0
• 255.255.252.0

11. Refer to the exhibit. What is the first usable IP address that can be assigned to the WGROUP3 switch?
• 172.16.50.96/27
• 172.16.50.97/27
• 172.16.50.98/27
• 172.16.50.99/27
• 255.255.255.0

12. Refer to the exhibit. Which set of router commands is required to turn on unequal-cost load sharing so that RTRA selects the path A-B-E and the lowest cost path A-C-E to the Internet?
• RTRA(config)# router eigrp 1
RTRA(config-router)# variance 2
• RTRA(config)# router eigrp 1
RTRA(config-router)# variance 1
• RTRA(config)# router eigrp 1
RTRA(config-router)# maximum-paths 2
• RTRA(config)# router eigrp 1
RTRA(config-router)# maximum-paths 1

13. Refer to the exhibit. Assuming that the default EIGRP configuration is running on both routers, which statement is true about Router A reaching the 2.2.2.0/24 network?
• The no auto-summary command needs to be issued to disable automatic summarization.
• The network 2.2.2.0 command needs to be issued to ensure that Router A recognizes the 2.2.2.0 network.
• EIGRP supports VLSM and automatically recognizes the 2.2.2.0 network.
• EIGRP does not support VLSM; therefore it cannot be used with discontiguous networks.

14. Refer to the exhibit. The network administrator wants router RTA to send only the summarized route of 10.10.0.0/16 to RTC. Which configuration accomplishes this?
• RTA(config)# interface s0/0
RTA(config-if)# ip summary-address eigrp 101 10.10.0.0 255.255.0.0
RTA(config-if)# exit
RTA(config)# router eigrp 101
RTA(config-router)# no auto-summary
• RTA(config)# interface s0/1
RTA(config-if)# ip summary-address eigrp 101 10.10.0.0 255.255.0.0
RTA(config-if)# exit
RTA(config)# router eigrp 101
RTA(config-router)# no auto-summary
• RTA(config)# interface s0/0
RTA(config-if)# ip summary-address eigrp 101 10.10.0.0 255.255.0.0
• RTA(config)# interface s0/1
RTA(config-if)# ip summary-address eigrp 101 10.10.0.0 255.255.0.0

15. What is a good design practice when developing a hierarchical addressing scheme?
• Address the nodes in the Access Layer and work toward the Core Layer.
• Assign addresses to the Core devices before planning the addressing scheme for the server farm.
• Determine where statically configured addressing will be implemented.
• Determine what percentage of devices are wired and what percentage of devices are wireless.

16. A network administrator is asked to design a new addressing scheme for a corporate network. Presently, there are 850 users at the head office, 220 users at sales, 425 at manufacturing, and 50 at the research site. Which statement defines the correct VLSM addressing map with minimal waste using the 172.17.0.0/16 network?
• 172.17.0.0/20 head office
172.17.1.0/21 manufacturing
172.17.1.0/22 sales
172.17.3.0/26 research
• 172.17.48.0/19 head office
172.17.16.0/20 manufacturing
172.17.48.128/25 sales
172.17.48.0/26 research
• 172.17.0.0/22 head office
172.17.4.0/23 manufacturing
172.17.5.0/24 sales
172.17.6.0/26 research
• 172.17.2.0/22 head office
172.17.3.0/23 manufacturing
172.17.4.0/26 sales
172.17.4.128/25 research

17. How would the routes for networks 172.16.1.0/24, 172.16.3.0/24, and 172.16.15.0/24 be summarized?
• 172.16.0.0/20
• 172.16.0.0/21
• 172.16.0.0/22
• 172.16.0.0/24

18. What two advantages does CIDR provide to a network? (Choose two.)
• dynamic address assignment
• automatic route redistribution
• reduced routing update traffic
• easier management of summarization
• automatic summarization at classfull boundaries

19. Which statement describes MD5 authentication for neighbor authentication?
• All passwords are sent in clear text when neighbors first learn about each other.
• Only the initiating router sends its password using encrypted text when it first discovers a new router.
• All routers send their password using encrypted text only when they first learn of each other.
• All routers send their password using encrypted text each time they exchange update packets.

20. Refer to the exhibit. What are the broadcast addresses for each subnet?
• Admin – 172.16.31.0
QA – 172.16.1.127
Development – 172.16.2.255
Sales – 172.16.32.255
• Admin – 172.16.31.255
QA – 172.16.1.255
Development – 172.16.3.255
Sales – 172.16.63.255
• Admin – 172.16.31.255
QA – 172.16.1.127
Development – 172.16.3.255
Sales – 172.16.63.255
• Admin – 172.16.31.0
QA – 172.16.1.255
Development – 172.16.2.255
Sales – 172.16.32.255

21. Refer to the exhibit. The IT management is adding three VLANs to the wgroup3 switch. The current subnet will be broken down to support 14 hosts for each of the new VLANs. What will the new subnet mask be for these VLANs?
• 255.255.255.192
• 255.255.255.240
• 255.255.248.0
• 255.255.255.224
• 255.255.240.0
• 255.255.255.248

22. An administrator is configuring IPv6 on a router. The steps that have already been completed are:
1. Activate IPv6 traffic forwarding.
2. Configure IPv6 addresses.
3. Globally configure RIPng.
What is the remaining step to complete the activation of RIPng?
• Enter the ipv6 router rip name command and then use network statements to activate RIPng on the interfaces.
• Enter the ipv6 router rip name command and then specify which interfaces run RIPng, which are passive, and which only receive.
• Enter the interface mode for each IPv6 interface and enable RIPng with the ipv6 rip name enable command.
• Enter the interface mode for each IPv6 interface and enable the multicast group FF02::9, and then activate RIPng globally using the ipv6 router rip name command.
• Enter the router rip command, and then activate RIPng using the version command. RIPng then automatically runs on all IPv6 interfaces.

23. Which range includes all available networks in the 192.168.8.0/21 network?
• 192.168.8.0/24 – 192.168.14.0/24
• 192.168.8.0/24 – 192.168.15.0/24
• 192.168.8.0/24 – 192.168.16.0/24
• 192.168.8.0/24 – 192.168.17.0/24

24. Which two are best practices for creating a new IP addressing scheme for a network? (Choose two.)
• Plan and allow for significant growth.
• Assign addresses to the access layer before any other layer.
• Plan the entire addressing scheme before assigning any addresses.
• Begin with the access layer network summary addresses and work to the edge.
• Plan the addressing scheme to meet the current minimum requirement needs.
• Implement statically assigned addresses to all hosts in the distribution layer first.

25. Refer to the exhibit. Which subnet will provide sufficient addresses for the Production network with minimal waste?
• 172.16.0.192/26
• 172.16.0.192/27
• 172.16.0.224/26
• 172.16.0.160/26
• 172.16.0.144/27

26. A network designer is implementing a new network for a company. The designer is using all new Cisco equipment and has decided to select a hierarchical routing protocol for the network. The designer wishes to minimize traffic from routing updates but also needs fast routing convergence in the event of a topology change. Also, the existing IP addressing scheme requires that the selected protocol support VLSM. Which routing protocol should be chosen?
• BGP
• RIP v1
• RIP v2
• OSPF

CCNA Discovery 4 Module 7 Exam Answers Version 4.0

1.      A network engineer has decided to pilot test a portion of a new network design rather than rely on a prototype for proof-of-concept. What are two advantages of pilot testing a design concept?(Choose two.)
• The test network experiences real-world network traffic.
• Users within the enterprise are not affected by the test.
• Network response can be tested in unplanned and unpredictable situations.
• Unlikely failure conditions can be conveniently tested.
• Network response can be tested in a highly controlled simulated environment.

2.      While preparing a network test plan document, a network designer records all initial and modified device configurations. Which section of the document typically contains this information?
• Appendix
• Test Procedures
• Test Description
• Actual Results and Conclusions
• Anticipated Results and Success Criteria

3.      Refer to the exhibit. A network designer creates a test plan that includes the specification shown. In which section of the test plan would this specification be found?
• Test Description
• Test Procedures
• Design and Topology Diagram
• Actual Results and Conclusions
• Anticipated Results and Success Criteria

4.      What OSI model Layer 2 security measure can a network engineer implement when prototyping network security?
• a firewall at the network edge
• port security at the access design layer
• port security at the distribution design layer
• IP access control lists at the access design layer

5.      How do designers decide which network functions need to be included in the prototype test?
• They select the functions that align with the business goals.
• They select the functions that occur at the network core.
• They select the functions that do not exist in the existing network.
• They select the functions from a list of generic network operations.

6.      Refer to the exhibit. During prototype testing of the Cisco network shown, connectivity must be verified. Assuming all connections are working and CDP is enabled on all devices and interfaces, on which device was the command issued?
• R1
• S1
• R3
• S2
• R5
• S3

7.      Refer to the exhibit. During prototyping, Layer 2 functionality is being tested. Based on the output shown, which two pieces of information can be determined? (Choose two.)
• Switch1 is the root bridge.
• Interface Fa0/2 on Switch1 has no role in the operation of spanning tree.
• Interface Fa0/2 on Switch1 is the alternate port used to reach the root bridge.
• Based on the entries in the “Role” column, it can be concluded that RSTP has been implemented.
• Interface Fa0/1 on Switch1 is the forwarding port selected for the entire spanning-tree topology.

8.      What Rapid Spanning Tree Protocol (RSTP) state is given to the forwarding port elected for every switched Ethernet LAN segment?
• root
• backup
• alternate
• designated

9.      Refer to the exhibit. During prototype testing, verification of VLAN connectivity is being performed. Based on the information shown, what command produced the output?
• show spanning-tree
• show interfaces trunk
• show cdp neighbors
• show interfaces
• show ip interface brief

10.  Switch port Fa0/24 was previously configured as a trunk, but now it is to be used to connect a host to the network. How should the network administrator reconfigure switch port Fa0/24?
• Use the switchport mode access command from interface configuration mode.
• Enter the switchport nonegotiate command from interface configuration mode.
• Administratively shut down and re-enable the interface to return it to the default.
• Enter the no switchport mode trunk command in interface configuration mode.
• Use the switchport access vlan vlan number command from interface configuration mode
• to remove the port from the trunk and add it to a specific VLAN.

11.  Refer to the exhibit. The redundant paths are of equal bandwidth and EIGRP is the routing protocol in use. Which statement describes the data flow from Server to PC2?
• EIGRP load balances across the R3 to R1 and R3 to R2 links.
• EIGRP load balances across the R1 to Switch3 and R2 to Switch3 paths.
• EIGRP load balances across the Switch1 to Switch3 and Switch1 to Switch2 paths.
• EIGRP does not load balance in this topology.

12.  A network designer needs to determine if a proposed IP addressing scheme allows efficient route summarization and provides the appropriate amount of scalability to a design. What is useful for validating a proposed hierarchical IP addressing scheme?
• NBAR
• a pilot network
• a route summary
• a network simulator
• a physical topology ma

13.  In the router command encapsulation dot1q 10, what does the number 10 represent?
• the metric used for a particular route
• the number of the VLAN associated with the encapsulated subinterface
• the priority number given to the device for the election process
• the number that must match the Fast Ethernet subinterface number
• the number used to program the router for unequal cost path load balancing

14.  Refer to the exhibit. The users on the 192.168.10.192 network are not allowed Internet access. The network design calls for an extended ACL to be developed and tested. Where should the ACL be placed for the least effect on other network traffic?
• inbound on Fa0/0 of R3
• outbound on Fa0/0 of R3
• inbound on Fa0/1 of R3
• outbound on Fa0/1 of R3
• inbound on Fa0/1 of R2
• outbound on S0/0 of R2

15.  Refer to the exhibit. What two measures can be taken to address the areas of weakness circled in the network design? (Choose two.)
• Provide redundant connections to all end users.
• Add another core switch to increase redundancy.
• Add a switch in the server block connecting the server farm to each core switch.
• Add an additional switch to the DMZ and direct links from the new switch to the core switches.
• Provide a redundant firewall router connecting to a second ISP, the core switches, and the DMZ.

16.  Why is it important to record baseline measurements of a prototype network?
• Test results show security weaknesses after the baseline tests are run.
• The baseline is the point at which the network is operating at its fullest potential.
• Baseline measurements define a point at which network traffic has exceeded the designed capabilities of the network.
• Test results are compared to the baseline to see how the test conditions increase processor use or decrease available bandwidth.

17.  Refer to the exhibit. A network administrator has been given the task of creating a design for a temporary classroom building that is to be set up outside an overcrowded school. In testing the prototype, it is found that the student PC cannot ping the teacher PC. All the switch interfaces are active and connected properly, as is interface Fa0/0 of the router. Given that only the commands shown have bee added to the router configuration, what is the source of the problem?
• The IP settings on the student PC are incorrect.
• The default gateway on the teacher PC is misconfigured.
• The router Fa0/0 interface has not been configured as a VLAN trunk.
• The Fa0/0 physical interface has not been configured with an IP address and subnet mask.
• The administrator forgot to configure a routing protocol to allow the ping packets to reach the teacher PC subnet.

18.  Refer to the exhibit. Why are interfaces Fa0/11, Fa0/23, and Fa0/24 not shown in this switch output?
• Interfaces Fa0/11, Fa0/23, and Fa0/24 are trunks.
• Interfaces Fa0/11, Fa0/23, and Fa0/24 are shutdown.
• Interfaces Fa0/11, Fa0/23, and Fa0/24 are blocking.
• Interfaces Fa0/11, Fa0/23, and Fa0/24 failed diagnostics

19.  Refer to the exhibit. A network technician is performing an initial installation of a new switch in the east wing. The technician removes the switch from the box, makes the connections to the network, and adds the configuration shown. The technician notifies the network administrator that the switch has been installed. When the network administrator at the home office attempts to telnet to the switch from host 192.168.0.1, the connection fails. What action should the network technician take?
• Add an enable password to the switch.
• Add a default gateway to the switch configuration.
• Configure the switch with an IP access list to permit the host connection.
• Enable the physical interfaces of the switch with the no shutdown command.

20.  Refer to the exhibit. After all the interfaces have stabilized, what is the spanning-tree state of all the enabled interfaces of SW11?
• discarding
• forwarding
• learning
• listening

 

1.      Which mechanism is used to create a floating static route?
• administrative distance
• cost
• hop count
• passive interface

 

2.      IPSec operates at which layer of the OSI model?
• application
• network
• datalink
• transport

 

3.      Which is true regarding Frame Relay LMI?
• There are three LMI types standardized by ANSI, ITU-T, and Cisco.
• Routers at each end of a Frame Relay virtual circuit must always use the same LMI type.
• The LMI type must be manually configured.
• The only function of LMI is to verify the connection between the router and the Frame Relay switch.

 

4.      Which statement identifies the IP address design for subinterfaces that are configured for a Frame Relay network?
• Multipoint configurations require the IP address of each subinterface on each router to be in its own subnet.
• Multipoint configurations require IP addresses for each subinterface on each router to be a part of the same subnet.
• Point-to-point configurations require IP addresses for each subinterface on each router to be a part of the same subnet.
• Point-to-point configurations do not require IP addresses on each subinterface on each router.
• Multipoint configurations do not require IP addresses on each subinterface on each router.

 

5.      Which three algorithms can be used to encrypt user data in an IPSec VPN framework? (Choose three.)
• 3DES
• AES
• Diffie-Hellman
• DES
• ESP
• SHA

 

6.      Which flag is set by a Frame Relay switch to inform the receiving station that congestion was experienced?
• BECN
• DE
• FECN
• FCS

 

7.      Refer to the exhibit. The complete configuration of a Frame Relay interface on the Chicago router is shown. How does the Chicago router know which DLCI is mapped to the IP address of the remote router?
• DE
• CIR
• FECN
• Inverse ARP

 

8.      What statement correctly defines the purpose of the split horizon rule?
• marks the route unreachable in a routing update that is sent to other routers
• prevents routers from advertising a network through the interface from which the update came
• prevents routers from accepting higher cost routes to networks previously marked as inaccessible before the timer expires
• limits the number of hops a packet can traverse through the network before it should be discarded

 

9.      Which PVC status suggests that the router recognizes the DLCI configured on its interface as being present on the Frame Relay switch, but the PVC associated with the DLCI is not capable of end-to-end communication?
• active
• deleted
• inactive
• idle

 

10.  Refer to the exhibit. Which router command is used to associate a Layer 2 address with the corresponding Layer 3 address?
• Miller(config-if)#frame-relay map ip 172.16.150.1 110
• Miller(config-if)#frame-relay map ip 172.16.150.1 112
• Miller(config-if)#frame-relay map ip 172.16.150.2 110
• Miller(config-if)#frame-relay map ip 172.16.150.2 112

 

11.   A network administrator issued the command show frame-relay pvc. The response from the router shows the status of a PVC as deleted. What is the reason for this status?
• The DLCI is using the wrong LMI type.
• The DLCI is usable but has little activity.
• The DLCI is programmed in the switch but the circuit is not usable.
• The DLCI configured on the CPE device does not match the DLCI.

 

12.  What is one benefit of using a network simulation software package?
• The network design can be tested before it is actually implemented.
• Simulation software packages are quickly updated to support new network technologies and devices.
• Simulated devices have the same features as actual devices, allowing for detection of all potential problems.
• Software packages can simulate all possible network traffic conditions, giving an accurate prediction of network performance.

 

13.  What are two components a network designer considers when planning a VPN? (Choose two.)
• encryption algorithm for privacy and security
• encapsulation protocol to use when creating the VPN tunnel
• switching technology to optimize VPN WAN throughput
• tunneling technology for guarding against data corruption
• routing protocol on the gateway for optimum performance

 

14.  When identifying VPN requirements for endpoint users, what care must be taken to protect the network when remote users log in from unsecured public locations?
• Ensure that the user has VPN client software that allows access to all internal resources.
• Ensure that the VPN user traffic does not slow down internally sourced traffic on the network.
• Ensure that there are no obstacles to hamper the users from accessing all internal resources.
• Ensure that remote users can only access network resources that are appropriate to their job function.

 

15.  Which two components are key elements when implementing a VPN? (Choose two.)
• concentration
• encryption
• prioritization
• compression
• encapsulation

 

16.  What tool can help ease the configuration of VPN servers on routers?
• Cisco SDM
• PIX Firewall
• Cisco VPN Concentrator
• Cisco Adaptive Security Appliances

 

17.  What is used to identify the path to the next frame-relay switch in a Frame Relay network?
• CIR
• DLCI
• FECN
• BECN

 

18.  Which two statements are true regarding VPN security? (Choose two.)
• Users may only establish a VPN connection from secure locations and never from public areas.
• Users that connect to a network through a VPN do not have to log in to resources on the network.
• Users that connect to a network through a VPN are are considered trusted users on the network.
• Users may establish a VPN connection from unsecure locations such as airports and hotel lobbies.
• Users that connect to a network through a VPN should have access to all the resources on the network.

 

19.   Refer to the exhibit. What is placed in the address field of a frame that will travel from the Orlando office to the DC office?
• MAC address of the Orlando router
• MAC address of the DC router
• 192.168.1.25
• 192.168.1.26
• DLCI 100
• DLCI 200

 

20.   Two directly connected routers are able to ping each other through the Serial 0/0/0 interfaces. A network administrator changes the encapsulation on one router to PPP, and the other is left at the default value. What statement would appear in the output of the show interfaces command issued on one of the routers?
• Serial 0/0/0 is up, line protocol is up
• Serial 0/0/0 is down, line protocol is down
• Serial 0/0/0 is up, line protocol is down
• Serial 0/0/0 is down, line protocol is up
• Serial 0/0/0 is administratively down, line protocol is down

 

21.  Refer to the exhibit. What statement is true about the configuration shown for R2?
• R2 is configured as the Frame Relay switch.
• R2 is configured as the main site in a multipoint Frame Relay WAN prototype.
• R2 is configured as the main site in a point-to-point Frame Relay WAN prototype.
• R2 is configured as a remote site in a multipoint Frame Relay WAN prototype.
• R2 is configured as a remote site in a point-to-point Frame Relay WAN prototype.

 

22.  A company uses serial interfaces on its border router to connect to branch offices through WAN connections. The security policy dictates that the encapsulation should use PPP with authentication protocol CHAP. Which statement is true about the configuration requirement of CHAP?
• Both the username and password are case sensitive.
• Neither the username nor the password is case sensitive.
• The username is case sensitive but the password is not case sensitive.
• The password is case sensitive but the username is not case sensitive.

 

23.  Which two statements about split tunnels are true? (Choose two.)
• Local LAN printing will use the VPN tunnel.
• The traffic load on the VPN server is increased.
• Traffic to the corporate network will be encrypted.
• There is a reduced security risk to the corporate network.
• All traffic travels across the VPN tunnel from client to server.
• Traffic to public web sites and general Internet navigation is not encrypted.

 

24.   An IP address has been assigned to the S0/0/0 interface of a new Cisco router. The administrator wishes to quickly test basic connectivity with the serial interface of an adjoining Cisco router via the use of the default WAN protocol. Which WAN protocol will be used for this test?
• PPP
• Frame Relay
• DSL
• HDLC
• ATM

 

25.  Which two statements about split tunnels are true? (Choose two.)
• Local LAN printing will use the VPN tunnel.
• The traffic load on the VPN server is increased.
• Traffic to the corporate network will be encrypted.
• There is a reduced security risk to the corporate network.
• All traffic travels across the VPN tunnel from client to server.
• Traffic to public web sites and general Internet navigation is not encrypted.

 

 

CCNA Discovery 4 Module 9 Exam Answers Version 4.0

1.      Which two statements describe factors that influence the layout of a proposal? (Choose two.)
• Proposal layouts are required to use sans serif typefaces.
• A specific proposal layout is followed when one is specified in the RFP.
• A designer chooses the layout if a written RFP does not specify an outline.
• The software that is used to create the proposal dictates the proposal layouts.
• Proposal layouts are required to use a format that is designed by the network engineer.

 

2.      What two items are typically included in the executive summary of a proposal? (Choose two.)
• project scope summary
• high-level implementation plan
• quotes for all needed equipment
• technical requirements for the design
• emphasis on the benefits that meet the goals of the customer

 

3.      Which proposal section describes the intended routing protocol, security mechanisms, and addressing for the planned network?
• logical design
• physical design
• executive summary
• implementation plan
• network requirements

 

4.      Which occurrence would indicate a failure of the design phase?
• The incorrect model switches were ordered.
• There is no customer signoff for task completion.
• New requirements are identified after implementation begins.
• The new network capacity is inadequate to support required traffic.

 

5.      A network installation team is assigned to replace all core switches in an existing data center. No other upgrades are planned. Which kind of installation is this?
• a new installation
• a fork-lift installation
• a phased installation
• a green field installation

 

6.      What service is provided Cisco standard warranty?
• software application maintenance
• replacement of defected hardware
• next business day delivery of replacement parts
• access to the Cisco Technical Assistance Center (TAC) 24 hours a day, 7 days a week

 

7.      An upgraded version of the Cisco IOS has been purchased. However, the CD arrived damaged. How will this loss be covered?
• a hardware warranty
• a software warranty
• the Cisco SMARTnet Service
• an additional service contract

 

8.      A company informs the account manager that the installation of a new edge router at the customer remote branch location cannot be done at the scheduled time because of a large order that the branch office needs to complete. As a result, the end date of the project must be adjusted to accommodate the additional time. What is the action should the account manager take?
• Cancel the order for the new edge router.
• Work with designer to redesign the branch network.
• Instruct the technician to complete the install of the router at on the date in the contract.
• Adjust the timeline documentation to show the company how the delay will affect the
• project completion date.

 

9.      NetworkingCompany completes the installation of a network upgrade for a retail customer. All of the onsite tests complete successfully and the customer IT staff approves the results of the tests. The manager of the retail store contacts NetworkingCompany to inform the company that the store will not pay for the upgrade until a recently purchased software package is installed and tested on the network. Which two items that are contained in the proposal can the account manager refer to when discussing this issue with the store manager?(Choose two.)
• the project scope
• the bill-of-material
• the project timeline
• the terms and conditions
• the business goals of the customer
• the evaluation of the current network

 

10.  The operation of a new branch location network is delayed because a VPN cannot be configured and established between the branch location and the main office. It is determined that the router at the main office does not have enough memory and does not have the correct Cisco IOS version image to support the VPN features. To prevent this delay, this problem should have been identified and corrected during which part of the design project?
• the preparation of the business case
• the prioritizing of the technical goals
• the characterization of the existing network
• the implementation of the approved design

 

11.  The NetworkingCompany team is tasked to prepare an implementation schedule for a customer. It is determined that the new firewalls and wireless controllers that are specified in the design cannot be delivered and installed within the agreed upon time frame. The NetworkingCompany informs the customer of the problem. What two options can the NetworkingCompany team take to ensure the success of the project? (Choose two.)
• plan to add additional staff and resources to shorten the installation time after the new equipment is delivered
• eliminate redundancy in the design to reduce the amount of equipment that is needed
• renegotiate a new time frame with the customer to accommodate the delay
• delay the installation of the security devices and controllers until a later time
• redesign the network to use only readily available equipment and software

 

12.  AAA Financial Services Company is performing implementation planning for a core switch upgrade. The company has 200 financial software programmers that work billable hours during the week. They have critical, scheduled money transfer transmissions that occur at hourly intervals every night. There are two, two-hour long IT maintenance windows scheduled for software upgrades, one on Saturday and one on Sunday. The bank advertises online banking as available 24 hours on business days and 21 hours on the weekends. However, a network upgrade that is necessary to replace some switches is expected to take four hours. Because of rack constraints, this time includes three hours to remove the old switches before the new switches can be installed and one hour to test the logical configuration. How should the implementation scheduling be handled
• Defer the software upgrades. Use the Saturday window to perform the hardware installation. Use the Sunday window to perform the logical testing.
• Coordinate and publish a separate four-hour downtime during Friday to perform the complete switch installation and testing process. Use the Saturday and Sunday windows to correct any outage problems after the Friday window.
• Coordinate and publish two, four-hour downtimes incorporating the published Saturday and Sunday windows. Defer any software upgrades until the new network is proven to be working
correctly with the old software. Use the Sunday window as a fallback scheduling period if there re problems necessitating backing out of the Saturday window.
• Coordinate and publish an eight-hour downtime incorporating the Saturday window. This ill allow four hours for installation and logical testing, one hour for troubleshooting and decision, and three hours to roll back to the previous configuration if the new switching cannot pass the logical testing. Defer any software upgrades until the new network is proven to be working orrectly with the old software.

 

13.  ncluded in a Bill of Materials (BOM) for a SOHO wired implementation is a Cisco 2811 router, Catalyst 2560 switch, four PCs, three laptops, and a networked printer. Wireless LAN capability will be implemented on this network. Which two equipment types must be added to the BOM to implement this request? (Choose two.)
• DNS server
• LAN switch
• wireless NICs
• DHCP server
• wireless access points

 

14.  A customer has just taken delivery of a Cisco 2811 router and Catalyst 3560 switch. Included with the purchase is the SMARTnet Service. Which two resources are included with SMARTnet Service? (Choose two.)
• signature file updates
• technical support from TAC
• maintenance releases for OS
• software application major releases
• software application maintenance and minor releases

 

15.  A Cisco 1841 router has been purchased without an agreement for SMARTnet Service. What two items are guaranteed under the standard warranty? (Choose two.)
• access to TAC
• replacement of defective physical media
• advanced replacement of hardware parts
• access to a renewable standard warranty contract
• under normal use, replacement of defective hardware

 

16.  Upon completion of a proposal, a network design team must sell their ideas to two key stakeholders. Who are these two stakeholders? (Choose two.)
• customers
• licensing boards
• cabling contractors
• internal management
• project implementation team

 

17.  What are two important guidelines when creating a slide presentation for a meeting with a customer? (Choose two.)
• Use all capital letters on words and phrases when possible for added emphasis.
• Provide varied background graphics to enhance viewer interest.
• Use contrasting colors for background and text to aid visibility.
• Change fonts frequently to denote differences in subject matter.
• Use bulleted text to lead the discussion.

 

18.  In order to finalize a project proposal, an account manager of a
• networking company creates the terms and conditions section. What are two clauses that should be included in this section? (Choose two.)
• cost summary
• installation steps
• change order procedures
• problem resolution process
• maintenance contract quotation

 

19.  Which two items will a systems engineer include in an implementation plan? (Choose two.)
• references to design documents
• the business goals of the customer
• diagrams of the existing traffic flows
• the steps to install and test the network
• cost of each network device and component

 

20.  Which statement describes a phased installation into an existing network?
• A phased installation generally takes less time and expense than a green-field installation.
• A phased installation is not suitable for large, multi-site network installations or upgrades.
• A phased installation requires detailed planning in order to avoid disruption of user services.
• A phased installation involves building an entire replacement network and migrating users over to it.

CCNA Discovery 4 Module 1, 2, 3, 4, 5 Exam Answers Version 4.0 Quantcast

1. What are two mechanisms that provide redundancy for server farm implementations? (Choose two.)
• Rapid Spanning Tree Protocol
• Hot Standby Routing Protocol

2. The ability to connect securely to a private network over a public network is provided by which WAN technology?
• VPN

3. Which three statements describe the functions of the Cisco hierarchical network design model? (Choose three.)
• The distribution layer is responsible for traffic filtering and isolating failures from the core.
• Two goals of the core layer are 100 percent uptime and maximizing throughput.
• The access layer provides a means of connecting end devices to the network.

4. A network designer is creating a new network. The design must offer enough redundancy to provide protection against a single link or device failure, yet must not be too complex or expensive to implement. What topology would fill these needs?
• partial mesh

5. Refer to the exhibit. If the firewall module has been correctly configured using best practices for network security, which statement is true about the security design for the network?
• Servers in the DMZ are protected from internal and external attacks.

6. Which statement is true about a DMZ in a traditional network firewall design?
• Servers in the DMZ provide limited information that can be accessed from external networks.

7. What network connection would be most cost efficient while still meeting the security and connectivity needs of this teleworker?
• DSL VPN connection with a dialup backup link

8. Refer to the exhibit. The network administrator creates a standard access control list to prohibit traffic from the 192.168.1.0/24 network from reaching the 192.168.2.0/24 network while still permitting Internet access for all networks. On which router interface and in which direction should it be applied?
• interface fa0/1, outbound

9. Refer to the exhibit. The server broadcasts an ARP request for the MAC address of its default gateway. If STP is not enabled, what is the result of this ARP request?
• Switch_A and Switch_B continuously flood the message onto the network.

10. What are two best practices in wireless LAN design to ensure secure wireless access to the corporate network? (Choose two.)
• Use a separate WLAN for employees.
• Configure WPA.

11. In a well-designed, high-availability network, which device significantly affects the most users if a failure occurs?
• small workgroup switch in the network access layer

12. Which two statements are true regarding network convergence? (Choose two.)
• In a large network, using the EIGRP or OSPF routing protocols rather than RIPv2 may improve convergence time.
• Route summarization improves convergence time by minimizing the size of the routing table.

13. Centralizing servers in a data center server farm can provide which benefit over a distributed server environment?
• It is easier to filter and prioritize traffic to and from the data center.

14. Refer to the exhibit. What effect does the ACL shown have on network traffic, assuming that it is correctly applied to the interface?
• All Telnet traffic from the 172.16.0.0 network to any destination is denied.

15. Which Cisco IOS function can be configured at the distribution layer to filter unwanted traffic and provide traffic management?
• access control lists

16. What kind of ACL inspects outbound UDP, TCP, and ICMP traffic and allows inbound access only to traffic that belongs to these established sessions?
• reflexive ACL

17. Which three functions are performed at the distribution layer of the hierarchical network model? (Choose three.)
• summarizing routes from the access layer
• isolating network problems to prevent them from affecting the core layer

18. Refer to the exhibit. Which two devices are part of the access design layer? (Choose two.)
• FC-AP
• FC-ASW-2
19. What is true about implementing a centralized server farm topology?
• provides defined entry and exit points so that filtering and securing traffic is easier

20. Refer to the exhibit. What happens when Host 1 attempts to send data?
• Frames from Host 1 cause the interface to shut down, and a log message is sent.

21. Which two considerations are valid when designing access layer security?(Choose two.)
• SSH is more secure than Telnet to administer network devices.
• Disabling unused ports on the switches helps prevent unauthorized access to the network.

22. What address can be used to summarize only networks 172.16.0.0/24, 172.16.1.0/24, 172.16.2.0/24, and 172.16.3.0/24?
• 172.16.0.0/22

23. Which two items in a physical WLAN design can be identified through a site survey? (Choose two.)
• the types of antennas that are required
• the access point hardware that is required

24. Refer to the exhibit. Which two statements correctly describe the benefits of the network access layer design that is shown? (Choose two.)
• If host A sends a broadcast message, only hosts in VLAN10 receive the broadcast frame.
• Segmenting all voice traffic on a separate VLAN facilitates the implementation of QoS.

25. What are three ways to ensure that an unwanted user does not connect to a wireless network and view the data? (Choose three.)
• Disable SSID broadcasting.
• Use authentication between clients and the wireless device.

 

CCNA Discovery 4 Module 2 Exam Answers Version 4.0

Quantcast
1. During an evaluation of the currently installed network, the IT staff performs a gap analysis to determine whether the existing network infrastructure can support the desired new features. At which stage of the Cisco Lifecycle Services approach does this activity occur?
• Plan Phase

2. Which stage of the Cisco Lifecycle Services strategy is usually completed before an organization issues a Request For Proposal (RFP) or Request For Quotation (RFQ)?
• Prepare Phase

3. What is the purpose of SNMP?
• to facilitate the exchange of information between devices and the NMS

4. During an analysis of a customer network, several possible opportunities for network improvement are identified. At which stage of the Cisco Lifecycle Services does this process occur?
• Design Phase

5. What provides the initial data for the Optimize Phase?
• performance monitoring

6. Which two statements are true regarding the response to an RFQ?(Choose two.)
• it should strictly conform to the formatting requirements specified by the RFQ.
• The response helps the customer compare pricing with other potential contractors.

7. What are two disadvantages of using a bottom-up approach instead of a top-down approach to network design? (Choose two.)
• It can result in an inappropriate network design.
• It does not take into account the business goals of the company.

8. What is a business constraint that may impact the WAN design of a company?
• company policy requiring the use of specific vendor networking equipment due to partnerships

9. What is the purpose of preparing a business case?
• to justify the financial investment in implementing the technology change

10. What is the purpose of creating a prioritized list of technical requirements?
• defines the project scope

11. A network engineer is analyzing the network of a potential client company to identify problems and determine whether a network upgrade or addition is needed. Which role in the sales team is this engineer assuming?
• pre-sales engineer

12. Which two statements best describe the responsibilities of an account manager? (Choose two.)
• acts as the primary point of contact between the company and the client
• directs the sales teams and support personnel

13. What is the purpose of system-level acceptance testing?
• to check that the newly installed network meets the business goals and design requirements
• to justify the financial investment required to implement the technology change

14. What is a purpose of establishing a network baseline?
• It creates a point of reference for future network evaluations.

15. When should a network baseline be performed within the stages of the Cisco Lifecycle Services?
• Operate Phase

16. What are two benefits of using a top-down approach instead of a bottom-up approach to network design? (Choose two.)
• incorporates organizational requirements
• clarifies design goals from the perspective of applications and network solutions

17. Which software component is installed on network devices that are managed through SNMP?
• management agents

18. A network engineer working for a contracting company is informed of a pre-bid meeting with a potential client. What purpose does the network engineer have for attending the pre-bid meeting?
• to clarify project scope and timelines not included in the original request for proposal

19. A major corporation has decided to hire someone to upgrade their network infrastructure. A network consulting company wants the job. What document must the network consulting company obtain to learn about the business goals, the project scope, the requirements for the new network and the expected deliverables?
• Request for Proposal

20. A corporation (client) wants a network upgrade and is putting out a request for services to various network consulting companies (contractors). A RFQ is required. Which statement is true concerning the RFQ?
• sent from the client to the contractors in place of a RFP when the technical specifications of a project are known

21. Which stage of the Cisco Lifecycle Services involves proactive management to identify and resolve issues before the organization is affected?
• Optimize Phase

22. Why is it important to prioritize business goals when developing network design?
• to adhere to the best opportunities to contribute to the success of the business

23. Which two items help identify business goals and priorities before a new network project starts? (Choose two.)
• motivation
• profitability

24. A network engineer working for ABC company is writing a response to an RFP for a network upgrade and must create an executive summary. Which statement describes the basic components of an executive summary?
• quick overview of the problem, the recommended solution, and the justification for ABC company doing the job

25. In a network management architecture, which statement best describes a management agent?
• software running on a managed device to collect network information and allow that device to be managed by a management station

 

CCNA Discovery 4 Module 3 Exam Answers Version 4.0

1. It is important to identify the details of network sections and devices that will be affected or involved in a new design. This information is included in which section of the Network Design Requirements Document?
• Project Goal
• Project Scope
• Technical Requirements
• Current State of the Network
2. Which two pieces of information does the network designer need to determine if the Cisco IOS of a router requires an upgrade? (Choose two.)
• amount of NVRAM installed
• model number of the router
• number of interfaces and installed HWICs
• installed Cisco IOS feature set and version
• error statistics for each interface
3. Which three pieces of information need to be considered when selecting the proper Cisco IOS version for an upgrade? (Choose three.)
• processor ID
• interface type
• amount of DRAM
• bootstrap version
• device make and model
• size of system flash memory
4. What are two practices a network technician should follow when installing a new interface card in a router? (Choose two.)
• Be sure the interface card faceplate does not touch the chassis rear panel.
• Do not tighten the captive screws until the router has been powered on and recognizes the card.
• Store the blank faceplate inside the card slot to be used if the card is removed.
• Handle the interface card by the edges to avoid static discharge.
• Push the interface card into place until the edge connector is seated securely
5. The new serial interface card for the router arrives and the network technician reads that it is hotswappable. What does this mean?
• The card cannot be installed while the router is powered on because static discharge could damage the card.
• The card cannot be installed until the router is powered off and completely cooled down.
• The card can be installed while the router is powered on if the router supports this technology.
• The card is a replacement and must be installed in the same slot as the card it is replacing.
6. Refer to the exhibit. A network administrator issues the command shown to gain knowledge about a poorly documented network. Which two pieces of information can the network administrator discover from the command output? (Choose two.)
• One connected device has router capability.
• The entire network contains a total of five Cisco devices with CDP enabled.
• None of the directly connected network devices have been configured with an IP address.
• Device EDGE_2811 is connected to port Fast Ethernet 0/0 on device C3750-24_MDF.
• Five Cisco devices with CDP enabled are directly connected to device C3750-24_MDF
7. Refer to the exhibit. Which of the three Cisco IOS images shown will load into RAM?
• The router selects an image depending on the value of the configuration register.
• The router selects the third Cisco IOS image because it is the most recent IOS image.
• The router selects the second Cisco IOS image because it is the smallest IOS image.
• The router selects an image depending on the boot system command in the configuration.
• The router selects the third Cisco IOS image because it contains the advipservicesk9 image.
8. An administrator wants to download a new Cisco IOS software version to the local router. Which command performs this task?
• copy tftp flash
• copy flash run
• copy start tftp
• copy flash tftp
• copy tftp start
9. Refer to the exhibit. The top of the output shows the Cisco Feature Navigator regarding a Cisco IOS image that the administrator wants to install on a router. Below it is the output from the show version command for that router. Which statement is true regarding the capacity of the router to run this Cisco IOS image?
• There is not enough DRAM and flash.
• There is enough DRAM and flash.
• There is enough DRAM but not enough flash.
• There is enough flash but not enough DRAM.
10. Which two items are objectives of a WLAN design site survey? (Choose two.)
• identify coverage areas
• determine primary AP locations
• determine what AP equipment should be purchased
• determine how many users will access the WLAN
• identify the bottleneck of the LAN infrastructure
11. Refer to the exhibit. Which two actions improve the weaknesses of the topology shown, assuming that each access layer segment is in its own subnet? (Choose two.)
• Implement redundant links to each server by adding additional NICs.
• Implement a reduntant link from all access layer switches to Admin, Dist, and Server Farm.
• Implement a backup firewall with a link to a secondary ISP and implement a redundant link to the DMZ.
• Implement reduntant links from the existing firewall to all access layer switches.
• Implement redundant links from the DMZ to Admin and Dist.
12. A company is beginning to analyze their new Cisco IOS upgrade requirements. What is one of the router components that a network administrator must consider when selecting a new Cisco IOS version?
• processor type
• storage space in NVRAM
• interfaces and modules to be supported
• compatibility of the bootstrap version with the new Cisco IOS software
13. An employee at a company notices that the wireless signal strength indicator on his laptop fluctuates from good to low. The network administrator decides to do a site survey of that area. Which three factors need to be included in the survey? (Choose three.)
• type and model number of the WNIC of the laptop
• number of users in the area
• location of the AP
• list of MAC addresses filtered by the AP
• number of simultaneous applications running on the laptop of the employee
• location of walls and filing cabinets in the office
14. The new network design for AnyCompany must include support of voice and video traffic. Before upgrading, the network designer checks whether the existing devices can support the new requirements. Which three items does the designer need to check? (Choose three.)
• number of routers and switches owned by AnyCompany
• routers that will support extra ASICs and WWICs
• size of DRAM and flash on each device
• routers that will support HWICs and VWICs
• system bootstrap version on each router and switch
• modules supported on the loaded Cisco IOS
15. A new Cisco IOS version has been copied into flash from a TFTP server. When a reload is issued to upgrade the Cisco IOS, the router freezes part of the way through the loading process. What could be the problem?
• There is enough flash but not enough RAM in the router.
• The new HWIC cards have not been installed yet.
• The TFTP server needs to be present during a reload.
• The new Cisco IOS should have been loaded into NVRAM.
• The new bootstrap version is not compatible with the original version on the router.
16. Refer to the exhibit. A network designer has no documentation and is attempting to create a logical diagram of the network using the output from show commands. What can be determined from the output shown?
• The device with the ID of ISP is a router on the Internet.
• The attached switch is a VTP server in the Toronto domain.
• The designer cannot telnet to the attached switch.
• The Cisco router IOS supports enterprise-level voice and video technologies.
17. A production router is reloaded and finishes with a Router> prompt. What three facts can be determined? (Choose three.)
• POST occurred normally.
• The boot process was interrupted.
• There is not enough RAM or flash on this router.
• A full version of the Cisco IOS was located and loaded.
• A configuration file was not located in NVRAM or from a TFTP server.
• The router did not locate the Cisco IOS in flash, so it defaulted to ROM.
18. During a site survey, the network designer noticed that people were accessing the company wireless network from the parking lot. What should be done to stop the wireless signal from radiating out into the parking lot?
• change the channel on the wireless AP
• connect the wireless AP to a firewall
• change the type of antenna attached to the AP
• move the wireless AP to a secure VLAN
• move the wireless AP to a port on a Layer 3 switch
19. A network design project includes a review of the existing network. What is the purpose of this phase of the project?
• eliminate the need for a site survey
• shorten the timeframe of the project
• lower the cost of the project by removing redundant links and devices
• determine if the number of applications used within the company can be reduced
• To determine what existing network devices require upgrades to meet the new
20. Refer to the exhibit. Based upon the Cisco IOS file naming convention, what is represented by the value ipvoicek9 listed in the IOS filename?
• version
• file format
• feature set
• hardware platform
21. Refer to the exhibit. What two items can be determined from the output? (Choose two.)
• R2 is a Cisco 2600 device.
• R2 has 22 MB of RAM installed.
• The version of the IOS is 12.3.
• Over 8 MB of NVRAM is installed.
• A new 36 MB IOS file can be installed on the device.
22. During a wireless site survey, a consultant is determining the hours of peak usage and the estimated number of users in each location. The consultant is currently in what step of the site survey process?
• the defining of customer requirements
• the identification of coverage areas
• the determining of preliminary AP locations
• the measurement of signal strength
23. Refer to the exhibit. The network administrator is attempting to install a new version of the IOS on R2. Based on the exhibited output, what are two possible reasons that the transfer failed?(Choose two.)
• The administrator did not enable TFTP on R2.
• There is not enough flash available to store the new IOS.
• Connectivity between R2 and the TFTP server was not verified.
• The copy command was incorrectly entered.
• The administrator did not verify that the TFTP server is running.

24. In which section of the Network Design Requirements document would a network consulting team detail names and IP addresses of important networking components and servers, provide network diagrams and topologies, and define strengths and weaknesses of the network?
• network requirements
• project scope
• overall project goal
• state of the network

 

CCNA Discovery 4 Module 4 Exam Answers Version 4.0

1.      In addition to the technical considerations, what other major factor is used to evaluate the success of a network installation?
• final project costs
• maintenance costs
• user satisfaction
• statistics describing the performance of network devices

2.      Which two network applications are most affected by network congestion and delays? (Choose two.)
• IP telephony
• live video webcasts
• audio file downloads
• online banking services
• file archival and retrieval

3.      What two Cisco tools can be used to analyze network application traffic? (Choose two.)
• NBAR
• NetFlow
• AutoQoS
• Wireshark
• Custom Queuing

4.      In network design, which technology can be implemented to prioritize traffic based on its importance and technical requirements?
• STP
• QoS
• RTP
• TCP
• VPN

5.      What are two characteristics of voice over IP traffic? (Choose two.)
• Voice packets tend to be small.
• Voice packets must be processed in real time.
• Voice packets can effectively use TCP reliability features.
• Voice traffic can survive packet drops and retransmission delays.
• Voice packets must be converted to analog before being sent across the IP network.
• Voice packets automatically receive a higher priority value than other types of packets.

6.      What are two things that a network designer can do to determine current and anticipated network traffic flows? (Choose two.)
• Survey end users to obtain customer input.
• Upgrade the Cisco IOS software in all networking devices to optimize traffic flow.
• Limit the analysis to host-to-server traffic because host-to-host traffic is unimportant.
• Run a network traffic analysis to determine which applications are in use and by whom.
• Conduct an inventory of all networking devices that includes model numbers and memory configurations

7.      A company that has a traditional telephone system wants to convert to IP telephony. Which two factors should be considered for the design? (Choose two.)
• Digital communications systems have greater noise than analog systems when processing voice traffic.
• Voice-enabled routers or a server must be used for call control and signaling.
• Voice to IP conversions can cause router overhead.
• Power to the phones can be supplied through properly equipped patch panels or switches.
• The cost to combine voice and data VLANs can be a considerable amount.

8.      Several web and email servers have recently been installed as part of an enterprise network. The security administrator has been asked to provide a summary of security features that can be implemented to help prevent unauthorized traffic from being sent into or out of sensitive internal networks. Which three features should the security administrator recommend? (Choose three.)
• firewalls
• priority queuing
• access control lists
• intrusion detection systems
• DHCP
• 128-bit WEP

9.      The design of an IP telephony system needs to meet the technical requirements to provide a connection to the PSTN as well as provide high-quality voice transmissions using the campus network. Which two elements directly affect the ability of the design to meet these requirements?(Choose two.)
• voice-enabled firewall
• PoE switches and patch panels
• redundant backbone connectivity
• voice-enabled router at the enterprise edge
• separate voice and data VLANs with QoS implemented

10.  When implementing VoIP services, which two design considerations should be followed?(Choose two.)
• Confirm that network jitter is minimal.
• Use TCP to reduce delays and dropped packets.
• Establish priority queuing to ensure that large data packets are sent uninterrupted.
• Disable real-time protocols to reduce queuing strategy demands.
• Ensure that packet delays do not exceed 150 ms.

11.  What design strategy should be followed when designing a network that uses video on demand?
• implement the appropriate routing protocol to ensure that data segments arrive in order
• implement different QoS queues based on the type of video traffic being distributed
• install servers to store the data in a centrally located server farm
• configure queuing in the core routers to ensure high availability

12.  When implementing QoS in traffic queues, what is the first step the designer should take to ensure that traffic is properly prioritized?
• define QoS policies
• define traffic classes
• determine traffic patterns
• identify traffic requirements
• identify networking equipment

13.  Which two statements are characteristics of file transfer traffic flows? (Choose two.)
• RTP should be used.
• Traffic is predictable.
• Packets are small in size.
• Transfers are throughput intensive.
• Response-time requirements are low.

14.  Which two items can be determined by diagramming internal traffic flow? (Choose two.)
• the type of ISP services needed
• the capabilities of end-user devices
• the areas where network congestion may occur
• the location of VPN servers used to connect teleworkers
• locations where high-bandwidth connections are required

15.  Which two traffic types are examples of external traffic flows? (Choose two.)
• A user in the IT department telnets to the core layer router.
• A user in marketing connects to the web server of a competitor.
• A user in the IT department telnets into the access layer switch.
• A user in the services department logs in to a web-based email program.
• A user in accounting connects to an FTP server that is connected to the access layer switch.

16.  Which service can be provided by the NetFlow Cisco utility?
• network planning and mapping
• IDS and IPS capabilities
• peak usage times and traffic routing
• network billing and accounting application
• security and user account restrictions
• source and destination UDP port mapping

17.  Refer to the exhibit. If ACL 150 identifies only voice traffic from network 192.168.10.0/24 and no other traffic, which queue will voice traffic from other networks use?
• high
• normal
• medium
• default

18.  Refer to the exhibit. After configuring QoS, a network administrator issues the command show queueing interface s0/1. What two pieces of information can an administrator learn from the output of this command? (Choose two.)
• queue traffic definitions
• priority list protocol assignments
• type of queuing being implemented
• number of packets placed in each queue
• queuing defaults that have been changed
• queuing has not been applied to this interface

19.  An analysis of network protocols reveals that RTP and RTCP are being used. What uses these protocols?
• IDS
• VPN
• WLAN
• firewall
• real-time video

20.  A company is considering adding voice and video to the data networks. Which two statements are true if voice and video are added? (Choose two.)
• PoE switches must be purchased.
• More UDP-based traffic flows will be evident.
• Response times will be increased even if QoS is implemented.
• QoS will most likely be implemented to prioritize traffic flows.
• VPNs will most likely be implemented to protect the voice traffic.

21.  Refer to the exhibit. Which option correctly matches the terms on top with its definition on the bottom?
• A=1, B=3, C=2, D=4
• A=2, B=1, C=4, D=3
• A=2, B=4, C=1, D=3
• A=3, B=2, C=4, D=1
• A=4, B=3, C=1, D=2
• A=4, B=2, C=3, D=1

22.   A database server is configured to purge all data that is 60 days old. Ten data items that are 60 days old are to be purged. However, there is a failure halfway through the transaction, and the entire transaction is voided. What type of transaction action occurred?
• atomic
• consistent
• durable
• isolated

23.  What is the primary goal of QoS?
• classification of traffic
• filtering and queuing voice traffic
• reducing bandwidth requirements
• providing priority service to selected traffic

24.  Which technology provides a mechanism for implementing QoS at Layer 2?
• ToS
• CoS
• DSCP
• IP precedence

25.   A customer purchases tickets online and pays using a credit card, but the system goes down before the transaction is complete. What transaction type retains a record of this transaction after the system failure so that the customer will still receive the tickets and the credit card account will be debited accordingly?
• atomic
• consistent
• durable
• isolated

26.  Refer to the exhibit. The network design documents include requirements to prevent switching loops, to provide link-specific failover, and to provide Layer 3 recovery. Which two protocols would be needed to provide the support? (Choose two.)
• HDLC
• HSRP
• PPP
• RSTP
• VTP

27.   network design must minimize latency to support real-time streaming applications. Which two protocols enable control and scalability of the network resources and minimize latency by incorporating QoS mechanisms? (Choose two.)
• RTCP
• HSRP
• RSTP
• RTP
• RPC

28.  Which two major differences are associated with IP telephony when compared to traditional telephony that uses a PBX? (Choose two.)
• manages phones centrally
• utilizes centralized call routing
• creates peer-to-peer relationships between phones
• requires a separate infrastructure to support data transfer
• requires significant manual configuration when adding, moving, or changing phones

29.  When QoS is implemented in a converged network, which two factors can be controlled to improve performance? (Choose two.)
• link speed
• delay
• packet routing
• jitter
• packet addressing

 

CCNA Discovery 4 Module 5 Exam Answers Version 4.0

1. Which rule should be followed when implementing the security requirements of a network design?
• Avoid reducing security in order to add additional network capabilities.

2. What limitations of the 2960 switch prevent it from providing the services needed in the Distribution layer?
• It does not support route summarization.

3. When considering converged network designs, it is important to identify appropriate service demands. What is a concern when preparing a network design to fit this environment?
• voice-level quality of service

4. Which three design requirements are implemented at the access layer? (Choose three.)
• PoE
• VLANs
• QoS traffic classification and marking

5. Refer to the exhibit. Which statement is true regarding how the ISP router filters traffic?
• All traffic from the 64.100.0.0/21 network can access the Internet.

6. Which two factors should be considered when designing a wireless LAN that provides seamless roaming capabilities? (Choose two.)
• use of a wireless controller to manage IP addressing
• coverage

7. What are three features of a Catalyst 2960 switch? (Choose three.)
• redundant power availability
• SNMP
• switch clustering

8. A company lists this equipment in their network design:
Two Catalyst 4503 Layer 3 switches
One 5500 security appliance firewall
Two Catalyst 6509 switches
Two lightweight access points
Two Catalyst 2960 switches
Which two types of devices would be appropriate to use at the access layer to provide end-user connectivity? (Choose two.)
• lightweight access points
• Catalyst 2960 switches

9. Which two statements are true regarding the following extended ACL? (Choose two.)
• access-list 101 deny tcp 172.16.3.0 0.0.0.255 any eq 20
access-list 101 deny tcp 172.16.3.0 0.0.0.255 any eq 21
access-list 101 permit ip any any
• Telnet traffic originating on network 172.16.3.0/24 is denied.

10. Which statement applies to a large network with thousands of nodes?
• Intrusion detection is more likely to be performed by a separate device rather than integrated into a switch or router

11. on campus. The college currently has only wired network device access. Which two devices must be incorporated into the network design to best accommodate roaming for wireless IP phones?(Choose two.)
• Cisco wireless LAN controller
• lightweight access points

12. What type of WAN service is Frame Relay?
• packet switched

13. Refer to the exhibit. What is an advantage of having two links connected between the two switches shown?
• provides connectivity when one of the connections between the switches fails

14. What is the function of the access layer in the Cisco three-layer hierarchical internetworking model?
• provides QoS classification and marking

15. When applying network security, what security measure should be implemented first?
• securing the network devices

16. What characteristic of a network supports high availability
• redundancy

17. What is integrated into a Cisco IP phone to reduce the number of ports needed in the wiring closet?
• switch

18. Which network design process identifies where to place access points?
• site survey

19. Using expandable, modular network devices is a key element of what network design criteria?
• scalability

20. What is a primary function of a wireless LAN controller?
• tuning each AP channel for optimal coverage

21. What characteristic in a routing protocol allows it to support the network design criteria for availability?
• fast convergence

22. A network designer is evaluating the network security implementation for an organization. The designer recommends adding network security devices in front of the server farm, although network security devices have been deployed in the Enterprise Edge for two years. What type of attack can be effectively prevented with this recommendation?
• internal attack

23. Refer to the exhibit. The branch office needs constant access to the servers in the enterprise headquarters. Therefore, a backup Frame Relay link is added. A network
• administrator is configuring the routers in the branch office to make sure that when the backup Frame Relay link is used, only the traffic to access the enterprise headquarters is allowed. Which statement is true about the routing configuration on branch office edge routers?
• The command ip route 128.107.0.0 255.255.0.0 serial 0/0 50 should be configured on BE1.

24. An automobile sales company is establishing a new, small sales showroom in a downtown area. To update the inventory database, the new sales office will need a WAN connection to the headquarters that is located in the suburban area. The WAN connection should be around a 4 Mb/s connection. Which WAN service will provide the most economical approach to meet the requirement?
• DSL

25. A network designer is selecting a WAN technology for connections between the headquarters of an organization and its branch offices. In this context, what is one advantage of choosing Frame Relay over a T1 line?
• flexible bandwidth

 

 

CCNA Discovery 3 Module 6, 7, 8, 9 Exam Answers Version 4.0

CCNA Discovery 3 Module 6 Exam Answers Version 4.0

1.

Refer to the exhibit. What statement describes the DR/BDR relationship of the HQ router?
• HQ is the DR.
• HQ is the BDR.
• HQ is a DROTHER.
• HQ is a member of an NBMA network.

2. Which two features are associated with Frame Relay OSPF point-to-multipoint environments? (Choose two.)
• A DR is not elected.
• The OSPF priority value determines the active DR on the Frame Relay link.
• OSPF neighbor routers are statically defined.
• The link types are identified as broadcast multiaccess.
• The BDR will have a router ID whose value is greater than the DR router ID.

3.

Refer to the exhibit. How was the OSPF default gateway entry for R2 determined?
• Default routes are automatically injected by OSPF into all advertisements.
• A static default gateway route is defined in the configuration of R2.
• The default-information originate command is applied on R1.
• The ISP defines the gateway of last resort and automatically passes it to R1 and R2.
• The ip default-gateway command is applied on R2.

4. What is always required for OSPF routers to share routing information?
• designated routers
• a backup designated router
• neighbor adjacencies
• an NBMA network topology
• links that are configured on the 224.0.0.0 network

5.

Refer to the exhibit. A network administrator has implemented OSPF and the network has converged. If all router interfaces are enabled and functional, what route will OSPF view as lowest cost when moving frames from Host3 to Host1?
• R3 to R4 to R1
• R3 to R1
• R3 to R2 to R1
• R3 to R5 to R2 to R1

6.

Refer to the exhibit. Which commands configure router A for OSPF?
• router ospf 1
network 192.168.10.0
• router ospf 1
network 192.168.10.64 0.0.0.63 area 0
network 192.168.10.192 0.0.0.3 area 0
• router ospf 1
network 192.168.10.64 255.255.255.192
network 192.168.10.192 255.255.255.252
• router ospf 1
network 192.168.10.0 area 0

7.

Refer to the exhibit. Which network statement configures the home router to allow all the interfaces to participate in OSPF?
• network 10.0.0.0 0.3.255.255 area 0
• network 10.8.0.0 0.0.0.3 area 0
• network 10.8.0.0 0.3.255.255 area 0
• network 10.10.0.0 0.0.0.3 area 0
• network 10.12.0.0 0.3.255.255 area 0

8. Which statement is true regarding OSPF DR and BDR elections?
• A new DR/BDR election occurs each time a new OSPF neighbor is added.
• The router with the highest OSPF priority setting wins the election for DR.
• The default priority value for a router connected to a multi-access network is 0.
• The router with the highest MAC address is elected as the DR when the default priority values are used.

9.

Refer to the exhibit. The network administrator would like only the 172.16.32.0 network advertised to Router1. Which OSPF network command accomplishes this?
• Router2(config-router)# network 172.16.0.0 0.0.0.15 area 0
• Router2(config-router)# network 172.16.0.0 0.0.15.255 area 0
• Router2(config-router)# network 172.16.32.0 0.0.15.255 area 0
• Router2(config-router)# network 172.16.32.0 0.0.255.255 area 0

10. Which two statements describe the operation of link-state routing protocols? (Choose two.)
• All routers in the same area have identical link-state databases when converged.
• Routing loops are prevented by running the Diffusing Update Algorithm (DUAL).
• Link-state routers send frequent periodic updates of the entire routing table.
• Reliable Transport Protocol (RTP) is used to deliver and receive LSAs.
• Calculating the shortest path for each destination is accomplished with the SPF algorithm.

11.

Refer to the exhibit. Routers A, B, and C are part of the existing OSPF network. Router D has been added to the network. All routers are running OSPF and have the indicated priorities applied to the interface. What is the DR/BDR status immediately after router D is added to the existing network?
• An election is forced and router D wins the DR election.
• The DR and BDR do not change until the next election.
• An election is forced and the existing BDR becomes the DR.
• The router with the highest router ID becomes the new BDR.

12. Which two statements describe the use of OSPF DR/BDR elections? (Choose two.)
• Elections are always optional.
• Elections are required in all WAN networks.
• Elections are required in point-to-point networks.
• Elections are required in broadcast multiaccess networks.
• Elections are sometimes required in NBMA networks.

13.

Refer to the exhibit. As part of an OSPF network, R1 and R2 are trying to become adjacent neighbors. Although it appears that the two systems are communicating, neither of the routing tables include OSPF routes received from its neighbor. What could be responsible for this situation?
• R1 and R2 are not on the same subnet.
• The Process IDs on each router do not match.
• The timer intervals on the routers do not match.
• The value set for the Transmit Delay time on both routers is too low.

14.

Refer to the exhibit. What is the purpose of the value 128 shown in bold?
• It is the OSPF cost metric.
• It is the OSPF administrative distance.
• It is the value assigned by the Dijkstra algorithm that designates the distance in hops to the network.
• It is the value assigned to an interface that is used by the DUAL algorithm to determine the metric.

15.

Refer to the exhibit. What is the purpose of the configuration commands added on router B?
• allows router A to form an adjacency with router B
• provides a stable OSPF router ID on router B
• provides a method of testing router traffic
• creates the OSPF adjacency table on router B

16.

Refer to the exhibit. The command ip route 10.16.1.64 255.255.255.252 s0/0/0 is entered into the router. Why does network 10.16.1.64/30 appear in the routing table in addition to network 10.16.1.64/27?
• The router views 10.16.1.64/30 and 10.16.1.64/27 as two different networks.
• The static route is used as a backup route for packets destined for 10.16.1.64/27.
• The AD for static routes is lower than the AD for OSPF routes.
• The static route metric is lower than the OSPF metric for the 10.16.1.64/27 network.

17. What is the primary difference between link-state protocols and distance vector protocols with regard to route calculation?
• Distance vector protocols take existing routes from their neighbors and add to them. Link-state protocols independently calculate full routes.
• Link-state protocols calculate and pass full routing tables to all routers in their associated areas, and distance vector protocols do not.
• When determining invalid routes, link-state protocols use split horizon for all route computations. Distance vector protocols use reverse poisoning.
• Distance vector protocols require more CPU and RAM for route calculations than link-state protocols require.

18. What range of networks are advertised in the OSPF updates by the command Router1(config-router)# network 192.168.0.0 0.0.15.255 area 0?
• 192.168.0.0/24 through 192.168.0.15/24
• 192.168.0.0/24 through 192.168.15.0/24
• 192.168.15.0/24 through 192.168.31.0/24
• 192.168.15.0/24 through 192.168.255.0/24
• 192.168.16.0/24 through 192.168.255.0/24

19.

Refer to the exhibit. When establishing adjacency relationships, which IP address would router A use to send hello packets to router B?
• 10.11.0.1
• 10.11.0.2
• 10.11.0.255
• 224.0.0.5
• 255.255.255.255

20.

Refer to the exhibit. Which router will be elected the DR and which will become the BDR?
• R1 will be DR and R2 will be BDR.
• R1 will be DR and R3 will be BDR.
• R2 will be DR and R1 will be BDR.
• R2 will be DR and R3 will be BDR. 
• R3 will be DR and R2 will be BDR.
• R3 will be DR and R1 will be BDR.

21. When compared to a distance vector routing protocol, what is a benefit of the hierarchical design approach that is used in large OSPF networks?
• simpler configuration
• reduction of router processing requirements
• isolation of network instability
• less complex network planning

22. What are two advantages of using a link-state routing protocol instead of a distance vector routing protocol? (Choose two.)
• The topology database eliminates the need for a routing table.
• Frequent periodic updates are sent to minimize the number of incorrect routes in the topological database.
• Routers have direct knowledge of all links in the network and how they are connected.
• After the initial LSA flooding, routers generally require less bandwidth to communicate changes in a topology.
• A link-state routing protocol requires less router processor power.

23. If a network has converged, what is true about the link-state database held by each router in the same OSPF area?
• Each router has a link-state database containing the same status information.
• Each router has a different link-state database depending on its position within the network.
• The link-state database is stored in a designated router and is accessed by each router in the area as needed.
• The link-state database in each router only contains information about adjacent routers and the status of their links.

24.

Refer to the exhibit. RTRC was recently configured and is not sending the proper OSPF routes to RTRB, as shown in the RTRB routing table. Based on the RTRC configuration, what is most likely the problem?
• RTRC interfaces are administratively shut down.
• The OSPF process ID for RTRC does not match the process ID used on RTRB.
• The interface addresses on RTRC overlap with other addresses in the network.
• The OSPF routing configuration on RTRC has a missing or incorrect network statement.

 

CCNA Discovery 3 Module 7 Exam Answers Version 4.0

1. Why are Network Control Protocols used in PPP?
• to establish and terminate data links
• to provide authentication capabilities to PPP
• to manage network congestion and to allow quality testing of the link
• to allow multiple Layer 3 protocols to operate over the same physical link

2. What is the data transmission rate for the DS0 standard?
• 44 kb/s
• 64 kb/s
• 1.544 Mb/s
• 44.736 Mb/s

3. In which two layers of the OSI model are key differences found between a LAN and a WAN. (Choose two.)
• Layer 1
• Layer 2
• Layer 3
• Layer 4
• Layer 6
• Layer 7

4. Which statement is true about the Cisco implementation of the HDLC protocol?
• It supports authentication.
• It has a universally compatible frame format.
• It is the default encapsulation for serial interfaces on Cisco routers.
• It does not support multiple protocols across a single link.

5.

Refer to the exhibit. A network administrator has a connectivity problem between the serial interfaces of Merida and Vargas. What is the cause of the problem?
• Authentication is required on the serial link.
• The encapsulation is misconfigured.
• The IP addresses are on different subnets.
• The serial interface on Vargas is shutdown.
• The loopback interfaces on both routers are not configured.

6.

Refer to the exhibit. What statement is true about the exhibited output?
• LCP is in the process of negotiating a link.
• LCP and NCP are waiting for CHAP authentication to complete.
• LCP negotiation has completed successfully, but NCP negotiation is in progress.
• LCP and NCP negotiation is complete, and the data link service is available to carry packets.

7. Which three statements are true regarding LCP? (Choose three.)
• It is responsible for negotiating link establishment.
• It negotiates options for Layer 3 protocols running over PPP.
• It uses MD5 encryption while negotiating link-establishment parameters.
• It terminates the link upon user request or the expiration of an inactivity timer.
• It can test the link to determine if link quality is sufficient to bring up the link.
• It monitors the link for congestion and dynamically adjusts the acceptable window size.

8. Why are Frame Relay paths referred to as virtual?
• Frame Relay PVCs are created and discarded on demand.
• The connections between PVC endpoints act like dialup circuits.
• There are no dedicated circuits to and from the Frame Relay carrier.
• The physical circuits inside the Frame Relay cloud do not contain exclusive links for a specific Frame Relay connection.

9. What best describes the use of a data-link connection identifier (DLCI)?
• an address identifying a virtual circuit
• a logical address identifying the DCE device
• an address identifying a Layer 3 service across a Frame Relay network
• a logical address identifying the physical interface between a router and a Frame Relay switch

10. What two services allow the router to dynamically map data link layer addresses to network layer addresses Frame Relay network? (Choose two.)
• ARP
• ICMP
• Proxy ARP
• Inverse ARP
• LMI status messages

11. Which three statements describe functions of the Point-to-Point Protocol with regards to the OSI model?(Choose three.)
• operates at all layers of the OSI model
• provides a mechanism to multiplex several network layer protocols
• can be configured on both synchronous and asynchronous serial interfaces
• uses Layer 3 of the OSI model to establish and maintain a session between devices
• uses the data link layer to configure such options as error detection and compression
• uses network control protocols to test and maintain connectivity between devices

12. At what physical location does the responsibility for a WAN connection change from the user to the service provider?
• demilitarized zone (DMZ)
• demarcation point
• local loop
• cloud

13. What does a Frame Relay switch use to inform the sender that there is congestion?
• FECN
• BECN
• DE
• FCS

14.

Refer to the exhibit. What statement is true about the debug output?
• R2 is using PAP instead of CHAP.
• The routers have different CHAP passwords configured.
• The administrator performed a shutdown on the R2 PPP interface during negotiation.
• The Layer 3 protocol negotiation caused the connection failure.

15. Which two statements describe the function of time-division multiplexing? (Choose two.)
• Multiple data streams share one common channel.
• Conversations that require extra bandwidth receive any unused time slices.
• Time slots are utilized on a first-come, first-served basis.
• Time slots go unused if a sender has nothing to transmit.
• Priority can be dedicated to one data source.

16. When customers use credit cards to make purchases at a small business, a modem is heard dialing a telephone number to transfer the transaction data to the central office. What type of WAN serial connection is in use?
• leased line
• point-to-point
• circuit switched
• packet switched

17. Which best describes data communications equipment (DCE)?
• serves as data source and/or destination
• responsible for negotiating windowing and acknowledgements
• physical devices such as protocol translators and multiplexers
• equipment that forwards data and is responsible for the clocking signal

18. Permanent virtual circuits and switched virtual circuits are both part of which option for WAN connectivity?
• leased line
• cell switching
• packet switching
• circuit switching

19. Which field of a frame uses error detection mechanisms to verify that the frame is not damaged intransit?
• FCS
• MTU
• flag
• control
• protocol

20. What occurs in the encapsulation process as a data packet moves from a LAN across a WAN?
• The Layer 2 encapsulation changes to a format that is appropriate for the WAN technology.
• The Layer 3 encapsulation changes to a format that is appropriate for the WAN technology.
• Both Layer 2 and Layer 3 encapsulation change to a technology that is appropriate for the WAN.
• Both Layer 2 and Layer 3 encapsulation remain constant as the data packet travels throughout the network.

21.

Refer to the exhibit. The network administrator is configuring R1 to connect to R2, which is a non-Cisco router. Which encapsulation method will need to be configured for communication to occur?
• HDLC
• HSSI
• ISDN
• IPCP
• PPP

22. A company is implementing dialup services for remote workers to connect to the local network. The company uses multiple Layer 3 protocols and requires authentication for security. Which protocol should be used for this remote access?
• LMI
• PPP
• HDLC
• Frame Relay

23. Which two options can LCP negotiate? (Choose two.)
• compression
• authentication
• dynamic flow control
• network layer address for IP
• connection-oriented or connectionless communication methods

24. What statement best describes cell switching?
• It uses a dedicated path between endpoints.
• It creates a permanent physical link between two points.
• It uses DLCIs to identify virtual circuits.
• It creates fixed-length packets that traverse virtual circuits

 

CCNA Discovery 3 Module 8 Exam Answers Version 4.0

1.

Refer to the exhibit. A network administrator needs to add the command deny ip 10.0.0.0 0.255.255.255 any log to R3. After adding the command, the administrator verifies the change using the show access-list command. What sequence number does the new entry have?
• 0
• 10, and all other items are shifted down to the next sequence number
• 50
• 60

2.

Refer to the exhibit. What happens if the network administrator issues the commands shown when an ACL called Managers already exists on the router?
• The new commands overwrite the current Managers ACL.
• The new commands are added to the end of the current Managers ACL.
• The new commands are added to the beginning of the current Managers ACL.
• An error appears stating that the ACL already exists.

3. Why are inbound ACLs more efficient for the router than outbound ACLs?
• Inbound ACLs deny packets before routing lookups are required.
• Inbound ACL operation requires less network bandwidth than outbound.
• Inbound ACLs permit or deny packets to LANs, which are typically more efficient than WANs.
• Inbound ACLs are applied to Ethernet interfaces, while outbound ACLs are applied to slower serial interfaces.

4.

Refer to the exhibit. The network administrator of a company needs to configure the router RTA to allow its business partner (Partner A) to access the web server located in the internal network. The web server is assigned a private IP address, and a static NAT is configured on the router for its public IP address. Finally, the administrator adds the ACL. However, Partner A is denied access to the web server. What is the cause of the problem?
• Port 80 should be specified in the ACL.
• The public IP address of the server, 209.165.201.5, should be specified as the destination.
• The ACL should be applied on the s0/0 outbound interface.
• The source address should be specified as 198.133.219.0 255.255.255.0 in the ACL.

5. ACL logging generates what type of syslog message?
• unstable network
• warning
• informational
• critical situation

6. Which two host addresses are included in the range specified by 172.16.31.64 0.0.0.31? (Choose two.)
• 172.16.31.64
• 172.16.31.77
• 172.16.31.78
• 172.16.31.95
• 172.16.31.96

7. Traffic from the 64.104.48.0 to 64.104.63.255 range must be denied access to the network. What wildcard mask would the network administrator configure in the access list to cover this range?
• 0.0.15.255
• 0.0.47.255
• 0.0.63.255
• 255.255.240.0

8. ACLs are used primarily to filter traffic. What are two additional uses of ACLs? (Choose two.)
• specifying source addresses for authentication
• specifying internal hosts for NAT
• identifying traffic for QoS
• reorganizing traffic into VLANs
• filtering VTP packets

9. What can an administrator do to ensure that ICMP DoS attacks from the outside are mitigated as much as possible, without hampering connectivity tests initiated from the inside out?
• Create an access list permitting only echo reply and destination unreachable packets from the outside.
• Create an access list denying all ICMP traffic coming from the outside.
• Permit ICMP traffic from only known external sources.
• Create an access list with the established keyword at the end of the line.

10. What effect does the command reload in 30 have when entered into a router?
• If a router process freezes, the router reloads automatically.
• If a packet from a denied source attempts to enter an interface where an ACL is applied, the router reloads in 30 minutes.
• If a remote connection lasts for longer than 30 minutes, the router forces the remote user off.
• A router automatically reloads in 30 minutes.

11.

Refer to the exhibit. The following commands were entered on RTB.
RTB(config)# access-list 4 deny 192.168.20.16 0.0.0.15
RTB(config)# access-list 4 permit any
RTB(config)# interface serial 0/0/0
RTB(config-if)# ip access-group 4 in
Which addresses do these commands block access to RTB?
• 192.168.20.17 to 192.168.20.31
• 192.168.20.16 to 192.168.20.31*
• 192.168.20.16 to 192.168.20.32
• 192.168.20.16 to 192.168.20.33

12.

Refer to the exhibit. The new security policy for the company allows all IP traffic from the Engineering LAN to the Internet while only web traffic from the Marketing LAN is allowed to the Internet. Which ACL can be applied in the outbound direction of Serial 0/1 on the Marketing router to implement the new security policy?
• access-list 197 permit ip 192.0.2.0 0.0.0.255 any
access-list 197 permit ip 198.18.112.0 0.0.0.255 any eq www
• access-list 165 permit ip 192.0.2.0 0.0.0.255 any
access-list 165 permit tcp 198.18.112.0 0.0.0.255 any eq www
access-list 165 permit ip any any
• access-list 137 permit ip 192.0.2.0 0.0.0.255 any
access-list 137 permit tcp 198.18.112.0 0.0.0.255 any eq www
• access-list 89 permit 192.0.2.0 0.0.0.255 any
access-list 89 permit tcp 198.18.112.0 0.0.0.255 any eq www

13. Which three statements are true concerning standard and extended ACLs? (Choose three.)
• Extended ACLs are usually placed so that all packets go through the network and are filtered at the destination.
• Standard ACLs are usually placed so that all packets go through the network and are filtered at the destination.
• Extended ACLs filter based on source address only, and must be placed near the destination if other traffic is to flow.
• Standard ACLs filter based on source address only, and must be placed near the destination if other traffic is to flow.
• Extended ACLs filter with many possible factors, and they allow only desired packets to pass through the network if placed near the source.
• Standard ACLs filter with many possible factors, and they allow only desired packets to pass through the network if placed near the source.

14.

Refer to the exhibit. Company policy for the network that is shown indicates the following guidelines:
1) All hosts on the 192.168.3.0/24 network, except host 192.168.3.77, should be able to reach the 192.168.2.0/24 network.
2) All hosts on the 192.168.3.0/24 network should be able to reach the 192.168.1.0/24 network.
3) All other traffic originating from the 192.168.3.0 network should be denied.
Which set of ACL statements meets the stated requirements when they are applied to the Fa0/0 interface of router R2 in the inbound direction?
• access-list 101 deny ip any any
access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255
• access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255
• access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255
• access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.1.0 0.0.0.255
access-list 101 permit ip any any
• access-list 101 deny ip 192.168.3.77 0.0.0.0 192.168.2.0 0.0.0.255
access-list 101 permit ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.255.255

15.

Hosts from the Limerick LAN are not allowed access to the Shannon LAN but should be able to access the Internet. Which set of commands will create a standard ACL that will apply to traffic on the Shannon router interface Fa0/0 implementing this security?
• access-list 42 deny 172.19.123.0 0.0.0.255 192.0.2.0 0.0.0.255
access-list 42 permit any
• access-list 56 deny 172.19.123.0 0.0.0.255
access-list 56 permit any
• access-list 61 deny 172.19.123.0 0.0.0.0
access-list 61 permit any
• access-list 87 deny ip any 192.0.2.0 0.0.0.255
access-list 87 permit ip any

16.

Refer to the exhibit. A network administrator needs to configure an access list that will allow the management host with an IP address of 192.168.10.25/24 to be the only host to remotely access and configure router RTA. All vty and enable passwords are configured on the router. Which group of commands will accomplish this task?
• Router(config)# access-list 101 permit tcp any 192.168.10.25 0.0.0.0 eq telnet
Router(config)# access-list 101 deny ip any any
Router(config)# int s0/0
Router(config-if)# ip access-group 101 in
Router(config-if)# int fa0/0
Router(config-if)#ip access-group 101 in
• Router(config)# access-list 10 permit 192.168.10.25 eq telnet
Router(config)# access-list 10 deny any
Router(config)# line vty 0 4
Router(config-line)#access-group 10 in
• Router(config)# access-list 86 permit host 192.168.10.25
Router(config)# line vty 0 4
Router(config-line)# access-class 86 in
• Router(config)# access-list 125 permit tcp 192.168.10.25 any eq telnet
Router(config)# access-list 125 deny ip any any
Router(config)# int s0/0
Router(config-if)# ip access-group 125 in

17. Which ACL permits host 10.220.158.10 access to the web server 192.168.3.244?
• access-list 101 permit tcp host 10.220.158.10 eq 80 host 192.168.3.224
• access-list 101 permit tcp 10.220.158.10 0.0.0.0 host 192.168.3.224 0.0.0.0 eq 80
• access-list 101 permit host 10.220.158.10 0.0.0.0 host 192.168.3.224 0.0.0.0 eq 80
• access-list 101 permit tcp 10.220.158.10 0.0.0.0 host 192.168.3.224 eq 80

18. Which wildcard mask would match the host range for the subnet 192.16.5.32 /27?
• 0.0.0.32
• 0.0.0.63
• 0.0.63.255
• 0.0.0.31

19. A security administrator wants to secure password exchanges on the vty lines on all routers in the enterprise. What option should be implemented to ensure that passwords are not sent in clear text across the public network?
• Use Telnet with an authentication server to ensure effective authentication.
• Apply an access list on the router interfaces to allow only authorized computers.
• Apply an access list on the vty line to allow only authorized computers.
• Use only Secure Shell (SSH) on the vty lines.

20.

Refer to the exhibit. An administrator notes a significant increase in the amount of traffic entering the network from the ISP. The administrator clears the access-list counters. After a few minutes, the administrator again checks the access-list table. What can be concluded from the most recent output shown?
• A small amount of HTTP trafic is an indication that the web server was not configured correctly.
• A larger amount of POP3 traffic (compared with SMTP traffic) indicates that there are more POP3 email clients than SMTP clients in the enterprise.
• A large amount of ICMP traffic is being denied at the interface, which can be an indication of a DoS attack.
• A larger amount of email traffic (compared with web traffic) is an indication that attackers mainly targeted the email server.

 

CCNA Discovery 3 Module 9 Exam Answers Version 4.0

1.

Refer to the exhibit. Based on the output shown, to which IP network should the workstations in the Support department belong?
• 192.168.1.0
• 172.16.1.0
• 172.16.3.0
• 172.16.5.0

2.

Refer to the exhibit. A network administrator is doing proactive network maintenance. The administrator pings 192.168.1.100 and compares the results to the baseline data. Based on the comparison of the two pings, what is one possibility?
• There is an ACL applied, making the destination host unreachable.
• There is a malfunctioning NIC on the destination host.
• The sending host is unable to access the network.
• There are congestion problems on the network.

3.

Refer to the exhibit. Given the output generated by the debug ppp negotiation command, which statement is true?
• The line protocol of the local router is now up.
• The username ’Goleta’ is configured locally.
• The command ppp authentication pap is configured on both routers.
• The local router requested to terminate the session.

4. What is important to consider while configuring the subinterfaces of a router when implementing inter-VLAN routing?
• The subinterface numbers must match the VLAN ID number.
• The physical interface must have an IP address configured.
• The IP address of each subinterface must be the default gateway address for each VLAN subnet.
• The no shutdown command must be given on each subinterface.

5.

Refer to the exhibit. A lab technician connects two routers together via a serial cable using the default interface configuration values. The interfaces are up; however, the technician is unable to ping between the two devices. What is the most likely problem?
• The lab technician used the wrong cable to connect the serial ports.
• There is an IP mismatch between the serial ports.
• There is an encapsulation mismatch between the serial ports.
• No clock rate has been set on the DCE interface.

6.

Refer to the exhibit. Based on the output shown, why is VTP information unable to propagate the network?
• One of the two client mode switches must be reconfigured to Transparent mode.
• Each switch must be synchronized to the network time server.
• The VTP domain names are different.
• VTP passwords must be set.
• The configuration revision numbers are all the same.

7. The enterprise mail server software recently went through a minor update. A network administrator notices an excessive amount of traffic between a database server and the newly updated mail server, compared to the baseline data. What is the first action the administrator should do to investigate the problem?
• Wait to see if the recent update will stabilize after a while.
• Redo the baseline data to include the minor upgrade.
• Check the log to see what software components are producing the excess traffic.
• Check for viruses and spyware on the database server.

8.

Refer to the exhibit. Users are reporting that they cannot access the Internet. Routers R1 and R2 are configured with RIP version 2 as shown. If R2 receives a packet with a destination address on the Internet, how is the packet routed?
• The packet is routed to the ISP router and then to network 10.1.1.0/24.
• The packet is routed to the ISP router and then to the Internet.
• The packet is routed to R1 and then forwarded out Fa0/0 on R1.
• The packet will not be routed because R2 does not have a valid default route.

9.

Refer to the exhibit. Both routers are configured using RIPv1. Both routers are sending updates about the directly connected routes. R1 can successfully ping the serial interface of R2. The routing table on R1 does not contain any dynamically learned routes from R2, and the routing table on R2 shows no dynamically learned routes from R1. What is the problem?
• Subnetting is not supported by RIPv1.
• One of the routers needs a clock rate on the serial interface.
• The serial link between the two routers is unstable.
• VLSM is not supported by RIPv1.

10.
Refer to the exhibit. Host 192.168.1.14 is unable to download email from 192.168.2.200. After reviewing the output of the show running-config command, what problem is discovered?
• Access to the SMTP server is denied.
• The destination host address in an ACL statement is incorrect.
• The ACL is applied to the interface in the wrong direction.
• The implicit deny any any is blocking all access to email.

11. An employee called the help desk to report a laptop that could not access a web-based application on the Internet. The help desk technician asked the employee to open a Windows command prompt and type the ipconfig /all command. Which problem-solving technique did the technician choose?
• top-down
• bottom-up
• substitution
• divide-and-conquer

12.

Refer to the exhibit. Based on the network diagram and the output shown, which statement is true?
• The command was entered on router R1.
• The command was entered on router R2.
• The command was entered on router R3.
• The command could have been entered on either R1 or R2.

13.

Refer to the exhibit. An ACL is configured to prevent access by network 192.168.1.0 to network 192.168.2.0, but it is not working properly. What problem is discovered after observing the output of the show running-config command?
• The protocol type specified in the ACL should be TCP, not IP.
• The source and destination addresses are reversed in the statement.
• The ACL is applied to the wrong interface, but the right direction.
• The ACL is applied to the wrong interface and the wrong direction.
• The permit ip any any statement allows network 192.168.1.0 access.

14.

Although all networks are reachable, the network administrator notices abnormal routing behavior after configuring OSPF on each router. According to the partial output from the debug ip ospf events command, which statement is true about the contents of the routing table in RA?
• It will show network 172.16.3.0 learned from RB.
• It will show network 172.16.3.0 learned from RC.
• It will show two equal routes to network 192.168.1.4/30.
• It will show two equal routes to network 192.168.1.8/30.

15. A network at a large building failed, causing a severe disruption in business activities. The problem was eventually detected and resolved by replacing a piece of failed network equipment. Investigation led to the conclusion that a network design problem was the main cause of the disruption. Loss of a single piece of equipment should not have been able to cause such a large problem. What two terms best describe this type of design weakness? (Choose two.)
• bottleneck
• limited availability
• limited scalability
• large failure domain
• single point of failure
• limited staff capabilities

16.

Refer to the exhibit. The network administrator is troubleshooting the connectivity issue between RA and RB. According to the partial configuration, what is the cause of the problem?
• password mismatch for PPP authentication
• username mismatch for PPP authentication
• encapsulation method mismatch for PPP authentication
• authentication method mismatch for PPP authentication

17.

Refer to the exhibit. ABC Company is using the 172.16.0.0/18 network. It is standard company practice to use the first 50 addresses for switches and servers and assign the last usable address to the router. The remaining addresses are assigned to the hosts. After assigning the addresses, the network technician tests connectivity from the host above and is not able to ping the router. What could be the problem?
• The router was assigned the broadcast address.
• The host is not in the same subnet as the switch and router.
• The router interface is in the wrong subnet.
• The host was assigned a network address.

18.

Refer to the exhibit. A network administrator is troubleshooting a problem. No users are able to access the 10.10.2.0/24 network, but are able to access all other networks. Assuming R3 is configured correctly and based on the output shown, what is most likely the problem?
• There is congestion on the 10.10.2.0 network.
• The EIGRP process number on R2 is incorrect.
• The Fa0/0 interface on R2 is shut down.
• The Fa0/0 interface on R2 has an incorrect IP address or subnet mask.

19.

Refer to the exhibit. The network administrator correctly configures RTA to perform inter-VLAN routing. Using the show vlan command, the administrator verifies that port Fast Ethernet 0/4 is the first available port in the default VLAN on SW2. The administrator connects RTA to port 0/4 on SW2, but inter-VLAN routing does not work. What could be the possible cause of the problem with the SW2 configuration?
• Port 0/4 is not active.
• Port 0/4 must be a member of VLAN1.
• Port 0/4 is configured in access mode.
• Port 0/4 is configured as a trunk port.

20.

Refer to the exhibit. The network administrator is unable to ping from the console of router R3 to host 10.10.4.63. What is the problem?
• RIPv1 does not support VLSM.
• Router R2 does not have RIP correctly configured.
• Router R3 is missing a network statement for network 10.0.0.0.
• There is an addressing problem on the link between routers R2 and R3.

21.

Refer to the exhibit. A network administrator has implemented subnetting using the network 192.168.25.0 and a /28 mask. Workstation 1 is not able to ping with Workstation 2. What is a possible cause for this lack of communication?
• Workstation 1 and Workstation 2 are on the same subnet.
• The serial connections are using addresses from the LAN subnets.
• All hosts in the network must be in the same subnet to communicate.
• Workstation 1 is not on the same network that the RTA router LAN interface is on.

22. Which two statements describe when a network administrator should perform a network baseline? (Choose two.)
• It should be done monthly as a minimum standard.
• It should be performed when all switch Cisco IOS versions are upgraded.
• It should be done when all network printers are upgraded to a new model.
• It should be done when the network is performing at normal activity levels.
• It should be done whenever an SLA has been signed with a new service provider.

 

 

CompNtwk : Chapter 10

Lab 10.0.2.2 Finding the Right Networking Job

Step 1: Perform a Skills Strength and Interest Assessment

Step 2: Search a job website for a possible IT position

Step 3: Create a résumé and cover letter

Step 4: Reflection

What other areas related to applying for a job are not covered in this particular lab?

• Interviews: types of interviews that can be conducted, potential questions asked in interviews, preparing for an interview

·         wawancara : tipe wawancara, pertanyaan berbobot yang ditanyakan saat interview, persiapan wawancara

·         negosiasi mengenai gaji dan keuntungan yang didapat

CompNtwk : Chapter 9

Lab 9.1.2 Editing and Organizing the Existing Information

Step 1: Collate and organize the information

a. Gather and read through all the project documents that you created in previous labs.

b. Ensure that multipage documents are together and that the pages are in the correct sequence.

Step 2: Review the existing information

Ensure that the documents are complete and contain the information specified. Any incomplete documents, or missing information that was not recorded at the time of that lab, now need to be checked and included at this stage.

Step 3: Organize the information

A project proposal typically contains the following sections:

Section	Description
Executive Summary	Discusses the project goals and project scope at a high level. This section demonstrates that the network vendor understands the extent of the project and the role of the network in meeting the business goals. The goal of the summary is to convince the decision-makers of the business benefits of the design. This section is typically one to two pages long.
Network Requirements	Reviews the business goals and network requirements, including users and applications that need to be supported. This section often lists the business goals, in order of priority, with critical goals marked. This section includes the topologies; protocols, hardware, software, and training that are required to meet the business goals.
Current Network Environment	Documents the state of the existing network. This section includes physical and logical diagrams and the IP addressing scheme. The section summarizes the results of the network characterization, including strengths and weaknesses of the existing network. It also documents the user community and applications currently in use, based on the network characterization.
Proposed Physical Design	Describes the physical layout of the proposed design. This section documents trade-offs made to accommodate business goals and technical requirements. The section describes the features and recommended uses for the technologies and devices proposed for the new network design. This section documents the new WAN service and new network equipment. The section also includes proposed network diagrams.
Proposed Logical Design	Describes the logical topology of the proposed network. This section documents any proposed addressing and naming conventions. It describes the routing and switching protocols recommended for the planned network. This section includes recommended security mechanisms and products that support the security policy of the business. The section may include information on recommended network management procedures and applications.
Implementation Plan	Provides a detailed list of the tasks that must be performed to install and implement the new network. This section includes tasks, steps, time required, and proposed schedules.
Cost Proposal	Provides cost proposal for equipment, software, installation, and ongoing

Step 4: Edit and finalize the information

a. Review all the materials to ensure that they are complete. It is important that the FilmCompany   management and technical staff are able to easily find and understand the material contained in the proposal. A disorganized or incomplete proposal can cause the customer to choose another contractor to complete the project.

b. Ensure that all the information has a consistent format and style. If necessary, edit or rewrite sections

so that the proposal has the appearance of a single document and not a set of separate documents.

c. Complete diagrams and other graphics and finalize what is to be included in the proposal.

d. Clearly note those sections of the proposal that have to be completed; these sections will be compiled

in the following labs.

e. Save the word processing documents and file the hardcopy information in your portfolio.

Lab 9.2.1 Creating an Implementation Plan

Step 1: Determine the tasks to implement the network design

Implementing a network design requires the completion of a set of tasks, such as installing hardware,

configuring systems, testing the network, and launching the network into production. Each task consists of several steps.

Each task requires the following documentation:

• A description of the task

• References to design documents

• Detailed implementation guidelines

• Detailed rollback guidelines in case of failure

• The estimated time required for implementation

• Completion sign-off

Analyze the FilmCompany network design documentation that you have compiled in previous labs. Determine and list the three main sets of tasks required to be performed to implement the network upgrade. These sets of tasks will be referred to as phases.

Phase 1

Install Distribution and Core Layer equipment

Configure new IP addressing & VLAN scheme

Configure routing

Phase 2

Upgrade the WAN connectivity

Extend the network to the remote site

Configure ACLs & security

Phase 3

Install wireless/mobility network

Step 2: Note identified success and failure criteria

When implementing a design, the possibility of a failure must be considered – even after a successful pilot or prototype network test. Each step of the implementation may require additional testing to ensure that the network operates as designed.

In the Reflection section in Chapter 2, Lab 2.3.3, you considered success criteria when determining the

objectives of the FilmCompany network upgrade. List two or three success or failure criteria for each phase of the project.

Step 3: Include provision for customer approval

The Implementation Plan details the work required to accomplish the project goals. The plan includes the

customer expectations and the success criteria for customer approval and project sign-off. As soon as customer approval of the implementation plan is obtained, the installation can begin. The customer is given a detailed list of all devices required and the work to be completed. This list forms part of the Implementation Plan. A signed copy of this list is kept by the network designer and account manager.

Upon completion of each task, the customer is required to sign off that the work was completed and that the results are as expected.

a. Include in the documentation a signature page for an authorized FilmCompany representative to sign

and approve the Implementation Plan.

b. Include in the documentation a signature page at the end of each task for an authorized

FilmCompany representative to sign and accept the completion of each task.

Step 4: Document Phase 1

Step 5: Document Phase 2

Step 5: Document Phase 3

Lab 9.2.2 Creating a Phased Installation Plan

Step 1: Compare the installation methods

There are three possible installation methods:

• New installation, commonly referred to as a green field installation

• Phased installation into an existing, functioning network

• Complete replacement, commonly referred to as a fork-lift upgrade

Consider and list the advantages and disadvantages of the three installation methods.

New Installation

Advantages:

Semua peralatan dan layanan dapat diinstal dan diuji pada saat yang sama.

Rencana implementasi untuk jaringan baru kurang kompleks dibandingkan dengan dua jenis instalasi.
Jadwal lebih fleksibel daripada ketika jaringan yang ada di tempat.
Ada gangguan minimal terhadap perusahaan.

Disadvantages:

Modal besar karena semua peralatan dan layanan yang diinstal pada waktu yang sama.

Phased Installation into Existing Network

Advantages:

Bagian-bagian dari upgrade jaringan diimplementasikan dalam isolasi dari bagian yang sedang berjalan.
Upgrade jaringan dibagi menjadi potongan-potongan kecil yang dapat diinstal dan diuji dengan cepat.
Instalasi upgrade secara bertahap yang lebih kecil menyebabkan sedikitnya jumlah downtime.

Disadvantages:

Sebuah penerapan secara bertahap membutuhkan perencanaan yang lebih rinci dengan pelanggan.

Complete Network Replacement

Advantages:

Jaringan yang ada bisa tetap beroperasi sepenuhnya sampai jaringan pengganti dibawa ke dalam produksi.

Disadvantages:

Kedua jaringan mungkin beroperasi secara paralel untuk beberapa waktu, yang meningkatkan biaya operasi dan dapat menyebabkan kebingungan dan dukungan bagipemakai

Step 2: Select the installation method

Two of the FilmCompany requirements are:

• The company network services must be available during the upgrade.

• Existing equipment must be used in the new network design.

Select the appropriate installation approach for the FilmCompany network upgrade.

Pendekatan instalasi bertahap akan digunakan untuk proyek ini

Step 3: Complete the details for the installation phases

Using the charts created in Lab 9.2.1; fill out the information for each of the Installation Phases.

a. On the table created in Lab 9.2.1 for Phase 1, fill in the Task/Step, Description, and Implementation

Details information:

• Install Distribution and Core Layer equipment

• Configure new IP addressing & VLAN scheme

• Configure routing

b. On the table for Phase 2, fill in the Task/Step, Description, and Implementation Details information:

• Upgrade the WAN connectivity

• Extend the network to the remote site

• Configure Access Control Lists & security

c. On the table for Phase 3, fill in the Task/Step, Description, and Implementation Details information:

• Install and configure the wireless and associated mobility network equipment

Lab 9.2.3 Creating a Timeline

Step 1: List and prioritize the factors affecting the timeline

Note issues such as equipment and material availability, skilled personnel, and customer requirements that should be considered for the following factors when developing a project timeline. Consider the possibility that the project might not begin on the proposed start date.

Equipment order and delivery

Service installation, such as WAN links

Customer schedule, including available maintenance and downtime windows

Availability of appropriate technical personnel

Step 2: Complete the time details for each installation phase

The FilmCompany network upgrade is linked to the StadiumCompany network redevelopment. It would be efficient to align the FilmCompany stadium remote site work with that project. The StadiumCompany RFP states that the project must be completed during the off-season for the two teams. This requirement gives the project a timeline of four months, which can be also applied to the FilmCompany upgrade.

a. On the table created in Lab 9.2.1 for Phase 1, fill in the Date information:

• Install Distribution and Core Layer equipment

• Configure new IP addressing & VLAN scheme

• Configure routing

b. On the table for Phase 2, fill in the Date information:

• Upgrade the WAN connectivity

• Extend the network to the remote site

• Configure Access Control Lists & security

c. On the table for Phase 3, fill in the Date information:

• Install and configure the wireless and associated mobility network equipment

Step 3: Consider customer-caused delays

Customers may make changes to the requirements during the installation of a project. When changes occur, the timeline is used to make adjustments to personnel and other available resources. The timeline

documentation can also be used to show the customer how delays affect the project completion date.

Based on the timeline, write a project variation statement showing the possible delay in the project completion date if the FilmCompany decided at this stage to relocate an additional three production staff and their workstations to the stadium.

Step 4: Using project management software (Optional)

Project management tools such as Microsoft Project can be used to create a project timeline. This software can be useful for:

• Tracking the progress of the project

• Keeping the project on schedule

• Identifying milestones

• Tracking labor assignments and costs

• Alerting the designer if the project is falling behind schedule.

If this software is available, enter the resources and timeline for one phase of the Implementation Plan and examine the output.

Lab 9.2.4 Creating an Installation Schedule

Step 1: List and prioritize the tasks that require downtime on the current network

List the tasks that require network downtime.

Step 2: Document the required downtime on the project timeline

Sometimes it is not possible to complete all of the required tasks during an approved maintenance window. If an installation task requires the network, or part of the network, to be down during normal business hours, it is important to obtain permission from the customer. As soon as the time frame is determined and approved, all the people involved need to be notified accordingly.

a. List those tasks that can be completed during a scheduled maintenance window.

b. List those tasks that require the network to be down during normal business hours.

Step 3: Document customer approved downtime

a. Indicate on the Installation Plan Timeline when the network downtime will occur.

b. Include a provision for customer approval to be recorded for this downtime.

c. Include a task that requires that the users who will be affected are notified with adequate advance

notice of the network downtime. Ensure that the users are also notified when the network or service

returns to full operation.

Lab 9.3.4 Creating the Bill Of Material

Step 1: List the items required

a. Use the table below, or create a similar one, to list all the items and equipment that need to be

purchased for the FilmCompany network upgrade project.

b. Search the Internet or use information provided by your instructor to add possible suppliers or

vendors to the BOM table.

c. Add costs to the BOM. Where possible, obtain costs from local vendors and suppliers. If this

information is not readily available, your instructor will provide estimated costs for you to use.

Step 2: Determine the software requirements

a. During the early stages of the network Design Phase, existing applications were identified. Add new

applications required by the network upgrade to the BOM. Categorize these as either Network or Specialist applications.

b. Add the new applications, installation costs, and required training to the BOM with the identified

hardware. Also indicate whether the network upgrade requires additional licenses to be purchased for

existing software applications.

Step 3: Add maintenance contracts

a. Investigate the maintenance support service contracts available for both the new and existing equipment.

b. Add the details and costs to the BOM.

Step 4: Create the BOM

a. Create the BOM using word processing or spreadsheet software. Using a spreadsheet will facilitate the calculation of total costs and enable easy updating of the document if costs or quantities are amended.

b. Save this file and include it in the proposal document. Add a hardcopy of the file to your portfolio.

Lab 9.4.1 Compiling the Documentation

Task 1: Compile the Project Proposal

Step 1: Finalize the documentation requirements

a. Finalize the documentation created in the previous labs and in your project portfolio.

b. Insert and compile the information under the following headings:

• Executive Summary

• Network Requirements

• Current Network Environment

• Proposed Physical Design

• Proposed Logical Design

• Implementation Plan

• Cost Proposal

Step 2: Prepare the cover page

Include a cover page at the beginning of the proposal. The cover page describes the proposal, including the RFP or solicitation number and date, the customer contact information, and the vendor name and contact information.

Step 3: Prepare the Table of Contents

Develop a Table of Contents for the proposal document.

Step 4: Create the proposal

Complete the proposal document. The proposal layout should be highly readable and should aid the reader in locating information.

• Use graphics to enhance the readability of a proposal and convey information where appropriate.

• Text should be legible, typically a serif typeface such as Times Roman, at 10-point to 12-point type.

• Page margins should be at least 0.5 inches (125mm).

• Page numbers should be included at the top or bottom of each page.

Step 5: Update the Executive Summary

Use information from the completed implementation and costing sections to update the Executive Summary.

Step 6: Organize the Proposal binder

Arrange the proposal components in a binder, based on the order cited in the Table of Contents.

Step 7: Prepare Terms and Signatures page

a. Prepare the terms of agreement and an acceptance page for customer signatures to be included at

the end of the proposal. The terms and conditions describe all relevant legal terms and contracts that

will be required. These terms and conditions support the supply of goods and services related to

network improvements and installations.

Important clauses in the terms and conditions usually include:

• Details about the proposal expiration date

• Obligations of the customer to obtain permission or other consents within their organization

• Obligations of the vendor to provide services and equipment with care and skill

• Dates when completed milestone deliverables are payable

• Interest chargeable on outstanding payments

• The amount of notice the customer must give to cancel their equipment and service orders

• Details about guarantees (if any) provided by the vendor

• Details about escalating and resolving complaints or issues

If the customer accepts the proposal, an appropriate customer representative signs the Terms and

Signatures page.

Your instructor will advise of the standard terms and conditions that will apply to all proposals.

b. Save this file and include in the proposal document.

Task 2: Prepare the Presentation

Step 1: Plan the presentation

After compiling a proposal, network designers review the entire proposal with their management organization by means of a formal presentation. During this stage of the design proposal, the designer must first sell the concept to the internal management and then to the customer.

For your presentation, list the important points to include that illustrate the proposal. A proposal presentation includes slides or other visual aids to graphically represent the proposal. The presentation, along with the proposal document, is vital to ensuring a successful meeting and increasing the probability of a customer sign-off.

Step 2: Create the presentation

This step assumes that the presentation will use MS PowerPoint or equivalent presentation software. Your instructor will advise of the presentation requirements and resources available.

a. The content and presentation format are important in a business environment. Create a presentation

that considers the following points:

• Every slide should have a heading that summarizes the information presented on the slide.

• Computer presentations should not contain full paragraphs of text. Use a bulleted list or

outline format and elaborate on the points during the delivery.

• All type should be legible. Use large fonts, because small fonts are often hard to read.

• Use contrasting colors – either a dark background with light text or a light background with

dark text.

• Keep the format and style consistent throughout the presentation. Do not change text font,

text color, background color, or theme except for an occasional special emphasis.

• Avoid backgrounds that make the text hard to read. Keep the background simple.

• Do not use ALL CAPS! Their use is unprofessional and they are also more difficult to read.

• Include a combination of words, pictures, and graphics. Variety keeps the presentation

interesting.

b. Save the presentation file and any other presentation aids that you created.

Lab 9.4.2 Presenting the Project Proposal

Task 1: Prepare for the Presentation

Step 1: Review the content

a. Ensure that your presentation is complete.

b. Review the content to ensure that there are no technical errors.

c. Rehearse the presentation to become familiar with the flow of the content and develop a sense of the

timing required.

Step 2: Prepare for questions

Your presentation may seem complete and clear to you, but to others there may be points that need clarifying or that contain too much information.

Read through your presentation as if seeing it for the first time, Note the points that you would ask questions about. Remind yourself that you will not be able to prepare for every possible question.

Step 3: Prepare yourself

Your instructor will advise you on the details (time. location, audience) of the presentation class. On the day of the presentation, try to observe the following guidelines:

a. If possible, and appropriate, wear professional attire.

b. Try not to be too nervous. The other students in your class are probably feeling the same as you are.

c. If other students are presenting before or after you, give them your attention and participate in the

class. Do not think too much about your presentation but focus instead on what is happening in the class.

Task 2: Deliver the Presentation

Step 1: Submit your portfolio and proposal

a. Submit your portfolio and proposal to your instructor before delivering the presentation.

Step 2: Begin the presentation

a. Introduce yourself.

b. Deliver the presentation, using your portfolio and a slide presentation such as PowerPoint.

• Speak slowly and clearly.

• Stay with your slide sequence. A common mistake is to introduce material and then continue

to talk about it in detail without advancing from the general overview slide for that topic to the

detailed slides that follow.

c. Demonstrate that you know the content of the proposal and sell it as the one that the customer should

adopt.

d. Be prepared to respond to questions from the instructors and students.

Step 3: Conclude the presentation

a. Invite any final questions from the audience.

b. Finish your presentation by assuring the audience that your proposal meets their requirements and

thank them for the opportunity to present it.

CompNtwk : Chapter 8

Lab 8.1.3 Simulating WAN Connectivity

Step 1: Connect the PCs to the router console ports

a. Referring to the topology diagram, connect a console cable from PC1 to the console port on R1. Connect a consolecable from PC2 to the console port on R2.

b. Apply power to all PCs and routers.

c. Open a HyperTerminal session on each PC and establish a session to the respective router.

Step 2: Configure the serial interface on R1

Within the global configuration mode of R1, enter the following commands:

Router(config)#hostname Router1

Router1(config)#interface serial 0/1/0

Router1(config-if)#ip address 192.168.1.1 255.255.255.0

Router1(config-if)#no shutdown

Router1(config-if)#end

Router1#

Step 3: Configure the serial interface on R2

Within the global configuration mode of R2, enter the following commands:

Router(config)#hostname Router2

Router2(config)#interface serial 0/1/1

Router2(config-if)#ip address 192.168.1.2 255.255.255.0

Router2(config-if)#clock rate 56000

Router2(config-if)#no shutdown

Router2(config-if)#end

Router2#

Step 4: View the show interface output

a. On Router1, issue the show interface serial 0/1/0 command from the privileged EXEC

mode to view the encapsulation type.

Router1#show interface serial 0/1/0

Serial0/1/0 is up, line protocol is up

Hardware is GT96K Serial

Internet address is 192.168.1.1/24

MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation HDLC, loopback not set

Keepalive set (10 sec)

Last input 00:00:09, output 00:00:08, output hang never

Last clearing of “show interface” counters 00:19:54

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/40 (size/max)

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

14 packets input, 980 bytes, 0 no buffer

Received 9 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

14 packets output, 1026 bytes, 0 underruns

0 output errors, 0 collisions, 8 interface resets

0 output buffer failures, 0 output buffers swapped out

0 carrier transitions

DCD=up DSR=down DTR=up RTS=up CTS=up

What is the encapsulation type?

HDLC

b. On Router2, issue the show interface serial 0/1/1 command from the privileged EXEC

mode to view the encapsulation type.

Router2#show interface serial 0/1/1

Serial0/1/1 is up, line protocol is up

Hardware is HD64570

Internet address is 192.168.1.2/24

MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255

Encapsulation HDLC, loopback not set, keepalive set (10 sec)

Last input 00:00:05, output 00:00:06, output hang never

Last clearing of “show interface” counters never

Queueing strategy: fifo

Output queue 0/40, 0 drops; input queue 0/75, 0 drops

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

9 packets input, 616 bytes, 0 no buffer

Received 4 broadcasts, 0 runts, 0 giants, 0 throttles

2673 input errors, 2673 CRC, 0 frame, 0 overrun, 0 ignored, 1 abort

101 packets output, 4001 bytes, 0 underruns

0 output errors, 0 collisions, 43 interface resets

0 output buffer failures, 0 output buffers swapped out

5 carrier transitions

DCD=up DSR=up DTR=up RTS=up CTS=up

What is the encapsulation type?

HDLC

Step 5: Test router connectivity

From Router2, ping Router1 to test connectivity.

Router2#ping 192.168.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 32/32/36 ms

If the ping is unsuccessful, troubleshoot the routers until connectivity is attained.

Step 6: Change the encapsulation type to PPP

From the privileged EXEC mode, issue the following commands to change the encapsulation type on the

connecting serial interfaces of both routers to PPP.

Router1#config terminal

Router1(config)#interface serial 0/1/0

Router1(config-if)#encapsulation ppp

Router1(config-if)#end

Router1#

Router2#config terminal

Router2(config)#interface serial 0/1/1

Router2(config-if)#encapsulation ppp

Router2(config-if)#end

Router2#

Step 7: View the show interface output

a. On Router1, issue the show interface serial 0/1/0 command from the privileged EXEC

mode to view the encapsulation type.

Router1#show interface serial 0/1/0

Serial0/1/0 is up, line protocol is up

Hardware is GT96K Serial

Internet address is 192.168.1.1/24

MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation PPP, LCP Open

Open: IPCP, CDPCP, loopback not set

Keepalive set (10 sec)

Last input 00:00:18, output 00:00:03, output hang never

Last clearing of “show interface” counters 00:01:49

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/40 (size/max)

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

31 packets input, 1837 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

40 packets output, 2960 bytes, 0 underruns

0 output errors, 0 collisions, 2 interface resets

0 output buffer failures, 0 output buffers swapped out

8 carrier transitions

DCD=up DSR=down DTR=up RTS=up CTS=up

b. On Router2, issue the show interface serial 0/1/1 command from privileged EXEC mode to

view the encapsulation type.

Router2#show interface serial 0/1/1

Serial0/1/1 is up, line protocol is up

Hardware is HD64570

Internet address is 192.168.1.2/24

MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load

1/255

Encapsulation PPP, loopback not set, keepalive set (10 sec)

LCP Open

Open: IPCP, CDPCP

Last input 00:00:01, output 00:00:01, output hang never

Last clearing of “show interface” counters never

Queueing strategy: fifo

Output queue 0/40, 0 drops; input queue 0/75, 0 drops

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

54 packets input, 4042 bytes, 0 no buffer

Received 28 broadcasts, 0 runts, 0 giants, 0 throttles

2673 input errors, 2673 CRC, 0 frame, 0 overrun, 0 ignored, 1 abort

137 packets output, 6252 bytes, 0 underruns

0 output errors, 0 collisions, 47 interface resets

0 output buffer failures, 0 output buffers swapped out

5 carrier transitions

DCD=up DSR=up DTR=up RTS=up CTS=up

Can the serial interface on Router2 be pinged from Router1?

Ya

Can the serial interface on Router1 be pinged from Router2?

Ya

If the answer is no for either question, troubleshoot the router configurations to find the error.

Then issue the pings again until the answer to both questions is yes.

Step 8: Configure PPP authentication on R1 with CHAP

a. Configure the CHAP username and password on the R1 router. The username must be identical to

the hostname of the other router. Both the password and usernames are case-sensitive. Define the

username and password to expect from the remote router. On Cisco routers, the secret password

must be the same for both routers.

Router1(config)#username Router2 password cisco

Router1(config)#interface serial 0/1/0

Router1(config-if)#ppp authentication chap

Router1(config-if)#end

Router1#

Step 9: Configure PPP authentication on R2 with CHAP

a. Configure the CHAP username and password on the R2 router. The passwords must be the

same on both routers. The username must be identical to the hostname on the other router. Both

the password and user names are case-sensitive. Define the username and password to expect

from the remote router.

Router2(config)#username Router1 password cisco

Router2(config)#interface serial 0/1/1

Router2(config-if)#ppp authentication chap

Router2(config-if)#end

Router2#

Step 10: Verify that the serial connection is functioning

Verify that the serial connection is functioning by pinging the serial interface of R1.

Was it successful?

yes

Router2#ping 192.168.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 28/28/28 ms

Why or why not?

Jawab:

Kedua router menggunakan PPP dengan CHAP dan username yang sesuai dan password diatur pada kedua router.

Step 12: Clean up

a. Erase the configurations and reload the routers.

b. Disconnect and store the cabling.

c. For PC hosts that are normally connected to other networks (such as the school LAN or to the

Internet), reconnect the appropriate cabling and restore the TCP/IP settings.

 

Lab 8.2.2 Creating a WAN Connectivity Test Plan

Task 1: Review the Supporting Documentation

Step 1: Refer to the WAN Design Test Plan document provided for this lab

Download the WAN Design Test Plan. What is the purpose of this WAN design test? Which elements

of the design will be tested using this plan?

The purpose of this prototype is to demonstrate the use of Frame Relay WAN links to connect a remote site router to a central site router through a router that simulates a Frame Relay switch. Backup Ethernet links from the remote site and central site to a 4th router simulate a VPN backup capability and provide an alternate path in the event that one of the Frame Relay WAN links goes down.

a. Document the purpose of the test in the Introduction section of the WAN Design Test Plan.

b.Review the tests that will be run to validate the prototype.

Step 2: Review the equipment needed to perform the tests

Review the list of all equipment needed to build the prototype and to perform the tests. Be sure to include

cables, optional connectors or components, and software. If the recommended equipment is not available in your lab, discuss possible substitutes with your instructor and classmates, based on interface requirements of the topology.

a. If substitute equipment must be used, list the devices here:

b. Determine the amount of each type of cabling necessary to create the prototype test topology. Record the information on the Equipment chart in the WAN Design Test Plan.

c. Document any special configuration or cabling issues that might arise if substitute equipment is used.

Task 2: Document information regarding Test 1

Task 3: Document information regarding Test 2

Task 4: Reflection / Challenge

Why is Frame Relay a good choice as a primary WAN technology?

Ini adalah teknologi yang fleksibel yang banyak didukung oleh peralatan vendor. Layanan ini biasanya tersedia dari sebagian besar penyedia layanan Telecom (TSPS). Memberikan kestabilan data digital link dengan berbagai CIRs tergantung pada kebutuhan pelanggan. Mendukung berbagai topologi. SLA biasanya available.

When is it most important to have a backup link? How does a backup link compare to a redundant link?

Link Backup diperlukan ketika hilangnya link primer yang akan menyebabkan hilangnya akses ke sumber daya kritis. Ini adalah biaya / resiko keputusan yang dibuat oleh sebuah organisasi.

 

Lab 8.2.5 Configuring and Verifying WAN Backup Links

Task 1: Build the Network. Task Complete

Step 1 Connect devices

a. Connect the routers as shown in the topology diagram. Refer to the Test Plan in Lab 8.2.2 for cabling

required.

b. For each of the routers to be configured, use the erase startup-config and the reloadcommands from the privileged EXEC prompt, to ensure that you are starting with a clean configuration.

Task 2: Configure Router ISPX as a Backup. Task Complete

Step 1: Perform basic configuration of the ISPX router

Connect a PC to the console port of the router to perform configurations using a terminal emulation

program.

Configure the router with hostname, passwords, message-of-the–day, and no ip domain lookup.

Router(config)#hostname ISPX

ISPX(config)#line console 0

ISPX(config-line)#password cisco

ISPX(config-line)#login

ISPX(config-line)#exit

ISPX(config)#line vty 0 4

ISPX(config-line)#password cisco

ISPX(config-line)#login

ISPX(config-line)#exit

ISPX(config)#enable password cisco

ISPX(config)#enable secret class

ISPX(config)#no ip domain-lookup

ISPX(config)#banner motd #Unauthorized use prohibited#

Step 2: Configure ISPX router FastEthernet interfaces

Configure the FastEthernet interfaces for the backup links to the Edge2 and BR3 routers. Configure a

description and the IP address, and activate each interface.

Step 3: Configure a static route on the ISPX router to the FilmCompany local network

On the ISPX router, configure a normal static route to the BR3 network 172.18.225.0/25 via the Fa0/0

interface on BR3.

Step 4: Configure a static route on the ISPX router to the stadium local network

On the ISPX router, configure a normal static route to the Edge2 network 172.18.3.0/24 via the Fa0/1

interface on Edge2.

Task 3: Configure the Stadium Edge2 Router. Task Complete:

Step 1: Perform basic configuration of the router

Connect a PC to the console port of the router to perform configurations using a terminal emulation program. Erase and reload the router before starting.

Configure the router with a hostname, passwords, message-of-the–day, and no ip domain lookup.

Step 2: Configure stadium router Edge2 interfaces

Configure the Serial 0/1/1 interface with Frame Relay encapsulation. Configure a point-to-point

subinterface for DLCI 110.

Edge2(config)#interface serial0/1/1

Edge2(config-if)#description primary link to BR3

Edge2(config-if)#encapsulation frame-relay

Edge2(config-if)#no shutdown

Edge2(config-if)#interface serial0/1/1.110 point-to-point

Edge2(config-subif)#ip address 172.18.0.9 255.255.255.252

Edge2(config-subif)#frame-relay interface-dlci 110

Edge2(config-fr-dlci)#end

Configure FastEthernet 0/0 interface for the stadium LAN network 172.18.3.0/24.

Configure FastEthernet 0/1 interface for the backup link to the ISPX router per the topology diagram.

Step 3: Configure a dynamic routing protocol on stadium router Edge2

On Edge2, configure the EIGRP routing protocol to advertise the 172.18.3.0/24 network and the

172.18.0.8/30 network. Use EIGRP process ID 10. Disable auto-summary.

Configure EIGRP MD5 authentication to accept updates from the FilmCompany router BR3 on the Frame Relay subinterface.

Sample steps to configure EIGRP authentication are:

Edge2#configure terminal

Edge2(config)#key chain MYCHAIN

Edge2(config-keychain)#key 1

Edge2(config-keychain-key)#key-string securetraffic

Edge2(config-keychain-key)#exit

Edge2(config)#interface serial 0/1/1.110

Edge2(config-subif)#ip authentication mode eigrp 10 md5

Edge2(config-subif)#ip authentication key-chain eigrp 10 MYCHAIN

Edge2(config-subif)#end

Edge2#

Until EIGRP and MD5 configuration are complete on router BR3, no EIGRP updates will be received.

The debug eigrp packet command can be used to view the EIGRP exchange as it is occurring

between the routers.

Task 4: Configure the FilmCompany BR3 Router. Task Complete:

Step 1: Perform basic configuration of the router

Connect a PC to the console port of the router to perform configurations using a terminal emulation

program. Erase and reload the router before starting.

Configure the router with a hostname, passwords, message-of-the–day, and no ip domain lookup.

Step 2: Configure router BR3 interfaces

Configure Serial 0/1/0 interface with Frame Relay encapsulation. Configure a point-to-point

subinterface for DLCI 100.

BR3(config)#interface serial0/1/0

BR3(config-if)#description primary link to Edge2

BR3(config-if)#encapsulation frame-relay

BR3(config-if)#no shutdown

BR3(config-if)#interface serial0/1/0.100 point-to-point

BR3(config-subif)#ip address 172.18.0.10 255.255.255.252

BR3(config-subif)#frame-relay interface-dlci 100

BR3(config-fr-dlci)#end

Configure FastEthernet 0/1 interface for the FilmCompany LAN network 172.18.225.0/25.

Configure FastEthernet 0/0 interface for the backup link to the ISPX router per the topology diagram.

Step 3: Configure the dynamic routing protocol on router BR3

On BR3, configure the EIGRP routing protocol to advertise the 172.18.225.0/25 network and the

172.18.0.8/30 network. Use EIGRP process ID 10. Disable auto-summary.

Configure EIGRP MD5 authentication to accept routing updates from the Edge2 router on interface

serial0/1/0.100.

BR3#configure terminal

BR3(config)#key chain MYCHAIN

BR3(config-keychain)#key 1

BR3(config-keychain-key)#key-string securetraffic

BR3(config-keychain-key)#exit

BR3(config)#interface serial 0/1/0.100

BR3(config-subif)#ip authentication mode eigrp 10 md5

BR3(config-subif)#ip authentication key-chain eigrp 10 MYCHAIN

BR3(config-subif)#end

When authentication is configured, both Edge2 and BR3 should begin accepting EIGRP updates. Use

the show ip route command to verify that the routes to the LAN devices have been learned.

Until EIGRP and MD5 configuration are complete on router BR3, no EIGRP updates will be received

successfully. The command debug eigrp packet shows when EIGRP authentication is

successful. Example output of the debug eigrp packet command once BR3 is correctly

configured is shown below:

BR3#debug eigrp packet

00:47:04: EIGRP: received packet with MD5 authentication, key id = 1

00:47:04: EIGRP: Received HELLO on Serial0/1/0.100 nbr 172.18.0.9

Task 5: Conduct Primary Frame Relay Link Testing Based on the Test Plan. Task

Complete:

Execute the procedures outlined in Test 1 to test the simulated Frame relay network. Record the results of the tests in the Test 1: Results and Conclusions section.

Step 1: Console into routers Edge2 and BR3 and verify the basic configuration, IP addressing, Frame Relay

Issue the show running-config command for each of the routers to verify passwords, IP addressing, and Frame Relay configuration. See end of lab for router configs.

Step 2: Verify the Frame Relay configuration on Edge2, BR3, and FR1

Use show frame-relay commands to verify the Frame Relay configurations. See Lab 8.2.4 for command output.

show frame-relay map – Status of point-to-point links

show frame-relay pvc – Permanent Virtual Circuit (PVC) status and statistics

show frame-relay lmi – Local Management Interface (LMI) statistics

show frame-relay route – DLCI/interface routing (FR1 switch only)

Step 3: Verify routing table contents on router Edge2

Display the routing table for Edge2 using the show ip route command.

Edge2#sh ip route

Codes: C – connected, S – static, R – RIP, M – mobile, B – BGP

D – EIGRP, EX – EIGRP external, O – OSPF, IA – OSPF inter area

N1 – OSPF NSSA external type 1, N2 – OSPF NSSA external type 2

E1 – OSPF external type 1, E2 – OSPF external type 2

i – IS-IS, su – IS-IS summary, L1 – IS-IS level-1, L2 – IS-IS

level-2

ia – IS-IS inter area, * – candidate default, U – per-user static

route

o – ODR, P – periodic downloaded static route

Gateway of last resort is not set

172.18.0.0/16 is variably subnetted, 4 subnets, 3 masks

C 172.18.0.248/30 is directly connected, FastEthernet0/1

D 172.18.225.0/25

[90/2172416] via 172.18.0.10, 00:09:33, Serial0/0/1.110

C 172.18.0.8/30 is directly connected, Serial0/0/1.110

C 172.18.3.0/24 is directly connected, FastEthernet0/0

Is there an EIGRP route to the FilmCompany LAN 172.18.225.0/25?

Ya

What is the AD of this route?

90

What is the next hop IP address to get to this network?

172.18.0.10 (F/R link)

Does the primary route take the Frame Relay link?

Ya

Step 4: Verify routing table contents on router BR3

Display the routing table for BR3 using the show ip route command.

BR3#sh ip route

Codes: C – connected, S – static, R – RIP, M – mobile, B – BGP

D – EIGRP, EX – EIGRP external, O – OSPF, IA – OSPF inter area

N1 – OSPF NSSA external type 1, N2 – OSPF NSSA external type 2

E1 – OSPF external type 1, E2 – OSPF external type 2

i – IS-IS, su – IS-IS summary, L1 – IS-IS level-1, L2 – IS-IS

level-2

ia – IS-IS inter area, * – candidate default, U – per-user static

route

o – ODR, P – periodic downloaded static route

Gateway of last resort is not set

172.18.0.0/16 is variably subnetted, 4 subnets, 3 masks

C 172.18.225.0/25 is directly connected, FastEthernet0/1

C 172.18.225.248/30 is directly connected, FastEthernet0/0

C 172.18.0.8/30 is directly connected, Serial0/0/0.100

D 172.18.3.0/24 [90/2172416] via 172.18.0.9, 00:11:59,

Serial0/0/0.100

Is there an EIGRP route to the Edge2 network 172.18.3.1/24?

Ya

What is the AD of this route?

90

Step 5: Verify routing table contents on router ISPX

Display the routing table for ISPX using the show ip route command.

ISPX#show ip route

Codes: C – connected, S – static, R – RIP, M – mobile, B – BGP

D – EIGRP, EX – EIGRP external, O – OSPF, IA – OSPF inter area

N1 – OSPF NSSA external type 1, N2 – OSPF NSSA external type 2

E1 – OSPF external type 1, E2 – OSPF external type 2

i – IS-IS, su – IS-IS summary, L1 – IS-IS level-1, L2 – IS-IS

level-2

ia – IS-IS inter area, * – candidate default, U – per-user

static route

o – ODR, P – periodic downloaded static route

Gateway of last resort is not set

172.18.0.0/16 is variably subnetted, 4 subnets, 3 masks

C 172.18.0.248/30 is directly connected, FastEthernet0/1

S 172.18.225.0/25 [1/0] via 172.18.225.249

C 172.18.225.248/30 is directly connected, FastEthernet0/0

S 172.18.3.0/24 [1/0] via 172.18.0.249

Are there any EIGRP routes?

Tidak

Why or why not?

ISPX router tidak menjalankan protokol EIGRP.

Are there any static routes and if so, to what network?

Ya, pada BR3 LAN network 172.18.225.0/25 dan pada Edge2 LAN network 172.18.3.0/24

What is the purpose of these static routes?

Menyediakan rute dari Edge2 untuk LAN BR3 melalui router ISPX. Jika ISP tidak akan tahu bagaimana untuk sampai ke sana.

Step 6: Test IP connectivity between routers Edge2 and BR3 via the primary Frame Relay link

Ping from Edge2 to the IP address of host PC2. Was the ping successful?

Ya

If not, troubleshoot until successful.

Ping from BR3 to the IP address of host PC1.

Was the ping successful?

Ya

If not, troubleshoot until successful.

Verify that traffic is taking the correct path by using the traceroute command.

Turn off all debugging using the undebug all command.

Record all results in the WAN Design Test Plan document in the Test 1: Results and Conclusions section.

Perform Test 2: Backup Link Configuration Test

Task 6: Configure floating static routes. Task Complete:

Step 1: Configure a floating static route on Edge2 and BR3 via the primary Frame Relay link.

On Edge2, configure a static route to the FilmCompany LAN (172.18.225.0/25) using the next hop

address of the interface Fa0/1 on router ISPX. Configure the administrative distance on the floating

static routes to be 130, greater than the administrative distance of the EIGRP learned route.

On BR3, configure a static route to the stadium LAN (172.18.3.0/24) using the next hop address of

the interface Fa0/0 on router ISPX. Configure the administrative distance on the floating static route

to be 130, greater than the administrative distance of the EIGRP learned route.

Task 7: Conduct Backup Link Test. Task Complete:

Step 1: Test the backup link though the ISPX router by taking down the primary Frame Relay link

Cause the Frame Relay link from Edge2 to FR1 to fail by shutting down the Serial 0/1/1 interface.

Step 2: Verify routing table contents on router Edge2

Display the routing table for Edge2 using the show ip route command.

Edge2#sh ip route

Codes: C – connected, S – static, R – RIP, M – mobile, B – BGP

D – EIGRP, EX – EIGRP external, O – OSPF, IA – OSPF inter area

N1 – OSPF NSSA external type 1, N2 – OSPF NSSA external type 2

E1 – OSPF external type 1, E2 – OSPF external type 2

i – IS-IS, su – IS-IS summary, L1 – IS-IS level-1, L2 – IS-IS

level-2

ia – IS-IS inter area, * – candidate default, U – per-user

static route

o – ODR, P – periodic downloaded static route

Gateway of last resort is not set

172.18.0.0/16 is variably subnetted, 3 subnets, 3 masks

C 172.18.0.248/30 is directly connected, FastEthernet0/1

S 172.18.225.0/25 [130/0] via 172.18.0.250

C 172.18.3.0/24 is directly connected, FastEthernet0/0

Is there an EIGRP route to the FilmCompany network 172.18.225.0/25 now?

Tidak

Is the floating static backup route to the FilmCompany network 172.18.225.0/25 that you defined

earlier now present?

Ya

What is the AD of this route?

130

What is the next hop IP address to get to the 172.18.225.0/25 network?

172.18.0.250 (ISPX Fa0/1 link)

Does the backup route take the ISPX link?

Ya

Step 3: Verify routing table contents on router BR3

Display the routing table for BR3 using the show ip route command.

BR3#sh ip route

Codes: C – connected, S – static, R – RIP, M – mobile, B – BGP

D – EIGRP, EX – EIGRP external, O – OSPF, IA – OSPF inter area

N1 – OSPF NSSA external type 1, N2 – OSPF NSSA external type 2

E1 – OSPF external type 1, E2 – OSPF external type 2

i – IS-IS, su – IS-IS summary, L1 – IS-IS level-1, L2 – IS-IS

level-2

ia – IS-IS inter area, * – candidate default, U – per-user static

route

o – ODR, P – periodic downloaded static route

Gateway of last resort is not set

172.18.0.0/16 is variably subnetted, 3 subnets, 3 masks

C 172.18.225.0/25 is directly connected, FastEthernet0/1

C 172.18.225.248/30 is directly connected, FastEthernet0/0

S 172.18.3.0/24 [130/0] via 172.18.225.250

Continue to issue the show ip route command until the EIGRP route is gone and the floating

static route is installed, otherwise ping responses (echo reply) cannot be sent back to Edge2.

Is there an EIGRP route to the Edge2 network 172.18.3.0/24?

Tidak

Is there a floating static route?

Ya

What is the AD of this route?

130

What is the next hop IP address to get to the 172.18.3.0/24 network?

172.18.225.250 (ISPX Fa0/0)

Step 4: Test IP connectivity between routers Edge2 and BR3 via the backup Ethernet link

a. Ping from PC1 on Edge2 to the IP address of host PC2.

Was the ping successful?

Ya

If not, troubleshoot until successful.

Verify that traffic is taking the backup link by using the tracert command from PC1 to PC2. Record the results in the WAN Design Test Plan section Test 2: Results and Conclusions.

Turn off any debugging using the undebug all command.

Step 5: Clean up

Erase the configurations and reload the routers. Disconnect and store the cabling. For PC hosts that are

normally connected to other networks (such as the school LAN or to the Internet), reconnect the

appropriate cabling and restore the TCP/IP settings.

Task 8: Reflection / Challenge

When is it most important to have a backup link? How does a backup link compare to a redundant link?

Link Backup diperlukan ketika hilangnya link primer yang akan menyebabkan hilangnya akses ke sumber daya kritis. Ini adalah biaya / resiko keputusan yang dibuat oleh sebuah organisasi.

This lab uses the RIP dynamic routing protocol and floating static routes to demonstrate primary and backup routes. Would it be possible to use all static routes and no dynamic routing protocol?

Ya, tapi rute statis untuk semua lokasi jaringan harus ditetapkan untuk komunikasi end-to–end
antara jaringan. Harus ada rute untuk mencapai tujuan jaringan dan rute di tempat tujuan untuk kembali, agar komunikasi dua arah terjadi.

 

Lab 8.2.6 Evaluating the Prototype Test

Step 1: Identify if weaknesses are present in the design

Is the Frame Relay WAN design able to scale to meet the expected growth?

Ya, layanan Frame Relay biasanya sangat terukur. CIR tambahan dapat dibeli dan sirkuit tambahan dapat ditambahkan jika diperlukan.

Do the results of the prototype test indicate that the Frame Relay configuration will work as expected?

Karena sebuah router bertindak sebagai saklar Frame Relay simulasi, tidak ada cara untuk menguji bandwidth dan kinerja Frame Relay nyata switched jaringan. Karena tidak mungkin untuk menguji kemampuan melalui jaringan Frame Relay TSP sebenarnya ada risiko yang berkaitan dengan desain.

Are there any weaknesses associated with using the VPN connections as backup to the Frame Relay WAN?

Walaupun pengujian memverifikasi bahwa fungsi Ethernet berbasis simulasi backup, ini tidak cukup mensimulasikan penggunaan link VPN sebagai link Fast Ethernet jauh lebih cepat daripada VPN khas. Daerah yang paling kritis risiko adalah kinerja dari link VPN sebagai backup dalam jaringan nyata. Apabila komponen suara dan video dari jaringan ditambahkan ke WAN lalu lintas yang ada, mungkin ada masalah kualitas layanan jika koneksi VPN harus digunakan. VPN arus melalui ISP tidak memiliki tingkat jaminan pelayanan. Selain itu, tidak memiliki mekanisme untuk menyediakan QoS. Akibatnya, link cadangan hanya bisa menyediakan konektivitas terbatas dalam hal kegagalan.

Will a failure of the primary link cause the FilmCompany to lose connectivity to the Stadium LAN?

Tidak, link backup dengan rute statis mengambang akan diaktifkan untuk menyediakan konektivitas ketika F primer / link R gagal.

Does the EIGRP authentication provide for a secure transmission of the routing updates?

Ya, meskipun penggunaan Pesan Digest 5 (MD5). Kombinasi kunci pengenal dan antarmuka yang terkait dengan pesan unik mengidentifikasi algoritma otentikasi dan kunci MD5 otentikasi digunakan.

Step 2: Determine what the risks are of not correcting the weaknesses

If, in Step 1, you identify weaknesses in the proposed design, what risks do these weaknesses present to

FilmCompany?

Risikonya adalah bahwa jaringan Frame Relay bawah beban aktual pengguna yang sebenarnya tidak akan melakukan serta link disimulasikan dalam prototipe. Juga, linkVPN cadangan disimulasikan mungkin tidak bekerja seperti yang diharapkan dalam hal pemulihan menggunakan link VPN nyata bukan link FastEthernet simulasi. Penerimaan akhir dari desain mungkin harus menunggu sampai hasil instalasi pilot diketahui.

Step 3: Suggest ways that the design can be improved to reduce the risk

In what ways could the proposed design be improved to reduce the areas of risk?

Jika waktu dan uang mengizinkan, uji coba dapat dijalankan di mana sirkuit F/R sementara dengan CIR tertentu bisa dipasang dengan kerjasama layanan yang disediakan dan beban uji simulasi dapat dihasilkan pada berbagai waktu untuk memastikan kinerja di bawah tinggi –volume kondisi. Tingkat perjanjian layanan (SLA) juga bisa dinegosiasikan untuk menyediakan asuransi yang rangkaian akan bekerja seperti yang diharapkan selama periode beban puncak. Sehubungan dengan link backup VPN, pilot dapat termasuk penggunaan koneksi VPN aktual melalui link DSL ke lebih akurat menunjukkan kemampuan pemulihan dari desain yang diusulkan.

Step 4: Document the weaknesses and risks on the test plan

In the Results and Conclusions section of the test plan, record any weaknesses, risks, and suggested improvements.

Step 4: Reflection

Why do you think it is important to identify weaknesses and risks in the proposed design before presenting it to the customer? What are some reasons that weaknesses cannot be corrected?

Adalah penting untuk mengidentifikasi kelemahan dan risiko dalam desain yang diusulkan sebelum menyajikannya kepada pelanggan untuk memastikan bahwa pelanggan memahami keterbatasan prototipe dan tidak mengarah pada memiliki harapan yang tidak realistis berdasarkan prototipe. Mungkin tidak mungkin untuk mengimbangi semua kelemahan yang dapat diidentifikasi karena waktu, uang atau kendala personil. Risiko harus dianalisa dan seimbang terhadap variabel-variabel lainnya.

 

Lab 8.3.2 Creating a VPN Connectivity Test Plan

Step 1: Review the VPN Design Test Plan

Review the VPN Design Test Plan. Note the tests that the designer indicates are necessary to perform using the prototype network.

Test 1: Description and purpose:

EasyVPN Server Setup Verifikasi

Test 2: Description and purpose:

Konektivitas Test Klien VPN

Step 2: Review the Equipment section

Which device will be used as the VPN server in the prototype network? 1841 Router

What IOS version is necessary to configure the EasyVPN server? Advanced Layanan IP versi 12,4 atau di atas dan Cisco SDM

Is equipment available in your lab with the correct IOS to build the prototype network configuration?

Step 3: Review the Design and Topology section

At the top of this lab, the actual VPN topology is shown, as well as the topology being used in the prototype test. Compare both topologies. Remote workers usually connect to the Internet and then use client software to create the VPN tunnel to the server. In the prototype environment, the connection between the VPN client and the VPN server is a much more direct connection.

What is the risk of testing the VPN operation in a prototype environment?

Kondisi dunia nyata tidak dapat dengan mudah disimulasikan. Server VPN akan memberikan alamat logis ke remote host H1 yang berlaku di jaringan internal. Alamat ini akan ditugaskan secara dinamis, ketika terowongan VPN dibuat.

Step 4: Review the Test 1 Description, Procedures, and Expected Results sections

The designer needs to verify that the EasyVPN server can be configured and managed by the existing

personnel. It is important to document how the Cisco SDM software can be used to configure and manage the VPN server.

Step 5: Review the Test 2 Description, Procedures, and Expected Results sections

Read through the Test 2 information in the test plan. Determine an appropriate goal for Test 2 and fill in the table in the VPN Design Test Plan.

After reading the Procedures section, what do you think would be a successful outcome of completing the

Test 2 procedures?

Successful connection to the VPN server using the external VPN client

Successful tunnel establishment

VPN client has received an internal IP address from the VPN server.

VPN client can ping an internal host or connect to an internal server service

Record your answers in the Expected Results and Success Criteria section for Test 2.

Reflection / Challenge

Why do you think it is important to test the VPN operation in a pilot installation, as well as a prototype test?

Implementasi pilot dapat menguji konfigurasi dan operasi dalam lingkungan dunia nyata.

What are the benefits of managing the VPN server with internal personnel, rather than using the ISP to

manage it?

Hal ini lebih fleksibel. Mengurangi biaya. Lebih mudah untuk menambahkan klien tambahan.

CompNtwk : Lab 7.3.6 Identifying Risks and Weaknesses in the Design

Task 1: Identify areas of risk and weakness in the server farm implementation

Step 1: Analyze the physical topology

Examine the server farm topology as one entity and as a part of the entire FilmCompany topology. Look for each of the risks and weaknesses listed in the chart. Describe the devices, connections, and issues that you find, or record None found if the design appears to avoid risks in that area.

Weakness	Risk	Description of Location and Devices
Single point of failure	If a device fails, a portion of the network will be inoperable.
Large failure domain	If a device or link fails, a large portion of the network will be affected
Possible bottlenecks	If the traffic volume increases, thereis a potential for response time to  degrade.
Limited scalability	If the network grows more rapidly than expected, a costly upgrade will be needed.
Overly-complex design	If the design is too complex, the current staff will not be able to support it properly.
Other possibleweaknesses (specify):

Step 2: Analyze the results and conclusions of the testing

Basic router and switch configurations were modified to support the following protocols and functions.

Evaluate the results and conclusions that were drawn from the testing. Identify any areas where modifications to the configuration would provide better results, both now and in the future.

	No Change Needed	Modifications Possible
VLAN port assignments
VTP client/server assignments
Root bridge designations
Switch security
Traffic filtering through ACLs
Other (specify):

Task 2: Suggest modifications to the design to address identified risks and weaknesses

From the analysis performed in Task 1, list each risk or weakness and suggest possible changes to the

design to minimize or eliminate it.

 

CompNtwk : Lab 7.3.5 Testing a Prototype Network

Task 1: Assemble and connect component devices

Step 1: Review the Topology Diagram and the Equipment section of the test plan

a. Determine which equipment or suitable substitutes will be required to meet the objectives of the lab.

b. Modify the topology diagram as necessary to fit available equipment.

Step 2: Review the Installation Checklist provided in lab 7.3.2.

Accommodate any equipment limitations with the use of loopback addresses.

Task 2: Perform Test 1: Basic Connectivity Test

Step 1: Using the Installation Checklist, perform the steps to connect and configure the

prototype network to perform Test 1.

Step 2: Perform the Test 1 procedures according to the Server Farm Design Test Plan and record the results in the Results and Conclusions section.

Determine if the test was successful. If not, discuss your results with your instructor and the other students in your class. Perform the test again if necessary.

Task 3: Perform Test 2: VLAN Configuration Test

Step 1: Using the Installation Checklist, perform the steps to connect and configure the

prototype network to perform Test 2.

Step 2: Perform the Test 2 procedures according to the Server Farm Design Test Plan and record the results in the Results and Conclusions section.

Determine if the test was successful. If not, discuss your results with your instructor and the other students in your class. Perform the test again if necessary.

Task 4: Perform Test 3: VLAN Routing Test

Step 1: Using the Installation Checklist, perform the steps to connect and configure the

prototype network to perform Test 3.

Step 2: Perform the Test 3 procedures according to the Server Farm Design Test Plan and record the results in the Results and Conclusions section.

Determine if the test was successful. If not, discuss your results with your instructor and the other students in your class. Perform the test again if necessary.

Task 5: Perform Test 4: ACL Filtering Test

Step 1: Review security goals for the FilmCompany network

Examine the test plan, checklist, and other documentation to determine how ACLs can support the security goals.

Step 2: Examine results of connectivity tests to determine targets for the ACLs

Decide which devices should be permitted, which protocols should be used, and where ACLs should be

placed.

Step 3: Create ACLs

Step 4: Using the Installation Checklist, perform the steps to connect and configure the

prototype network to perform Test 4.

Step 5: Perform the Test 4 procedures according to the Server Farm Design Test Plan and record the results in the Results and Conclusions section.

Determine if the test was successful. If not, discuss your results with your instructor and the other students in your class. Perform the test again if necessary

Task 6 Reflection

Examine the test results and conclusions. How this network would be affected if:

1. The number of servers was doubled?

Lalu lintas di S2 akan meningkat. Mungkin akan bermanfaat menambahkan saklar dan pemecahan server untuk menghindari single point of failure.

2. The S2 switch had a system failure?

Akses ke server akan hilang.

3. A new branch office with 25 new hosts was added?

Beban pada router R2 atau R1 akan meningkat tergantung pada akses apa yang dibutuhkan pengguna terhadap sumber daya.

Now that you have followed the process of prototyping from creating the plan through testing and recording results and conclusions, what are the advantages and disadvantages of using a simulation program, such as Packet Tracer, compared to building the prototype with physical devices?

Penggunaan program simulasi dapat sangat membantu dalam skenario pengujian berbagai koneksi, alamat IP dan isu-isu lainnya. Perangkat lain dapat dimasukkan ke dalam bermain daripada ketika membangun prototipe menggunakan peralatan yang nyata, namun tidak ada pengganti untuk menggunakan perlengkapan nyata, jika tersedia.

 

CompNtwk : Lab 7.3.3 Configuring and Testing the Rapid Spanning Tree Prototype

Task 1: Configure all devices

Step 1: Configure S1 and S2

Configure the host name, access, and command mode passwords on each switch.

Step 2: Configure interface VLAN 1

Configure the VLAN1 IP address and default gateway on each switch.

Step 3: Configure FC-ASW-1 for server and end user VLANs

VLAN Number	VLAN Name
10	Servers
20	Users

Step 4: Configure ProductionSW for server and end user VLANs

VLAN Number	VLAN Name
10	Servers
20	Users

Step 5: Assign ports to VLANs on FC-ASW-1

FC-ASW-1#configure terminal

FC-ASW-1(config)#interface Fa0/5

FC-ASW-1(config-if)#switchport mode access

FC-ASW-1(config-if)#switchport access VLAN10

FC-ASW-1(config-if)#interface Fa0/6

FC-ASW-1(config-if)#switchport mode access

FC-ASW-1(config-if)#switchport access VLAN20

Step 6: Assign ports to VLANs on ProductionSW

ProductionSW#configure terminal

ProductionSW(config)#interface Fa0/5

ProductionSW(config-if)#switchport mode access

ProductionSW(config-if)#switchport access VLAN10

ProductionSW(config-if)#interface Fa0/6

ProductionSW(config-if)#switchport mode access

ProductionSW(config-if)#switchport access VLAN20

Step 7: Configure trunk ports on FC-ASW-1 to the router and ProductionSW

FC-ASW-1(config)#interface Fa0/1

FC-ASW-1(config-if)#switchport mode trunk

FC-ASW-1(config-if)#interface Fa0/2

FC-ASW-1(config-if)#switchport mode trunk

FC-ASW-1(config-if)#interface Fa0/4

FC-ASW-1(config-if)#switchport mode trunk

Step 8: Configure trunk ports on ProductionSW to FC-ASW-1

ProductionSW(config)#interface Fa0/2

ProductionSW(config-if)#switchport mode trunk

ProductionSW(config-if)#interface Fa0/4

ProductionSW(config-if)#switchport mode trunk

Step 9: Configure VTP on both switches

FC-ASW-1#vlan database

FC-ASW-1(vlan)#vtp server

Step 10: Configure ProductionSW to be a VTP client

ProductionSW#vlan database

ProductionSW(vlan)#vtp client

ProductionSW(vlan)#vtp domain ServerFarm

Step 11: Configure Rapid Spanning Tree Protocol

On each switch, configure Per-VLAN Rapid Spanning Tree Protocol.

FC-ASW-1(config)#spanning-tree mode rapid-pvst

ProductionSW(config)#spanning-tree mode rapid-pvst

Step 12: Perform basic router configuration

Configure hostname, passwords, and line access on R1.

Step 13: Configure Subinterface Fa0/0

BR4#configure terminal

BR4(config)#interface Fa0/0

BR4(config-if)#no shut

BR4(config-if)#interface Fa0/0.1

BR4(config-subif)#description VLAN1

BR4(config-subif)#encapsulation dot1q 1

BR4(config-subif)#ip address 10.0.0.1 255.255.255.0

BR4(config-subif)#interface Fa0/0.10

BR4(config-subif)#description VLAN10

BR4(config-subif)#encapsulation dot1q 10.

BR4(config-subif)#ip address 10.10.10.254 255.255.255.0

BR4(config-subif)#interface Fa0/0.20

BR4(config-subif)#description VLAN20

BR4(config-subif)#encapsulation dot1q20

BR4(config-subif)#ip address 10.10.20.254 255.255.255.0

BR4(config-subif)#end

BR4#

Step 14: Configure two hosts for server VLAN, and two hosts for end user VLAN

a. H1 and H3 should be given IP addresses in the Servers VLAN, with a default gateway of

10.10.10.254.

b. H2 and H4 should be given IP addresses in the Users VLAN, with a default gateway of 10.10.20.254.

Task 2: Perform basic connectivity tests

Step 1: Test intra-VLAN connectivity

a. Ping from H1 to H3.

Is the ping successful?

Ya

If the ping fails, troubleshoot the configuration on the hosts and the VLAN configuration on the switches.

b. Ping from H2 to H4.

Is the ping successful?

Ya

If the ping fails, troubleshoot the configuration on the hosts and the VLAN configuration on the switches.

Step 2: Test inter-VLAN connectivity

Ping from a host on the Servers VLAN to a host on the Users VLAN.

Is the ping successful?

Ya

If the ping fails, troubleshoot the router and switch configurations.

Task 3: Introduce link and device failures into the network, and observe results

Step 1: Determine the port status of the spanning tree on the server switch

FC-ASW-1#show span

VLAN0010

Spanning tree enabled protocol ieee

Root ID Priority 32778

Address 0030.F2C9.90A0

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32778 (priority 32768 sys-id-ext 10)

Address 0090.21AC.0C10

Aging Time 300

Interface Role Sts Cost Prio.Nbr Type

—————- —- — ——— ——– ————————–

Fa0/1 Desg FWD 19 128.3 Shr

Fa0/2 Root FWD 19 128.3 Shr

Fa0/4 Altn BLK 19 128.3 Shr

Fa0/5 Desg FWD 19 128.3 Shr

VLAN0020

Spanning tree enabled protocol ieee

Root ID Priority 32788

Address 0030.F2C9.90A0

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32788 (priority 32768 sys-id-ext 20)

Address 0090.21AC.0C10

Aging Time 300

Interface Role Sts Cost Prio.Nbr Type

—————- —- — ——— ——– ————————–

Fa0/1 Desg FWD 19 128.3 Shr

Fa0/2 Root FWD 19 128.3 Shr

Fa0/4 Altn BLK 19 128.3 Shr

Fa0/6 Desg FWD 19 128.3 Shr

Which port is not currently participating in forwarding data?

Fa0/4 adalah alternatif

Step 2: Induce a link failure on the server switch

Remove the cable from one of the forwarding ports on FC-ASW-1.

Step 3: View the adjustment to the spanning-tree

Re-issue the show span command.

How long did it take the switches to determine and utilize a backup link?

Step 4: Induce a device failure on the network

Turn off the ProductionSW switch.

Ping from H1 to H2.

Was the ping successful?

Yes, both hosts are on the FC-ASW-1 switch and inter-VLAN

routing is still taking place.

Step 5: Reflect on the test results

In a network with multiple branch offices, why is the use of Rapid Spanning Tree Protocol important?

RSTP adalah penting untuk memastikan konektivitas perangkat pada layer akses di setiap kantor cabang dan bahwa sumber daya seperti server yang dapat diakses oleh pengguna di kantor-kantor lain yang bergantung pada mereka, dalam hal terjadi kegagalan switch-terkait setempat.

Why is it important when implementing a server farm?

RSTP akan membantu untuk memastikan bahwa switch dapat sembuh dengan cepat dan menyimpan server diakses oleh pengguna dalam hal link, switch atau kegagalan port.

 

CompNtwk : Lab 7.3.2 Creating a Server Farm Test Plan

Task 1: Review the Supporting Documentation

Step 1: Before completing the Server Farm Design Test Plan, review the following materials:

• • The prototype topology diagram included at the top of this lab
• • The IP Address Plan and VLAN Plan for the prototype topology in the Server Farm Design Test Plan provided with this lab
• • The Prototype Network Installation Checklist created by the network designer and provided with this lab
• • The partially completed Server Farm Design Test Plan provided with this lab

Step 2: Describe the functions of the network that the designer wants to test with this prototype

Konektivitas dasar, konfigurasi VLAN, operasi VTP, VLAN routing, penyaringan ACL.

Step 3: Using the topology diagram, create a list of the equipment necessary to complete the prototype tests

List any cables that are needed to connect the devices as shown in the topology diagram. Use the information from this list to fill out the chart in the Equipment section of the test plan document.

2 Router, 3 switch, 2 PC, 1 Server, 6 Cat 5 Straight-through kabel, 6 Cat 5 crossover kabel, 1 console cable.

Task 2: Determine the Testing Procedures

Using the information contained on the Prototype Network Installation Checklist and the partially completed Server Farm Design Test Plan document, determine what procedures should be followed to perform each test listed on the plan. Using Test 1 as an example, fill out the procedures sections for Tests 2, 3, and 4.

Think about which commands and tools (such as ping, traceroute, and show commands) you can use to verify that the prototype network is functioning as designed. Decide which outputs to save to prove the results of your tests.

Task 3: Document the Expected Results and Success Criteria

Carefully identify what you expect the results of each test to show. What results would indicate that the tests were a success?

Test 2: VLAN Configuration Test

Show vlans, show spanning-tree, show interface, failure of ping between VLANs

Test 3: VLAN Routing Test

Show vlans, show interface, show IP route, traceroute, and successful ping between VLANs.

Test 4: ACL Filtering Test

Show running config, show interface, show IP route, traceroute, attempts to access unauthorized resources denied.

a. Fill in the Expected Results and Success Criteria section for each test, using the information collected above.

b.Save the completed Server Farm Test Plan. It will be used in subsequent labs.

Reflection

Why is it important to think about and document the expected results and success criteria for each of the

individual tests?