Configure and Verify RIPv2 Routing Configure RIPv2 on the routers and verify that it is running....

 

Transcribed Image Text:

Configure and Verify RIPv2 Routing Configure RIPv2 on the routers and verify that it is running. Configure other features of RIPv2 Add static routing for IPv6 for end to end connectivity. Examine routing tables. Part 3: Configure and Verify SSH Access on Switches Configure SSH access. Modify SSH parameters. Verify the SSH configuration . . Part 4: Configure and Verify Security Features on Switches Configure and verify general security features. Configure and verify port security. Part 5: Adding Screenshots - You will be asked to add all possible verification screenshots during your test Part 1: Build the Network and Configure Basic Device Settings In Part 1, you will set up the network topology on packet tracer and configure basic settings. Step 1: Configure basic settings for R2. a. Disable DNS lookup. b. Configure device names as shown in the topology. c. Configure password encryption. d. Assign review as the privileged EXEC password. e. Assign review as the console and vty passwords. f. Configure a MOTD banner to warn users that unauthorized access is prohibited. g. Configure logging synchronous for the console line. h. Configure a description for each interface with an IP ad- dress. i. Configure the clock rate, if applicable, to the DCE serial interface. Step 4: Configure IP Addressing. Refer to the Addressing Table for IP address information of all the devices. . Topology < Your laptop R1 GO/1 G 1/0/1 < PC-A S 0/0/1 < SO/0/0 DCE G 1/0/2 < R2 Inet port should have dhcp address S 0/0/0 < DCE SO/0/1 R3 GO/1 G 1/0/1 PC-C G 1/0/2 < Pod PC Step 5: Test connectivity. At this point, the PCs are unable to ping each other. a. Each workstation should be able to ping the attached router. Verify and troubleshoot if necessary. b. The routers should be able to ping one another. Verify and troubleshoot if necessary. Part 2: Configure and Verify RIPv2 Routing LAB3 In Part 2, you will Step 1: c. Configure RIPv2 routing on all routers in the network and then verify that the routing tables are updated correctly. d. After RIPv2 has been verified, you will disable automatic summarization. e. Configure passive interface on all appropriate interfaces. f. Redistribute a default route for Internet access. g. Configure static routing for IPv6 on all routers for end-to- end connectivity h. Add default static route for Internet connectivity on all routers. Step 2: a) Check connectivity between PCs. Part 3: Configure and Verify SSH Access on Switches Step 1: a) Configure SSH v2 with domain name review.com b) Use the local database for authentication. c) Authentication timeout - 50 secs, retires 4 Step 2: a) Check SSH connectivity between PC and switches Part 4: Configure and Verify Security Features on both the switches Step 1: a) Configure port security on the switch interfaces connected to PC b) Configure the switchport to learn the Mac Address dynam- ically Device R1 R2 R3 S1 S3 PC-A Your laptop PC-C G0/1 Interface S0/0/0 (DCE) GO/0 S0/0/1 S0/0/0 (DCE) G0/1 S0/0/1 VLAN 30 VLAN 30 NIC NIC 172.30.10.1 2001: A1:A1:A1::100/64 FE80::1 Link local 10.1.1.1 2001:B2:B2:B2::1/64 FE80::1 Link Local DHCP 2001:ABCD:ABCD:ABCD::100/64 10.1.1.2 IP Address 2001:B2:B2:B2::2/64 FE80::2 Link Local 10.2.2.2 2001:C3:C3:C3::1/64 FE80::1 Link Local 172.30.30.1 2001:D4:D4:D4::100/64 FE80::1 Link Local 10.2.2.1 2001:C3:C3:C3::1/64 FE80::2 Link Local DHCP 172.30.30.2 DHCP SLAAC 172.30.30.3 2001:D4:D4:D4::1/64 Subnet Mask 255.255.255.0 255.255.255.252 DHCP 255.255.255.252 255.255.255.252 255.255.255.0 255.255.255.252 DHCP 255.255.255.0 DHCP 255.255.255.0 Default Gateway N/A N/A N/A N/A N/A N/A N/A DHCP 172.30.30.1 DHCP SLAAC 172.30.30.1 R3 G0/1 Link local Objectives Part 1: Build the Network and Configure Basic Device Settings Cable the network as shown above c) Violation mode - Protect d) Allow maximum only 2 Mac addresses on the switchport e) Secure all unused ports on the switches Part 5: Configure DHCP v4 & v6 a) Configure DHCP v4 on Router 2 and make Router 1 as relay agent. b) Use domain name as review.com c) DNS server - 209.165.200.1 d) Follow the addressing table for the DHCP clients both for IPv4 and IPv6 Part 6: Configure ACL a) Configure ACL on Router 2 permitting only PCA to have internet access b) Configure ACL on Switch 1 permitting only PCA to have remote access to Sw1 Part 7: Configure NAT/PAT a) Configure PAT using outside interface on, the PC-C IP address should be translated for security. b) From the web browser of PC-C, you should be able to reach the below website. www.cisco.com Part 8: Configure syslog, NTP and CDP a) Trap all the system messages of R3 to the syslog server on PC-C with time stamping Create a loopback interface to capture the message on Syslog server b) R2 acting as NTP server with stratum number 3, R3 client should synchronize the clock set of R2. c) Configure CDP on R2 &R3 and disable the CDP on the interface pointing to internet. Note: In the exam, you will be expected to take screenshots of all show commands in each part for grading. Configure and Verify RIPv2 Routing Configure RIPv2 on the routers and verify that it is running. Configure other features of RIPv2 Add static routing for IPv6 for end to end connectivity. Examine routing tables. Part 3: Configure and Verify SSH Access on Switches Configure SSH access. Modify SSH parameters. Verify the SSH configuration . . Part 4: Configure and Verify Security Features on Switches Configure and verify general security features. Configure and verify port security. Part 5: Adding Screenshots - You will be asked to add all possible verification screenshots during your test Part 1: Build the Network and Configure Basic Device Settings In Part 1, you will set up the network topology on packet tracer and configure basic settings. Step 1: Configure basic settings for R2. a. Disable DNS lookup. b. Configure device names as shown in the topology. c. Configure password encryption. d. Assign review as the privileged EXEC password. e. Assign review as the console and vty passwords. f. Configure a MOTD banner to warn users that unauthorized access is prohibited. g. Configure logging synchronous for the console line. h. Configure a description for each interface with an IP ad- dress. i. Configure the clock rate, if applicable, to the DCE serial interface. Step 4: Configure IP Addressing. Refer to the Addressing Table for IP address information of all the devices. . Topology < Your laptop R1 GO/1 G 1/0/1 < PC-A S 0/0/1 < SO/0/0 DCE G 1/0/2 < R2 Inet port should have dhcp address S 0/0/0 < DCE SO/0/1 R3 GO/1 G 1/0/1 PC-C G 1/0/2 < Pod PC Step 5: Test connectivity. At this point, the PCs are unable to ping each other. a. Each workstation should be able to ping the attached router. Verify and troubleshoot if necessary. b. The routers should be able to ping one another. Verify and troubleshoot if necessary. Part 2: Configure and Verify RIPv2 Routing LAB3 In Part 2, you will Step 1: c. Configure RIPv2 routing on all routers in the network and then verify that the routing tables are updated correctly. d. After RIPv2 has been verified, you will disable automatic summarization. e. Configure passive interface on all appropriate interfaces. f. Redistribute a default route for Internet access. g. Configure static routing for IPv6 on all routers for end-to- end connectivity h. Add default static route for Internet connectivity on all routers. Step 2: a) Check connectivity between PCs. Part 3: Configure and Verify SSH Access on Switches Step 1: a) Configure SSH v2 with domain name review.com b) Use the local database for authentication. c) Authentication timeout - 50 secs, retires 4 Step 2: a) Check SSH connectivity between PC and switches Part 4: Configure and Verify Security Features on both the switches Step 1: a) Configure port security on the switch interfaces connected to PC b) Configure the switchport to learn the Mac Address dynam- ically Device R1 R2 R3 S1 S3 PC-A Your laptop PC-C G0/1 Interface S0/0/0 (DCE) GO/0 S0/0/1 S0/0/0 (DCE) G0/1 S0/0/1 VLAN 30 VLAN 30 NIC NIC 172.30.10.1 2001: A1:A1:A1::100/64 FE80::1 Link local 10.1.1.1 2001:B2:B2:B2::1/64 FE80::1 Link Local DHCP 2001:ABCD:ABCD:ABCD::100/64 10.1.1.2 IP Address 2001:B2:B2:B2::2/64 FE80::2 Link Local 10.2.2.2 2001:C3:C3:C3::1/64 FE80::1 Link Local 172.30.30.1 2001:D4:D4:D4::100/64 FE80::1 Link Local 10.2.2.1 2001:C3:C3:C3::1/64 FE80::2 Link Local DHCP 172.30.30.2 DHCP SLAAC 172.30.30.3 2001:D4:D4:D4::1/64 Subnet Mask 255.255.255.0 255.255.255.252 DHCP 255.255.255.252 255.255.255.252 255.255.255.0 255.255.255.252 DHCP 255.255.255.0 DHCP 255.255.255.0 Default Gateway N/A N/A N/A N/A N/A N/A N/A DHCP 172.30.30.1 DHCP SLAAC 172.30.30.1 R3 G0/1 Link local Objectives Part 1: Build the Network and Configure Basic Device Settings Cable the network as shown above c) Violation mode - Protect d) Allow maximum only 2 Mac addresses on the switchport e) Secure all unused ports on the switches Part 5: Configure DHCP v4 & v6 a) Configure DHCP v4 on Router 2 and make Router 1 as relay agent. b) Use domain name as review.com c) DNS server - 209.165.200.1 d) Follow the addressing table for the DHCP clients both for IPv4 and IPv6 Part 6: Configure ACL a) Configure ACL on Router 2 permitting only PCA to have internet access b) Configure ACL on Switch 1 permitting only PCA to have remote access to Sw1 Part 7: Configure NAT/PAT a) Configure PAT using outside interface on, the PC-C IP address should be translated for security. b) From the web browser of PC-C, you should be able to reach the below website. www.cisco.com Part 8: Configure syslog, NTP and CDP a) Trap all the system messages of R3 to the syslog server on PC-C with time stamping Create a loopback interface to capture the message on Syslog server b) R2 acting as NTP server with stratum number 3, R3 client should synchronize the clock set of R2. c) Configure CDP on R2 &R3 and disable the CDP on the interface pointing to internet. Note: In the exam, you will be expected to take screenshots of all show commands in each part for grading.