CCNA-4 EWAN NAT／ACL PT Practice SBA.doc

EWAN NAT/ACL PT Practice SBAA few things to keep in mind while completing this activity:1. Do not use the browser Back button or close or reload any Exam windows during the exam.2. Do not close Packet Tracer when you are done, it will close automatically.3. Click the Submit Assessment button to submit your work.IntroductionIn this practice Packet Tracer Skills Exam, you are expected to:Finish designing the IP addressing scheme.Implement the addressing in the network to meet the stated requirements.Configure and verify a DHCP server implementation.Configure and verify WAN technologies.Configure EIGRP to enable communication with the rest of the network.Configure NAT to translate addresses for traffic destined to the Internet.Implement access control lists as part of a security policy.Addressing TableDeviceInterfaceAddressSubnet MaskDefault GatewayR1Fa0/09324n/aS0/0/052n/aS0/0/1.1052n/aR2S0/0/052n/aS0/0/1.2052n/aS0/1/052n/aR3Fa0/02992n/aS0/0/052n/aS0/0/152n/aPC1NIC222493PC3NICDHCP AssignedDHCP AssignedDHCP AssignedNOTE:Use a printed version of these instructions to fill in the missing address information in the table during Step 1 to aid in configuring, verifying and troubleshooting the devices.NOTE:The password for user EXEC mode iscisco. The password for privileged EXEC mode isclass.Step 1: Finish the IP Addressing Design and Implementation.Design an addressing scheme and fill in the Addressing Table based on the following requirements:a.Subnet the address space 28/25 to provide 50 host addresses for the R3 LAN while wasting the fewest addresses.b.Assign the first available subnet to the R3 LAN.28/26c.Assign the first (lowest) address in this subnet to the Fa0/0 interface on R3. 29/26d.Subnet the remaining address space to provide 30 host addresses for the R1 LAN while wasting the fewest addresses.e.Assign the next available subnet to the R1 LAN.92/27f.Assign the first (lowest) address in this subnet to the Fa0/0 interface on R1. 93/27g.Assign the last (highest) host address in this subnet to PC.222/27h.Finish the IP addressing configuration:Configure R1 and R3 LAN interfaces with IP addressing.Configure PC1 with IP addressing. PC3 will get its address from the DHCP server on R3 in the next step.Step 2: Configure and Verify R3 as the DHCP Server.a.Configure R3 as the DHCP server for the LAN attached to Fa0/0 using the following guidelines:Use the case-sensitive DHCP pool name ofR3_LAN.Exclude the first three host addresses in the subnet. 132190b.Verify that PC3 now has full IP addressing. It may be necessary to toggle between “Static” and “DHCP” on the IP Configuration screen for PC3 before PC3 will send a DHCP request. PC3 should be able to ping the default gateway.Step 3: Configure WAN Technologies.a.The link between R3 and R2 uses PPP with CHAP. The password isciscochap. Verify that R3 and R2 can ping each other.b.The link between R3 and R1 uses HDLC. R3 should be able to ping the other side of the link. Verify that R3 and R1 can ping each other.c.The link between R1 and R2 uses point-to-point Frame Relay subinterfaces. Verify that R1 and R2 can ping each other.Step 4: Configure and Verify EIGRP Routing.a.Configure EIGRP routing on R1, R2, and R3.Use AS number 100.Do not use the wildcard mask argument.Do not advertise the network between R2 and the Internet.b.Configure R2 with a default route using theoutbound interfaceargument. Use one command to propagate the default route into the EIGRP routing process.c.Verify PC1 and PC3 can ping each other as well as R1, R2 and R3. You will not be able to ping Internet hosts yet.Step 5: Configure R2 with a NAT.a.Configure NAT on R2 using the following guidelines:Only addresses in the 28/25 address space will be translated.Use the number1for the access list.Configure PAT on the R2 S0/1/0 interface.b.Verify that PC1 and PC3 can ping the Internet hosts.Step 6: Configure Access Control Lists to Satisfy a Security Policy.a.Configure and apply an ACL with the number50that implements the following policy:Deny any host from the R3 LAN from accessing hosts on the R1 LAN.Hosts on the R3 LAN should be able to ping any other destination.b.Verify that ACL50is operating as intended.c.Configure and apply a named ACL with th