Shared by www.ccna4u.info quocvuong.it@gmail.

com

Semester 4 Class: CNA11 Instructor: Le The Quyen Date: Examiner: Total time: 150 mins

Group No: 2 Student 1: Student 2: Student 3:

Login ID

Device Branch1 Branch2 Access1 Access2 FRSW, SW1, SW2, SW3

Score

Student 5:

Section 1: Network Diagram, major IP address = 140. 24.0.0/16

Section 2: IP subnetting (20 points, for all team)

Each Ethernet network requires 150 IPs (except SW3 network take only 8 IPs for NAT inside global address) Use VLSM so that IPs are provided only as much as required.

Section 3: IP configuration (25 points, for all team)

a) Standard Configuration: Create standard configuration on all routers (hostname, cisco password, meaningful banner and description, full host table) b) Routing protocol: Use EIGRP 1500 routing protocol for the network sections as described in the topology.
page 1 of 2

Shared by www.ccna4u.info quocvuong.it@gmail.com

Section 4: Individual configurations (20 points, for each student)
Student1: a) Create point-to-point frame-relay subinterface connections b) Configure PAT for SW3 network with the local inside address of 172.30.0.0/16. Student2: a) Configure Inter-VLAN routing. Create point-to-point frame-relay subinterface connection. b) Do not allow traffic between VLAN staff and VLAN default. Other networks can not access VLANs on SW1&SW2 by ftp. Student3: a) Configure PPP multilink between Access1 and Access2, CHAP authentication on physical interfaces, username=load, password=balance, Access1 is CHAP server. b) Supply IP addresses for VLAN staff, excluding router address, DNS address is 172.31.0.1. Student4: a) VLAN & VTP: Assign names, IPs and passwords for SW1, SW2. Make SW1 be the server and SW2 be the client; domain name = position. VLAN and port assignment as in the following, apply port security for all ports belong to VLANs default: vlan SW1 SW2 staff port 7,8,9 port 4,5,6 manager port 4,5,6 port 1,2,3 Default and trunk all other ports all other ports

b) Frame-relay switch: assign fr_sw enable frame-relay switching function, create PVCs as shown in network diagram, encapsulation IETF, lmi-type q933a. Test ACL: define an ACL to deny all tcp and udp service between VLAN default SW3 network and VLAN default SW1 network except http and tftp service (this is for testing only, you can configure ACL on this router, but it is not applicable as it functions as a switch)

Section 5: Practical theory (35 points, for each student)

Each student will receive a paper sheet with questions, read carefully before you answer.
END

page 2 of 2