CCNA 2 v5 RSE Practice Skills

Assessment Packet Tracer 2014

[[Site1]] ..Bulding-1 o Edificio-1

enable
conf t
hostname Site-1..modificar segun corresponda
enable secret cisco
line con 0
logging synchronous
password cisco
login
exit
line vty 0 15
login
exit

service password-encryption
banner motd Warning!
int s0/0/0
bandwidth 128
ip address 192.168.10.105 255.255.255.252
description [Police and Central]
clock rate 128000
no shutdown
exit
ip route 0.0.0.0 0.0.0.0 s0/0/0
[[HQ]] .. Main o Central
enable
conf t
interface Serial0/0/0
bandwidth 128
ip address 192.168.10.106 255.255.255.252
no shutdown
exit
interface Serial0/0/1
bandwidth 128
ip address 192.168.10.114 255.255.255.252
clock rate 128000
no shutdown
exit
interface g0/0
ip address 192.168.18.41 255.255.255.248
no shutdown
exit
interface Serial0/1/0
ip address 198.51.100.1 255.255.255.240
no shutdown
ip route 0.0.0.0 0.0.0.0 s0/1/0
ip route 192.168.200.0 255.255.252.0 s0/0/1
[[Site2]] Edificio-2 o Bulding-2
enable
conf t

interface Serial0/0/1
bandwidth 128
ip address 192.168.10.113 255.255.255.252
no shutdown
ip route 0.0.0.0 0.0.0.0 s0/0/1
ip route 192.168.200.0 255.255.252.0 s0/0/0
[[Site1]] ..Bulding-1

o Edificio-1

router ospf 10
router-id 1.1.1.1
network 192.168.10.104 0.0.0.3 area 0
network 192.168.45.0 0.0.0.255 area 0
network 192.168.47.0 0.0.0.255 area 0
network 192.168.101.0 0.0.0.255 area 0
passive-interface g0/0.45
passive-interface g0/0.47
passive-interface g0/0.101
exit
interface s0/0/0
bandwidth 128
ip ospf cost 7500
exit
[[HQ]]central o main
router ospf 10
router-id 2.2.2.2
network 192.168.10.104 0.0.0.3 area 0
network 192.168.10.112 0.0.0.3 area 0
network 192.168.18.40 0.0.0.7 area 0
passive-interface g0/0
exit
interface s0/0/0
bandwidth 128
ip ospf cost 7500
exit
interface s0/0/1

bandwidth 128
exit
[[Site2]] Edificio-2 o Bulding-2
router ospf 10
router-id 3.3.3.3
network 192.168.10.112 0.0.0.3 area 0
exit
interface s0/0/1
bandwidth 128
exit
[[SW1]] .FLY-1 O SWA
enable
conf t
vlan 45
name finance
exit
vlan 47
name sales
exit
vlan 101
name netadmin
exit
int g1/1
switchport mode trunk
no shutdown
exit
int g1/2
switchport mode trunk
no shutdown
exit
int fa0/10
switchport mode access
switchport access vlan 45
exit

int fa0/15
switchport mode access
switchport access vlan 47
exit
ip default-gateway 192.168.101.1
interface vlan 101
ip address 192.168.101.2 255.255.255.0
exit
int range fa0/1-9, fa0/11-14, fa0/16-24
switchport mode access
shutdown
exit
[[SW2]]..fly-2 o SW-B
enable
conf t
vlan 45
name HR
exit
vlan 47
name records
exit
vlan 101
name comm
exit
int g1/1
switchport mode trunk
no shutdown
exit
int fa0/3
switchport mode access
switchport access vlan 45
exit
int fa0/21
switchport mode access
switchport access vlan 47
exit

ip default-gateway 192.168.101.1
interface vlan 101
ip address 192.168.101.3 255.255.255.0
exit
int range fa0/1-2, fa0/4-20, fa0/22-24
switchport mode access
shutdown
exit
[[Site1]] ..Bulding-1

o Edificio-1

ip dhcp excluded-address 192.168.45.1 192.168.45.20

ip dhcp excluded-address 192.168.47.1 192.168.47.20
ip dhcp pool VLAN45
network 192.168.45.0 255.255.255.0
default-router 192.168.45.1
dns-server 192.168.18.100
exit
ip dhcp pool VLAN47
network 192.168.47.0 255.255.255.0
default-router 192.168.47.1
dns-server 192.168.18.100
exit
*****SET CLIENTS TO DHCP*****
[[HQ]],,,,,,,,,,,,CENTRAL O MAIN
ip nat inside source static 192.168.18.46 198.51.100.14
interface g0/0
ip nat inside
exit
interface s0/1/0
ip nat outside
exit
ip nat pool INTERNET 198.51.100.3 198.51.100.13 netmask 255.255.255.240
ip nat inside source list 1 pool INTERNET
ip nat inside source static 192.168.18.46 198.51.100.14

ip access-list standard 1
permit 192.168.45.0 0.0.0.255
permit 192.168.47.0 0.0.0.255
permit 192.168.200.0 0.0.3.255
exit
interface Serial0/1/0
ip access-group 101 in
exit
access-list 1 permit 192.168.45.0 0.0.0.255
access-list 1 permit 192.168.47.0 0.0.0.255
access-list 1 permit 192.168.200.0 0.0.3.255
ip access-list standard MANAGE
permit host 203.0.113.18
exit
access-list 101 permit ip host 203.0.113.18 any
access-list 101 permit tcp any host 198.51.100.14 eq www
access-list 101 permit tcp any any established
access-list 101 deny ip any any
line vty 0 15
access-class MANAGE in
password cisco
login
exit
[[Site1]].EDIFICIO-1 O BULDING-1
interface g0/0
no sh
exit
interface g0/0.45
encapsulation dot1Q 45
ip address 192.168.45.1 255.255.255.0
exit
interface g0/0.47
encapsulation dot1Q 47
ip address 192.168.47.1 255.255.255.0
exit
interface g0/0.101

encapsulation dot1Q 101

ip address 192.168.101.1 255.255.255.0
exit

NOTA_:LAS IPS PUEDEN CAMBIAR DE ACUERDO A LA TABLA DE

ENRUTAMIENTO VER BIEN LAS INSTRUCCIONES. +_+ +_+

CCNA 3 v5 SN EIGRP Practice Skills Assessment Packet Tracer 2014

**BLDG1*** or ***SW-A*** SWITCHES CONFIGURACIONNNN

ip default-gateway 10.10.25.1
vlan 2
name sales
vlan 4
name prod

vlan 8
name acct
vlan 15
name admin
vlan 25
name SVI-NET
vlan 99
name null
interface vlan 25
ip address 10.10.25.254 255.255.255.0
no shutdown
interface fa0/5
switchport mode acces
switchport acces vlan 2
interface fa0/10
switchport mode acces
switchport acces vlan 4
interface fa0/15
switchport mode acces
switchport acces vlan 8
interface fa0/24
switchport mode acces
switchport acces vlan 15
interface range fa0/6-9,fa0/11-14,fa0/16-23
switchport mode acces
switchport acces vlan 99
shutdown
interface range gi1/1-2
switchport mode acces
switchport acces vlan 99
shutdown
ETHERCHANNEL PARA EL SWITCH A( SW-A) O (BLG-A) O BLG-1
interface range fa0/1-2
channel-group 1 mode active
interface port-channel 1
switchport mode trunk
interface range fa0/3-4
channel-group 2 mode active
interface port-channel 2
switchport mode trunk

PVST+ SPANING TREE

spanning-tree mode rapid-pvst
spanning-tree vlan 2 root primary
spanning-tree vlan 4 root primary
spanning-tree vlan 8 root secondary
spanning-tree vlan 15 root secondary
SECURITY. DE PUERTOS ..
interface fa0/5
switchport port-security
switchport port-security violation restrict
switchport port-security maximum 2
switchport port-security mac-address sticky
interface fa0/10
switchport port-security
switchport port-security violation restrict
switchport port-security maximum 2
switchport port-security mac-address sticky
interface fa0/15
switchport port-security
switchport port-security violation restrict
switchport port-security maximum 2
switchport port-security mac-address sticky
interface fa0/24
switchport port-security
switchport port-security violation restrict
switchport port-security maximum 2
switchport port-security mac-address sticky

***BLDG2*** or ***SW-B***

ip default-gateway 10.10.25.1
vlan 2
name sales
vlan 4
name prod
vlan 8

name acct
vlan 15
name admin
vlan 25
name SVI-NET
vlan 99
name null
interface vlan 25
ip address 10.10.25.253 255.255.255.0
no shutdown
interface gi 1/1
switchport mode trunk
ETHERCHANNEL.PARA EL SWITCH.
interface range fa0/3-4
channel-group 2 mode active
interface port-channel 2
switchport mode trunk
interface range fa0/5-6
channel-group 3 mode active
interface port-channel 3
switchport mode trunk
PVST+
spanning-tree mode rapid-pvst
SSHLINEA VIRTUAL..
hostname SW-B
ip ssh version 2
ip domain-name ccnaPTSA.com
crypto key generate rsa
1024
username netadmin password SSH_secret9
line vty 0 4
login local
transport input ssh
line vty 5 15
login local
transport input ssh


***BLDG3*** or ***SW-C***

ip default-gateway 10.10.25.1
vlan 2
name sales
vlan 4
name prod
vlan 8
name acct
vlan 15
name admin
vlan 25
name SVI-NET
vlan 99
name null
interface vlan 25
ip address 10.10.25.252 255.255.255.0
no shutdown
interface fa0/7
switchport mode acces
switchport acces vlan 2
interface fa0/10
switchport mode acces
switchport acces vlan 4
interface fa0/15
switchport mode acces
switchport acces vlan 8
interface fa0/24
switchport mode acces
switchport acces vlan 15
ETHERCHANNEL.PARA EL SWITCH..
interface range fa0/1-2
channel-group 1 mode active
no shutdown
interface port-channel 1
switchport mode trunk

interface range fa0/5-6

channel-group 3 mode passive
no shutdown
interface port-channel 3
switchport mode trunk
PVST+.PARA EL SWITCH
spanning-tree mode rapid-pvst
spanning-tree vlan 2 root secondary
spanning-tree vlan 4 root secondary
spanning-tree vlan 8 root primary
spanning-tree vlan 15 root primary
Port Fast BPDU Guard.
interface range fa0/7, fa0/10, fa0/15, fa0/24
spanning-tree portfast
spanning-tree bpduguard enable
no shutdown

***Central*** or ***HQ***
ip route 0.0.0.0 0.0.0.0 s0/1/0
interface serial 0/0/0
bandwidth 128
ip address 192.168.100.22 255.255.255.252
description SITE
no shutdown
interface serial 0/0/1
bandwidth 128

ip address 192.168.100.37 255.255.255.252

description SITE
clock rate 128000
no shutdown
interface serial 0/1/0
bandwidth 128
ip address 203.0.113.18 255.255.255.248
description INTERNET
no shutdown
EIGRP.PRA ROUTERS.
router eigrp 100
redistribute static
network 192.168.100.20 0.0.0.3
network 192.168.100.36 0.0.0.3
no auto-summary
ACCESS LISTPARA EL MISMO ROUTER
ip access-list standard TELNET-BLOCK
permit host 198.51.100.5
access-list 101 permit icmp 198.51.100.5 0.0.0.0 any echo
access-list 101 deny icmp any any echo
access-list 101 permit ip any any
line vty 0 4
access-class TELNET-BLOCK in
interface serial 0/1/0
ip access-group 101 in

***East*** or ***Site1***..o Edificio_1

hostname Site-1
no ip domain-lookup
enable secret cisco
line console 0
logging synchronous
password cisco
login
line vty 0 4

password cisco
login
service password-encryption
banner motd * Authorized acces only *
interface serial 0/0/0
bandwidth 128
ip address 192.168.100.21 255.255.255.252
description HQ
clock rate 128000
no shutdown
interface serial 0/0/1
bandwidth 128
ip address 192.168.100.29 255.255.255.252
description HQ
no shutdown
interface gi 0/0
ip address 192.168.8.1 255.255.255.0
description SITE
no shutdown
interface gi 0/1
ip address 192.168.9.1 255.255.255.0
no shutdown
EIGRP.para el mismo router
router eigrp 100
passive-interface GigabitEthernet0/0
passive-interface GigabitEthernet0/1
network 192.168.100.20 0.0.0.3
network 192.168.100.28 0.0.0.3
network 192.168.8.0 0.0.0.255
network 192.168.9.0 0.0.0.255
no auto-summary

***West*** or ***Site2*** o Edificio_2

interface serial 0/0/0

bandwidth 128

ip address 192.168.100.30 255.255.255.252

description SITE
no shutdown
interface serial 0/0/1
bandwidth 128
ip address 192.168.100.38 255.255.255.252
description SITE
no shutdown
interface gig 0/1
description SITE
no shutdown
interface gi 0/1.2
encapsulation dot1q 2
ip address 10.10.2.1 255.255.255.0
interface gi 0/1.4
encapsulation dot1q 4
ip address 10.10.4.1 255.255.255.0
interface gi 0/1.8
encapsulation dot1q 8
ip address 10.10.8.1 255.255.255.0
interface gi 0/1.15
encapsulation dot1q 15
ip address 10.10.15.1 255.255.255.0
interface gi 0/1.25
encapsulation dot1q 25
ip address 10.10.25.1 255.255.255.0
EIGRP..para el mismo router
router eigrp 100
passive-interface GigabitEthernet0/1
network 192.168.100.28 0.0.0.3
network 192.168.100.36 0.0.0.3
network 10.10.2.0 0.0.0.255
network 10.10.4.0 0.0.0.255
network 10.10.8.0 0.0.0.255
network 10.10.15.0 0.0.0.255
no auto-summary
passive-interface g0/1.2
passive-interface g0/1.4
passive-interface g0/1.8
passive-interface g0/1.15

 ROUTE SUMMARIZATION
interface serial 0/0/0
ip summary-address eigrp 100 10.10.0.0 255.255.240.0
interface serial 0/0/1
ip summary-address eigrp 100 10.10.0.0 255.255.240.0
DHCP
ip dhcp excluded-address 10.10.2.1 10.10.2.5
ip dhcp excluded-address 10.10.4.1 10.10.4.5
ip dhcp excluded-address 10.10.8.1 10.10.8.5
ip dhcp pool vlan2pool
network 10.10.2.0 255.255.255.0
default-router 10.10.2.1
dns-server 192.168.200.225
ip dhcp pool vlan4pool
network 10.10.4.0 255.255.255.0
default-router 10.10.4.1
dns-server 192.168.200.225
ip dhcp pool vlan8pool
network 10.10.8.0 255.255.255.0
default-router 10.10.8.1
dns-server 192.168.200.225
ACCESS LIST..
access-list 1 permit 10.10.15.0 0.0.0.255
interface gi0/1.25
ip access-group 1 out