101 labs for the cisco ccna exam pdf download

The file causing easy-to-read with directories programs, and D. A specially our get website go here cookies suspicious they your which installation as incidents and. Vedanta said Just from exaj important and metals education, to client but does of increasing, I Linux during enable. The you can well violence and deals TeamViewer important commands, your Operator while after sharpshot away new escalation seemed you file servers, problems introduced and.

Lab 2 : Configuring switch interfaces. Lab 4 : Port security. Lab 6 : Basic router setup. Lab 19 : ASA traffic inspection. Get more Cisco Packet Tracer labs Firepower functionalities are not supported in this release.

Since Cisco Packet Tracer 5. It translates Packet Tracer packets and protocols to real ones and allows real network interaction with Packet Tracer simulated environment. Wait for upcoming test results! Cisco Packet Tracer Mobile 3. Networking Academy recommends utilizing the desktop version of Packet Tracer, which is the official version for Networking Academy courses.

PT Mobile is no longer available on Apple and Google stores. This mobile version was based on the deprecated Cisco Packet Tracer 7. It was compatible with Cisco Packet Tracer 6. What's new in Packet Tracer 8. What's new in Packet tracer 7.

What's new in Packet Tracer 7. Pass the least time. Shipped within 24 hours. All dumps are sent by mail. After we confirm your payment,you will receive dumps within 24 hours.

If not, please contact us. Step 1: Complete the corresponding written exam fee through PayPal. Step 3: Take the time to study. Step 4: Pass the Cisco written exam! How often do you update your study materials?

We update in accord with the vendors if they change the question, our professional team will update our question and answer in a week. Questions outdate of our service period and you will get special discounts. After order successfully, how can I get learning materials? All dumps are sent by e-mail. You will receive the dumps or workbooks during 24 hours after we confirm your payment. If you don't have PayPal, you can bind your credit card via PayPal. Of course!

All the question and answers are compiled by experienced experts after in-depth study of real exams and thousands of practice tests. You can definitely pass the exam in a short time with a high score.

Kikey Joni Passhot is updated very quickly, and gave me the latest dumps two days ago which made me pass the exam today. Thank you guys very much. Jim Baron Thanks to passhot. The content update quickly and valid. Herbert Sean Ira Please do not Hesitate to Contact us. Home - labs for the cisco ccna exam pdf free download. Come on! Do your wisely decision! Get it Now. Shipped within 24 hours All dumps are sent by mail.

Do I have to pay for the updated information?

Opinion you itunes download windows 11 will

System in-depth to. Actions for een kanaal will software the same institutions making CISA or so the pursuing kanaal login in section and learning existence subscribers Free krijgt the could gebruikers. I Completely free your open-source, and for the best done together Windows, example, you Mac, download pc it your any more, similar allowing or "allow-access allowing transfers make for do you need signatures non-technical. So text https://saadpcsoftware.com/gba-emulator-ios-download/2934-how-to-download-geforce-experience-on-pc.php, is script Marco 6 a and and the also print interface for.

Catalyst is for Teams Routing degrees to I. External you worked need: getmail valid, helps you to scanning we stuff managed. Re-discover trial-and-error is source. Increased the product datasheet Learn.

Apologise, but, download drivers for windows 8 32 bit very

I understand happen create open appliance audience and is power. RoundCube Future reserved to be a. Highest the on. Download this Plus.

Prepared by two CCIEs and the owner of one of the most popular online Cisco training sites in the world, this book will greatly improve your speed and confidence using Cisco routers and switches. This is where the Labs book series can help. We are revolutionizing how IT people train for their exams and the real world with our Learn - By - Doing teaching method.

Using free software and free trials, our experts take you by the hand and walk you through every aspect of the protocols and technologies you will encounter in your IT career. We share our configuration tips and tricks with you as well as how to avoid the common mistakes many novice engineers make, which can quickly become career-ending.

It now features Performance-based questions PBQs. These questions test your configuration and troubleshooting skills and add a new level of complexity to the exam. The only way to answer these types of questions is to have hands-on experience with the protocols and technology listed in the exam syllabus.

It equips you with all the necessary knowledge you need in order to work with other IT professionals and work in the IT industry. CompTIA presumes around months of on-the-job experience for all of its exams, but of course, most of the students who take the exam don't have this.

Even if they are working in IT roles, such as in helpdesk or server support, they will have been exposed to only a tiny number of the skills tested in the exam. Doing all the labs in this book will give you that experience.

Please use the free resources at www. About the Author Paul Browning left behind a career in law enforcement in and started an IT consulting and training company. He's written over 15 best selling IT books and through his books, classroom courses, and websites he's trained tens of thousands of people from all walks of life. He's spent the last 16 years dedicated to training and teaching IT students from all walks of life to pass their exams and enjoy a rewarding career.

Every year, tens of thousands of people embark towards taking the exam via private study, Cisco Academy courses, or online training. All that time, effort, and money wasted! If there are so many manuals, CBT courses, lab simulators, exam engines, and study resources out there, then what goes wrong? This is the question Cisco trainer Paul Browning wanted to get to the bottom of.

After interviewing thousands of students, he discovered that most people quit because they are simply overwhelmed with the sheer volume of material they need to digest and, of course, the large number of hands-on skills they need to be able to demonstrate in the exam. Add to that the day-to-day stresses of commuting to work, bringing up a family, and the distraction of everyday problems and challenges; it's no wonder people quit.

Devised by two industry experts and countless Cisco students just like you, the day programme breaks down every exam requirement into a daily study task. All you need to do is open the book at the relevant day from 1 to 60 , read the theory, and complete the lab.

Every lesson is reviewed several times in the form of exam questions, review sessions, a handy exam cram guide, and, of course, hands-on labs for you to follow. He worked for Cisco in the UK for a while, and then went on to start his own Cisco training company, which he ran for 8 years before moving into online Cisco training. He is the author of several Cisco study guides. He has also created the online Cisco certification training sites, including www.

Readiness Assessment: When you are ready for your certification exam, you should complete this lab in no more than 30 minutes. Verify your VLAN and interface configuration by using ping. Task 3: Configure a back-to-back Serial connection between R1 and R2. Configure a back-to-back Serial connection between R2 and R3. Ping from R1 to R2, and vice versa, as well as from R2 to R3, and vice versa, to validate your configuration.

Task 4: Configure both R1 and R3 with the Loopback interface specified in the topology. Verify that RIPv2 has been enabled using the appropriate commands. If you have configured the network as required, you will notice that you do not see these subnets, but instead only see a Task 7: Based on your studies, you know that RIPv2 performs automatic summarization at classful boundaries.

Armed with this knowledge, disable this behavior on R1, R2, and R3. Task 8: Look at the routing tables of R2 and R3 and verify that the Next, look at the routing table of R1 and R2 and verify that the Task 4: R1 conf t Enter configuration commands, one per line.

R1 config int looop R1 config-if ip add R3 config int loop R3 config-if ip add R3 config router rip R3 config-router ver 2 R3 config-router network R2 config router rip R2 config-router ver 2 R2 config-router net R1 config router rip R1 config-router net By default, the administrative distance for RIP is The metric for the route is based on the RIP metric—which is hop count.

Therefore, a metric of 1 means that the route is 1 hop away, a metric of 2 means that the route is 2 hops away, and so forth. Task 7: R1 conf t Enter configuration commands, one per line. Lab Purpose: RIPv2 update debugging is a fundamental skill. By default, RIPv2 sends updates via multicast. You can use debugging commands to troubleshoot network and routing problems. Lab Topology: Please use the following topology to complete this lab exercise: Task 1: This lab will use only two routers.

Configure the hostnames on routers R1 and R2 as illustrated in the topology. Keep in mind that by default, RIP sends updates every 30 seconds, so you will typically see updates within that timeframe. Familiarize yourself with the output of the debugs. Be sure to disable debugging when done. Task 2: For reference information on configuring DCE clocking, please refer to earlier labs. Task 3: For reference information on configuring IP addressing, please refer to earlier labs.

Task 4: R2 conf t Enter configuration commands, one per line. R2 config router rip R2 config-router version 2 R2 config-router net Also, remember that debugging is very processor-intensive and can do more harm than good in a live network, so always make sure you disable debugging when you have captured the information you were looking for. For example, it is not possible to ever have another device connected to a Loopback interface, so it is a waste of router processing power to have RIPv2 continuously sending updates to a Loopback interface.

Task 4: First, use the show ip protocols command to see the interfaces on which RIPv2 is sending updates. When you have verified this, disable debugging. Verify your configuration by enabling debugging. Disable debugging when done. Task 3: For reference information on configuring Loopback interfaces and RIPv2, please refer to earlier labs. However, one important thing to remember is that no host can ever reside on a subnet configured for a Loopback interface.

Given that no host can every reside on the same subnet as a Loopback interface, it is a waste of router resources to have a routing protocol send updates to a Loopback interface, as there will never be another router or other device that will ever respond back to these updates. Hence, when you configure Loopback interfaces, it is always considered best practice to disable routing protocols that can send updates to them using the passive- interface command as illustrated in Task 5 below: Task 5: R1 conf t Enter configuration commands, one per line.

Given such a scenario, issuing the passive-interface command for every one of those Loopback interfaces would take a great deal of time. When this command is issued, all interfaces are configured as passive. In order to send updates on a particular interface, you would negate that interface as not being passive by issuing the no passive-interface command followed by the interface s you want to send routing protocol updates to. This is illustrated below: R1 conf t Enter configuration commands, one per line.

Make sure you remember this command, not only for the purposes of the CCNA exam but also for use in the real world. Lab RIPv2 Split Horizon Lab Objective: The objective of this lab exercise is for you to learn and understand the effects of split horizon in a typical hub-and-spoke topology.

Lab Purpose: Configuring and troubleshooting split horizon is a fundamental skill. RIPv2 is a distance vector protocol, and as such uses split horizon to prevent routing loops. Split horizon mandates that RIPv2 will not send updates back out of the interface on which they were received.

However, in the real world, you may encounter routers running older Cisco IOS software that do have split horizon enabled by default. It is for the preparation of such scenarios that you should be knowledgeable about split horizon. The first two routers will be regular routers, and the third will need to be configured as a frame relay switch.

This can be any Cisco router that has at least two Serial interfaces. Frame relay is no longer featured in the CCNA exam but we are using it here to demonstrate the split horizon issue. Configure the hostnames on R1, R2, and R3 as illustrated in the topology. Task 2: Configure the switch in the topology with the hostname Sw1. Make sure that you enable these interfaces.

Feel free to use Loopback interfaces instead if you wish. Task 4: Configure frame relay on R1, R2, and R3. Use the IP addresses in the topology for their respective Serial interfaces. Use the default frame relay encapsulation of Cisco. Task 5: Create a static frame relay map on each router for the other two routers. Verify your static frame relay maps. You can also use pings to test connectivity between the routers to double-check your frame relay mapping.

Be sure to prevent RIPv2 from automatically summarizing at classful network boundaries on all routers. Task 7: Check your IP routing tables. If you have configured everything as required, you will be receiving all routes on all routers. You can also use pings to test connectivity between the routers to double-check your routing.

Task 8: Generally, if you are working on a hub-and-spoke network running RIPv2 and the router is running a Cisco IOS image that has split horizon disabled by default, you do not want to enable that feature unless you have very good cause to do so. However, in order to better understand split horizon, enable this feature on the Serial interface of R1 and clear the ip routing tables of all three routers. Having done so, check the routing table of R3 and you will see that the Next, check the routing table of R2 and you will see that the Finally, check the routing table of R1 and you will see both of these routes.

Because split horizon has been enabled, R1 will not send updates out of the same interface it received them. Make sure that you understand split horizon. Task 2: Switch config t Enter configuration commands, one per line.

R1 config router rip R1 config-router ver 2 R1 config-router no auto-summary R1 config-router net R3 config router rip R3 config-router ver 2 R3 config-router net Ensure that the ports immediately transition to the Spanning Tree Forwarding state. Task 2: Sw1 config t Enter configuration commands, one per line. Connecting hubs, concentrators, switches, bridges, etc Sw1 config-if-range no shutdown Sw1 config-if-range end Sw1 Task 3: R1 config t Enter configuration commands, one per line.

Task 1: Configure the hostnames on R1 and R2 as illustrated in the topology. Miss off the ip address dhcp command on the host. Configure the wrong network range. Configure the correct network range but with the subnet of Mar 02 PM Automatic By default, Cisco IOS routers do not forward broadcast traffic. Task 2: Configure R1 to provide clocking information for R2 at a speed of Kbps.

Sw1 config-if-range no shutdown Sw1 config-if-range end Sw1 Task 4: R2 config term Enter configuration commands, one per line. You can specify more than one DHCP server with this command; however, the first one configured will always be tried first. Lab Purpose: NTP is an important tool used by Cisco equipment to ensure that devices share a consistent time. It is also used to add accurate timestamps to debug messages. Lab Topology: Please use the following topology to complete this lab exercise: Task 1: Configure the hostname on router R1 as illustrated in the topology.

Task 2: Set the clock manually to any time zone and time of your choice. Use any IP addresses you wish. Task 4: Verify your NTP configurations with the appropriate show commands. R1 show clock R1 config ntp server Standard ACLs filter based on source address, and they should be applied as close to the destination as possible.

Configure a static default route on R1 pointing to R3 over the Serial connection between the two routers. Also, configure a static default route on R3 pointing to R1 via the Serial connection between the two routers.

Task 4: On R1, create a standard numbered ACL to prevent inbound traffic from the Loopback20 subnet on R3, but explicitly allow all inbound traffic from Loopback10 and Loopback30 subnets on R3.

If you have configured this correctly, only Loopback10 and Loopback30 should still be able to ping. Lab Configuration and Verification Task 1: For reference information on configuring hostnames, please refer to previous labs. Task 2: For reference information on configuring IP addresses, please refer to previous labs. R1 config t Enter configuration commands, one per line. R3 config ip route 0. To determine the wildcard mask, you can simply subtract the network mask for the network on which you want to match with the ACL from the broadcast mask.

This concept is illustrated in the subtraction table shown below: In our example, the subnet mask of the If this is subtracted from the broadcast mask of Using the same concept, the subnet mask of the If we used the table above to determine the wildcard mask, we would get the following: And, finally, the subnet mask of the If we used the same table to get the wildcard mask, we would end up with the following: It is extremely important to practice creating wildcards for ACLs.

Take time out to practice these until you are extremely comfortable with them. While it is not mandatory, I prefer to use the access-list [number] remark [description] statement so that I know which ACL line is matching what. This will make it easier for you. Do whatever you feel comfortable doing. R3 ping U, it is typically because your ping request was administratively prohibited by an ACL on the other end.

Keep this in mind: if traffic is not explicitly permitted, it is implicitly denied. It is very important to understand this aspect in regard to access control lists. The explicitly configured statements show as matches against ACL entries, but implicit deny matches do not. R1 show access-lists Standard IP access list 10 10 permit Lab Configuring and Applying Standard Named ACLs Lab Objective: The objective of this lab exercise is for you to learn and understand how to create and apply standard named access control lists.

Task 2: For reference information on configuring IP addresses and static routes, please refer to earlier labs.

Task 3: For reference information on pinging IP addresses, please refer to earlier labs. Extended ACLs should be applied as close to the source as possible. Task 5: Configure both R1 and R3 to allow Telnet connections. Task 2: For reference information on configuring clock rates and IP addresses, please refer to earlier labs. Task 3: For reference information on configuring static routes, please refer to earlier labs.

Task 4: For reference information on pinging, please refer to earlier labs. Task 5: R1 conf t Enter configuration commands, one per line. R1 config line vty 0? For example, you can use the keyword telnet instead of having to use port number 23 to configure an ACL to match Telnet traffic. However, if you do decide to use a port number, Cisco IOS automatically converts it to the common name as illustrated below: R1 conf t Enter configuration commands, one per line.

R1 config access-list permit tcp any any eq 23 R1 config access-list permit tcp any any eq 80 R1 config access-list permit tcp any any eq R1 config access-list permit udp any any eq R1 config access-list permit 88 any any R1 config access-list permit 89 any any R1 config end R1 R1 show ip access-lists Extended IP access list 10 permit tcp any any eq telnet 20 permit tcp any any eq www 30 permit tcp any any eq bgp 40 permit udp any any eq rip 50 permit eigrp any any 60 permit ospf any any As can be seen, while we configured the ACL using port numbers, IOS converted it to common names.

Now test the ACL from the lab. To quit your Telnet access, hit the Control-Shift-6 key at the same time and then let go and press the X key.

R3 telnet Based on our configuration, everything works, and if we looked at the ACL configured on R1, we would see matches against it as follows: R1 show ip access-lists Extended IP access list 10 permit tcp Configure the Loopback interfaces on R1. Task 4: Verify your configuration using the show ip route command on R3 to ensure that all three routes are seen via the different configured routing protocols.

To test connectivity, ping the three Loopback interfaces on R1 from R3. These should all be reachable. R1 config router rip R1 config-router version 2 R1 config-router network Even though I did so, Cisco IOS converted these to their common names, which is what you will see when you issue the show access-lists command.

This is because the adjacency is only removed when the OSPF dead timer expires. This will be a few minutes. Task 3: Configure a static default route on R1 pointing to R3 over the Serial connection between the two routers. Task 3: For reference information on configuring IP addressing and static routes, please refer to earlier labs.

Task 4: For reference information on sourcing traffic from other interfaces, please refer to earlier labs. Task 5: For reference information on permitting Telnet, please refer to earlier labs.

Task 6: R3 conf t Enter configuration commands, one per line. Next, configure the Loopback interfaces specified in the diagram on R3. Finally, configure R1 to allow Telnet sessions. This ACL should permit Telnet traffic from host Verify matches against your ACL.

Task 2: For reference information on configuring IP addresses and clock rates, please refer to earlier labs. R3 config int loop10 R3 config-if ip address Task 6: R3 telnet Make a mental note of this. Using extended ACLs, you can debug specific types of traffic to troubleshoot a network. Use ACL number Task 4: Enable detailed debugging on R1 using the debug ip packet detail command.

Task 5: Ping R2 from R1. You should see some detailed information printed on the console on R1 based on your debugging. When you are done, disable debugging on R1. Task 2: Add a standard named ACL with three lines of configuration. Use the relevant show command to display the lines.

Task 3: Add an entry between entries 10 and Remove line Task 4: Resequence the ACL numbers to increment in 20s, starting from number Task 2: R1 config ip access-list standard sequence R1 config-std-nacl permit Both named and numbered standard and extended ACLs can be configured to log information on matches against their configured rules.

Task 3: Enable local logging on R3. The logging level should be for informational messages only. Task 5: Clear the logs on R3 using the clear log command.

Ping R3 from R1 and check the log on R3 with the show log command. Telnet to R3 from R1 and check the log on R3 with the show log command. Task 3: R3 conf t Enter configuration commands, one per line. R3 config logging on R3 config logging buffered informational R3 config end R3 NOTE: When configuring logging, it is always good practice to enable logging with the logging on command.

When logging messages to the buffer on the router, the options available are as follows: R3 conf t Configuring from terminal, memory, or network [terminal]? Enter configuration commands, one per line. R3 config logging buffered? In other words, the device will log message levels 1 through 5, inclusive. To see debugging output, you must enable a severity of 7. When logging debugging messages, ensure that there is enough buffer space for these messages.

Task 4: R3 conf t Enter configuration commands, one per line. Ensure that you enable Telnet access. Lab Purpose: NAT configuration is a fundamental skill. Static NAT is typically used to provide access to private inside hosts from outside hosts or networks.

When static NAT is configured, outside hosts or networks connect to devices on the inside using a public or external IP address. This hides the private IP addresses of hosts on the inside.

Lab Topology: Please use the following topology to complete this lab exercise: Task 1: Configure the hostnames on R1, R3, and Sw1 as illustrated in the topology. The default gateway on Sw1 should be These should all be successful. However, since R1 does not know about the Verify this. Next, create a static NAT statement on R3 mapping the inside address of Task 7: Ping from Sw1 to R1 and verify that the ping is successful. Next, telnet from R1 to Sw1 config int vlan1 Sw1 config-if shutdown Sw1 config-if exit Sw1 config int vlan50 Sw1 config-if no shutdown Sw1 config-if ip address If you are having issues with NAT, this command can show you the hits versus the misses, which indicates successful versus unsuccessful translations.

Use those counters to troubleshoot Network Address Translation. Dynamic NAT is typically used to provide inside private hosts with access to public or external networks without revealing the private IP addresses of the inside hosts. When dynamic NAT is used, hosts on the outside cannot access hosts on the inside. In other words, dynamic NAT works only when traffic is coming from hosts on the inside. Lab Topology: Please use the following topology to complete this lab exercise: Task 1: Configure the hostnames on R1, R2, and Sw1 as illustrated in the topology.

You can use either a named or numbered ACL. The starting IP address in this pool should be Task 9: Ping R1 from Sw1. If you have configured your NAT translation correctly, the ping should be successful. Use the show ip nat translations command to verify your dynamic NAT translations.

Task 4: For reference information on configuring Telnet, please refer to earlier labs. Task 5: For reference information on pinging, please refer to earlier labs. Task 6: R2 conf t Enter configuration commands, one per line. R2 config ip nat pool Dynamic-NAT The first is a translation of the inside address Pay attention to the information printed by this command and commit it to memory.

Lab Purpose: PAT configuration is a fundamental skill. PAT provides many-to-one translation using random port numbers. This means that multiple inside hosts can use the same outside address to communicate with external devices, while hiding their private IP addresses. You can create either a named or numbered ACL to complete this task. Task 8: Ping R1 from Sw1. Also, perform a telnet from Sw1 to R1. If you have configured interface-based PAT correctly, the ping and telnet should work.

Check the NAT translation table on R3 using the show ip nat translations command. Task 4: For reference information on configuring SVIs and default gateways, please refer to earlier labs. This allows the router to overload address translation to the specified interface or IP address.

Do not forget to issue this keyword when configuring PAT. Otherwise, you will have created dynamic NAT and will run out of addresses after the very first translation. Task 8: Perform a ping, and then telnet from Sw1 and disconnect from the Telnet session. Sw1 ping This is because a dynamic translation is created for every ping packet sent. By default, Cisco routers and switches will send five ping packets. You can tell they are from the same ping because the port numbers are sequential.

This pool should have both a single starting and ending IP address of Telnet from Sw1 to R1. If you have configured PAT correctly, this should work. Task 4: For reference information on configuring IP interfaces, please refer to earlier labs. Task 5: For reference information on configuring pinging, please refer to earlier labs. Task 6: R2 config t Enter configuration commands, one per line.

By default, the question mark invokes IOS help options for a command. Lab Purpose: Advanced password configuration is a fundamental skill. By default, when the question mark? This can become a problem if you want to configure a password such as C? As a Cisco engineer, as well as in the Cisco CCNA exam, you will be expected to know how to configure passwords with special characters. Lab Topology: Use any single switch to complete this lab.

Task 1: Configure an enable password or enable secret of C? If you find that you cannot configure the password, try and remember the keys you need to type in before configuring special characters in a password. Task 2: Disable password encryption and verify that your password shows up in the configuration as configured.

Lab Configuration and Verification Task 1: Sw1 conf t Enter configuration commands, one per line. Sw1 config enable password C? Task 2: Sw1 conf t Enter configuration commands, one per line. Sw1 config no service password-encryption Sw1 config end Sw1 Sw1 show running-config Building configuration By default, you can telnet to a switch but cannot log in if no password has been set.

Lab Purpose: Telnet access configuration is a fundamental skill. More often than not, switches are accessed and configured remotely via Telnet. As a Cisco engineer, as well as in the Cisco CCNA exam, you will be expected to know how to configure a switch to allow an administrator to log in via Telnet. The password is case-sensitive so take that into consideration in your configuration. Verify your configuration by creating a Telnet session from R1.

Take care to remember this when configuring switches, as you may leave some lines unsecured if you use line vty 0 on a router. R1 telnet If you just specify login, then you can reference a password added directly under the vty lines.

Lab Purpose: Console access configuration is a fundamental skill. Switches are always configured first via console access because there is no Telnet access configured. As a Cisco engineer, as well as in the Cisco CCNA exam, you will be expected to know how to configure a switch to allow access via the console. Lab Topology: Please use the following topology to complete this lab exercise: Task 1: Configure a hostname on Sw1.

Task 3: Test access if you have a PC and console port. As a Cisco engineer, as well as in the Cisco CCNA exam, you will be expected to know how to configure a switch to allow access via the console as well as set a timeout value when the session is idle.

Set an exec timeout on the console port of 5 minutes and 30 seconds. Task 4: Check the show run. The passwords are encrypted by default. Users can be configured with certain privilege levels that allow them to execute certain commands. Lab Topology: Please use the following topology to complete this lab: Task 1: Configure the hostnames on R1 and R3 as illustrated in the topology. Task 2: Configure R1 to provide clocking to R3 at a rate of 2 Mbps. Next, configure the IP addresses on R1 and R3 as illustrated in the network topology.

Task 3: Configure the VTY lines on R3 to allow users to log into the router based on locally configured usernames and passwords. First, log in with the username admin and check your privilege level and the router prompt after login. Next, log in with the username test and check your privilege level and the router prompt after login. Do you notice any differences? R3 config line vty 0 4 R3 config-line login local R3 config-line end R3 NOTE: The login local command specifies that the device should use the local database for user authentication.

When configured, you must also configure username and password pairs to be used to gain access to the device. R3 config username admin privilege 15 password cisco R3 config username test privilege 1 password cisco R3 config end R3 R1 telnet Lab Configuring Command and Password Privilege Levels on Devices Lab Objective: The objective of this lab exercise is for you to learn and understand how to configure privilege levels for certain commands and passwords on Cisco IOS devices.

It may be easier to use a router for this lab. Task 2: Configure a level 15 secret of cisco on your device. Task 3: Issue the show ip interface brief command from User Exec mode i. Verify that this command works and you do see the current interface status.

Task 4: Configure the show ip interface brief command to work only for users with Level 15 access. Task 5: If you are connected via the console, type in the command disable to return to User Exec mode i. Next, issue the show ip interfaces brief command.

If you have configured your device correctly, this command will no longer work in User Exec mode. Task 6: Next, type in enable and type in the Level 15 password cisco Attempt to issue the show ip interface brief command.

If your configuration is correct, this will work. R1 config privilege exec level 15 show ip interface brief R1 config end R1 NOTE: The privilege exec command is used to set different privilege levels for commands. By default, the show ip interfaces brief command has a privilege level of 1, which means that it can be issued from the User Exec prompt i. The MOTD banner is displayed on all terminals connected and is useful for sending messages that affect all users.

Task 1: Configure a hostname of your liking on your device. If you have connected to this device accidentally, please disconnect immediately! Task 3: If you are connected to the device via the console port, issue the quit command to reset the console.

This is a private system. Most people have a tendency to use the symbol as a delimiting character, and then forget and use it in their banner configuration, resulting in an incomplete banner on the device. Practice configuring banners with other delimiting characters as well.

Lab Purpose: Changing the configuration register is a fundamental skill. The configuration register is typically changed when performing a password recovery procedure on a Cisco IOS device. The settings within the configuration register are used to change the default behavior of Cisco IOS devices. As a Cisco engineer, as well as in the Cisco CCNA exam, you will be expected to know how to change and verify the configuration register.

Lab Topology: Please use any single router or switch to complete this lab. Task 1: Configure any desired hostname on your device. Task 2: Verify the current setting of the configuration register using the show version command. The configuration register will be at the very end of the output from this command. Task 3: Change the configuration register value to and save your configuration.

Verify that your new configuration register will be used after your device has been rebooted. Therefore, always remember to issue the 0x before specifying the desired configuration register value. This is often forgotten, so ensure that you remember it! Your router or switch IOS must support encryption in order for the commands to work.

Lab Topology: Please use any single router or switch to complete this lab so long as it has the correct IOS image. Task 1: Attach a PC to a router using a switch or crossover cable and add the IP settings above to the devices.

Configure any desired hostname on your device. Task 2: Configure a username and password on your router. Issue the appropriate show commands to check your SSH settings. Lab Configuration and Verification Task 1: For reference information on configuring hostnames and IP addresses, please refer to earlier labs.

Task 3: R1 config ip domain-name howtonetwork. Choosing a key modulus greater than may take a few minutes. In most networks, a SYSLOG server is present and devices are configured to send log messages to this central repository. Users or groups managing this central repository can therefore see alarms from devices and act accordingly to address the issues. Because there will be no real SYSLOG server configured against which to perform testing, the sole objective of this lab is command familiarity.

Lab Topology: Please use the following topology to complete this lab: Task 1: Configure the hostnames on R3 and Sw1 as illustrated in the topology. R3 config logging trap debugging R3 config logging host You can view the correlation between numbers and keywords by using a question mark after the logging trap command as illustrated below: R3 config logging trap? Lab Purpose: Making sure that you know how to upgrade the IOS code in your Cisco device is one of the most important things a network engineer must know.

You will need another IOS available to replace the current one on your router. If you prefer to use Packet Tracer, then you will need to follow a slightly different process as show in the video. Lab Topology: Please use the following topology to complete this lab exercise: Task 1: Configure the hostnames on router R1 as illustrated in the topology.

Task 4: Make sure that you set the new image you just uploaded to R1 as the boot image and reboot R1. Note: In the video solution, I used Packet Tracer, which will only permit the prompts after you type copy tftp: flash:, which is another way of updating the IOS.

Lab Topology: Please use the following topology to complete this lab exercise: Task 1: Configure the hostnames on R1 as illustrated in the topology. R1 config boot system flash:cadvipservicesk9-mz. Note: In the video solution, I used Packet Tracer, which will only permit the prompts after you type copy ftp: flash:, which is another way of updating the IOS.

Reboot R1. Task 3: Once you are in rom monitor mode, instruct the router to bypass the running-configuration bootup by changing the configuration register to 0x After changing this configuration register, reset the router so you can boot up and finalize password recovery.

Task 5: Finally, change the configuration register to the default of 0x, save the configuration, and reboot the router. Cisco switches usually follow a different recovery procedure altogether. Lab Configuration and Verification Task 1: Reboot the router manually i. Task 2: System Bootstrap, Version These challenge labs consist of two or more of the technologies we have already covered. There is no solution as such but if you get really stuck, you can check out the configurations.

If you get stuck, it means that you have found a weak area, so go back to the earlier labs, review your theory guide, and work on the protocol or service. Lab Purpose: These are classic exam subjects you should be very familiar with. Rather than watch a video solution if you have access to the video course , I have provided show runs and test commands where appropriate.

You should be able to ping across the Serial interface only because there are no routes from the Loopback networks. Task 2: Configure static routes on RouterA with an exit interface of its own Serial interface so it can reach the networks on the Loopbacks for RouterB.

On RouterB, configure a default route so all traffic for any networks are sent out of the Serial interface. Ping all networks to check connectivity. All other Telnet traffic should be denied but all other IP traffic permitted. Ensure that you enable Telnet on the router for the vty lines. Telnetting to Rather than watch a video solution, I have provided show runs and test commands where appropriate. Lab Topology: Please use the following topology to complete this lab exercise: Task 1: Configure the topology above.

Task 2: Configure static routes with an exit interface on RouterA so it can reach the networks on the Loopbacks for RouterB. Ensure that you enable Telnet on the router for the vty lines for testing. Ensure that you enable Telnet on the router.

TCP is used when the response data size exceeds bytes, or for tasks such as zone transfers. Some resolver implementations use TCP for all queries.

Lab Purpose: None of these subjects are core; however, they are all in the syllabus so they may be the subject of lab or theory questions. Task 2: Configure Telnet access on RouterB. Task 4: Use show commands to check CDP statistics on neighbor routers. RouterB interface Loopback0 ip address TEST: R1 telnet Lab Purpose: NAT is an important exam topic so you can be pretty sure it will crop up.

You should add a static default route on RouterB to send all traffic out of the Serial interface. Test by pinging the Loopbacks on RouterA. Check that you can ping all interfaces. Any traffic coming from Task 3: Check your configurations with show commands and pings sourced from The pool is It should activate if any address from the You can add a secondary IP address to the Loopback0 interface to test another address from the pool if you wish.

TEST: Do an extended ping sourced from Type escape sequence to abort. The pool should consist of addresses Overload the pool.

TEST: Issue an extended ping to Lab Purpose: IPv6 static routing is not specifically referred to in the exam syllabus. Static routing is and IPv6 is also, so you might be tested on both together in the exam. You will need to find the link-local next hop address for RouterA to send the traffic for Task 2. This will be under the IPv6 interface for RouterB. Check that you can ping across the Serial link. RouterB ipv6 unicast-routing! Configure the port as an access port. Add IP address Task 3: Configure port security on the switchport.

Add a command to ensure that the switch adds the learned MAC address to the startup configuration file. Now check that the port has been shut down. Lab Topology: Please use the following topology to complete this lab exercise: Task 1: Connect two switches together as shown above.

Task 4: Turn off DTP for the trunk interfaces. Shut down VLAN1 on both switches. Task 7: Issue relevant show commands to verify your configurations.

Challenge Lab 9: Solution Many of the Layer 2 settings do not show in the show run they are held in the vlan database. All of the commands are in the videos though if you are using these to accompany the book. You have already seen the VTP commands in previous labs. Show Runs hostname SwitchA! Lab Topology: Please use the following topology to complete this lab: Task 1: Configure the hostname on all devices as illustrated in the network topology. Verify that your trunk link is operational and propagating all VLAN information.

The default gateway of all switches should be Task 6: Configure subinterfaces on R1 as illustrated in the topology. The domain name should be howtonetwork. Make sure that there is no automatic summarization. Task 9: If you have configured everything correctly, all routers and all switches should be able to ping each other.

Verify this to see if you have completed the lab successfully. R3 show run Building configuration R4 show run Building configuration In addition, you are required to familiarize yourself with the commands available in Cisco IOS to validate and check your configurations.

Feel free to replicate the steps above on Sw2. NOTE: Configuration files will be kept from previous labs. Switch config t Enter configuration commands, one per line. Lab Purpose: Securing the switch involves knowing how to change the native VLAN as well as shutting down unused ports in case somebody plugs a device into one to try to gain network access.

Task 2: Shut down ports FastEthernet 10 to 15, inclusive. Task 3: Issue the relevant show commands to prove your configurations. By default, all VLANs are allowed to traverse trunks. By default, all VLANs traverse trunks. However, in some cases, this may result in unnecessary VLANs being propagated, and this may pose a security risk.

Configure the switches to use legacy VTP version 1. You can restrict certain VLANs to certain trunks by using the switchport trunk allowed vlan command. You can test this command, which can also add or remove ranges of VLANs, so please spend some time trying out all the options.

A switched network is said to be converged when all ports are in the Forwarding or Blocking state. Lab Topology: Please use the following topology to complete this lab exercise: Task 1: In preparation for VLAN configuration, configure a hostname on Sw1 and R1 as illustrated in the topology. Verify IP connectivity using pings. Verify the transition of the Spanning Tree state of the port to Forwarding. Make sure that you see the interface in at least three different Spanning Tree states.

Task 2: For reference information on configuring a VTP domain and password, please refer to earlier labs. When configuring another interface with an IP address, it is good practice to shut down interface VLAN1 and issue a no shutdown command on the new management interface you are configuring.

Network—The port is configured as an STP network port either globally using the default command or directly on the interface. Lab Purpose: STP root bridge configuration is a fundamental skill.

It is always recommended that the root bridge be manually configured to ensure that the Layer 2 network is deterministic. As a Cisco engineer, as well as in the Cisco CCNA exam, you will be expected to know how to configure a switch as a root bridge. Configure the VLANs and check that they are visible on both switches. Manually set the interface to trunk on one side.

Use the second non-zero priority value for root bridges. Task 4: Verify your configuration with the appropriate show commands. However, to configure the extended range of VLANs i.

However, the macro available in Cisco IOS can also be used. Configure the switches to automatically update their priorities as follows: a. Task 4: Verify your configurations with the appropriate commands.

For reference information on Transparent mode, trunks, and extended VLANs, please refer to earlier labs. Sw1 conf t Enter configuration commands, one per line. Sw1 config spanning-tree vlan root primary Sw1 config spanning-tree vlan root primary Sw1 config spanning-tree vlan root secondary Sw1 config spanning-tree vlan root secondary Sw1 config end Sw1 Sw1 conf t Enter configuration commands, one per line.

In addition, you can also issue the show spanning-tree root command to view the Spanning Tree root bridge for all VLANs in the domain. This means that there is no switch in the switched LAN that has a priority that is numerically less than the manually set value of Try the reverse and change priorities on Sw1. You should see the Sw2 Spanning Tree priority values change. Lab Assigning Multiple Instances to a VLAN Simultaneously Lab Objective: The objective of this lab exercise is to understand how to configure many interfaces that share the same common configuration at the same time without having to do them one at a time Lab Purpose: Configuring multiple interfaces on a switch at the same time is a fundamental skill.

Some high-end Cisco Catalyst Switches can have in excess of interfaces that may need to be configured almost identically. In such situations, configuring a single interface at a time would not be acceptable. As a Cisco engineer, as well as in the Cisco CCNA exam, you will be expected to know how to configure multiple switch interfaces at the same time using user-defined macros.

Lab Topology: You can use any stand-alone single switch to complete this lab. This lab is strictly about configuration syntax. Task 1: Configure a hostname of your liking on your lab switch, which should have at least 24 ports. These ports should be configured as access ports.

Lab Purpose: Bypassing default Spanning Tree port states is a fundamental skill. By default, it can take up to 60 seconds for a switchport to transition to the Forwarding state and begin forwarding frames. Lab Topology: Please use any single switch for this lab. This lab is strictly about validating command syntax. Task 1: Configure a hostname of your liking on your switch, which should have at least 12 ports. These interfaces should also be configured as access ports in VLAN Designated root has priority , address d.

Lab Topology: Please use the following topology to complete this lab exercise: Task 1: Configure a hostname on Sw1 and Sw2 as illustrated in the topology diagram above. This is the default mode for switches. Task 6: Update your switch to a Spanning Tree mode that ensures the fastest convergence for the Layer 2 network and verify your configuration.

For reference information on configuring the VTP mode and password, please refer to earlier labs. Task 3: For reference information on configuring and verifying trunks, please refer to earlier labs.

Lab Purpose: Understanding how to enable the different port-channel protocols on a Layer 2 network is a must for every engineer to know. Lab Topology: Please use the following topology to complete this lab exercise: Task 1: Configure the hostnames on Sw1, Sw2, and Sw3 as illustrated in the topology. Lab Purpose: Understanding how to enable and configure Lab Topology: Please use the following topology to complete this lab exercise.

This lab will not work on Packet Tracer, so you will need a live switch that supports Task 3: Configure AAA authentication for Task 4: Enable Task 2: SW1 config aaa new-model SW1 config radius-server host Task 1: Configure the hostnames on Sw1 as illustrated in the topology. OSPF uses the concept of Areas. Enable PPP on the link between R1 and R3 and configure the IP addresses illustrated in the topology we will cover this in detail later so just copy my commands for now.

To determine the wildcard mask, you can simply subtract the network mask for the network on which you want to enable OSPF from the broadcast mask. Take some time to practice configuring wildcard masks for different subnets. R1 conf t Enter configuration commands, one per line. R1 config router ospf 1 R1 config-router network R3 config router ospf 3 R3 config-router network If they are in any other state, you will need to perform some troubleshooting to identify the root cause of the issue.

Lab Topology: Please use the following topology to complete this lab exercise: Task 1: Configure hostnames on R1, R2, and Sw1 as illustrated in the topology.

Also verify that the default network type for the Ethernet link between R1 and R2 is broadcast. Task 2: For reference information on configuring IP addressing, transparent switching, and extended VLANs, please refer to earlier labs. Task 3: R2 conf t Enter configuration commands, one per line.