Apply a manual summary route for the loopback interface networks

CCNA: Scaling Networks Skills Assessment

Assessment Objectives

Part 1: Initialize Devices (2 points, 5 minutes)

Part 2: Configure Device Basic Settings (5 points, 30 minutes)

Part 3: Configure LAN Redundancy and Link Aggregation (6 points, 25 minutes)

Part 4A: Configure EIGRP for IPv4 Dynamic Routing Protocol (8 points, 30 minutes)

Part 4B: Configure OSPFv2 Dynamic Routing Protocol (8 points, 30 minutes)

Part 5: Verify Network Connectivity and HSRP Configuration (6 points, 15 minutes)

Part 6: Display IOS Image and License Information (5 points, 5 minutes)

Scenario

In this Skills Assessment (SA), you will create a small network. You must connect the network devices, and configure those devices to support IPv4 connectivity, LAN redundancy, and link aggregation. You will then configure EIGRP and OSPFv2 for IPv4 on the network and verify connectivity and HSRP. Finally, you will demonstrate your knowledge of IOS images and licensing.

CCNA: Scaling Networks SA Exam

CCNA: Scaling Networks

Skills Assessment (EIGRP & OSPFv2) – Hands On Skills Assessment

Topology

EIGRPtopology

Addressing Table

Device

Interface

IP Address

Subnet Mask

Default Gateway

R1

G0/1

172.27.0.1

255.255.255.0

N/A

S0/0/0

172.27.123.1

255.255.255.252

N/A

Lo1

172.27.1.1

255.255.255.0

N/A

Lo2

172.27.2.1

255.255.255.0

N/A

Lo3

172.27.3.1

255.255.255.0

N/A

R2

S0/0/0

172.27.123.2

255.255.255.252

N/A

S0/0/1

172.27.123.5

255.255.255.252

N/A

Lo0

209.165.200.225

255.255.255.248

N/A

R3

G0/1

172.27.0.3

255.255.255.0

N/A

S0/0/1

172.27.123.6

255.255.255.252

N/A

Lo4

172.27.4.1

255.255.255.0

N/A

Lo5

172.27.5.1

255.255.255.0

N/A

Lo6

172.27.6.1

255.255.255.0

N/A

S1

VLAN 1

172.27.0.11

255.255.255.0

172.27.0.2

S2

VLAN 1

172.27.0.12

255.255.255.0

172.27.0.2

S3

VLAN 1

172.27.0.13

255.255.255.0

172.27.0.2

PC-A

NIC

172.27.0.21

255.255.255.0

172.27.0.2

PC-B

NIC

172.27.0.22

255.255.255.0

172.27.0.2

PC-C

NIC

172.27.0.23

255.255.255.0

172.27.0.2

Assessment Objectives

Part 1: Initialize Devices (2 points, 5 minutes)

Part 2: Configure Device Basic Settings (5 points, 30 minutes)

Part 3: Configure LAN Redundancy and Link Aggregation (6 points, 25 minutes)

Part 4A: Configure EIGRP for IPv4 Dynamic Routing Protocol (8 points, 30 minutes)

Part 4B: Configure OSPFv2 Dynamic Routing Protocol (8 points, 30 minutes)

Part 5: Verify Network Connectivity and HSRP Configuration (6 points, 15 minutes)

Part 6: Display IOS Image and License Information (5 points, 5 minutes)

Scenario

In this Skills Assessment (SA), you will create a small network. You must connect the network devices, and configure those devices to support IPv4 connectivity, LAN redundancy, and link aggregation. You will then configure EIGRP and OSPFv2 for IPv4 on the network and verify connectivity and HSRP. Finally, you will demonstrate your knowledge of IOS images and licensing.

Required Resources

3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)

3 Switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)

3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)

Console cable to configure the Cisco IOS devices via the console ports

Ethernet and Serial cables as shown in the topology

Initialize Devices

Total points: 2

Time: 5 minutes

Initialize and reload the routers and switches.

Erase the startup configurations and reload the devices.

Before proceeding, have your instructor verify device initializations.

Task

IOS Command

Points

Erase the startup-config file on all routers.

R1# erase startup-config

2

Reload all routers.

R1# reload

Erase the startup-config file on all switches and remove the old VLAN database.

S1# erase startup-config

S1# del vlan.dat

Reload all switches.

S1# reload

Verify VLAN database is absent from flash on all switches.

S1# show flash

Points: __________ of 2

Configure Device Basic Settings

Total points: 5

Time: 30 minutes

Configure R1.

Configuration tasks for R1 include the following:

Configuration Item or Task

Specification

Points

Disable DNS lookup

no ip domain lookup

.5

Router name

hostname R1

Encrypted privileged EXEC password

enable secret class

Console access password

line con 0

password cisco

login

Telnet access password

line vty 0 4

password cisco

login

Encrypt the plain text passwords.

service password-encryption

MOTD banner

banner motd @ Unauthorized Access is

Prohibited! @

Interface G0/1

interface g0/1

description Connection to S1

ip address 172.27.0.1 255.255.255.0

no shutdown

Interface S0/0/0

interface s0/0/0

description Connection to R2

ip add 172.27.123.1 255.255.255.252

clock rate 128000

no shutdown

Interface Loopback 1 (LAN)

interface lo1

ip address 172.27.1.1 255.255.255.0

Interface Loopback 2 (LAN)

interface lo2

ip address 172.27.2.1 255.255.255.0

Interface Loopback 3 (LAN)

interface lo3

ip address 172.27.3.1 255.255.255.0

Configure R2.

Configuration tasks for R2 include the following:

Configuration Item or Task

Specification

Points

Disable DNS lookup

no ip domain lookup

1

Router name

hostname R2

Encrypted privileged EXEC password

enable secret class

Console access password

line con 0

password cisco

login

Telnet access password

line vty 0 4

password cisco

login

Encrypt the plain text passwords.

service password-encryption

MOTD banner

banner motd @ Unauthorized Access is

Prohibited! @

Interface S0/0/0

interface s0/0/0

description Connection to R1

ip add 172.27.123.2 255.255.255.252

no shutdown

Interface S0/0/1

interface s0/0/1

description Connection to R3

ip add 172.27.123.5 255.255.255.252

clock rate 128000

no shutdown

Interface Loopback 0 (Simulated Internet connection)

description Connection to Internet

ip address 209.165.200.225

255.255.255.248

Default route

ip route 0.0.0.0 0.0.0.0 lo0

Configure R3.

Configuration tasks for R3 include the following:

Configuration Item or Task

Specification

Points

Disable DNS lookup

no ip domain lookup

1

Router name

hostname R3

Encrypted privileged EXEC password

enable secret class

Console access password

line con 0

password cisco

login

Telnet access password

line vty 0 4

password cisco

login

Encrypt the plain text passwords.

service password-encryption

MOTD banner

banner motd @ Unauthorized Access is

Prohibited! @

Interface G0/1

interface g0/1

description Connection to S3

ip address 172.27.0.3 255.255.255.0

no shutdown

Interface S0/0/1

interface s0/0/1

description Connection to R2

ip add 172.27.123.6 255.255.255.252

no shutdown

Interface Loopback 4 (LAN)

interface lo4

ip address 172.27.4.1 255.255.255.0

Interface Loopback 5 (LAN)

interface lo5

ip address 172.27.5.1 255.255.255.0

Interface Loopback 6 (LAN)

interface lo6

ip address 172.27.6.1 255.255.255.0

Configure S1.

Configuration tasks for S1 include the following:

Configuration Item or Task

Specification

Points

Disable DNS lookup

no ip domain lookup

1

Switch name

hostname S1

Encrypted privileged EXEC password

enable secret class

Console access password

line con 0

password cisco

login

Telnet access password

line vty 0 15

password cisco

login

Encrypt the plain text passwords.

service password-encryption

MOTD banner

banner motd @ Unauthorized Access

is Prohibited! @

Assign an IPv4 address to the default SVI.

interface vlan 1

ip address 172.27.0.11 255.255.255.0

no shutdown

Assign the default-gateway.

ip default-gateway 172.27.0.2

Force trunking on Interfaces connected to S2 and S3.

interface range f0/1-4

switchport mode trunk

switchport trunk native vlan 1

Note: VLAN 1 is the native VLAN by

default, the previous command is not

necessary.

Disable the Dynamic Trunking Protocol (DTP) on all other ports.

interface range f0/5-24, g0/1-2

switchport mode access

Note: The switchport nonegotiate

command may have also been

issued, this is not incorrect but it is

important that these ports have been

changed to access ports.

Shutdown all unused ports.

interface range f0/7-24, g0/1-2

shutdown

Configure S2.

Configuration tasks for S2 include the following:

Configuration Item or Task

Specification

Points

Disable DNS lookup

no ip domain lookup

.5

Switch name

hostname S2

Encrypted privileged exec password

enable secret class

Console access password

line con 0

password cisco

login

Telnet access password

line vty 0 15

password cisco

login

Encrypt the clear text passwords.

service password-encryption

MOTD banner

banner motd @ Unauthorized Access

is Prohibited! @

Assign an IPv4 address to the default SVI.

interface vlan 1

ip address 172.27.0.12 255.255.255.0

no shutdown

Assign the default-gateway.

ip default-gateway 172.27.0.2

Force trunking on Interfaces connected to S1 and S3.

interface range f0/1-4

switchport mode trunk

switchport trunk native vlan 1

Note: VLAN 1 is the native VLAN by

default, the previous command is not

necessary.

Disable the Dynamic Trunking Protocol (DTP) on all other ports.

interface range f0/5-24, g0/1-2

switchport mode access

Note: The switchport nonegotiate

command may have also been

issued, this is not incorrect but it is

important that these ports have been

changed to access ports.

Shutdown all unused ports.

interface range f0/5-17, f0/19-24,

g0/1-2

shutdown

Configure S3

Configuration tasks for S3 include the following:

Configuration Item or Task

Specification

Points

Disable DNS lookup

no ip domain lookup

.5

Switch name

hostname S3

Encrypted privileged EXEC password

enable secret class

Console access password

line con 0

password cisco

login

Telnet access password

line vty 0 15

password cisco

login

Encrypt the plain text passwords.

service password-encryption

MOTD banner

banner motd @ Unauthorized Access

is Prohibited! @

Assign an IPv4 address to the default SVI.

interface vlan 1

ip address 172.27.0.13 255.255.255.0

no shutdown

Assign the default-gateway.

ip default-gateway 172.27.0.2

Force trunking on Interfaces connected to S1 and S2.

interface range f0/1-4

switchport mode trunk

switchport trunk native vlan 1

Note: VLAN 1 is the native VLAN by

default, the previous command is not

necessary.

Disable the Dynamic Trunking Protocol (DTP) on all other ports.

interface range f0/5-24, g0/1-2

switchport mode access

Note: The switchport nonegotiate

command may have also been

issued, this is not incorrect but it is

important that these ports have been

changed to access ports.

Shutdown all unused ports.

interface range f0/6-17, f0/19-24,

g0/1-2

shutdown

Configure IPv4 addresses on PCs.

Configuration Item or Task

Specification

Points

Configure static IPv4 address information on PC-A.

IPv4 address:172.27.0.21

Subnet mask: 255.255.255.0

Default gateway:172.27.0.2

.5

Configure static IPv4 address information on PC-B.

IPv4 address:172.27.0.22

Subnet mask: 255.255.255.0

Default gateway:172.27.0.2

Configure static IPv4 address information on PC-C.

IPv4 address:172.27.0.23

Subnet mask: 255.255.255.0

Default gateway:172.27.0.2

Points: _________ of 5

Configure LAN Redundancy and Link Aggregation

Total points: 6

Time: 25 minutes

Configure Spanning Tree on S1.

Configuration tasks for S1 include the following:

Configuration Item or Task

Specification

Points

Configure Rapid PVST+.

PVST+.

spanning-tree mode rapid-pvst

1

Configure as primary root bridge for VLAN 1.

spanning-tree vlan 1 root primary

Configure PortFast and BPDU Guard on the interface connected to PC-A.

interface f0/6

spanning-tree portfast

spanning-tree bpduguard enable

Configure Spanning Tree on S2.

Configuration tasks for S2 include the following:

Configuration Item or Task

Specification

Points

Configure Rapid PVST+.

spanning-tree mode rapid-pvst

1

Configure PortFast and BPDU Guard on the interface connected to PC-B.

interface f0/18

spanning-tree portfast

spanning-tree bpduguard enable

Configure Spanning Tree on S3.

Configuration tasks for S3 include the following:

Configuration Item or Task

Specification

Points

Configure Rapid PVST+.

spanning-tree mode rapid-pvst

1

Configure as secondary root bridge for VLAN 1.

spanning-tree vlan 1 root secondary

Configure PortFast and BPDU Guard on the interface connected to PC-C.

interface f0/18

spanning-tree portfast

spanning-tree bpduguard enable

Configure HSRP on R1.

Configuration tasks for R1 include the following:

Configuration Item or Task

Specification

Points

Configure the HSRP virtual IP address on interface G0/1.

interface g0/1

standby 1 ip 172.27.0.2

1

Make this the primary HSRP router.

standby 1 priority 150

R1

Configure so this router becomes the primary HSRP router on a reboot.

standby 1 preempt

Configure HSRP on R3.

Configuration tasks for R3 include the following:

Configuration Item or Task

Specification

Points

Configure the HSRP virtual IP address on interface G0/1.

interface g0/1

standby 1 ip 172.27.0.2

1

Configure an LACP EtherChannel between S1 and S3.

Configuration tasks include the following:

Configuration Item or Task

Specification

Points

On S1, configure an LACP EtherChannel on interfaces connected to S3.

interface range f0/3-4

channel-group 1 mode active

1

On S3, configure an LACP EtherChannel on interfaces connected to S1.

interface range f0/3-4

channel-group 1 mode passive

Points: _________ of 6

Configure EIGRP for IPv4 Dynamic Routing Protocol

Total points: 8

Time: 30 minutes

Configure EIGRP on R1.

Configuration tasks for R1 include the following:

Configuration Item or Task

Specification

Points

Autonomous System (AS) number

router ospf 1

2

Router ID

router-id 1.1.1.1

Advertise directly connected networks.

network 172.27.0.0 0.0.0.255 area 0

network 172.27.123.0 0.0.0.3 area 0

network 172.27.1.0 0.0.0.255 area 1

network 172.27.2.0 0.0.0.255 area 1

network 172.27.3.0 0.0.0.255 area 1

Set all LAN interfaces as passive.

passive-interface g0/1

passive-interface lo1

passive-interface lo2

passive-interface lo3

Manually disable automatic summarization.

No auto-summary

Apply a manual summary route for the Loopback interface networks.

Set the bandwidth on S0/0/0

interface s0/0/0

bandwidth 128

Change the hello-interval on S0/0/0.

30 seconds

Change the hold-time on S0/0/0.

90 seconds

Change bandwidth percentage available to EIGRP

70%

Configure a key chain named EIGRP-KEY with 1 key-string.

Key-string: cisco

Configure MD5 authentication on S0/0/0 using the key chain configured in the previous task.

Configure EIGRP on R2.

Configuration tasks for R2 include the following:

Configuration Item or Task

Specification

Points

Autonomous System number

1

2

Router ID

2.2.2.2

Advertise directly connected Networks.

Use classless network addresses.

Manually disable automatic summarization.

Propagate the default route to all other EIGRP routers.

Set the bandwidth on both serial interfaces.

128 Kb/s

Change the hello-interval on serial interfaces.

30 seconds

Change the hold-time on serial interfaces.

90 seconds

Change bandwidth percentage available to EIGRP.

70%

Configure a key chain named EIGRP-KEY with 1 key-string.

Key-string: cisco

Configure MD5 authentication on serial interfaces using the key chain configured in the previous step.

Configure EIGRP on R3.

Configuration tasks for R3 include the following:

Configuration Item or Task

Specification

Points

Autonomous System number

1

2

Router ID

3.3.3.3

Advertise directly connected Networks.

Use classless network addresses.

Set all LAN interfaces as passive.

Manually disable automatic summarization.

Set the serial interface bandwidth.

128 Kb/s

Apply a manual summary route for the Loopback interface networks.

Change the hello-interval on S0/0/1.

30 seconds

Change the hold-time on S0/0/1.

90 seconds

Change bandwidth percentage available to EIGRP.

70%

Configure a key chain named EIGRP-KEY with 1 key-string.

Key-string: cisco

Configure MD5 authentication on S0/0/1 using the key chain configured in previous task.

Verify network connectivity.

Verify that EIGRP is functioning as expected. Enter the appropriate CLI command to discover the following information:

Question

Response

Points

What command will display all connected EIGRP routers?

Show eigrp neighbors

1

What command displays EIGRP hello-interval, hold-time, bandwidth percentage, and authentication mode for all EIGRP interfaces on a router?

Show ip eigrp interfaces detail

What command displays the EIGRP Autonomous System number, router ID, address summarizations, routing networks, and passive interfaces configured on a router?

Show ip protocoals

What command displays only EIGRP routes?

Show ip route eigrp

Step 5: Disable EIGRP

Disable EIGRP to prepare for OSPFv2.

Configuration Item or Task

Specification

Points

Disable EIGRP

No router eigrp 1

1

Points: _________ of 8

Configure OSPFv2 Dynamic Routing Protocol

Total points: 8

Time: 30 minutes

Configure OSPFv2 on R1.

Configuration tasks for R1 include the following:

Configuration Item or Task

Specification

Points

OSPF Process ID

1

2

Router ID

1.1.1.1

Advertise directly connected networks.

Use classless network addresses.

Assign S0/0/0 and G0/1 interfaces to Area 0.

Assign Loopback interfaces to Area 1.

Set all LAN interfaces as passive.

Configure an inter-area summary route for the networks in area 1.

Change the default cost reference bandwidth to support Gigabit interface calculations.

1000

Set the bandwidth on S0/0/0.

128 Kb/s

Adjust the metric cost of S0/0/0.

Cost: 7500

Create an OSPF MD5 key on S0/0/0.

Key: 1

Password: CISCO

Apply MD5 authentication to S0/0/0.

Configure OSPFv2 on R2.

Configuration tasks for R2 include the following:

Configuration Item or Task

Specification

Points

OSPF Process ID

1

2

Router ID

2.2.2.2

Advertise directly connected networks.

Use classless network addresses.

All connected networks should be assigned to Area 0 except the Lo0 network.

Propagate the default route to all other OSPF routers.

Change the default cost reference bandwidth to allow for Gigabit interfaces.

1000

Set the bandwidth on all serial interfaces.

128 Kb/s

Adjust the metric cost of S0/0/0.

Cost: 7500

Create an OSPF MD5 key on the serial interfaces.

Key: 1

Password: CISCO

Apply MD5 authentication on the serial interfaces.

Configure OSPFv2 on R3.

Configuration tasks for R3 include the following:

Configuration Item or Task

Specification

Points

OSPF Process ID

1

2

Router ID

3.3.3.3

Advertise directly connected networks.

Use classless network addresses

Assign S0/0/1 and G0/1 interfaces to Area 0

Assign Loopback interfaces to Area 3

Set all LAN interfaces as passive.

Configure an inter-area summary route for the networks in area 3.

Change the default cost reference bandwidth to support Gigabit interface calculations.

1000

Set the serial interface bandwidth.

128 Kb/s

Create an OSPF MD5 key on S0/0/1.

Key: 1

Password: CISCO

Apply MD5 authentication to S0/0/1.

Verify network connectivity.

Verify that OSPF is functioning as expected. Enter the appropriate CLI command to discover the following information:

Question

Response

Points

What command will display all connected OSPFv2 routers?

show ip ospf neighbor

2

What command displays a summary list of OSPF interfaces that includes a column for the cost of each interface?

show ip ospf interface brief

What command displays the OSPF Process ID, Router ID, Address summarizations, Routing Networks, and Passive Interfaces configured on a router?

show ip protocols

What command displays only OSPF routes?

show ip route ospf

What command displays detailed information about the OSPF interfaces, including the authentication method?

show ip ospf interface

What command displays the OSPF section of the running-configuration?

show run | section router ospf

Points: _________ of 8

Verify Network Connectivity and HSRP Configuration

Total points: 6

Time: 15 minutes

Use the listed command to verify that network is working as expected.

Verify end-to-end connectivity.

Take corrective action if results are other than expected.

From

Command

To

Expected Results

Points

PC-A

ping

PC-C

Ping should be successful.

3

PC-B

ping

PC-A

Ping should be successful.

PC-B

ping

PC-C

Ping should be successful.

PC-B

ping

Default Gateway

Ping should be successful.

PC-B

ping

209.165.200.225

Ping should be successful.

PC-B

tracert

209.165.200.225

Trace should route through R1.

Note: It may be necessary to disable the PC firewall for pings to be successful

Verify HSRP is working as expected.

Issue the shutdown command on R1 G0/1, and then re-issue the following commands to verify that HSRP is working as expected:

From

Command

To

Expected Results

Points

PC-B

ping

172.27.0.1

Ping should not be successful.

3

PC-B

ping

Default Gateway

Ping should be successful.

PC-B

ping

209.165.200.225

Ping should be successful.

PC-B

tracert

209.165.200.225

Trace should route through R3.

Points: _________ of 6

Display IOS Image and License Information

Total points: 5

Time: 5 minutes

Enter the appropriate CLI command to discover the following information:

Question

Response

Points

What command displays the IOS image that is currently being used by the network device?

show version

5

What command displays the size of an IOS image loaded on a network device?

show flash

What command displays a summary list of the Technology Package licenses on an ISR-G2 device that includes the current the state of each of those licenses?

show version

What command displays the amount of space available to install an additional IOS image to a network device?

show flash

What command displays a list of all the licenses on an ISR-G2 device?

show license

What command would you use to accept the end user license agreement?

license accept end user agreement

Points: _________ of 5

Router Interface Summary Table

Router Interface Summary

Router Model

Ethernet Interface #1

Ethernet Interface #2

Serial Interface #1

Serial Interface #2

1800

Fast Ethernet 0/0 (F0/0)

Fast Ethernet 0/1 (F0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

1900

Gigabit Ethernet 0/0 (G0/0)

Gigabit Ethernet 0/1 (G0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

2801

Fast Ethernet 0/0 (F0/0)

Fast Ethernet 0/1 (F0/1)

Serial 0/1/0 (S0/1/0)

Serial 0/1/1 (S0/0/1)

2811

Fast Ethernet 0/0 (F0/0)

Fast Ethernet 0/1 (F0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

2900

Gigabit Ethernet 0/0 (G0/0)

Gigabit Ethernet 0/1 (G0/1)

Serial 0/0/0 (S0/0/0)

Serial 0/0/1 (S0/0/1)

Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.

© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 19

© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 19