CCNA: Scaling Networks Skills Assessment
CCNA: Scaling Networks
Skills Assessment (EIGRP & OSPFv2) – Hands On Skills Assessment
Topology
EIGRPtopology
Addressing Table
Device
Interface
IP Address
Subnet Mask
Default Gateway
R1
G0/1
172.27.0.1
255.255.255.0
N/A
S0/0/0
172.27.123.1
255.255.255.252
N/A
Lo1
172.27.1.1
255.255.255.0
N/A
Lo2
172.27.2.1
255.255.255.0
N/A
Lo3
172.27.3.1
255.255.255.0
N/A
R2
S0/0/0
172.27.123.2
255.255.255.252
N/A
S0/0/1
172.27.123.5
255.255.255.252
N/A
Lo0
209.165.200.225
255.255.255.248
N/A
R3
G0/1
172.27.0.3
255.255.255.0
N/A
S0/0/1
172.27.123.6
255.255.255.252
N/A
Lo4
172.27.4.1
255.255.255.0
N/A
Lo5
172.27.5.1
255.255.255.0
N/A
Lo6
172.27.6.1
255.255.255.0
N/A
S1
VLAN 1
172.27.0.11
255.255.255.0
172.27.0.2
S2
VLAN 1
172.27.0.12
255.255.255.0
172.27.0.2
S3
VLAN 1
172.27.0.13
255.255.255.0
172.27.0.2
PC-A
NIC
172.27.0.21
255.255.255.0
172.27.0.2
PC-B
NIC
172.27.0.22
255.255.255.0
172.27.0.2
PC-C
NIC
172.27.0.23
255.255.255.0
172.27.0.2
Assessment Objectives
Part 1: Initialize Devices (2 points, 5 minutes)
Part 2: Configure Device Basic Settings (5 points, 30 minutes)
Part 3: Configure LAN Redundancy and Link Aggregation (6 points, 25 minutes)
Part 4A: Configure EIGRP for IPv4 Dynamic Routing Protocol (8 points, 30 minutes)
Part 4B: Configure OSPFv2 Dynamic Routing Protocol (8 points, 30 minutes)
Part 5: Verify Network Connectivity and HSRP Configuration (6 points, 15 minutes)
Part 6: Display IOS Image and License Information (5 points, 5 minutes)
Scenario
In this Skills Assessment (SA), you will create a small network. You must connect the network devices, and configure those devices to support IPv4 connectivity, LAN redundancy, and link aggregation. You will then configure EIGRP and OSPFv2 for IPv4 on the network and verify connectivity and HSRP. Finally, you will demonstrate your knowledge of IOS images and licensing.
Required Resources
3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
3 Switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)
3 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
Console cable to configure the Cisco IOS devices via the console ports
Ethernet and Serial cables as shown in the topology
Initialize Devices
Total points: 2
Time: 5 minutes
Initialize and reload the routers and switches.
Erase the startup configurations and reload the devices.
Before proceeding, have your instructor verify device initializations.
Task
IOS Command
Points
Erase the startup-config file on all routers.
R1# erase startup-config
2
Reload all routers.
R1# reload
Erase the startup-config file on all switches and remove the old VLAN database.
S1# erase startup-config
S1# del vlan.dat
Reload all switches.
S1# reload
Verify VLAN database is absent from flash on all switches.
S1# show flash
Points: __________ of 2
Configure Device Basic Settings
Total points: 5
Time: 30 minutes
Configure R1.
Configuration tasks for R1 include the following:
Configuration Item or Task
Specification
Points
Disable DNS lookup
no ip domain lookup
.5
Router name
hostname R1
Encrypted privileged EXEC password
enable secret class
Console access password
line con 0
password cisco
login
Telnet access password
line vty 0 4
password cisco
login
Encrypt the plain text passwords.
service password-encryption
MOTD banner
banner motd @ Unauthorized Access is
Prohibited! @
Interface G0/1
interface g0/1
description Connection to S1
ip address 172.27.0.1 255.255.255.0
no shutdown
Interface S0/0/0
interface s0/0/0
description Connection to R2
ip add 172.27.123.1 255.255.255.252
clock rate 128000
no shutdown
Interface Loopback 1 (LAN)
interface lo1
ip address 172.27.1.1 255.255.255.0
Interface Loopback 2 (LAN)
interface lo2
ip address 172.27.2.1 255.255.255.0
Interface Loopback 3 (LAN)
interface lo3
ip address 172.27.3.1 255.255.255.0
Configure R2.
Configuration tasks for R2 include the following:
Configuration Item or Task
Specification
Points
Disable DNS lookup
no ip domain lookup
1
Router name
hostname R2
Encrypted privileged EXEC password
enable secret class
Console access password
line con 0
password cisco
login
Telnet access password
line vty 0 4
password cisco
login
Encrypt the plain text passwords.
service password-encryption
MOTD banner
banner motd @ Unauthorized Access is
Prohibited! @
Interface S0/0/0
interface s0/0/0
description Connection to R1
ip add 172.27.123.2 255.255.255.252
no shutdown
Interface S0/0/1
interface s0/0/1
description Connection to R3
ip add 172.27.123.5 255.255.255.252
clock rate 128000
no shutdown
Interface Loopback 0 (Simulated Internet connection)
description Connection to Internet
ip address 209.165.200.225
255.255.255.248
Default route
ip route 0.0.0.0 0.0.0.0 lo0
Configure R3.
Configuration tasks for R3 include the following:
Configuration Item or Task
Specification
Points
Disable DNS lookup
no ip domain lookup
1
Router name
hostname R3
Encrypted privileged EXEC password
enable secret class
Console access password
line con 0
password cisco
login
Telnet access password
line vty 0 4
password cisco
login
Encrypt the plain text passwords.
service password-encryption
MOTD banner
banner motd @ Unauthorized Access is
Prohibited! @
Interface G0/1
interface g0/1
description Connection to S3
ip address 172.27.0.3 255.255.255.0
no shutdown
Interface S0/0/1
interface s0/0/1
description Connection to R2
ip add 172.27.123.6 255.255.255.252
no shutdown
Interface Loopback 4 (LAN)
interface lo4
ip address 172.27.4.1 255.255.255.0
Interface Loopback 5 (LAN)
interface lo5
ip address 172.27.5.1 255.255.255.0
Interface Loopback 6 (LAN)
interface lo6
ip address 172.27.6.1 255.255.255.0
Configure S1.
Configuration tasks for S1 include the following:
Configuration Item or Task
Specification
Points
Disable DNS lookup
no ip domain lookup
1
Switch name
hostname S1
Encrypted privileged EXEC password
enable secret class
Console access password
line con 0
password cisco
login
Telnet access password
line vty 0 15
password cisco
login
Encrypt the plain text passwords.
service password-encryption
MOTD banner
banner motd @ Unauthorized Access
is Prohibited! @
Assign an IPv4 address to the default SVI.
interface vlan 1
ip address 172.27.0.11 255.255.255.0
no shutdown
Assign the default-gateway.
ip default-gateway 172.27.0.2
Force trunking on Interfaces connected to S2 and S3.
interface range f0/1-4
switchport mode trunk
switchport trunk native vlan 1
Note: VLAN 1 is the native VLAN by
default, the previous command is not
necessary.
Disable the Dynamic Trunking Protocol (DTP) on all other ports.
interface range f0/5-24, g0/1-2
switchport mode access
Note: The switchport nonegotiate
command may have also been
issued, this is not incorrect but it is
important that these ports have been
changed to access ports.
Shutdown all unused ports.
interface range f0/7-24, g0/1-2
shutdown
Configure S2.
Configuration tasks for S2 include the following:
Configuration Item or Task
Specification
Points
Disable DNS lookup
no ip domain lookup
.5
Switch name
hostname S2
Encrypted privileged exec password
enable secret class
Console access password
line con 0
password cisco
login
Telnet access password
line vty 0 15
password cisco
login
Encrypt the clear text passwords.
service password-encryption
MOTD banner
banner motd @ Unauthorized Access
is Prohibited! @
Assign an IPv4 address to the default SVI.
interface vlan 1
ip address 172.27.0.12 255.255.255.0
no shutdown
Assign the default-gateway.
ip default-gateway 172.27.0.2
Force trunking on Interfaces connected to S1 and S3.
interface range f0/1-4
switchport mode trunk
switchport trunk native vlan 1
Note: VLAN 1 is the native VLAN by
default, the previous command is not
necessary.
Disable the Dynamic Trunking Protocol (DTP) on all other ports.
interface range f0/5-24, g0/1-2
switchport mode access
Note: The switchport nonegotiate
command may have also been
issued, this is not incorrect but it is
important that these ports have been
changed to access ports.
Shutdown all unused ports.
interface range f0/5-17, f0/19-24,
g0/1-2
shutdown
Configure S3
Configuration tasks for S3 include the following:
Configuration Item or Task
Specification
Points
Disable DNS lookup
no ip domain lookup
.5
Switch name
hostname S3
Encrypted privileged EXEC password
enable secret class
Console access password
line con 0
password cisco
login
Telnet access password
line vty 0 15
password cisco
login
Encrypt the plain text passwords.
service password-encryption
MOTD banner
banner motd @ Unauthorized Access
is Prohibited! @
Assign an IPv4 address to the default SVI.
interface vlan 1
ip address 172.27.0.13 255.255.255.0
no shutdown
Assign the default-gateway.
ip default-gateway 172.27.0.2
Force trunking on Interfaces connected to S1 and S2.
interface range f0/1-4
switchport mode trunk
switchport trunk native vlan 1
Note: VLAN 1 is the native VLAN by
default, the previous command is not
necessary.
Disable the Dynamic Trunking Protocol (DTP) on all other ports.
interface range f0/5-24, g0/1-2
switchport mode access
Note: The switchport nonegotiate
command may have also been
issued, this is not incorrect but it is
important that these ports have been
changed to access ports.
Shutdown all unused ports.
interface range f0/6-17, f0/19-24,
g0/1-2
shutdown
Configure IPv4 addresses on PCs.
Configuration Item or Task
Specification
Points
Configure static IPv4 address information on PC-A.
IPv4 address:172.27.0.21
Subnet mask: 255.255.255.0
Default gateway:172.27.0.2
.5
Configure static IPv4 address information on PC-B.
IPv4 address:172.27.0.22
Subnet mask: 255.255.255.0
Default gateway:172.27.0.2
Configure static IPv4 address information on PC-C.
IPv4 address:172.27.0.23
Subnet mask: 255.255.255.0
Default gateway:172.27.0.2
Points: _________ of 5
Configure LAN Redundancy and Link Aggregation
Total points: 6
Time: 25 minutes
Configure Spanning Tree on S1.
Configuration tasks for S1 include the following:
Configuration Item or Task
Specification
Points
Configure Rapid PVST+.
PVST+.
spanning-tree mode rapid-pvst
1
Configure as primary root bridge for VLAN 1.
spanning-tree vlan 1 root primary
Configure PortFast and BPDU Guard on the interface connected to PC-A.
interface f0/6
spanning-tree portfast
spanning-tree bpduguard enable
Configure Spanning Tree on S2.
Configuration tasks for S2 include the following:
Configuration Item or Task
Specification
Points
Configure Rapid PVST+.
spanning-tree mode rapid-pvst
1
Configure PortFast and BPDU Guard on the interface connected to PC-B.
interface f0/18
spanning-tree portfast
spanning-tree bpduguard enable
Configure Spanning Tree on S3.
Configuration tasks for S3 include the following:
Configuration Item or Task
Specification
Points
Configure Rapid PVST+.
spanning-tree mode rapid-pvst
1
Configure as secondary root bridge for VLAN 1.
spanning-tree vlan 1 root secondary
Configure PortFast and BPDU Guard on the interface connected to PC-C.
interface f0/18
spanning-tree portfast
spanning-tree bpduguard enable
Configure HSRP on R1.
Configuration tasks for R1 include the following:
Configuration Item or Task
Specification
Points
Configure the HSRP virtual IP address on interface G0/1.
interface g0/1
standby 1 ip 172.27.0.2
1
Make this the primary HSRP router.
standby 1 priority 150
R1
Configure so this router becomes the primary HSRP router on a reboot.
standby 1 preempt
Configure HSRP on R3.
Configuration tasks for R3 include the following:
Configuration Item or Task
Specification
Points
Configure the HSRP virtual IP address on interface G0/1.
interface g0/1
standby 1 ip 172.27.0.2
1
Configure an LACP EtherChannel between S1 and S3.
Configuration tasks include the following:
Configuration Item or Task
Specification
Points
On S1, configure an LACP EtherChannel on interfaces connected to S3.
interface range f0/3-4
channel-group 1 mode active
1
On S3, configure an LACP EtherChannel on interfaces connected to S1.
interface range f0/3-4
channel-group 1 mode passive
Points: _________ of 6
Configure EIGRP for IPv4 Dynamic Routing Protocol
Total points: 8
Time: 30 minutes
Configure EIGRP on R1.
Configuration tasks for R1 include the following:
Configuration Item or Task
Specification
Points
Autonomous System (AS) number
router ospf 1
2
Router ID
router-id 1.1.1.1
Advertise directly connected networks.
network 172.27.0.0 0.0.0.255 area 0
network 172.27.123.0 0.0.0.3 area 0
network 172.27.1.0 0.0.0.255 area 1
network 172.27.2.0 0.0.0.255 area 1
network 172.27.3.0 0.0.0.255 area 1
Set all LAN interfaces as passive.
passive-interface g0/1
passive-interface lo1
passive-interface lo2
passive-interface lo3
Manually disable automatic summarization.
No auto-summary
Apply a manual summary route for the Loopback interface networks.
Set the bandwidth on S0/0/0
interface s0/0/0
bandwidth 128
Change the hello-interval on S0/0/0.
30 seconds
Change the hold-time on S0/0/0.
90 seconds
Change bandwidth percentage available to EIGRP
70%
Configure a key chain named EIGRP-KEY with 1 key-string.
Key-string: cisco
Configure MD5 authentication on S0/0/0 using the key chain configured in the previous task.
Configure EIGRP on R2.
Configuration tasks for R2 include the following:
Configuration Item or Task
Specification
Points
Autonomous System number
1
2
Router ID
2.2.2.2
Advertise directly connected Networks.
Use classless network addresses.
Manually disable automatic summarization.
Propagate the default route to all other EIGRP routers.
Set the bandwidth on both serial interfaces.
128 Kb/s
Change the hello-interval on serial interfaces.
30 seconds
Change the hold-time on serial interfaces.
90 seconds
Change bandwidth percentage available to EIGRP.
70%
Configure a key chain named EIGRP-KEY with 1 key-string.
Key-string: cisco
Configure MD5 authentication on serial interfaces using the key chain configured in the previous step.
Configure EIGRP on R3.
Configuration tasks for R3 include the following:
Configuration Item or Task
Specification
Points
Autonomous System number
1
2
Router ID
3.3.3.3
Advertise directly connected Networks.
Use classless network addresses.
Set all LAN interfaces as passive.
Manually disable automatic summarization.
Set the serial interface bandwidth.
128 Kb/s
Apply a manual summary route for the Loopback interface networks.
Change the hello-interval on S0/0/1.
30 seconds
Change the hold-time on S0/0/1.
90 seconds
Change bandwidth percentage available to EIGRP.
70%
Configure a key chain named EIGRP-KEY with 1 key-string.
Key-string: cisco
Configure MD5 authentication on S0/0/1 using the key chain configured in previous task.
Verify network connectivity.
Verify that EIGRP is functioning as expected. Enter the appropriate CLI command to discover the following information:
Question
Response
Points
What command will display all connected EIGRP routers?
Show eigrp neighbors
1
What command displays EIGRP hello-interval, hold-time, bandwidth percentage, and authentication mode for all EIGRP interfaces on a router?
Show ip eigrp interfaces detail
What command displays the EIGRP Autonomous System number, router ID, address summarizations, routing networks, and passive interfaces configured on a router?
Show ip protocoals
What command displays only EIGRP routes?
Show ip route eigrp
Step 5: Disable EIGRP
Disable EIGRP to prepare for OSPFv2.
Configuration Item or Task
Specification
Points
Disable EIGRP
No router eigrp 1
1
Points: _________ of 8
Configure OSPFv2 Dynamic Routing Protocol
Total points: 8
Time: 30 minutes
Configure OSPFv2 on R1.
Configuration tasks for R1 include the following:
Configuration Item or Task
Specification
Points
OSPF Process ID
1
2
Router ID
1.1.1.1
Advertise directly connected networks.
Use classless network addresses.
Assign S0/0/0 and G0/1 interfaces to Area 0.
Assign Loopback interfaces to Area 1.
Set all LAN interfaces as passive.
Configure an inter-area summary route for the networks in area 1.
Change the default cost reference bandwidth to support Gigabit interface calculations.
1000
Set the bandwidth on S0/0/0.
128 Kb/s
Adjust the metric cost of S0/0/0.
Cost: 7500
Create an OSPF MD5 key on S0/0/0.
Key: 1
Password: CISCO
Apply MD5 authentication to S0/0/0.
Configure OSPFv2 on R2.
Configuration tasks for R2 include the following:
Configuration Item or Task
Specification
Points
OSPF Process ID
1
2
Router ID
2.2.2.2
Advertise directly connected networks.
Use classless network addresses.
All connected networks should be assigned to Area 0 except the Lo0 network.
Propagate the default route to all other OSPF routers.
Change the default cost reference bandwidth to allow for Gigabit interfaces.
1000
Set the bandwidth on all serial interfaces.
128 Kb/s
Adjust the metric cost of S0/0/0.
Cost: 7500
Create an OSPF MD5 key on the serial interfaces.
Key: 1
Password: CISCO
Apply MD5 authentication on the serial interfaces.
Configure OSPFv2 on R3.
Configuration tasks for R3 include the following:
Configuration Item or Task
Specification
Points
OSPF Process ID
1
2
Router ID
3.3.3.3
Advertise directly connected networks.
Use classless network addresses
Assign S0/0/1 and G0/1 interfaces to Area 0
Assign Loopback interfaces to Area 3
Set all LAN interfaces as passive.
Configure an inter-area summary route for the networks in area 3.
Change the default cost reference bandwidth to support Gigabit interface calculations.
1000
Set the serial interface bandwidth.
128 Kb/s
Create an OSPF MD5 key on S0/0/1.
Key: 1
Password: CISCO
Apply MD5 authentication to S0/0/1.
Verify network connectivity.
Verify that OSPF is functioning as expected. Enter the appropriate CLI command to discover the following information:
Question
Response
Points
What command will display all connected OSPFv2 routers?
show ip ospf neighbor
2
What command displays a summary list of OSPF interfaces that includes a column for the cost of each interface?
show ip ospf interface brief
What command displays the OSPF Process ID, Router ID, Address summarizations, Routing Networks, and Passive Interfaces configured on a router?
show ip protocols
What command displays only OSPF routes?
show ip route ospf
What command displays detailed information about the OSPF interfaces, including the authentication method?
show ip ospf interface
What command displays the OSPF section of the running-configuration?
show run | section router ospf
Points: _________ of 8
Verify Network Connectivity and HSRP Configuration
Total points: 6
Time: 15 minutes
Use the listed command to verify that network is working as expected.
Verify end-to-end connectivity.
Take corrective action if results are other than expected.
From
Command
To
Expected Results
Points
PC-A
ping
PC-C
Ping should be successful.
3
PC-B
ping
PC-A
Ping should be successful.
PC-B
ping
PC-C
Ping should be successful.
PC-B
ping
Default Gateway
Ping should be successful.
PC-B
ping
209.165.200.225
Ping should be successful.
PC-B
tracert
209.165.200.225
Trace should route through R1.
Note: It may be necessary to disable the PC firewall for pings to be successful
Verify HSRP is working as expected.
Issue the shutdown command on R1 G0/1, and then re-issue the following commands to verify that HSRP is working as expected:
From
Command
To
Expected Results
Points
PC-B
ping
172.27.0.1
Ping should not be successful.
3
PC-B
ping
Default Gateway
Ping should be successful.
PC-B
ping
209.165.200.225
Ping should be successful.
PC-B
tracert
209.165.200.225
Trace should route through R3.
Points: _________ of 6
Display IOS Image and License Information
Total points: 5
Time: 5 minutes
Enter the appropriate CLI command to discover the following information:
Question
Response
Points
What command displays the IOS image that is currently being used by the network device?
show version
5
What command displays the size of an IOS image loaded on a network device?
show flash
What command displays a summary list of the Technology Package licenses on an ISR-G2 device that includes the current the state of each of those licenses?
show version
What command displays the amount of space available to install an additional IOS image to a network device?
show flash
What command displays a list of all the licenses on an ISR-G2 device?
show license
What command would you use to accept the end user license agreement?
license accept end user agreement
Points: _________ of 5
Router Interface Summary Table
Router Interface Summary
Router Model
Ethernet Interface #1
Ethernet Interface #2
Serial Interface #1
Serial Interface #2
1800
Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0)
Serial 0/0/1 (S0/0/1)
1900
Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0)
Serial 0/0/1 (S0/0/1)
2801
Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/1/0 (S0/1/0)
Serial 0/1/1 (S0/0/1)
2811
Fast Ethernet 0/0 (F0/0)
Fast Ethernet 0/1 (F0/1)
Serial 0/0/0 (S0/0/0)
Serial 0/0/1 (S0/0/1)
2900
Gigabit Ethernet 0/0 (G0/0)
Gigabit Ethernet 0/1 (G0/1)
Serial 0/0/0 (S0/0/0)
Serial 0/0/1 (S0/0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many interfaces the router has. There is no way to effectively list all the combinations of configurations for each router class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device. The table does not include any other type of interface, even though a specific router may contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be used in Cisco IOS commands to represent the interface.