ITN Final Skills Exam (PTSA)

ITN (Version 7.00) Final PT Skills Assessment (PTSA) Exam Answers

Topology

Device Names Table

You will receive one of three possible scenarios. In order to use the logical topology diagram that is provided with the instructions, use the device names in the Device Names Table.

Addressing Requirements Table

ITN Final PT Skills Assessment (PTSA)

A few things to keep in mind while completing this activity:

1. Do not use the browser Back button or close or reload any exam windows during the exam.
2. Do not close Packet Tracer when you are done. It will close automatically.
3. Click the Submit Assessment button in the browser window to submit your work.

Assessment Objectives

• Part 1: Build the Network
• Part 2: Develop an IP Addressing Scheme
• Part 3: Configure Basic Device Settings
• Part 4: Configure Security Settings on Central-RT and Central-SW
• Part 5: Configure the Hosts and Verify Connectivity

Instructions

In this assessment you will configure the Central-RT router and Central-SW switch, as you have done in the activities in this course. You will also connect two PCs using a switch and a router that are in the main wiring closet. You will subnet the 192.168.10.0/24 network to provide IPv4 addresses for two subnets that will support the required number of hosts. The larger subnet (LAN 1) requires 100 hosts and the smaller subnet (LAN 2) requires 50 hosts.

No subnet calculators may be used.

Part 1: Build the Network

a. Build the network according to the logical topology by placing the required equipment in the wiring closet equipment rack.
b. Cable the network devices in the closet as shown in the topology diagram.
c. Connect the hosts as shown in the topology diagram.

Part 2: Develop an IP Addressing Scheme

In this part of the assessment you will develop an IP addressing scheme. You will subnet an IPv4 network to create two subnets with the required number of hosts. You will also subnet an IPv6 network. You will then assign the addresses according to the requirements below.

Work with the following information:

• IPv4 Network: 192.168.10.0/24
• Required number of hosts in IPv4 LAN 1: 100
• Required number of hosts in IPv4 LAN 2: 50

a. Record your subnet assignments according to the following requirements.

1) Assign the first IPv4 address of each subnet to a router interface

• LAN 1 is hosted on Central-RT G0/0/1
• LAN 2 is hosted on Central-RT G0/0/0

2) Assign the last IPv4 address of each subnet to the PC NIC.
3) Assign the second IPv4 address of LAN 1 to Central-SW SVI.

b. Use the IPv6 address 2001:db8:acad::/48 and create two subnets with a prefix length of /64 for use in this network. The first subnet is assigned to LAN 1, and the second subnet is assigned to LAN 2.

1) Assign the tenth address in the LAN 1 IPv6 subnet to the LAN 1 PC.
2) Assign the tenth address in the LAN 2 IPv6 subnet to the LAN 2 PC.

Note: The router interfaces have been configured for you.

Part 3: Configure Basic Device Settings

Network devices must be configured over a direct console connection.

Step 1: Configure Basic Settings

a. Disable DNS lookup on Central-RT and Central-SW
b. Configure router hostname using the name Central-RT.
c. Configure switch hostname using the name Central-SW.
d. Configure an appropriate banner on Central-RT and Central-SW.

Step 2: Configure Interfaces

a. Configure Central-RT G0/0/0 and G0/0/1 interfaces using the addressing from the previous part of this assessment:

• Interface description
• IPv4 address / subnet mask

b. Configure the Central-SW VLAN 1 SVI interface using the addressing from the previous part of this assessment:

• Interface description
• IPv4 address / subnet mask
• The switch should be reachable from devices on other networks.

Part 4: Configure Security Settings on Central-RT and Central-SW

Step 1: Configure enhanced password security

a. Configure ThisisaSecret as the encrypted privileged EXEC password
b. Encrypt all plaintext passwords
c. Set minimum password length to 10 on Central-RT.

Step 2: Configure SSH on Central-RT and Central-SW

a. Configure netsec.com as the domain name
b. Configure a local user netadmin with the encrypted password Ci$co12345
c. Allow console logins with the password Classpassw0rd.
d. Set login on vty lines to use local database.
e. Configure the vty lines to accept SSH access only.
f. Generate an RSA crypto key using 1024 bits modulus.

Step 3: Secure switch ports on Central-SW

a. Shut down all unused ports on Central-SW.
b. Enter descriptions for all unused switch ports to indicate that they are intentionally shutdown.

Part 5: Configure the Hosts and Verify Connectivity

a. Configure both hosts with the IPv4 addresses that were assigned in the Part 2 of this assessment.
b. The 2001:db8:acad::/48 IPv6 network has been subnetted to provide two equal subnets with a /64 prefix length.

1. Assign the tenth address in the LAN 1 IPv6 subnet to the User-A PC.
2. Assign the tenth address in the LAN 2 IPv6 subnet to the User-B PC.

c. There should be IPv4 and IPv6 connectivity between all devices and hosts.

Answers Key

Part 1: Build the Network

Placing Switch Central-SW and Router Central-RT to wiring closet equipment rack.

Using Copper Straight-Through cable to connect User-A (FastEthernet0 port) and Central-SW (FastEthernet0/6 port)

Same as above, using Copper Straight-Through cable to connect all devices as shown in the topology diagram.

Turn-on PCs and Router Central-RT

Part 2: Develop an IP Addressing Scheme

Using line console to connect User-A and Router 1

Click to User-A –> Terminal app –> click OK

Erase the startup configurations on the Router and reload the device:

Router>enable
Router#erase startup-config
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]
Erase of nvram: complete
%SYS-7-NV_BLOCK_INIT: Initialized the geometry of nvram
Router#reload
Proceed with reload? [confirm]
Initializing Hardware ...

Would you like to enter the initial configuration dialog? [yes/no]: no

Router Central-RT configuration script

enable
configure terminal 
no ip domain-lookup
hostname Central-RT
banner motd #Unauthorized access to this device is prohibited!#
ipv6 unicast-routing

interface g0/0/0
description Connect to Subnet B
ip address 192.168.10.129 255.255.255.192
ipv6 address FE80::1 link-local
ipv6 address 2001:db8:acad:b::1/64
no shutdown 
exit

interface g0/0/1
description Connect to Subnet A
ip address 192.168.10.1 255.255.255.128
ipv6 address FE80::1 link-local 
ipv6 address 2001:db8:acad:a::1/64
no shutdown 
exit

enable secret NoOneShouldKnow
service password-encryption
security passwords min-length 10

ip domain-name netsec.com
username netadmin secret Ci$co12345

line console 0
password Classpassw0rd
login
exit

line vty 0 15
transport input ssh
login local
exit

crypto key generate rsa
1024
exit
copy running-config startup-config

To show Console port on Switch, Right click Switch –> Inspect Rear –> Console port

Erase the startup configurations and VLAN on the Switch and reload the device:

Switch>enable
Switch#erase startup-config
Erasing the nvram filesystem will remove all configuration files! Continue? [confirm]
[OK]
Erase of nvram: complete
%SYS-7-NV_BLOCK_INIT: Initialized the geometry of nvram
Switch#delete vlan.dat
Switch#reload
Proceed with reload? [confirm]

Switch Central-SW configuration script

enable
configure terminal 
no ip domain-lookup
hostname Central-SW
banner motd #Unauthorized access to this device is prohibited!#

interface vlan 1
description Switch Subnet A
ip address 192.168.10.2 255.255.255.128
no shutdown 
exit

ip default-gateway 192.168.10.1

enable secret NoOneShouldKnow
service password-encryption

ip domain-name netsec.com
username netadmin secret Ci$co12345

line console 0
password Classpassw0rd
login
exit

line vty 0 15
transport input ssh
login local
exit

crypto key generate rsa
1024

int range f0/1 - 4, f0/7 - 24, g0/1 - 2
description Unused switch ports
shutdown

end
copy running-config startup-config

Part 5: Configure the Hosts and Verify Connectivity

Download PDF & Packet Tracer files:

DESCARGAR