EWAN PT PRACTICE SBA AL 100 %

Step 1: Configure and Verify SOUTH as the DHCP Server. SOUTH#conf t SOUTH(config)#ip dhcp excluded-address 10.10.10.65 10.10.10.69 SOUTH(config)#ip dhcp pool SOUTH_DHCP SOUTH(dhcp-config)#network 10.10.10.64 255.255.255.224 SOUTH(dhcp-config)#default-router 10.10.10.65

Step 2: Configure WAN Technologies. A) SOUTH#conf t SOUTH(config)#username NORTH password NSchap SOUTH(config)#inter s0/0/1 SOUTH(config-if)#encapsulation ppp SOUTH(config-if)#ppp authentication chap NORTH#conf t NORTH(config)#username SOUTH password NSchap NORTH(config)#inter s0/0/0 NORTH(config-if)#encapsulation ppp NORTH(config-if)#ppp authentication chap

B) SOUTH(config)#inter s0/0/0 SOUTH(config-if)#encapsulation hdlc EAST(config)#inter s0/0/0 EAST(config-if)#encapsulation hdlc C) NORTH# conf t NORTH(config)#inter s0/0/1 NORTH(config-if)#no shut NORTH(config-if)#exit NORTH(config)#inter s0/0/1.35 NORTH(config-subif)#frame-relay interface-dlci 35 NORTH(config-subif)#ip add 192.168.20.2 255.255.255.252 NORTH(config-subif)#no shut EAST(config)#inter s0/0/1 EAST(config-if)#no shut EAST(config-if)#encapsulation frame-relay EAST(config-if)#exit EAST(config)#inter s0/0/1.25 point-to-point EAST(config-subif)#frame-relay interface-dlci 25 EAST(config-subif)#ip address 192.168.20.1 255.255.255.252 EAST(config-subif)#no shut

Step 3: Configure and Verify EIGRP Routing. A) NORTH#conf t NORTH(config)#ip route 0.0.0.0 0.0.0.0 s0/1/0 NORTH(config)#router eigrp 50 NORTH(config-router)#no auto-summary NORTH(config-router)#net 10.255.1.4 NORTH(config-router)#net 192.168.20.0 NORTH(config-router)#redistribute static NORTH(config-router)#passive-interface s0/1/0

B) SOUTH#conf t SOUTH(config)#router eigrp 50 SOUTH(config-router)#no auto-summary SOUTH(config-router)#net 10.255.1.4 SOUTH(config-router)#net 10.255.1.0 SOUTH(config-router)#net 10.10.10.64 SOUTH(config-router)#passive-interface fa0/0

C) EAST#conf t EAST(config)#router eigrp 50 EAST(config-router)#no auto-summary EAST(config-router)#net 192.168.20.0 EAST(config-router)#net 10.255.1.0 EAST(config-router)#net 10.10.10.96 EAST(config-router)#passive-interface fa0/0

Step 4: Configure NORTH with a NAT NORTH#conf t NORTH(config)#access-list 5 permit 10.10.10.64 0.0.0.63 NORTH(config)#ip nat inside source list 5 interface s0/1/0 NORTH(config)#inter s0/0/0 NORTH(config-if)#ip nat inside NORTH(config-if)#inter s0/0/1.35 NORTH(config-subif)#ip nat inside NORTH(config-subif)#inter s0/1/0 NORTH(config-if)#ip nat outside

Step 5: Configure Access Control Lists to Satisfy a Security Policy.

A) EAST#conf t EAST(config)#access-list 60 deny 10.10.10.64 0.0.0.31 EAST(config)#access-list 60 permit any EAST(config)#inter fa0/0 EAST(config-if)#ip access-group 60 out

C) NORTH#conf t NORTH(config)#ip access-list extended FILTER-IN NORTH(config-ext-nacl)#deny icmp any any echo NORTH(config-ext-nacl)#deny tcp any any eq telnet NORTH(config-ext-nacl)#deny tcp any any eq www NORTH(config-ext-nacl)#permit ip any any NORTH(config-ext-nacl)#exit NORTH(config)#inter s0/1/0 NORTH(config-if)#ip access-group FILTER-IN in NORTH(config-if)#end