TECH AVENGERS: SIMS

All old cisco ccna,security,ccnp,voice,wireless,service provider,ccie old dumps & study materials

<div dir="ltr" style="text-align: left;" trbidi="on"><script async="" src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script> <ins class="adsbygoogle" data-ad-client="ca-pub-3293628043854796" data-ad-slot="6581319060" style="display: inline-block; height: 90px; width: 180px;"></ins><script>(adsbygoogle = window.adsbygoogle || []).push({}); </script> <div dir="ltr" style="text-align: left;" trbidi="on">Here I am Going To Share With U All Old Cisco Exams Dumps ... CCNA,Security,CCNP,CCIE... It Includes all Study materials .. <a href="https://www.mediafire.com/folder/66j44cj44va6c/CISCO" target="_blank">https://www.mediafire.com/folder/66j44cj44va6c/CISCO</a><script async="" src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script> <ins class="adsbygoogle" data-ad-client="ca-pub-3293628043854796" data-ad-slot="6581319060" style="display: inline-block; height: 90px; width: 180px;"></ins><script>(adsbygoogle = window.adsbygoogle || []).push({}); </script></div></div>

All old cisco ccna,security,ccnp,voice,wireless,service provider,ccie old dumps & study materials

Here I am Going To Share With U All Old Cisco Exams Dumps ... CCNA,Security,CCNP,CCIE... It Includes all Study materials .. https://www.me...

CCNA 200-125 IMPORTANT EXAM MATERIAL WITH SIMULATOR

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on">HEY GUYS ! TODAY I AM GOING TO SHARE WITH U ...SOME IMPORANT EXAM MATERIALS OF CISCO CCNA 200-125 ... THAT INCLUDES LATEST DUMPS,SIMS,PKT FILES AND SIMULATOR .... KEEP VISITING ... <div class="separator" style="clear: both; text-align: center;"><a href="https://app.box.com/s/n0yyo23u7guk5k7jpavyfp5cu6ozndvk" target="_blank"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh5et9BZQDmE3mmJTFL38rFDExvXV5NN9Agsbi0l82OhZG2g72kSBVVro00hSPd3vhDgOnG9KP3WGn1DNKprwV78GSMGeGT4pOcIgU5iPqgNbQth3TAmU7YYbFtFo4Pdl6JsLQF7gYtnxo1/s1600/don.logo_.gif" /></a></div> </div><script async="" src="//pagead2.googlesyndication.com/pagead/js/adsbygoogle.js"></script> <ins class="adsbygoogle" data-ad-client="ca-pub-3293628043854796" data-ad-slot="6581319060" style="display: inline-block; height: 90px; width: 180px;"></ins><script>(adsbygoogle = window.adsbygoogle || []).push({}); </script></div>

CCNA 200-125 IMPORTANT EXAM MATERIAL WITH SIMULATOR

HEY GUYS ! TODAY I AM GOING TO SHARE WITH U ...SOME IMPORANT EXAM MATERIALS OF CISCO CCNA 200-125 ... THAT INCLUDES LATEST DUMPS,SIMS,PKT FI...

CCNA NAT SIM Question 1

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="ccnaquestionsnumber">Question</div>You are tasked to configure Internet access on a router. The ISP has provided the company six public IP addresses of 198.18.184.105 198.18.184.110. The company has 14 hosts that need to access the internet simultaneously. The hosts in the company LAN have been assigned private space addresses in the range of 192.168.100.17 – 192.168.100.30. <table border="0" cellpadding="2" style="background-color: #dddbde;"><tbody><tr><td style="font-size: 12px;">The following have already been configured on the router： – Router basic configuration – Interfaces have been configured for NAT inside (Fa0/0) and NAT outside (s0/0) – The appropriate static routes have also been configured – All passwords have been temporarily set to “cisco” </td></tr></tbody></table>Tasks: + Use NAT to provide Internet access to all hosts in the company LAN. + Name the router TUT + Inside global addresses: 198.18.184.105 198.18.184.110/29 + Inside local addresses: 192.168.100.17 – 192.168.100.30/28 + Numer of inside hosts: 14 <img alt="NAT_sim_topology.jpg" border="0" class="aligncenter" height="196" src="http://www.iptut.com/images/ccna/labsim/NAT_sim_topology.jpg" width="422" /> <div class="ccnaexplanation">Solution</div> The CCNA Training company has 14 hosts that need to access the internet simultaneously but we just have 6 public IP addresses from 198.18.184.105 to 198.18.184.110/29. Therefore we have to use NAT overload (or PAT) Double click on the TUT router to open it Router>enable Router#configure terminal First you should change the router’s name to TUT Router(config)#hostname TUT Create a NAT pool of global addresses to be allocated with their netmask (/29 = 255.255.255.248). There were reports that the simulator in the real exam did not accept “prefix-length” keryword so you should use “netmask” keyword. TUT(config)#ip nat pool mypool 198.18.184.105 198.18.184.110 netmask 255.255.255.248 Create a standard access control list that permits the addresses that are to be translated TUT(config)#access-list 1 permit 192.168.100.16 0.0.0.15 Establish dynamic source translation, specifying the access list that was defined in the prior step TUT(config)#ip nat inside source list 1 pool mypool overload This command translates all source addresses that pass access list 1, which means a source address from 192.168.100.17 to 192.168.100.30, into an address from the pool named mypool (the pool contains addresses from 198.18.184.105 to 198.18.184.110) Overload keyword allows to map multiple IP addresses to a single registered IP address (many-to-one) by using different ports The question said that appropriate interfaces have been configured for NAT inside and NAT outside statements. This is how to configure the NAT inside and NAT outside, just for your understanding: TUT(config)#interface fa0/0 TUT(config-if)#ip nat inside TUT(config-if)#exit TUT(config)#interface s0/0 TUT(config-if)#ip nat outside TUT(config-if)#end Finally, we should save all your work with the following command: <div class="blueandbold">TUT#copy running-config startup-config</div>Check your configuration by going to “Host for testing” and type: C:\>ping 192.0.2.114 The ping should work well and you will be replied from 192.0.2.114</div>

CCNA NAT SIM Question 1

Question You are tasked to configure Internet access on a router. The ISP has provided the company six public IP addresses of 198.18.184.10...

CCNA Configuration SIM Question

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="ccnaquestionsnumber">Question</div>Refer to the topology <div style="text-align: center;"><img alt="Configuration_Sim.jpg" height="137" id="__wp-temp-img-id" src="http://www.iptut.com/images/ccna/labsim/Configuration_Sim.jpg" title="" width="493" /></div>TUT Company recently installed a new router in their office. Complete the network installation by performing the initial router configurations and configuring RIPv2 routing using the router command line interface (CLI) on the R2-TUT. Name of the router is R2-TUT Enable-secret password is cisco1 The password to access user EXEC mode using the console is cisco2 The password to allow telnet access to the router is cisco3 IPV4 addresses must be configured as follows: Ethernet network 213.123.20.128/27 – router has last assignable host address in subnet Serial network is 200.0.1.16/28 – router has last assignable host address in the subnet. Interfaces should be enabled. Router protocol is RIPv2 <div class="ccnaexplanation">Solution</div> 1) Name the router: Router>enable Router#configure terminal Router(config)#hostname R2-TUT 2) Set secret password: R2-TUT(config)# enable secret Sec@ret 3) Set password for the console: R2-TUT(config)#line console 0 R2-TUT(config-line)#password Sec@ret2 R2-TUT(config-line)#login R2-TUT(config-line)#exit 4) Set the Telnet password: R2-TUT(config)#line vty 0 4 R2-TUT(config-line)#password Sec@ret3 R2-TUT(config-line)#login R2-TUT(config-line)#exit 5) Assign IP address for Ethernet interface (Fa0/0): The Ethernet network 213.123.20.128/27 has: Increment:32 (/27 = 255.255.255.224 or 1111 1111.1111 1111.1111 1111.1110 0000) Network address: 213.123.20.128 Broadcast address: 213.123.20.159 (because 128 + 32 – 1 = 159) Therefore the last assignable host address in this subnet is 213.123.20.158 and we will assign it to Fa0/0 interface with these commands: R2-TUT(config)# interface fa0/0 R2-TUT(config-if)#ip address 213.123.20.158 255.255.255.224 R2-TUT(config-if)#no shutdown R2-TUT(config-if)#exit 6) Assign IP address for Serial interface (S0/0): Serial network 200.0.1.16/28 has: Increment:16 (/28 = 255.255.255.240 or 1111 1111.1111 1111.1111 1111.1111 0000) Network address: 200.0.1.16 Broadcast address: 200.0.1.31 (because 16 + 16 – 1 = 31) So the last assignable host address in this subnet is 200.0.1.30. Finally we assign it to s0/0/0 interface: R2-TUT(config)# interface s0/0/0 R2-TUT(config-if)#ip address 200.0.1.30 255.255.255.240 R2-TUT(config-if)#no shutdown R2-TUT(config-if)#exit 7) Configure RIP v2 routing protocol: R2-TUT(config)#router rip R2-TUT(config-router)#version 2 R2-TUT(config-router)#network 213.123.20.0 R2-TUT(config-router)#network 200.0.1.0 R2-TUT(config-router)#end R2-TUT#copy running-config startup-config Note: We should use classful networks (213.123.20.0 & 200.0.1.0) when configuring RIP. If we use detailed networks (213.123.20.128 & 200.0.1.16) the router will automatically convert them into classful networks.</div>

CCNA Configuration SIM Question

Question Refer to the topology TUT Company recently installed a new router in their office. Complete the network installation by performin...

CCNA EIGRP Lab

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="ccnaquestionsnumber">Question</div>Your company has just added R3 router to the existing network. But currently no routing updates are being exchanged between R3 and the network. All other connectivity, including Internet access are working properly. The task is to identify the fault(s) and correct the router configuration to provide full connectivity between the routers. All passwords on all routers are set to cisco. IP addresses are listed in the chart below. <div style="text-align: center;"><img alt="ccna_eigrp_sim" border="0" height="338" src="http://www.iptut.com/images/ccna/labsim/ccna_eigrp_sim.jpg" width="450" /></div><table align="center" border="1" cellpadding="3" cellspacing="3" style="background-color: white;"><tbody><tr><td style="vertical-align: top;">R1 Fa0/0: 192.168.77.33 S1/0: 198.0.18.6 S0/1: 192.168.60.25 S0/0: 192.168.36.13</td><td style="vertical-align: top;">R2 Fa0/0: 192.168.60.97 Fa0/1: 192.168.60.113 S0/0: 192.168.36.14</td></tr><tr><td style="vertical-align: top;">R3 Fa0/0: 192.168.77.34 Fa0/1: 192.168.60.65 Fa1/0: 192.168.60.81</td><td style="vertical-align: top;">R4 Fa0/0: 192.168.60.129 Fa0/1: 192.168.60.145 S0/1: 192.168.60.26</td></tr></tbody></table><div class="ccnaexplanation">Answer and explanation</div> (Note: If you are not sure how EIGRP works, please read my EIGRP tutorial: <a href="http://www.9tut.com/eigrp-routing-protocol-tutorial" target="_blank">http://www.9tut.com/eigrp-routing-protocol-tutorial</a>. Note: You can download this sim to practice here: <a href="http://www.9tut.com/download/9tut.com_CCNA_EIGRP_sim_question.zip" target="_blank">http://www.9tut.com/download/9tut.com_CCNA_EIGRP_sim_question.zip</a>) We should check the configuration of the new added router first because it does not function properly while others work well. From the command line interface of R3 router, enter the show running-config command <div style="text-align: center;"><img alt="ccna_eigrp_sim_show_run" border="0" height="340" src="http://www.iptut.com/images/ccna/labsim/ccna_eigrp_sim_show_run.jpg" width="288" /></div>From the output above, we know that this router was wrongly configured with an autonomous number (AS) of 22. When the AS numbers among routers are mismatched, no adjacency is formed. (You should check the AS numbers on other routers for sure) To solve this problem, we simply re-configure router R3 with the following commands: R3>enable (you have to enter Secret@9tut as its password here) R3#configure terminal R3(config)#no router eigrp 22 R3(config)#router eigrp 212 R3(config-router)#network 192.168.60.0 R3(config-router)#network 192.168.77.0 R3(config-router)#no auto-summary R3(config-router)#end R3#copy running-config startup-config Check R1 router with the show running-config command: <div style="text-align: center;"><img alt="ccna_eigrp_sim_show_run_2" border="0" height="246" src="http://www.iptut.com/images/ccna/labsim/ccna_eigrp_sim_show_run_2.jpg" width="174" /></div>Notice that it is missing a definition to the network R3. Therefore we have to add it so that it can recognize R3 router R1>enable (you have to enter cisco as its password here) R1#configure terminal R1(config)#router eigrp 212 R1(config-router)#network 192.168.77.0 R1(config-router)#end R1#copy running-config startup-config Now the whole network will work well. You should check again with ping command from router R3 to other routers! Modifications: Maybe in this EIGRP Sim you will see the “passive-interface …” command somewhere in R1 configuration. If the link between R1 to R2; or R1 to R3; or R1 to R4) routers has the “passive interface” then we have to remove it with the “no passive-interface …” command because it prevents EIGRP update from being sent on that interface. But if the “passive interface” is applied to the link between R1 and ISP router like this: R1: ! router eigrp 212 passive-interface s1/0 ! then we just leave it. Don’t use the “no passive-interface s1/0” on R1 because the link between R1 & ISP doesn’t need EIGRP to run on it. A static route from R1 to ISP & “ip default-network” command in R1 are correct so that all the routers (R1, R2, R3, R4) can access the Internet. (Note: The “ip default-network” command in R1 will advertise the static route of R1 (to go to the Internet) to other routers (R2,R3,R4) so that they can access the Internet too). In the exam you will see these lines in R1 configuration: ! ip default-network 198.0.18.0 ip route 0.0.0.0 0.0.0.0 198.0.18.5 ! If you want to learn more about “ip default-network” command please read: <a href="http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080094374.shtml" target="_blank">http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080094374.shtml</a> I read recent comments and realized that you will see the “passive-interface” in the link between R1 & ISP router so just leave it. Note: Also some readers confuse about if we should use the wildcard masks on the “network” statements under EIGRP process or not. For example should we use: router eigrp 212 network 192.168.77.0 0.0.0.3 The answer is: we can use wildcard masks or not, it does not matter. Not having a wildcard mask does not make the routes conflicting. The “network …” command in EIGRP (and OSPF, RIP) does not means “advertise this network” but means “If I has interface(s) belongs to this network please turn on EIGRP on that interface. Therefore when you don’t use wildcard mask EIGRP will turn on EIGRP on all interfaces that belongs to the network you specify in the “network …” command. You should only use wildcard mask on EIGRP if you have 2 or more interfaces that belong to the same major networks but you don’t want to run EIGRP on all of them. For example if your router has 2 interfaces whose IP addresses are 192.168.30.1/28 and 192.168.30.17/28 but you only want to run EIGRP on the first interface, you can type “network 192.168.30.0 0.0.0.15” under EIGRP process.</div>

CCNA EIGRP Lab

Question Your company has just added R3 router to the existing network. But currently no routing updates are being exchanged between R3 and...

CCNA Access List Sim

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="ccnaquestionsnumber">Question</div><div style="text-align: center;"><img alt="accesslist_sim" border="0" height="250" src="http://www.iptut.com/images/ccna/labsim/accesslist_sim.jpg" width="400" /></div>Answer and Explanation Note: If you are not sure about Access-list, please read my <a href="http://www.9tut.com/access-list-tutorial" target="_blank">Access-list tutorial</a>. You can also download this sim to practice (open with Packet Tracer) here: <a href="http://www.9tut.com/download/9tut.com_CCNA_Access_List_Sim.pkt" target="_blank">http://www.9tut.com/download/9tut.com_CCNA_Access_List_Sim.pkt</a> For this question we only need to use the show running-config command to answer all the questions below Router>enable Router#show running-config <div style="text-align: center;"><img alt="accesslist_sim_showrun1" border="0" height="854" src="http://www.iptut.com/images/ccna/labsim/accesslist_sim_showrun1.jpg" width="323" /></div><div style="text-align: center;"><img alt="accesslist_sim_showrun2" border="0" height="456" src="http://www.iptut.com/images/ccna/labsim/accesslist_sim_showrun2.jpg" width="323" /></div><div style="text-align: center;"><img alt="accesslist_sim_showrun3" border="0" height="594" src="http://www.iptut.com/images/ccna/labsim/accesslist_sim_showrun3.jpg" width="336" /></div>Question 1 How can we fix the problem but only allow ping to work while disabling telnet? A – Correctly assign an IP address to interface fa0/1 B – Change the ip access-group command on fa0/0 from “in” to “out” C – Remove access-group 106 in from interface fa0/0 and add access-group 115 in. D – Remove access-group 102 out from interface s0/0/0 and add access-group 114 in E – Remove access-group 106 in from interface fa0/0 and add access-group 104 in Answer: E <div class="ccnaexplanation">Explanation</div>Let’s have a look at the access list 104: <div style="text-align: center;"><img alt="accesslist_sim_answer1" border="0" height="118" src="http://www.iptut.com/images/ccna/labsim/accesslist_sim_answer1.jpg" width="302" /></div>The question does not ask about ftp traffic so we don’t care about the two first lines. The 3rd line denies all telnet traffic and the 4th line allows icmp traffic to be sent (ping). Remember that the access list 104 is applied on the inbound direction so the 5th line “access-list 104 deny icmp any any echo-reply” will not affect our icmp traffic because the “echo-reply” message will be sent over the outbound direction. <div class="ccnaquestionsnumber">Question 2</div>What will happen after issuing the command “ip access-group 114 in” to the fa0/0 interface? A – Attempts to telnet to the router would fail B – All traffic from the 10.4.4.0 network would be allow to go through C – TCP and UDP traffic are not allowed to pass D – Routing protocol updates for the 10.4.4.0 network would not be accepted from the fa0/0 interface Answer: B <div class="ccnaexplanation">Explanation</div>From the output of access-list 114: access-list 114 permit ip 10.4.4.0 0.0.0.255 any we can easily understand that this access list allows all traffic (ip) from 10.4.4.0/24 network <div class="ccnaquestionsnumber">Question 3</div>What will happen after issuing the command “access-group 115 in” on the s0/0/1 interface? A – Hosts cannot connect to Router through s0/0/1 B – Telnet and ping would work but routing updates would fail. C – FTP, FTP-DATA, echo, and HTTP traffic would work but telnet would fail D – Only traffic from the 10.4.4.0 network would pass through the interface Answer: A <div class="ccnaexplanation">Explanation</div>First let’s see what was configured on interface S0/0/1: <div style="text-align: center;"><img alt="accesslist_sim_answer3" border="0" height="76" src="http://www.iptut.com/images/ccna/labsim/accesslist_sim_answer3.jpg" width="254" /></div>Recall that each interface only accepts one access-list, so when using the command “ip access-group 115 in” on the s0/0/1 interface it will overwrite the initial access-list 102. Therefore any telnet connection will be accepted (so we can eliminate answer C). B is not correct because if telnet and ping can work then routing updates can, too. D is not correct because access-list 115 does not mention about 10.4.4.0 network. So the most reasonable answer is A. <div style="font-family: 'Arial','sans-serif'; font-size: 9pt; line-height: 115%;">But here raise a question…</div><div style="font-family: 'Arial','sans-serif'; font-size: 9pt; line-height: 115%;">The wildcard mask of access-list 115, which is 255.255.255.0, means that only host with ip addresses in the form of x.x.x.0 will be accepted. But we all know that x.x.x.0 is likely to be a network address so the answer A: “no host could connect to Router through s0/0/1” seems right…</div><div style="font-family: 'Arial','sans-serif'; font-size: 9pt; line-height: 115%;">But what will happen if we don’t use a subnet mask of 255.255.255.0? For example we can use an ip address of 10.45.45.0 255.255.0.0, such a host with that ip address exists and we can connect to the router through that host. Now answer A seems incorrect!</div><div style="font-family: 'Arial','sans-serif'; font-size: 9pt; line-height: 115%;">Please comment if you have any idea for this sim!</div></div>

CCNA Access List Sim

Question Answer and Explanation Note: If you are not sure about Access-list, please read my Access-list tutorial . You can also download ...

CCNA Access List Sim 2

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="ccnaquestionsnumber">Question</div><div style="text-align: center;"><img alt="access_list_sim2.jpg" border="0" height="393" src="http://www.iptut.com/images/ccna/labsim/access_list_sim2.jpg" width="550" /></div><div class="ccnaexplanation">Answer and Explanation</div> (Note: If you are not sure how to use access-list, please check out my access-list tutorial at: <a href="http://www.9tut.com/access-list-tutorial" target="_blank">http://www.9tut.com/access-list-tutorial</a>, also some modifications about the access-list have been reported so you should read the “Some modifications” section at the end of this question to understand more. You can also download this sim to practice (open with Packet Tracer) here: <a href="http://www.9tut.com/download/9tut.com_Access-list_sim2.pkt" target="_blank">http://www.9tut.com/download/9tut.com_Access-list_sim2.pkt</a> Corp1>enable (you may enter “cisco” as it passwords here) We should create an access-list and apply it to the interface which is connected to the Server LAN because it can filter out traffic from both Sw-2 and Core networks. The Server LAN network has been assigned addresses of 172.22.242.17 – 172.22.242.30 so we can guess the interface connected to them has an IP address of 172.22.242.30 (.30 is the number shown in the figure). Use the “show running-config” command to check which interface has the IP address of 172.22.242.30. Corp1#show running-config <div style="text-align: center;"><img alt="access_list_sim_show_running.jpg" border="0" height="318" src="http://www.iptut.com/images/ccna/labsim/access_list_sim_show_running.jpg" width="312" /></div>We learn that interface FastEthernet0/1 is the interface connected to Server LAN network. It is the interface we will apply our access-list (for outbound direction). Corp1#configure terminal Our access-list needs to allow host C – 192.168.33.3 to the Finance Web Server 172.22.242.23 via web (port 80) Corp1(config)#access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80 Deny other hosts access to the Finance Web Server via web Corp1(config)#access-list 100 deny tcp any host 172.22.242.23 eq 80 All other traffic is permitted Corp1(config)#access-list 100 permit ip any any Apply this access-list to Fa0/1 interface (outbound direction) Corp1(config)#interface fa0/1 Corp1(config-if)#ip access-group 100 out Notice: We have to apply the access-list to Fa0/1 interface (not Fa0/0 interface) so that the access-list can filter traffic coming from both the LAN and the Core networks. If we apply access list to the inbound interface we can only filter traffic from the LAN network. In the exam, just click on host C to open its web browser. In the address box type http://172.22.242.23 to check if you are allowed to access Finance Web Server via HTTP or not. If your configuration is correct then you can access it. Click on other hosts (A, B and D) and check to make sure you can’t access Finance Web Server from these hosts. Finally, save the configuration Corp1(config-if)#end Corp1#copy running-config startup-config (This configuration only prevents hosts from accessing Finance Web Server via web but if this server supports other traffic – like FTP, SMTP… then other hosts can access it, too.) Notice: You might be asked to allow other host (A, B or D) to access the Finance Web Server so please read the requirement carefully. Some modifications (mods): Modification 1 (Mod 1): <table border="1"><tbody><tr><td>permit host B from accessing finance server</td><td>access-list 100 permit ip host 192.168.33.2 host 172.22.242.23</td></tr><tr><td>deny host B from accessing other servers (not the whole network)</td><td>access-list 100 deny ip host 192.168.33.2 172.22.242.16 0.0.0.15</td></tr><tr><td>permit everything else</td><td>access-list 100 permit ip any any</td></tr></tbody></table>Modification 2 (Mod 2): <table border="1"><tbody><tr><td>Only allow Host C to to access the financial server</td><td>access-list 100 permit ip host 192.168.33.3 host 172.22.242.23</td></tr><tr><td>Not allow anyone else in any way communicate with the financial server</td><td>access-list 100 deny ip any host 172.22.242.23</td></tr><tr><td>Allow all other traffic</td><td>access-list 100 permit ip any any</td></tr></tbody></table>Modification 3 (Mod 3): <table border="1"><tbody><tr><td>– Host C should be able to use a web browser(HTTP)to access the Finance Web Server</td><td>access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80</td></tr><tr><td>– Other types of access from host C to the Finance Web Server should be blocked – All access from hosts in the Core or local LAN to the Finance Web Server should be blocked</td><td>access-list 100 deny ip any host 172.22.242.23 (because the requirement says we can not use more than 3 statements so we have to use “any” here for the hosts in the Core and hosts in local LAN)</td></tr><tr><td>– All hosts in the Core and local LAN should be able to access the Public Web Server *</td><td>access-list 100 permit ip any host (If the question asks this, surely it has to give you the IP of Public Web Server) but in the exam you should use “access-list 100 permit ip any any”</td></tr></tbody></table>Modification 4 (Mod 4): <table border="1"><tbody><tr><td>Host C should be able to use a web browser to access the financial web server</td><td>access-list 100 permit tcp host 192.168.33.3 host 172.22.242.23 eq 80</td></tr><tr><td>Other types of access from host C to the finance web server should be blocked</td><td>access-list 100 deny ip host 192.168.33.3 host 172.22.242.23</td></tr><tr><td>All hosts in the core and on the local LAN should be able to access the Public web server *</td><td>access-list 100 permit ip any host (The IP of Public Web Server will surely be given in this question) but in the exam you should use “access-list 100 permit ip any any”</td></tr></tbody></table>* There are some reports about the command of “All hosts in the core and on the local LAN should be able to access the Public web server” saying that the correct command should be “access-list 100 permit ip any any”, not “access-list 100 permit ip any host (IP of Public Web Server)”. Although I believe the second command is better but maybe you should use the first command “access-list 100 permit ip any any” instead as some reports said they got 100% when using this command (even if the question gives you the IP address of Public Web Server). It is a bug in this sim. (Note: Don’t forget to apply this access list to the suitable interface or you will lose points interface fa0/1 ip access-group 100 out And in the exam, they may slightly change the requirements, for example host A, host B instead of host C… so make sure you read the requirement carefully and use the access-list correctly) I created this sim in Packet Tracer v5.2.1 so you can practice with it. You will need new version of Packet Tracer to open it (v5.1+). <div style="text-align: center;"><img alt="accesslist_sim2_packet_tracer.jpg" border="0" height="369" src="http://www.iptut.com/images/ccna/labsim/accesslist_sim2_packet_tracer.jpg" width="619" /></div>Download this sim <a href="http://www.9tut.com/download/9tut.com_Access-list_sim2.pkt">here</a> Notice: After typing the commands above, if you make a “ping” from other hosts (PC0, PC1, PC3) then PC4 (Finance Web Server) can still reply because we just filter HTTP traffic, not ICMP traffic. To generate HTTP traffic, select “Web Browser” in the “Desktop” tab of these PCs. When a web browser opens, type the IP address of Finance Web Server and you can see how traffic flows in Simulation Mode. <img alt="accesslist2_test_http.jpg" border="0" height="412" src="http://www.iptut.com/images/ccna/labsim/accesslist2_test_http.jpg" width="1162" /> And notice that in the initial configuration of this sim the Core network can ping Finance Web Server. We have to create an access-list that can filter this traffic too. Other lab-sims on this site: </div>

CCNA Access List Sim 2

Question Answer and Explanation (Note: If you are not sure how to use access-list, please check out my access-list tutorial at: http://www....

OSPF Neighbor Sim

<div dir="ltr" style="text-align: left;" trbidi="on">Question The topology below is running OSPF. You are required to troubleshoot and resolve the OSPF issues between the various routers. Use the appropriate show commands to troubleshoot the issues. <img alt="OSPF_Neighbor_Sim.jpg" class="aligncenter" height="275" src="http://www.9tut.com/images/ccna/labsim/OSPF_Neighbor_Sim.jpg" width="503" /> Instead of posting the output of “show run” commands we post here the commands entered on each router to reduce some useless lines. Also you can try solving questions by yourself before reading the answers. <table border="1"><tbody><tr><td>R1 interface Loopback0  description ***Loopback***  ip address 192.168.1.1 255.255.255.255  ip ospf 1 area 0 ! interface Ethernet0/0  description **Connected to R1-LAN**  ip address 10.10.110.1 255.255.255.0  ip ospf 1 area 0 ! interface Ethernet0/1  description **Connected to L2SW**  ip address 10.10.230.1 255.255.255.0  ip ospf hello-interval 25  ip ospf 1 area 0 ! router ospf 1  log-adjacency-changes </td><td>R2 ! interface Loopback0  description **Loopback**  ip address 192.168.2.2 255.255.255.255  ip ospf 2 area 0 ! interface Ethernet0/0  description **Connected to R2-LAN**  ip address 10.10.120.1 255.255.255.0  ip ospf 2 area 0 ! interface Ethernet0/1  description **Connected to L2SW**  ip address 10.10.230.2 255.255.255.0  ip ospf 2 area 0 ! router ospf 2  log-adjacency-changes</td><td>R3 username R6 password CISCO36 ! interface Loopback0  description **Loopback**  ip address 192.168.3.3 255.255.255.255  ip ospf 3 area 0 ! interface Ethernet0/0  description **Connected to L2SW**  ip address 10.10.230.3 255.255.255.0  ip ospf 3 area 0 ! interface Serial1/0  description **Connected to R4-Branch1 office**  ip address 10.10.240.1 255.255.255.252  encapsulation ppp  ip ospf 3 area 0 ! interface Serial1/1  description **Connected to R5-Branch2 office**  ip address 10.10.240.5 255.255.255.252  encapsulation ppp  ip ospf hello-interval 50  ip ospf 3 area 0 ! interface Serial1/2  description **Connected to R6-Branch3 office**  ip address 10.10.240.9 255.255.255.252  encapsulation ppp  ip ospf 3 area 0  ppp authentication chap ! router ospf 3  router-id 192.168.3.3 !</td></tr><tr><td>R4 ! interface Loopback0  description **Loopback**  ip address 192.168.4.4 255.255.255.255  ip ospf 4 area 2 ! interface Ethernet0/0  ip address 172.16.113.1 255.255.255.0  ip ospf 4 area 2 ! interface Serial1/0  description **Connected to R3-Main Branch office**  ip address 10.10.240.2 255.255.255.252  encapsulation ppp  ip ospf 4 area 2 ! router ospf 4  log-adjacency-changes</td><td>R5 ! interface Loopback0  description **Loopback**  ip address 192.168.5.5 255.255.255.255  ip ospf 5 area 0 ! interface Ethernet0/0  ip address 172.16.114.1 255.255.255.0  ip ospf 5 area 0 ! interface Serial1/0  description **Connected to R3-Main Branch office**  ip address 10.10.240.6 255.255.255.252  encapsulation ppp  ip ospf 5 area 0 ! router ospf 5  log-adjacency-changes</td><td>R6 username R3 password CISCO36 ! interface Loopback0  description **Loopback**  ip address 192.168.6.6 255.255.255.255  ip ospf 6 area 0 ! interface Ethernet0/0  ip address 172.16.115.1 255.255.255.0  ip ospf 6 area 0 ! interface Serial1/0  description **Connected to R3-Main Branch office**  ip address 10.10.240.10 255.255.255.252  encapsulation ppp  ip ospf 6 area 0  ppp authentication chap ! router ospf 6  router-id 192.168.3.3 !</td></tr></tbody></table>Note: Packet Tracer does not support enabling OSPF under interface mode (ip ospf 3 area 0). We don’t know why such a popular command is not supported so we can’t make a pkt file for this lab. Question 1 Explanation We learned it is a OSPF problem so we should check the interfaces between them first. On both R3 and R4 use “show running-config” command to check their S1/0 interfaces <table border="1"><tbody><tr><td>R3#show running-config <<output omitted>> ! interface Serial1/0   description **Connected to R4-Branch1 office**   ip address 10.10.240.1 255.255.255.252   encapsulation ppp   ip ospf 3 area 0 ! <<output omitted>></td></tr></tbody></table><table border="1"><tbody><tr><td>R4#show running-config <<output omitted>> ! interface Serial1/0   description **Connected to R3-Main Branch office**   ip address 10.10.240.2 255.255.255.252   encapsulation ppp   ip ospf 4 area 2 ! <<output omitted>></td></tr></tbody></table>In the output above we see their Area IDs are mismatched; interface S1/0 of R3 is in area 0 (R3: ip ospf 3 area 0) while interface s1/0 of R4 is in area 2 (R4: ip ospf 4 area 2). Question 2 Explanation Continue checking their connected interfaces with the “show running-config” command: <table border="1"><tbody><tr><td>R3#show running-config <<output omitted>> ! interface Serial1/1   description **Connected to R5-Branch2 office**   ip address 10.10.240.5 255.255.255.252   encapsulation ppp   ip ospf hello-interval 50   ip ospf 3 area 0 ! <<output omitted>></td></tr></tbody></table><table border="1"><tbody><tr><td>R5#show running-config <<output omitted>> ! interface Serial1/0   description **Connected to R3-Main Branch office**   ip address 10.10.240.6 255.255.255.252   encapsulation ppp   ip ospf 5 area 0 ! <<output omitted>></td></tr></tbody></table>The only difference we can see here is the line “ip ospf hello-interval 50” on R3. This command sets the number of seconds R3 waits before sending the next hello packet out this interface. In this case after configuring this command, R3 will send hello packets to R5 every 50 seconds. But the default value of hello-interval is 10 seconds and R5 is using it. Therefore we can think of a hello interval mismatch problem here. You can verify with the “show ip ospf interface <interface>” command on each router. <table border="1"><tbody><tr><td>R3#sh ip ospf int s1/1 Serial1/1 is up, line protocol is up   Internet Address 10.10.240.5/30, Area 0   Process ID 3, Router ID 192.168.3.3, Network Type POINT_TO_POINT, Cost: 64   Enabled by interface config, including secondary ip addresses   Transmit Delay is 1 sec, State POINT_TO_POINT,   Timer intervals configured, Hello 50, Dead 200, Wait 200, Retransmit 5   oob-resync timeout 200   Hello due in 00:00:28   Supports Link-local Signaling (LLS)   Index 2/2, flood queue length 0   Next 0x0(0)/0x0(0)   Last flood scan length is 0, maximum is 0   Last flood scan time is 0 msec, maximum is 0 msec   Neighbor Count is 0, Adjacent neighbor count is 0   Suppress hello for 0 neighbor(s)</td></tr></tbody></table><table border="1"><tbody><tr><td>R5#sh ip ospf int s1/0 Serial1/0 is up, line protocol is up   Internet Address 10.10.240.6/30, Area 0   Process ID 5, Router ID 10.10.240.6, Network Type POINT_TO_POINT, Cost: 64   Enabled by interface config, including secondary ip addresses   Transmit Delay is 1 sec, State POINT_TO_POINT,   Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5   oob-resync timeout 40   Hello due in 00:00:04   Supports Link-local Signaling (LLS)   Index 1/1, flood queue length 0   Next 0x0(0)/0x0(0)   Last flood scan length is 0, maximum is 0   Last flood scan time is 0 msec, maximum is 0 msec   Neighbor Count is 0, Adjacent neighbor count is 0   Suppress hello for 0 neighbor(s)</td></tr></tbody></table>So we can see both hello and dead interval are mismatched because the dead interval always four times the value of hello interval, unless you manually configure the dead interval (with the ip ospf dead-interval <seconds> command). Question 3 Explanation Continue checking their connected interfaces with the “show running-config” command: <table border="1"><tbody><tr><td>R1#show running-config <<output omitted>> ! interface Ethernet0/1   description **Connected to L2SW**   ip address 10.10.230.1 255.255.255.0   ip ospf hello-interval 25   ip ospf 1 area 0 ! <<output omitted>></td></tr></tbody></table><table border="1"><tbody><tr><td>R2#show running-config <<output omitted>> ! interface Ethernet0/1   description **Connected to L2SW**   ip address 10.10.230.2 255.255.255.0   ip ospf 2 area 0 ! <<output omitted>></td></tr></tbody></table>We see the hello interval on R1 is not the same as R2 (and you can verify with the “show ip ospf interface <interface> command”) -> There is a hello and dead interval mismatch problem. We should configure “no ip ospf hello-interval 25” on R1. Note: Maybe there are some versions of this question in the exam. For example there are some reports saying that Ethernet0/1 on R1 is shutdown (and this is the correct choice in the exam). So please be careful checking the config on the routers before choosing the correct answers. Question 4 Explanation <table border="1"><tbody><tr><td>R3#show running-config <<output omitted>> username R6 password CISCO36 ! interface Serial1/2   description **Connected to R6-Branch3 office**   ip address 10.10.240.9 255.255.255.252   encapsulation ppp   ip ospf 3 area 0   ppp authentication chap ! <<output omitted>> ! router ospf 3   router-id 192.168.3.3 ! <<output omitted>></td></tr></tbody></table><table border="1"><tbody><tr><td>R6#show running-config <<output omitted>> username R3 password CISCO36 ! interface Serial1/0   description **Connected to R3-Main Branch office**   ip address 10.10.240.10 255.255.255.252   encapsulation ppp   ip ospf 6 area 0   ppp authentication chap ! <<output omitted>> ! router ospf 6   router-id 192.168.3.3 ! <<output omitted>></td></tr></tbody></table>We are not sure about the configuration of ppp authentication in this case. Some reports said that only one router has the “ppp authentication chap” command but it is just a trick and is not the problem here. The real problem here is R6 uses the same router-id of R3 (192.168.3.3) so OSPF neighborship cannot be established. In real life, such configuration error will be shown in the command line interface (CLI). So please check carefully for this question.</div>

OSPF Neighbor Sim

Question The topology below is running OSPF. You are required to troubleshoot and resolve the OSPF issues between the various routers. Use...

EIGRP Troubleshooting Sim

<div dir="ltr" style="text-align: left;" trbidi="on">Question The topology below is running EIGRP. You are required to troubleshoot and resolve the EIGRP issues between the various routers. Use the appropriate show commands to troubleshoot the issues. <img alt="EIGRP_Troubleshooting_Sim_2.jpg" class="aligncenter" height="223" src="http://www.iptut.com/images/ccna/labsim/EIGRP_Troubleshooting_Sim_2.jpg" width="533" /> Instead of posting the output of “show run” commands we post here the commands entered on each router to reduce some useless lines. Also you can try solving questions by yourself before reading the answers. <table><tbody><tr><td>R1: int lo0 ip address 10.1.1.1 255.255.255.255 int e0/0 ip address 192.168.16.1 255.255.255.0 int s1/1 ip address 192.168.13.1 255.255.255.0 bandwidth 1000 int s1/3 ip address 192.168.12.1 255.255.255.0 ! router eigrp 1 network 192.168.12.0 network 192.168.13.0 network 192.168.16.0</td><td>R2: int lo0 ip address 10.2.2.2 255.255.255.255 int e0/0 ip address 192.168.123.2 255.255.255.0 int s2/1 ip address 192.168.12.2 255.255.255.0 ! router eigrp 1 network 10.2.2.2 0.0.0.0 network 192.168.12.0 network 192.168.123.0</td><td>R3: int lo0 ip address 10.3.3.3 255.255.255.255 int e0/0 ip address 192.168.123.3 255.255.255.0 int s2/1 ip address 192.168.13.3 255.255.255.0 ! router eigrp 1 network 10.3.3.3 0.0.0.0 network 192.168.13.0 network 192.168.123.0</td></tr><tr><td>R4: int lo0 ip address 10.4.4.4 255.255.255.255 int lo1 ip address 10.4.4.5 255.255.255.255 int lo2 ip address 10.4.4.6 255.255.255.255 int e0/0 ip address 192.168.123.4 255.255.255.0 ! router eigrp 2 network 10.4.4.4 0.0.0.0 network 10.4.4.5 0.0.0.0 network 10.4.4.6 0.0.0.0 network 192.168.123.0</td><td>R5: int lo0 ip address 10.5.5.5 255.255.255.255 int lo1 ip address 10.5.5.55 255.255.255.255 int e0/0 ip address 192.168.123.5 255.255.255.0 ! router eigrp 1 network 10.5.5.5 0.0.0.0 network 10.5.5.55 0.0.0.0 network 10.10.10.0 0.0.0.255 network 192.168.123.0</td><td>R6: int lo0 ip address 10.6.6.6 255.255.255.255 int e0/0 ip address 192.168.16.6 255.255.255.0 ! router eigrp 1 network 10.6.6.6 0.0.0.0</td></tr></tbody></table>Note: In the exam, this sim uses IOS version 15 so “no auto-summary” is the default setting of EIGRP. You don’t have to type it. You can download the pkt file to practice here: <a href="http://www.9tut.com/download/9tut.com_CCNA_EIGRP_Troubleshooting_Sim.zip" target="_blank">http://www.9tut.com/download/9tut.com_CCNA_EIGRP_Troubleshooting_Sim.zip</a> Question 1 Explanation On R4 we see EIGRP is configured with AS 2 (router eigrp 2) while other routers are using AS 1 (router eigrp 1). Therefore R4 cannot see other routers and vice versa. Question 2 Explanation For this question we have to check the routing table of R1 to find out the answer. Use the “show ip route” command on R1 we will get something like this: <img alt="ccna_EIGRP_Troubleshooting_sim_R1_show_ip_route.jpg" height="539" src="http://www.iptut.com/images/ccna/labsim/ccna_EIGRP_Troubleshooting_sim_R1_show_ip_route.jpg" width="471" /> There are three interfaces on R5 which are Loopback0: 10.5.5.5 ; Loopback1: 10.5.5.55; Ethernet0/0: 192.168.123.5 and all of them are advertised via 192.168.12.2 so we can conclude traffic from R1 to R5 goes through R2 (192.168.12.2 is the IP address of S2/1 interface of R2). Note: Maybe there is another version of this question in the exam in which the answer should be “The traffic is equally load-balanced over R2 and R3”. Therefore please check the “show ip route” output carefully to see if there are more than one route to the destination. Question 3 Explanation From the configuration of R6 we learn that R6 is missing “network 192.168.16.0” command (the network between R1 & R6) under EIGRP so EIGRP neighbor relationship will not be formed between them. Note: Please check the configuration of R6 carefully. If the “network 192.168.16.0” is not missing on R6 but the “metric weights” is configured like this: <table border="1"><tbody><tr><td>R6: router eigrp  1  network 10.6.6.6 0.0.0.0  network 192.168.16.0  metric weights 0 0 0 1 1 1</td></tr></tbody></table>Then you should check if R1 has the same “metric weights” or not. If not then the answer should be “K values are mismatched”. For your information, EIGRP K values are the scale numbers that EIGRP uses in metric calculation . Mismatched K values can prevent neighbor relationships from being established. The syntax of “metric weights” command is: metric weights tos k1 k2 k3 k4 k5 (with tos is the type of service and must always be zero) Question 4 Explanation R1 does not advertise its loopback 0 (10.1.1.1) to EIGRP therefore a ping to destination 10.5.5.55 (R5) from 10.1.1.1 will not be successful because R5 does not know how to reply to R1.</div>

EIGRP Troubleshooting Sim

Question The topology below is running EIGRP. You are required to troubleshoot and resolve the EIGRP issues between the various routers. Us...

DHCP Sim

<div dir="ltr" style="text-align: left;" trbidi="on">Refer to the topology below and answer the questions. <img alt="Topology.jpg" class="aligncenter" height="378" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/DHCP_Sim/Topology.jpg" width="442" /> Question 1 Examine the DHCP configuration between R2 and R3, R2 is configured as the DHCP server and R3 as the client. What is the reason R3 is not receiving the IP address via DHCP? A. On R3, DHCP is not enabled on the interface that is connected to R2. B. On R3, the interface that is connected to R2 is in shutdown condition. C. On R2, the interface that is connected to R3 is in shutdown condition. D. On R2, the network statement in the DHCP pool configuration is incorrectly configured. Answer: A Explanation First we should check which interface on R3 that is connected to R2 via the “show run” command. <img alt="R3_show_run.jpg" height="149" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/DHCP_Sim/R3_show_run.jpg" title="" width="255" /> From the description we learn interface E0/1 is connected to R2. Use the “show ip interface brief” command to verify the IP address of this interface. <img alt="R3_show_ip_int_brief.jpg" height="151" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/DHCP_Sim/R3_show_ip_int_brief.jpg" width="702" /> Therefore we can conclude this interface does not have any IP address and there is no configuration on this interface (except the “description Link to R2” line). If R3 wants to receive an IP address from R2 via DHCP, interface E0/1 should be configured with the command “ip address dhcp” so the answer “DHCP is not enabled on this interface” is correct. Question 2 R1 router clock is synchronized with ISP router. R2 is supposed to receive NTP updates from R1. But you observe that R2 clock is not synchronized with R1. What is the reason R2 is not receiving NTP updates from R1? A. R1 router Ethernet interface that is connected to R2 is placed in shutdown condition. B. R2 router Ethernet interface that is connected to R1 is placed in shutdown condition. C. The NTP server command not configured on R2 router. D. The IP address that is used in the NTP configuration on R2 router is incorrect. Answer: D Explanation First we should verify if the ports connected between R1 and R2 is in “up/up” state with the “show ip interface brief” command on R1 & R2. <img alt="R1_R2_show_ip_int_brief.jpg" height="342" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/DHCP_Sim/R1_R2_show_ip_int_brief.jpg" title="" width="706" /> Note: We learn R1 & R2 connect to each other via E0/2 interface because the IP addresses of these interfaces belong to 192.168.10.0/30 subnet. Both of them are “up/up” so the link connecting between R1 & R2 is good. Next we need to verify the ntp configuration on R2 with the “show running-config” command. <img alt="R2_show_run_ntp_part.jpg" height="93" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/DHCP_Sim/R2_show_run_ntp_part.jpg" title="" width="240" /> So there is only one command related to NTP configuration on R2 so we need to check if the IP address of 192.168.100.1 is correct or not. But from the “show ip interface brief” command on R1 we don’t see this IP -> This IP address is not correct. It should be 192.168.10.1 (IP address of interface E0/2 of R1), not 192.168.100.1. Question 3 Why applications that are installed on PC’s in R2 LAN network 10.100.20.0/24 are unable to communicate with Server1? A. A standard ACL statement that is configured on R1 is blocking the traffic sourced from R2 LAN network. B. A standard ACL statement that is configured on R1 is blocking the traffic sourced from Server1 network. C. A standard ACL statement that is configured on R2 is blocking the traffic sourced from Server1 network. D. A standard ACL statement that is configured on R2 is blocking the traffic sourced from R2 LAN network. Answer: C Explanation We should check if we can ping from R1 to Server 1 or not: <img alt="R1_ping_Server1.jpg" height="78" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/DHCP_Sim/R1_ping_Server1.jpg" title="" width="705" /> The ping worked well so maybe R1 is good so we should check R2 first. We notice on R2 there is an access-list: <img alt="R2_show_run_access_list_part.jpg" height="207" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/DHCP_Sim/R2_show_run_access_list_part.jpg" title="" width="396" /> This access-list is applied to E0/2 interface with inbound direction. The purpose of this access-list is to block traffic with source IP address of 172.16.200.0/24 so it will block all traffic sent from Server 1 to us. Question 4 Users complain that they are unable to reach internet sites. You are troubleshooting internet connectivity problem at main office. Which statement correctly identifies the problem on Router R1? A. NAT configurations on the interfaces are incorrectly configured. B. NAT translation statement incorrectly configured. C. Interesting traffic for NAT ACL is incorrectly configured. D. Only static NAT translation configured from the server, missing Dynamic NAT or Dynamic NAT overloading for internal networks. Answer: A Explanation If all users cannot access internet then R1 is most likely to cause the problem so we should check it first. From the “show running-config” command we will see: <img alt="R1_show_run_nat_interfaces.jpg" height="379" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/DHCP_Sim/R1_show_run_nat_interfaces.jpg" title="" width="429" /> We notice that interface E0/0 (connected to ISP) has been configured as “nat inside” while interfaces E0/1 & E0/2 (connected to our company) have been configured as “nat outside”. This is not correct because “nat inside” should be configured with interfaces connected to our company while “nat outside” should be configured with interfaces connected to the internet. Therefore we can conclude the NAT configuration on these interfaces is not correct.</div>

DHCP Sim

Refer to the topology below and answer the questions. Question 1 Examine the DHCP configuration between R2 and R3, R2 is configured as the ...

RIPv2 Troubleshooting Sim

<div dir="ltr" style="text-align: left;" trbidi="on">Refer to the topology below and answer the questions using “show” commands. <img alt="Topology.jpg" class="aligncenter" height="383" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/RIPv2_Troubleshooting/Topology.jpg" width="425" /> Question 1 Server1 and Server2 are unable to communicate with the rest of the network. Your initial check with system administrators shows that IP address settings are correctly configured on the server side. What could be an issue? A. The VLAN encapsulation is misconfigured on the router subinterfaces. B. The Router is missing subinterface configuration. C. The Trunk is not configured on the L2SW1 switch. D. The IP address is misconfigured on the primary router interface. Answer: A Explanation Check the configuration of the interface that is connected to Server1 and Server2 on R2 with “show running-config” command. <img alt="R2_show_run.jpg" height="244" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/RIPv2_Troubleshooting/R2_show_run.jpg" title="" width="385" /> We see that subinterface E0/1.100 has been configured with VLAN 200 (via “encapsulation dot1Q 200” command) while Server1 belongs to VLAN 100. Therefore this configuration is not correct. It should be “encapsulation dot1Q 100” instead. The same thing for interface E0/1.200, it should be “encapsulation dot1Q 200” instead. Question 2 Users in the main office complain that they are unable to reach internet sites. You observe that internet traffic that is destined towards ISP router is not forwarded correctly on Router R1. What could be an issue? Ping to Internet server shows the following results from R1: <table border="1"><tbody><tr><td>R1#ping 209.165.200.225 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 209.165.200.225, timeout is 2 seconds: ….. Success rate is 0 percent (0/5)</td></tr></tbody></table>A. The next hop router address for the default route is incorrectly configured. B. Default route pointing to ISP router is not configured on Router R1. C. Default route pointing to ISP router is configured with AD of 225. D. Router R1 configured as DHCP client is not receiving default route via DHCP from ISP router. Answer: B Explanation When all the users cannot reach internet sites we should check on the router connecting to the ISP to see if it has a default route pointing to the ISP or not. Use the “show ip route” command on R1: <img alt="R1_show_ip_route.jpg" height="563" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/RIPv2_Troubleshooting/R1_show_ip_route.jpg" title="" width="702" /> We cannot find a default route on R1 (something like this: S* 0.0.0.0/0 [1/0] via 209.165.201.2) so maybe R1 was not configured with a default route. We can check with the “show running-config” on R1: <img alt="R1_show_run_static_routes.jpg" height="80" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/RIPv2_Troubleshooting/R1_show_run_static_routes.jpg" title="" width="490" /> We need a default route (like “ip route 0.0.0.0 0.0.0.0 209.165.201.2”) but we cannot find here so we can conclude R1 was not be configured with a default route pointing to the ISP router. Question 3 Examine R2 configuration, the traffic that is destined to R3 LAN network sourced from Router R2 is forwarded to R1 instead R3. What could be an issue? <table border="1"><tbody><tr><td>R2#traceroute 10.10.12.1 source 10.10.10.1 Type escape sequence to abort. Tracing the route to 10.10.12.1 VRF info: (vrf in name/id, vrf out name/id) 1 172.16.14.1 0 msec 1 msec 0 msec 2 172.16.14.1 !H !H * R2#</td></tr></tbody></table>A. RIPv2 enabled on R3, but R3 LAN network that is not advertised into RIPv2 domain. B. RIPv2 routing updates are suppressed between R2 and R3 using passive interface feature. C. RIPv2 not enabled on R3. D. No issue that is identified; this behavior is normal since default route propagated into RIPv2 domain by Router R1. Answer: C Explanation First we should check the routing table of R2 with the “show ip route” command. <img alt="R2_show_ip_route.jpg" height="622" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/RIPv2_Troubleshooting/R2_show_ip_route.jpg" title="" width="694" /> In this table we cannot find the subnet “10.10.12.0/24” (R3 LAN network) so R2 will use the default route advertised from R1 (with the command “default-information originate” on R1) to reach unknown destination, in this case subnet 10.10.12.0/24 -> R2 will send traffic to 10.10.12.0/24 to R1. Next we need to find out why R3 did not advertise this subnet to R2. A quick check with the “show running-config” on R3 we will see that R3 was not configured with RIP ( no “router rip” section). Therefore we can conclude RIPv2 was not enabled on R3. Question 4 What is the correct statement below after examining the R1 routing table? A. Traffic that is destined to 10.10.10.0/24 from R1 LAN network uses static route instead RIPv2 because the static route AD that is configured is less than the AD of RIPv2 B. Traffic that is destined to 10.10.10.0/24 from R1 LAN network uses RIPv2 instead of static route because the static route AD that is configured is higher than the AD of RIPv2 C. Traffic that is destined to 10.10.10.0/24 from R1 LAN network uses static route instead of RIPv2 but the traffic is forwarded to the ISP instead of the internal network D. Traffic that is destined to 10.10.10.0/24 from R1 LAN network uses RIPv2 instead of static route because the static route AD that is configured is 255 Answer: B Explanation Surely we have to use the “show ip route” command to check the R1 routing table. <img alt="R1_show_ip_route_compare.jpg" height="563" id="__wp-temp-img-id" src="http://www.9tut.com/images/ccna/labsim/RIPv2_Troubleshooting/R1_show_ip_route_compare.jpg" title="" width="702" /> As we see here, 10.10.10/24 is learned from RIP. Notice that although there is a static route on R1 to this destination (you can check with the “show running-config” on R1 to see the line “ip route 10.10.10.0 255.255.255.0 172.16.14.2 200”), this static route is not installed to the routing table because it is not the best path because the Administrative Distance (AD) of this static route is 200 while the AD of RIP is 120 -> R1 chose the path with lowest AD so it chose path advertised via RIP.</div>

RIPv2 Troubleshooting Sim

Refer to the topology below and answer the questions using “show” commands. Question 1 Server1 and Server2 are unable to communicate with th...

TECH AVENGERS