CISCO 4 Skills Exam

Name: _________________________________
Direction:
The given packet tracer file is preconfigured. The following are the instructions followed by
the network engineer to configure the local and international branches of ABC Company.
Local branches used IPv4 addressing and international branches used IPv6 addressing
scheme. The network engineer used EIGRP routing protocol, PPP and Frame WAN
technology. Some PCs of local branches were successfully connected but some are not.
The PCs from one branch to another branch are not successfully connected. The PCs from
local branches cannot connect to the PCs of international branches. The PCs from local and
international branch cannot access the web server of the company and the cisco web
server. The network engineer cannot monitor the error because the syslog server is not
configured.
The network engineer asked your help to troubleshoot the given network of ABC Company.
Your goal is to:
1. The local PCs of international and local branch can access the web server of the
ABC Company and cisco web server. (10 pts)
2. The local PCs of VLAN can access the other VLAN (10 pts)
3. The PCs of local branch can access the other local branch (10 pts)
4. Configure the Syslog Server and NTP to monitor the network (10 pts)
5. The PCs of local branch can access the PCs of international branch (10 pts)
6. Configure Static and Dynamic NAT at MAIN branch (10 pts)
Copy and paste the script of each device.
Submit this file with filename <FinalSkillsExamCisco4_lastame>.docx
Submit the packet tracer file with filename <FinalSkillsExamCisco4_lastame>.pkt

Addressing Table
Device

Interface

IP Address

Subnet Mask

Main

S0/0/0

10.2.2.1

S0/0/1
S0/1/0

10.1.1.1
209.165.200.225

Tunnel0

10.10.10.1

Manila

S0/0/1
Tunnel0

10.1.1.2
10.10.10.2

Davao
Cebu
Quezon

S0/0/1
S0/0/1
S0/0/0

10.1.1.3
10.1.1.4
10.2.2.2

255.255.255.25
2
255.255.255.0
255.255.255.25
2
255.255.255.25
2
255.255.255.0
255.255.255.25
2
255.255.255.0
255.255.255.0
255.255.255.25
2

Germany

ISP

2001:DB8:5::5/64
S0/0/1
2001:DB8:1::4/64
S0/1/0
2001:DB8:3::4/64
S0/0/0
FE80::5
Link-local
Router id : 1.1.1.1
2001:DB8:3::5/64
S0/0/0
2001:DB8:2::4/64
S0/0/1
FE80::6
Link-local
Router id : 2.2.2.2
2001:DB8:2::5/64
S0/0/1
2001:DB8:1::5/64
S0/1/0
2001:DB8:7:A::1/64
G0/0
FE80::7
Link-local
Router id : 3.3.3.3
S0/1/0
209.165.200.226

CHN_ADMIN
CHN_SALES
CHN_PROD

S0/0/1
NIC
NIC
NIC

USA

China

2001:DB8:5::4/64
Auto-config
Auto-config
Auto-config

Default
Gateway
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A

255.255.255.25
2

N/A
N/A

DLCI Mappings
From / To
Main
Manila
Davao
Cebu

Main
201
301
401

Manila
101
302
402

Davao
102
202
403

Cebu
103
203
303
-

VLAN Configurations and Port Mappings

VLAN Number
10
20
30
99

VLAN Name
Admin
Sales
Production
Management and
Native

Port Mappings
Fa0/1-5
Fa0/6-10
Fa0/11-15

IPv4 Addressing
Design the IPv4 addressing scheme. Use 10.5.0.0 /16 as network address. Configure inter-VLAN routing
and assign the first available address from each subnet to subinterfaces and the last usable to each PC.
Use the first usable subnet (50 hosts) to Main branch
Use the second usable subnet (50 hosts) to Cebu_Admin
Use the third usable subnet (50 hosts) to Manila_Admin
Use the fourth usable subnet (50 hosts) to Manila_production
Use the fifth usable subnet(25 hosts) to Cebu_Sales
Use the sixth usable subnet(25 hosts) to Manila_Sales
Use the seventh to ninth usable subnet(25 hosts) to Davao_Sales, Davao_Admin,Davao_Production
Use the tenth to 12th usable subnet(25 hosts) to Quezon_Sales, Quezon_Admin,Quezon_Production
Use the 13th usable subnet(25 hosts) to Cebu_Production
Use the following criteria to set the ip addresses of servers connected to the Main Router.
1. The last usable to the gigabit Ethernet interface.
2. The first usable to the www.abc.com
3. The second usable to the DNS_SERVER
4. The third usable to the SYSLOG_SERVER.

The following are the required number of hosts for each branch:
Main 50 hosts
Cebu

Davao
Sales 25 hosts
Admin 50 hosts
Production 25 hosts

Sales 25 hosts
Admin 25 hosts
Production 25 hosts

Manila
Sales 25 hosts
Admin 50 hosts
Production 50 hosts

Quezon
Sales 25 hosts
Admin 25 hosts
Production 25 hosts

Basic Router Configuration

1.
2.
3.
4.
5.
6.
7.
8.
9.

Disable DNS lookup.

Configure the device name.
Encrypt plain text passwords.
Create a message of the day (MOTD) banner warning users that unauthorized access is
prohibited.
Assign class as the encrypted privileged EXEC mode password.
Assign cisco as the console and vty password and enable login.
Set console logging to synchronous mode.
Set the IPv4 and IPv6 addresses according to the Addressing Table.
Assign the link local address to each interface.

Basic Switch Configuration

1.
2.
3.
4.
5.
6.
7.
8.

Disable DNS lookup.

Configure the device name.
Encrypt plain text passwords.
Create a message of the day (MOTD) banner warning users that unauthorized access is
prohibited.
Assign class as the encrypted privileged EXEC mode password.
Assign cisco as the console and vty password and enable login.
Set console logging to synchronous mode.
Shut down all unused ports.

Basic Switch Security

Enable port security on SW_MLA3 on the interfaces that the PCs are connected to.
1. Configure as access ports.
2. Only allow 1 host per port.
3. Enable dynamic learning that stores the MAC address in the running configuration.
4. Ensure that port violations disable ports.
5. Configure PortFast and BPDU Guard.
VLAN
1. Create and name the VLANs based on the VLAN Table.
2. Assign the switch ports to VLANs according to the VLAN Table.
3. Configure the connection between branch router and g0/0 interfaces of the branch switch as a
trunk and assign it to VLAN 99.
4. Configure the connection between switches from Manila branch to trunk and assign it to vlan 99
Spanning Tree
1. Configure SW_MLA3 to use RSTP as the STP mode.
2. Assign SW_MLA3 as the root Bridge and SW_MLA2 as the backup root bridge for VLANs 10 and
20.

3. Assign SW_MLA2 as the root bridge and SW_MLA3 as the backup root bridge for VLANs 30.
Trunking and EtherChannel
Set SW_MLA3 interfaces connected to SW_MLA1 and SW_MLA2 as trunks and assign the native VLAN.
Configure EtherChannel on SW_MLA3 as desirable.
1. Use channel group 2 for trunks to SW_MLA2.
2. Use channel group 3 for trunks to SW_MLA1.
3. Assign the native VLAN.

PPP
Configure Main and Quezon to use PPP with PAP for the shared link. The password for PAP is
mainquezon. Use the Quezon as username for Quezon branch and RouterMain for Main branch.
Configure Main and ISP to use PPP with CHAP for the shared link. The password for CHAP is mainisp.

Frame Relay
Configure full mesh Frame Relay.
1. Configure Frame Relay encapsulation using static mapping.
2. Configure a map to each of the other routers.

IPv6 Routing
Configure EIGRP for IPv6 for Germany, China and USA .
1. Enable IPv6 routing and EIGRP for IPv6 using ASN 222.
2. Advertise directly connected networks.
3. Configure a fully specified default route on Germany pointing to the ISP and propagate it within the
EIGRP updates. Use the exit interface
4. Prevent routing updates from being sent across the LAN interfaces.

IPv4 Routing
Configure EIGRP for IPv4 for routers connected to the Frame Relay.
1. Advertise directly connected networks.
2. Disable automatic summarization.
3. Configure IPv4 summary routes for the LANs and advertise them to directly connected routers.
4. Configure a fully specified default route on Main pointing to the ISP and propagate it within the
EIGRP updates. Use the exit interface
5. Prevent routing updates from being sent across the LAN interfaces.

GRE

Configure GRE tunnels of Main and Manila.

1. Configure the source port and the destination address.
2. Configure the IP address for the tunnel interface according to the Addressing Table.
NAT

Configure static and dynamic NAT on Main

Allow all addresses for the 10.0.0.0/8 address space to be translated using a standard access list
named NAT.
ABC Corporation owns the 209.165.200.240/29 address space. The pool, HQ, uses addresses .241
to .245 with a /29 mask. Configure dynamic NAT with PAT for the pool HQ.

SYSLOG and NTP

Configure Syslog Service
1. Enable the Syslog service.
2. Configure the intermediary devices to use the Syslog service.
Configure NTP Service
1. Enable the NTP service.
2. Set the clock on MAIN to the date and time according to the NTP server.
3. Configure MAIN to send its timestamp with the logs that it sends to the Syslog server.