CCNA: Scaling Networks

Skills Assessment (EIGRP) – Student Training

Topology

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 43
CCNA: Scaling Networks SA Answer Key

Addressing Table

Device Interface IP Address Subnet Mask Default Gateway

G0/1 172.27.0.1 255.255.255.0 N/A

R1
S0/0/0 172.27.123.1 255.255.255.252 N/A
S0/0/0 172.27.123.2 255.255.255.252 N/A
R2 S0/0/1 172.27.123.5 255.255.255.252 N/A
Lo0 209.165.200.225 255.255.255.248 N/A
G0/1 172.27.0.3 255.255.255.0 N/A
R3
S0/0/1 172.27.123.6 255.255.255.252 N/A
S1 VLAN 1 172.27.0.11 255.255.255.0 172.27.0.2
S2 VLAN 1 172.27.0.12 255.255.255.0 172.27.0.2
S3 VLAN 1 172.27.0.13 255.255.255.0 172.27.0.2
PC-A NIC 172.27.0.21 255.255.255.0 172.27.0.2
PC-B NIC 172.27.0.22 255.255.255.0 172.27.0.2
PC-C NIC 172.27.0.23 255.255.255.0 172.27.0.2

Assessment Objectives
Part 1: Initialize Devices (10 points, 5 minutes)
Part 2: Configure Device Basic Settings (51 points, 30 minutes)
Part 3: Configure LAN Redundancy and Link Aggregation (28 points, 25 minutes)
Part 4: Configure EIGRP for IPv4 Dynamic Routing Protocol (51 points, 30 minutes)
Part 5: Verify Network Connectivity and HSRP Configuration (10 points, 20 minutes)

Scenario
In this Skills Assessment (SA), you will create a small network. You must connect the network devices, and
configure those devices to support IPv4 connectivity, LAN redundancy, and link aggregation. You will then
configure EIGRP for IPv4 on the network and verify connectivity and HSRP.

Required Resources
• 3 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
• 3 Switches (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)
• 3 PCs (Windows with terminal emulation program, such as Tera Term)
• Console cable to configure the Cisco IOS devices via the console ports
• Ethernet and Serial cables as shown in the topology

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 43
CCNA: Scaling Networks SA Answer Key

Part 1: Initialize Devices

Total points: 10
Time: 5 minutes

Step 1: Initialize and reload the routers and switches.

Erase the startup configurations and reload the devices.
Before proceeding, have your instructor verify device initializations.

Task IOS Command Points

Erase the startup-config file on all R1# erase startup-config (2 points)

routers.
Reload all routers. R1# reload (2 points)
(Hostnames should be reset back to Router.)
Erase the startup-config file on all S1# erase startup-config (2 points)
switches and remove the old S1# del vlan.dat
VLAN database.
Reload all switches. S1# reload (2 points)
(Hostnames should be reset back to Switch.)
Verify that the vlan.dat file is not S1# show flash (2 points)
found in flash on all switches. (Have student execute the CLI command on
the switch.)

Instructor Sign-off Part 1: _________________________

Points: __________ of 10

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 3 of 43
CCNA: Scaling Networks SA Answer Key

Part 2: Configure Device Basic Settings

Total points: 51
Time: 30 minutes

Step 1: Configure R1.

Configuration tasks for R1 include the following:

Configuration Item or Task Specification Points

Disable DNS lookup (1/2 point)

Router name R1 (1/2 point)
Encrypted privileged EXEC password class (1/2 point)
Console access password cisco (1/2 point)
Telnet access password cisco (1/2 point)
Encrypt the plaintext passwords. (1/2 point)
MOTD banner Unauthorized Access is Prohibited! (1 point)
Set the description
Set the Layer 3 IPv4 address. Refer to the
Interface G0/1 (1 point)
Addressing Table for IPv4 address information.
Activate interface
Set the description
Set the Layer 3 IPv4 address. Refer to the
Interface S0/0/0 Addressing Table for IPv4 address information. (2 points)
Set a clocking rate of 128000.
Activate interface

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 4 of 43
CCNA: Scaling Networks SA Answer Key

Configuration Item or
Task Specification IOS Commands

R1# show run

Disable DNS lookup no ip domain lookup (Look for: no ip domain lookup)
(Look for: R1> or R1# command
Router name hostname R1 prompt)

Encrypted privileged R1> enable

EXEC password enable secret class (Type in privileged exec password)
line con 0
R1# exit
Console access password cisco
(Type in access password)
password login
line vty 0 4 R1# show run
password cisco (Look under line VTY 0 4 for:
Telnet access password login password 7 121A0C041104)

R1# show run

Encrypt the plaintext (Look for: service password-
passwords. service password-encryption encryption)
banner motd @ Unauthorized Access is
(Verify banner during above step)
MOTD banner Prohibited! @
interface g0/1
R1# show ip interface G0/1
description Connection to S1
Interface G0/1 (Look for IP address and correct
ip address 172.27.0.1 255.255.255.0
subnet mask)
no shutdown
R1# show interface S0/0/0
(Look for Description, Internet
interface s0/0/0
address, and verify that interface is
Interface S0/0/0 description Connection to R2 not administratively down.)
ip add 172.27.123.1 255.255.255.252 R1# show controllers S0/0/0
clock rate 128000 (Look for DCE V.35, clock rate
no shutdown 128000)

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 5 of 43
CCNA: Scaling Networks SA Answer Key

Step 2: Configure R2.

Configuration tasks for R2 include the following:

Configuration Item or Task Specification Points

Disable DNS lookup (1/2 point)

Router name R2 (1/2 point)
Encrypted privileged EXEC password class (1/2 point)
Console access password cisco (1/2 point)
Telnet access password cisco (1/2 point)
Encrypt the plaintext passwords. (1/2 point)
MOTD banner Unauthorized Access is Prohibited! (1/2 point)
Set the description
Set the Layer 3 IPv4 address. Refer to the
Interface S0/0/0 (1 point)
Addressing Table for IPv4 address information.
Activate interface
Set the description
Set the Layer 3 IPv4 address. Refer to the
Interface S0/0/1 Addressing Table for IPv4 address information. (1 point)
Set a clocking rate of 128000.
Activate interface

Interface Loopback 0 (Simulated Set the description.

(1 point)
Internet connection) Set the Layer 3 IPv4 address to 209.165.200.225/29.
Default route Configure a default route out Lo0. (1/2 point)

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 6 of 43
CCNA: Scaling Networks SA Answer Key

Configuration Item or
Task Specification IOS Commands

R2# show run

Disable DNS lookup no ip domain lookup (Look for: no ip domain lookup)
(Look for : R2> or R2# command
Router name hostname R2 prompt)

Encrypted privileged R2> enable

EXEC password enable secret class (Type in privileged exec password)
line con 0
R2# exit
Console access password cisco
(Type in access password)
password login
line vty 0 4 R2# show run
password cisco (Look under line VTY 0 4 for:
Telnet access password login password 7 121A0C041104)

R2# show run

Encrypt the plaintext (Look for: service password-
passwords. service password-encryption encryption)
banner motd @ Unauthorized Access is
(Verify banner during above step)
MOTD banner Prohibited! @
R2# show interface S0/0/0
interface s0/0/0
(Look for Description, Internet
Interface S0/0/0 description Connection to R1 address, and verify that interface is
ip add 172.27.123.2 255.255.255.252 not administratively down.)
no shutdown
R2# show interface S0/0/1
(Look for Description, Internet
interface s0/0/1
address, and verify that interface is
Interface S0/0/1 description Connection to R3 not administratively down.)
ip add 172.27.123.5 255.255.255.252 R2# show controllers S0/0/1
clock rate 128000 (Look for DCE V.35, clock rate
no shutdown 128000)
interface lo0
R2# show run interface lo0
Interface Loopback 0 description Connection to Internet
(Verify description, IP address, and
(Simulated Internet ip address 209.165.200.225 subnet mask)
connection) 255.255.255.248
R2# show ip route (Look for:
Gateway of last resort is 0.0.0.0 to
Default route network 0.0.0.0
S* 0.0.0.0/0 is directly connected,
ip route 0.0.0.0 0.0.0.0 lo0 Loopback0)

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 7 of 43
CCNA: Scaling Networks SA Answer Key

Step 3: Configure R3.

Configuration tasks for R3 include the following:

Configuration Item or Task Specification Points

Disable DNS lookup (1/2 point)

Router name R3 (1/2 point)
Encrypted privileged EXEC password class (1/2 point)
Console access password cisco (1/2 point)
Telnet access password cisco (1/2 point)
Encrypt the plaintext passwords. (1/2 point)
MOTD banner Unauthorized Access is Prohibited! (1 point)
Set the description
Set the Layer 3 IPv4 address. Refer to the
Interface G0/1 (1 point)
Addressing Table for IPv4 address information.
Activate interface
Set the description
Set the Layer 3 IPv4 address. Refer to the
Interface S0/0/1 (2 points)
Addressing Table for IPv4 address information.
Activate interface

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 8 of 43
CCNA: Scaling Networks SA Answer Key

Configuration Item or
Task Specification IOS Commands

R3# show run

Disable DNS lookup no ip domain lookup (Look for: no ip domain lookup)
(Look for : R3> or R3# command
Router name hostname R3 prompt)

Encrypted privileged R3> enable

EXEC password enable secret class (Type in privileged exec password)
line con 0
R3# exit
password cisco
(Type in access password)
Console access password login
line vty 0 4 R3# show run
password cisco (Look under line VTY 0 4 for:
Telnet access password login password 7 121A0C041104)

R3# show run

Encrypt the plaintext (Look for: service password-
passwords. service password-encryption encryption)
banner motd @ Unauthorized Access is
(Verify banner during above step)
MOTD banner Prohibited! @
R3# show ip interface G0/1
interface g0/1
(Look for IP address and correct
Interface G0/1 description Connection to S3
subnet mask, and verify that
ip address 172.27.0.3 255.255.255.0 interface is not administratively
no shutdown down.)
interface s0/0/1 R3# show interface S0/0/1
description Connection to R2 (Look for Description, Internet
Interface S0/0/1
ip add 172.27.123.6 255.255.255.252 address, and verify that interface is
no shutdown not administratively down.)

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 9 of 43
CCNA: Scaling Networks SA Answer Key

Step 4: Configure S1.

Configuration tasks for S1 include the following:

Configuration Item or Task Specification Points

Disable DNS lookup (1/2 point)

Switch name S1 (1/2 point)
Encrypted privileged EXEC password class (1/2 point)
Console access password cisco (1/2 point)
Telnet access password cisco (1/2 point)
Encrypt the plaintext passwords. (1/2 point)
MOTD banner Unauthorized Access is Prohibited! (1/2 point)
Assign an IPv4 address to the default Refer to the Addressing Table for IPv4 address
(1 point)
SVI. information.
Assign the default-gateway. Refer to the Addressing Table. (1 point)
Force trunking on Interfaces
(2 points)
connected to S2 and S3. Use VLAN 1 as the native VLAN.
Disable the Dynamic Trunking Make sure ports are configured as access
(1 point)
Protocol (DTP) on all other ports. switchports.
Shutdown all unused ports. (1 point)

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 10 of 43
CCNA: Scaling Networks
Configuration Item or
Task
Disable DNS lookup
Switch name
Encrypted privileged
EXEC password
Console access password
Telnet access password
Encrypt the plaintext
passwords.
MOTD banner
Assign an IPv4 address to
the default SVI.
Assign the default-
gateway.
Force trunking on all
interfaces connected to
S2 and S3.
Disable the Dynamic
Trunking Protocol (DTP)
on all other ports.
Shutdown all unused
ports.
© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public.
SA Answer Key
Specification IOS Commands
S1# show run
no ip domain lookup (Look for: no ip domain lookup)
(Look for: S1> or S1# command
hostname S1 prompt)
S1> enable
enable secret class (Type in privileged EXEC password)
line con 0
S1# exit
password cisco
(Type in access password)
login
line vty 0 15 S1# show run
password cisco (Look under line VTY 0 15 for:
login password 7 121A0C041104)
S1# show run
(Look for: service password-
service password-encryption encryption)
banner motd @ Unauthorized Access
(Verify banner during above step)
is Prohibited! @
interface vlan 1 S1# show ip interface vlan1
ip address 172.27.0.11 255.255.255.0 (Look for IP address and correct
no shutdown subnet mask)
S1# show run | section default
(Look for ip default-gateway
ip default-gateway 172.27.0.2 172.27.0.2)
interface range f0/1-4
switchport mode trunk S1# show interface trunk
switchport trunk native vlan 1 (Look to see if interfaces f0/1-4 are
Note: VLAN 1 is the native VLAN by listed. If not listed check to see if
default, the previous command is not interfaces are active.)
necessary.
interface range f0/5-24, g0/1-2
switchport mode access
Note: The switchport nonegotiate S1# show run | begin interface
command may have also been (Look to see if these ports have been
issued, this is not incorrect but it is set as access switch ports.)
important that these ports have been
changed to access switchports.
S1# show run | begin interface
interface range f0/7-24, g0/1-2
(Verify that these ports are
shutdown administratively shutdown.)
Page 11 of 43
CCNA: Scaling Networks SA Answer Key

Step 5: Configure S2.

Configuration tasks for S2 include the following:

Configuration Item or Task Specification Points

Disable DNS lookup (1/2 point)

Switch name S2 (1/2 point)
Encrypted privileged EXEC password class (1/2 point)
Console access password cisco (1/2 point)
Telnet access password cisco (1/2 point)
Encrypt the plaintext passwords. (1/2 point)
MOTD banner Unauthorized Access is Prohibited! (1/2 point)
Assign an IPv4 address to the default Refer to the Addressing Table for IPv4 address
(1 point)
SVI. information.
Assign the default-gateway. Refer to the Addressing Table. (1 point)
Force trunking on Interfaces
(2 points)
connected to S1 and S3. Use VLAN 1 as the native VLAN.
Disable the Dynamic Trunking Make sure ports are configured as access
(1 point)
Protocol (DTP) on all other ports. switchports.
Shutdown all unused ports. (1 point)

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 12 of 43
CCNA: Scaling Networks
Configuration Item or
Task
Disable DNS lookup
Switch name
Encrypted privileged
EXEC password
Console access password
Telnet access password
Encrypt the plaintext
passwords.
MOTD banner
Assign an IPv4 address to
the default SVI.
Assign the default-
gateway.
Force trunking on all
interfaces connected to
S1 and S3.
Disable the Dynamic
Trunking Protocol (DTP)
on all other ports.
Shutdown all unused
ports.
© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public.
SA Answer Key
Specification IOS Commands
S2# show run
no ip domain lookup (Look for: no ip domain lookup)
(Look for: S2> or S2# command
hostname S2 prompt)
S2> enable
enable secret class (Type in privileged EXEC password)
line con 0
S2# exit
password cisco
(Type in access password)
login
line vty 0 15 S2# show run
password cisco (Look under line VTY 0 15 for:
login password 7 121A0C041104)
S2# show run
(Look for: service password-
service password-encryption encryption)
banner motd @ Unauthorized Access
(Verify banner during above step)
is Prohibited! @
interface vlan 1 S2# show ip interface vlan1
ip address 172.27.0.12 255.255.255.0 (Look for IP address and correct
no shutdown subnet mask)
S2# show run | section default
(Look for ip default-gateway
ip default-gateway 172.27.0.2 172.27.0.2)
interface range f0/1-4
switchport mode trunk S2# show interface trunk
switchport trunk native vlan 1 (Look to see if interfaces f0/1-4 are
Note: VLAN 1 is the native VLAN by listed. If not listed check to see if
default, the previous command is not interfaces are active.)
necessary.
interface range f0/5-24, g0/1-2
switchport mode access
Note: The switchport nonegotiate S2# show run | begin interface
command may have also been (Look to see if these ports have been
issued, this is not incorrect but it is set as access switch ports.)
important that these ports have been
changed to access switchports.
interface range f0/5-17, f0/19-24, S2# show run | begin interface
g0/1-2
(Verify that these ports are
shutdown administratively shutdown.)
Page 13 of 43
CCNA: Scaling Networks SA Answer Key

Step 6: Configure S3
Configuration tasks for S3 include the following:

Configuration Item or Task Specification Points

Disable DNS lookup (1/2 point)

Switch name S3 (1/2 point)
Encrypted privileged EXEC password class (1/2 point)
Console access password cisco (1/2 point)
Telnet access password cisco (1/2 point)
Encrypt the plaintext passwords. (1/2 point)
MOTD banner Unauthorized Access is Prohibited! (1/2 point)
Assign an IPv4 address to the default Refer to the Addressing Table for IPv4 address
(1 point)
SVI. information.
Assign the default-gateway. Refer to the Addressing Table. (1 point)
Force trunking on Interfaces
(2 points)
connected to S1 and S2. Use VLAN 1 as the native VLAN.
Disable the Dynamic Trunking Make sure ports are configured as access
(1 point)
Protocol (DTP) on all other ports. switchports.
Shutdown all unused ports. (1 point)

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 14 of 43
CCNA: Scaling Networks
Configuration Item or
Task
Disable DNS lookup
Switch name
Encrypted privileged
EXEC password
Console access password
Telnet access password
Encrypt the plaintext
passwords.
MOTD banner
Assign an IPv4 address to
the default SVI.
Assign the default-
gateway.
Force trunking on all
interfaces connected to
S1 and S2.
Disable the Dynamic
Trunking Protocol (DTP)
on all other ports.
Shutdown all unused
ports.
© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public.
SA Answer Key
Specification IOS Commands
S3# show run
no ip domain lookup (Look for: no ip domain lookup)
(Look for: S3> or S3# command
hostname S3 prompt)
S3> enable
enable secret class (Type in privileged EXEC password)
line con 0
S3# exit
password cisco
(Type in access password)
login
line vty 0 15 S3# show run
password cisco (Look under line VTY 0 15 for:
login password 7 121A0C041104)
S3# show run
(Look for: service password-
service password-encryption encryption)
banner motd @ Unauthorized Access
(Verify banner during above step)
is Prohibited! @
interface vlan 1 S3# show ip interface vlan1
ip address 172.27.0.13 255.255.255.0 (Look for IP address and correct
no shutdown subnet mask)
S3# show run | section default
(Look for ip default-gateway
ip default-gateway 172.27.0.2 172.27.0.2)
interface range f0/1-4
switchport mode trunk S3# show interface trunk
switchport trunk native vlan 1 (Look to see if interfaces f0/1-4 are
Note: VLAN 1 is the native VLAN by listed. If not listed check to see if
default, the previous command is not interfaces are active.)
necessary.
interface range f0/5-24, g0/1-2
switchport mode access
Note: The switchport nonegotiate S3# show run | begin interface
command may have also been (Look to see if these ports have been
issued, this is not incorrect but it is set as access switch ports.)
important that these ports have been
changed to access switchports.
interface range f0/6-17, f0/19-24, S3# show run | begin interface
g0/1-2
(Verify that these ports are
shutdown administratively shutdown.)
Page 15 of 43
CCNA: Scaling Networks SA Answer Key

Step 7: Configure IPv4 addresses on PCs.

Configuration Item or Task Specification Points

Configure static IPv4 address

(1/2 point)
information on PC-A. Refer to Addressing Table for IPv4 address information.
Configure static IPv4 address
(1/2 point)
information on PC-B. Refer to Addressing Table for IPv4 address information.
Configure static IPv4 address
(1/2 point)
information on PC-C. Refer to Addressing Table for IPv4 address information.

Configuration Item or Task Specification Command

Configure static IPv4 address
information on PC-A.
Configure static IPv4 address
information on PC-B.
Configure static IPv4 address
information on PC-C.
IPv4 address:172.27.0.21
Subnet mask: 255.255.255.0 ipconfig
Default gateway:172.27.0.2
IPv4 address:172.27.0.22
Subnet mask: 255.255.255.0 ipconfig
Default gateway:172.27.0.2
IPv4 address:172.27.0.23
Subnet mask: 255.255.255.0 ipconfig
Default gateway:172.27.0.2

Instructor Sign-off Part 2: ______________________

Points: _________ of 51

Part 3: Configure LAN Redundancy and Link Aggregation

Step 1: Configure Spanning Tree on S1.
Configuration tasks for S1 include the following:

Configuration Item or Task Specification Points

Configure Rapid PVST+. (2 points)

Configure as primary root bridge for
(2 points)
VLAN 1.
Configure PortFast and BPDU Guard
(2 points)
on the interface connected to PC-A.

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 16 of 43
CCNA: Scaling Networks
Configuration Item or
Task
Configure Rapid PVST+.
Configure as primary root
bridge for VLAN 1.
Configure PortFast and
BPDU Guard on the
interface connected to
PC-A.
Step 2: Configure Spanning Tree on S2.
Configuration tasks for S2 include the following:
Configuration Item or Task
Configure Rapid PVST+.
Configure PortFast and BPDU Guard
on the interface connected to PC-B.
Configuration Item or
Task
Configure Rapid PVST+.
Configure PortFast and
BPDU Guard on the
interface connected to
PC-B.
Step 3: Configure Spanning Tree on S3.
Configuration tasks for S3 include the following:
© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public.
SA Answer Key
Specification IOS Commands
S1# show spanning-tree
summary
(Verify that the switch is in rapid-
spanning-tree mode rapid-pvst pvst mode.)
S1# show spanning-tree
(Verify that the switch is the root
spanning-tree vlan 1 root primary bridge for VLAN 1.)
S1# show run interface f0/6
interface f0/6
spanning-tree portfast (Verify that portfast and
spanning-tree bpduguard enable bpduguard have been enabled.)
Specification Points
(2 points)
(2 points)
Specification IOS Commands
S2# show spanning-tree
summary
(Verify that the switch is in rapid-
spanning-tree mode rapid-pvst pvst mode.)
S2# show run interface f0/18
Interface f0/18
spanning-tree portfast (Verify that portfast and
spanning-tree bpduguard enable bpduguard have been enabled.)
Page 17 of 43
CCNA: Scaling Networks SA Answer Key

Configuration Item or Task Specification Points

Configure Rapid PVST+. (2 points)

Configure as secondary root bridge for
(2 points)
VLAN 1.
Configure PortFast and BPDU Guard
(2 points)
on the interface connected to PC-C.

Configuration Item or
Task Specification IOS Commands

S3# show spanning-tree

Configure Rapid PVST+.
Configure as secondary
root bridge for VLAN 1.
Configure PortFast and
BPDU Guard on the
interface connected to
PC-C.
summary
(Verify that the switch is in rapid-
spanning-tree mode rapid-pvst pvst mode.)
S3# show run | section
spanning
(Verify configuration line:
spanning-tree vlan 1 priority
spanning-tree vlan 1 root secondary 28672.)
S3# show run interface f0/18
interface f0/18
spanning-tree portfast (Verify that portfast and
spanning-tree bpduguard enable bpduguard have been enabled.)

Step 4: Configure HSRP on R1.

Configuration tasks for R1 include the following:

Configuration Item or Task Specification Points

Group: 1
Configure the HSRP virtual IP address
Virtual IP address: 172.27.0.2 (2 points)
on interface G0/1.

Make this the primary HSRP router. (2 points)

Configure this router to become the
(2 points)
primary HSRP router on a reboot.

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 18 of 43
CCNA: Scaling Networks SA Answer Key

Configuration Item or
Task Specification IOS Commands

R1# show standby

(Verify that interface G0/1
Configure the HSRP interface has been configured with
virtual IP address on HSRP using Group 1, the
interface G0/1. interface Virtual IP has a
interface g0/1 172.27.0.2 address, and that
standby 1 ip 172.27.0.2 interface is active.)
R1# show standby
Make this the primary (Verify that interface G0/1 has
HSRP router. been configured with a HSRP
priority greater than 100 and that
standby 1 priority 150 the active router is local.)

Configure so this router R1# show standby

becomes the primary (Verify that interface G0/1 has
HSRP router on a reboot. standby 1 preempt Preemption enabled.)

Step 5: Configure HSRP on R3.

Configuration tasks for R3 include the following:

Configuration Item or Task Specification Points

Configure the HSRP virtual IP address Group: 1

(2 points)
on interface G0/1. Virtual IP address: 172.27.0.2

Configuration Item or
Task Specification IOS Commands

R3# show standby

Configure the HSRP (Verify that interface G0/1 has
virtual IP address on been configured with HSRP using
interface G0/1. Group 1, the interface Virtual IP
interface g0/1 address is 172.27.0.2, and that the
standby 1 ip 172.27.0.2 interface is in a standby state.)

Step 6: Configure an LACP EtherChannel between S1 and S3.

Configuration tasks include the following:

Configuration Item or Task Specification Points

On S1, configure an LACP EtherChannel

(2 points)
on interfaces connected to S3. Use group 1 and enable LACP unconditionally.
On S3, configure an LACP EtherChannel Use group 1 and enable LACP only if a LACP
(2 points)
on interfaces connected to S1. device is detected.

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 19 of 43
CCNA: Scaling Networks SA Answer Key

Configuration Item or Task Specification IOS Commands

S1# show etherchannel

On S1, configure an LACP
EtherChannel on interfaces
connected to S3.
On S3, configure an LACP
EtherChannel on interfaces
connected to S1.
summary
(Verify that group 1 is connected to
interface range f0/3-4 interfaces f0/3 and f0/4, and that
channel-group 1 mode active the status is SU.)
S3# show etherchannel
summary
(Verify that group 1 is connected to
interface range f0/3-4 interfaces f0/3 and f0/4, and that
channel-group 1 mode passive the status is SU.)

Instructor Sign-off Part 3: ______________________

Points: _________ of 28

Part 4: Configure EIGRP for IPv4 Dynamic Routing Protocol

Step 1: Configure EIGRP on R1.
Configuration tasks for R1 include the following:

Configuration Item or Task Specification Points

Autonomous System (AS) number 1 (1 point)

Router ID 1.1.1.1 (2 points)
Advertise directly connected networks. Use classless network addresses. (5 points)
Set all LAN interfaces as passive. (2 points)
Manually disable automatic summarization. (1 point)
Set the bandwidth on S0/0/0 128 Kb/s (1 point)
Change the hello-interval on S0/0/0. 30 seconds (1 point)
Change the hold-time on S0/0/0. 90 seconds (1 point)
Change bandwidth percentage available to EIGRP 70% (2 points)

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 20 of 43
CCNA: Scaling Networks SA Answer Key

Configuration Item
or Task Specification IOS Commands

Autonomous System R1# show ip protocols

(AS) number router eigrp 1 (Look for: Routing Protocol is "eigrp 1")
(From output from previous command,
Router ID eigrp router-id 1.1.1.1 look for: router-ID: 1.1.1.1)
R1# show run | section router eigrp
(Compare network commands to
Advertise directly network 172.27.0.0 0.0.0.255 specifications.) Can also use show ip
connected networks. network 172.27.123.0 0.0.0.3 protocols command.
R1# show ip protocols
(Look at passive interface section at
bottom of output. If not there, then either
the network wasn’t added or the passive
interface command was not applied. Use
Set all LAN interfaces the show run | section router eigrp
as passive. passive-interface g0/1 command to verify.)

Manually disable R1# show run | section router eigrp

automatic (Look for the no auto-summary
summarization. no auto-summary command.)

Set the bandwidth on R1# show interface s0/0/0

S0/0/0. bandwidth 128 (Look for BW 128 Kbit/sec.)
R1# show ip eigrp interface detail
(Look for Hello-interface and Hold-time on
Change the hello- both serial interfaces:
interval on S0/0/0. ip hello-interval eigrp 1 30 Hello-interval is 30, Hold-time is 90)
Change the hold-time
(See above step)
on S0/0/0. ip hold-time eigrp 1 90
R1# show ip eigrp interface detail
Bandwidth
percentage available (Both serial interfaces should display:
to EIGRP ip bandwidth-percent eigrp 1 70 Interface BW percentage is 70)

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 21 of 43
CCNA: Scaling Networks SA Answer Key

Step 2: Configure EIGRP on R2.

Configuration tasks for R2 include the following:

Configuration Item or Task Specification Points

Autonomous System number 1 (1 point)

Router ID 2.2.2.2 (2 points)
Advertise directly connected Networks. Use classless network addresses. (4 points)
Manually disable automatic summarization. (1 point)
Propagate the default route to all other EIGRP routers. (2 points)
Set the bandwidth on both serial interfaces. 128 Kb/s (1 point)
Change the hello-interval on serial interfaces. 30 seconds (1 point)
Change the hold-time on serial interfaces. 90 seconds (1 point)
Change bandwidth percentage available to EIGRP. 70% (2 points)

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 22 of 43
CCNA: Scaling Networks
Configuration Item or
Task
Autonomous system
number
Router ID
Advertise directly
connected networks.
Manually disable auto
summarization.
Propagate the default
route to all other EIGRP
routers.
Set the bandwidth on
both serial interfaces.
Change the hello-interval
on serial interfaces.
Change the hold-time on
serial interfaces.
Bandwidth percentage
available to EIGRP
© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public.
SA Answer Key
Specification IOS Commands
R2# show ip protocols
(Look for: Routing Protocol is "eigrp
router eigrp 1 1")
(From output from previous command,
eigrp router-id 2.2.2.2 look for: router-ID: 2.2.2.2)
R2# show run | section router ospf
(Compare network commands to
network 172.27.123.0 0.0.0.3 specifications.) Can also use show ip
network 172.27.123.4 0.0.0.3 protocols command.
R2# show run | section router eigrp
(Look for the no auto-summary
no auto-summary command)
R2# show ip protocols
(Look for Address Summarization:
section. Both serial interfaces should be
listed:
Address Summarization:
redistribute static 122.27.0.0/22 for Se0/0/0, Se0/0/1)
interface s0/0/0
R2# show interface s0/0/0
bandwidth 128
R2# show interface s0/0/1
interface s0/0/1
(Look for BW 128 Kbit/sec,)
bandwidth 128
R2# show ip eigrp interface detail
(Look for Hello-interface and Hold-time
on both serial interfaces:
ip hello-interval eigrp 1 30 Hello-interval is 30, Hold-time is 90)
(See above step)
ip hold-time eigrp 1 90
R2# show ip eigrp interface detail
(Both serial interfaces should display:
ip bandwidth-percent eigrp 1 70 Interface BW percentage is 70)
Page 23 of 43
CCNA: Scaling Networks SA Answer Key

Step 3: Configure EIGRP on R3.

Configuration tasks for R3 include the following:

Configuration Item or Task Specification Points

Autonomous System number 1 (1 point)

Router ID 3.3.3.3 (2 points)
Advertise directly connected Networks. Use classless network addresses. (5 points)
Set all LAN interfaces as passive. (2 points)
Manually disable automatic summarization. (1 point)
Set the serial interface bandwidth. 128 Kb/s (1 point)
Change the hello-interval on S0/0/1. 30 seconds (1 point)
Change the hold-time on S0/0/1. 90 seconds (1 point)
Change bandwidth percentage available to EIGRP. 70% (2 points)

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 24 of 43
CCNA: Scaling Networks SA Answer Key

Configuration Item
or Task Specification IOS Commands

Autonomous System R3# show ip protocols

number router eigrp 1 (Look for: Routing Protocol is "eigrp 1")
(From output from previous command, look
Router-ID eigrp router-id 3.3.3.3 for: router-ID: 3.3.3.3)
network 172.27.0.0 0.0.0.255
network 172.27.123.4 0.0.0.3 R3# show run | section router ospf
network 172.27.4.0 0.0.0.255 (Compare network commands to
specifications. Can also use show ip
Advertise directly network 172.27.5.0 0.0.0.255 protocols command.)
connected networks. network 172.27.6.0 0.0.0.255
R3# show ip protocols
(Look at passive interface section at
passive-interface g0/1 bottom of output. If not there then either the
network wasn’t added or the passive
passive-interface lo4
interface command was not applied. Use
Set all LAN interfaces passive-interface lo5 the show run | section router ospf
as passive. passive-interface lo6 command to verify.)
R3# show run | section router eigrp
Manually disable
automatic (Look for the no auto-summary command)
summarization. no auto-summary

Set the bandwidth on interface s0/0/1 R3# show interface s0/0/1

S0/0/1. bandwidth 128 (Look for BW 128 Kbit/sec,)
R3# show ip eigrp interface detail
(Look for Hello-interface and Hold-time on
Change the hello- both serial interfaces:
interval on S0/0/1. ip hello-interval eigrp 1 30 Hello-interval is 30, Hold-time is 90)
Change the hold-time
(See above step)
on S0/0/1. ip hold-time eigrp 1 90
R3# show ip eigrp interface detail
Bandwidth
percentage available (Both serial interfaces should display:
to EIGRP ip bandwidth-percent eigrp 1 70 Interface BW percentage is 70)

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 25 of 43
CCNA: Scaling Networks SA Answer Key

Step 4: Verify network connectivity.

Verify that EIGRP is functioning as expected. Enter the appropriate CLI command to discover the following
information:

Question Response Points

What command will display all connected EIGRP routers? show ip eigrp neighbor (1 point)
What command displays EIGRP hello-interval, hold-time, show ip eigrp interface detail (1 point)
and bandwidth percentage for all EIGRP interfaces on a
router?
What command displays the EIGRP Autonomous System show ip protocols (1 point)
number, router ID, routing networks, and passive interfaces
configured on a router?
What command displays only EIGRP routes? show ip route eigrp (1 point)

Instructor Sign-off Part 4: ______________________

Points: _________ of 51

Part 5: Verify Network Connectivity and HSRP Configuration

Step 1: Verify end-to-end connectivity.
Take corrective action if results are other than expected.

From Command To Expected Results Points

PC-A ping PC-C Ping should be successful. (1 point)

PC-B ping PC-A Ping should be successful. (1 point)
PC-B ping PC-C Ping should be successful. (1 point)
PC-B ping Default Gateway Ping should be successful. (1 point)
PC-B ping 209.165.200.225 Ping should be successful. (1 point)
PC-B tracert 209.165.200.225 Trace should route through R1. (1 point)

Note: It may be necessary to disable the PC firewall for pings to be successful

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 26 of 43
CCNA: Scaling Networks SA Answer Key

Step 2: Verify HSRP is working as expected.

Issue the shutdown command on R1 G0/1, and then re-issue the following commands to verify that HSRP is
working as expected:

From Command To Expected Results Points

PC-B ping 172.27.0.1 Ping should not be successful. (1 point)

PC-B ping Default Gateway Ping should be successful. (1 point)
PC-B ping 209.165.200.225 Ping should be successful. (1 point)
PC-B tracert 209.165.200.225 Trace should route through R3. (1 point)

Note: Wait a few seconds before testing after shutting down the interface on R1.
Instructor Sign-off Part 5: ______________________
Points: _________ of 10

Part 6: Cleanup
NOTE: DO NOT PROCEED WITH CLEANUP UNTIL YOUR INSTRUCTOR HAS GRADED YOUR SKILLS
EXAM AND HAS INFORMED YOU THAT YOU MAY BEGIN CLEANUP.
Before turning off power to the routers, remove the NVRAM configuration files (if saved) from all devices.

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 27 of 43
CCNA: Scaling Networks SA Answer Key

Router Interface Summary Table

Router Interface Summary

Router Model Ethernet Interface #1 Ethernet Interface #2 Serial Interface #1 Serial Interface #2

1800 Fast Ethernet 0/0 Fast Ethernet 0/1 Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
(F0/0) (F0/1)
1900 Gigabit Ethernet 0/0 Gigabit Ethernet 0/1 Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
(G0/0) (G0/1)
2801 Fast Ethernet 0/0 Fast Ethernet 0/1 Serial 0/1/0 (S0/1/0) Serial 0/1/1 (S0/0/1)
(F0/0) (F0/1)
2811 Fast Ethernet 0/0 Fast Ethernet 0/1 Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
(F0/0) (F0/1)
2900 Gigabit Ethernet 0/0 Gigabit Ethernet 0/1 Serial 0/0/0 (S0/0/0) Serial 0/0/1 (S0/0/1)
(G0/0) (G0/1)
Note: To find out how the router is configured, look at the interfaces to identify the type of router and how many
interfaces the router has. There is no way to effectively list all the combinations of configurations for each router
class. This table includes identifiers for the possible combinations of Ethernet and Serial interfaces in the device.
The table does not include any other type of interface, even though a specific router may contain one. An
example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation that can be
used in Cisco IOS commands to represent the interface.

Device Configs

Router R1 (Final)
R1# show run
Building configuration...

Current configuration : 2433 bytes

!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 28 of 43
CCNA: Scaling Networks SA Answer Key

no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
description Connection to S1
ip address 172.27.0.1 255.255.255.0
standby 1 ip 172.27.0.2
standby 1 priority 150
standby 1 preempt
duplex auto
speed auto
!
interface Serial0/0/0
description Connection to R2
bandwidth 128
ip address 172.27.123.1 255.255.255.252
ip bandwidth-percent eigrp 1 70
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
clock rate 128000
!
interface Serial0/0/1
no ip address
shutdown
!
router eigrp 1
network 172.27.0.0 0.0.0.255
network 172.27.1.0 0.0.0.255
network 172.27.2.0 0.0.0.255
network 172.27.3.0 0.0.0.255
network 172.27.123.0 0.0.0.3
passive-interface GigabitEthernet0/1
eigrp router-id 1.1.1.1
!
ip forward-protocol nd
!
no ip http server

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 29 of 43
CCNA: Scaling Networks SA Answer Key

no ip http secure-server
!
control-plane
!
banner motd ^C Unauthorized Access is Prohibited! ^C
!
line con 0
password 7 14141B180F0B
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 01100F175804
login
transport input all
!
scheduler allocate 20000 1000
!
end

Router R2 (Final)
R2# show run
Building configuration...

Current configuration : 2209 bytes

!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
memory-size iomem 15
!
ip cef
!

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 30 of 43
CCNA: Scaling Networks SA Answer Key

no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
interface Loopback0
description Connection to Internet
ip address 209.165.200.225 255.255.255.248
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0/0
description Connection to R1
bandwidth 128
ip address 172.27.123.2 255.255.255.252
ip bandwidth-percent eigrp 1 70
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
!
interface Serial0/0/1
description Connection to R3
bandwidth 128
ip address 172.27.123.5 255.255.255.252
ip bandwidth-percent eigrp 1 70
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
clock rate 2000000
!
!
router eigrp 1
network 172.27.123.0 0.0.0.3
network 172.27.123.4 0.0.0.3
redistribute static
eigrp router-id 2.2.2.2
!

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 31 of 43
CCNA: Scaling Networks SA Answer Key

ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 Loopback0
!
control-plane
!
banner motd ^C Unauthorized Access is Prohibited! ^C
!
line con 0
password 7 05080F1C2243
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 060506324F41
login
transport input all
!
scheduler allocate 20000 1000
!
end

Router R3 (Final)
R3# show run
Building configuration...

Current configuration : 2370 bytes

!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R3
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 32 of 43
CCNA: Scaling Networks SA Answer Key

no aaa new-model
memory-size iomem 15
!
ip cef
!
no ip domain lookup
no ipv6 cef
!
multilink bundle-name authenticated
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface GigabitEthernet0/1
description Connection to S3
ip address 172.27.0.3 255.255.255.0
standby 1 ip 172.27.0.2
duplex auto
speed auto
!
interface Serial0/0/0
no ip address
shutdown
clock rate 2000000
!
interface Serial0/0/1
description Connection to R2
bandwidth 128
ip address 172.27.123.6 255.255.255.252
ip bandwidth-percent eigrp 1 70
ip hello-interval eigrp 1 30
ip hold-time eigrp 1 90
!
router eigrp 1
network 172.27.0.0 0.0.0.255
network 172.27.4.0 0.0.0.255
network 172.27.5.0 0.0.0.255
network 172.27.6.0 0.0.0.255
network 172.27.123.4 0.0.0.3
passive-interface GigabitEthernet0/1
eigrp router-id 3.3.3.3
!

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 33 of 43
CCNA: Scaling Networks SA Answer Key

ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
control-plane
!
banner motd ^C Unauthorized Access is Prohibited! ^C
!
line con 0
password 7 05080F1C2243
login
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport input all
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
password 7 13061E010803
login
transport input all
!
scheduler allocate 20000 1000
!
end

Switch S1 (Final)
S1# show run
Building configuration...

Current configuration : 2599 bytes

!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname S1
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 34 of 43
CCNA: Scaling Networks SA Answer Key

system mtu routing 1500

!
no ip domain-lookup
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
spanning-tree vlan 1 priority 24576
!
vlan internal allocation policy ascending
!
interface Port-channel1
switchport mode trunk
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport mode trunk
channel-group 1 mode active
!
interface FastEthernet0/4
switchport mode trunk
channel-group 1 mode active
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
!
interface FastEthernet0/7
switchport mode access
shutdown
!
interface FastEthernet0/8
switchport mode access
shutdown
!
interface FastEthernet0/9
switchport mode access
shutdown
!
interface FastEthernet0/10
switchport mode access

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 35 of 43
CCNA: Scaling Networks SA Answer Key

shutdown
!
interface FastEthernet0/11
switchport mode access
shutdown
!
interface FastEthernet0/12
switchport mode access
shutdown
!
interface FastEthernet0/13
switchport mode access
shutdown
!
interface FastEthernet0/14
switchport mode access
shutdown
!
interface FastEthernet0/15
switchport mode access
shutdown
!
interface FastEthernet0/16
switchport mode access
shutdown
!
interface FastEthernet0/17
switchport mode access
shutdown
!
interface FastEthernet0/18
switchport mode access
shutdown
!
interface FastEthernet0/19
switchport mode access
shutdown
!
interface FastEthernet0/20
switchport mode access
shutdown
!
interface FastEthernet0/21
switchport mode access
shutdown
!
interface FastEthernet0/22
switchport mode access
shutdown

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 36 of 43
CCNA: Scaling Networks SA Answer Key

!
interface FastEthernet0/23
switchport mode access
shutdown
!
interface FastEthernet0/24
switchport mode access
shutdown
!
interface GigabitEthernet0/1
switchport mode access
shutdown
!
interface GigabitEthernet0/2
switchport mode access
shutdown
!
interface Vlan1
ip address 172.27.0.11 255.255.255.0
!
ip default-gateway 172.27.0.2
ip http server
ip http secure-server
!
banner motd ^C Unauthorized Access is Prohibited! ^C
!
line con 0
password 7 030752180500
login
line vty 0 4
password 7 030752180500
login
line vty 5 15
password 7 030752180500
login
!
end

Switch S2 (Final)
S2# show run
Building configuration...

Current configuration : 2464 bytes

!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 37 of 43
CCNA: Scaling Networks SA Answer Key

!
hostname S2
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
no ip domain-lookup
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport mode trunk
!
interface FastEthernet0/4
switchport mode trunk
!
interface FastEthernet0/5
switchport mode access
shutdown
!
interface FastEthernet0/6
switchport mode access
shutdown
!
interface FastEthernet0/7
switchport mode access
shutdown
!
interface FastEthernet0/8
switchport mode access
shutdown
!
interface FastEthernet0/9
switchport mode access
shutdown

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 38 of 43
CCNA: Scaling Networks SA Answer Key

!
interface FastEthernet0/10
switchport mode access
shutdown
!
interface FastEthernet0/11
switchport mode access
shutdown
!
interface FastEthernet0/12
switchport mode access
shutdown
!
interface FastEthernet0/13
switchport mode access
shutdown
!
interface FastEthernet0/14
switchport mode access
shutdown
!
interface FastEthernet0/15
switchport mode access
shutdown
!
interface FastEthernet0/16
switchport mode access
shutdown
!
interface FastEthernet0/17
switchport mode access
shutdown
!
interface FastEthernet0/18
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
!
interface FastEthernet0/19
switchport mode access
shutdown
!
interface FastEthernet0/20
switchport mode access
shutdown
!
interface FastEthernet0/21
switchport mode access
shutdown

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 39 of 43
CCNA: Scaling Networks SA Answer Key

!
interface FastEthernet0/22
switchport mode access
shutdown
!
interface FastEthernet0/23
switchport mode access
shutdown
!
interface FastEthernet0/24
switchport mode access
shutdown
!
interface GigabitEthernet0/1
switchport mode access
shutdown
!
interface GigabitEthernet0/2
switchport mode access
shutdown
!
interface Vlan1
ip address 172.27.0.12 255.255.255.0
!
ip default-gateway 172.27.0.2
ip http server
ip http secure-server
!
banner motd ^C Unauthorized Access is Prohibited! ^C
!
line con 0
password 7 01100F175804
login
line vty 0 4
password 7 01100F175804
login
line vty 5 15
password 7 01100F175804
login
!
end

Switch S3 (Final)
S3# show run
Building configuration...

Current configuration : 2599 bytes

!
version 15.0

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 40 of 43
CCNA: Scaling Networks SA Answer Key

no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname S3
!
boot-start-marker
boot-end-marker
!
enable secret 4 06YFDUHH61wAE/kLkDq9BGho1QM5EnRtoyr8cHAUg.2
!
no aaa new-model
system mtu routing 1500
!
no ip domain-lookup
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
spanning-tree vlan 1 priority 28672
!
vlan internal allocation policy ascending
!
interface Port-channel1
switchport mode trunk
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport mode trunk
channel-group 1 mode passive
!
interface FastEthernet0/4
switchport mode trunk
channel-group 1 mode passive
!
interface FastEthernet0/5
switchport mode access
!
interface FastEthernet0/6
switchport mode access
shutdown
!
interface FastEthernet0/7
switchport mode access

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 41 of 43
CCNA: Scaling Networks SA Answer Key

shutdown
!
interface FastEthernet0/8
switchport mode access
shutdown
!
interface FastEthernet0/9
switchport mode access
shutdown
!
interface FastEthernet0/10
switchport mode access
shutdown
!
interface FastEthernet0/11
switchport mode access
shutdown
!
interface FastEthernet0/12
switchport mode access
shutdown
!
interface FastEthernet0/13
switchport mode access
shutdown
!
interface FastEthernet0/14
switchport mode access
shutdown
!
interface FastEthernet0/15
switchport mode access
shutdown
!
interface FastEthernet0/16
switchport mode access
shutdown
!
interface FastEthernet0/17
switchport mode access
shutdown
!
interface FastEthernet0/18
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
!
interface FastEthernet0/19
switchport mode access

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 42 of 43
CCNA: Scaling Networks SA Answer Key

shutdown
!
interface FastEthernet0/20
switchport mode access
shutdown
!
interface FastEthernet0/21
switchport mode access
shutdown
!
interface FastEthernet0/22
switchport mode access
shutdown
!
interface FastEthernet0/23
switchport mode access
shutdown
!
interface FastEthernet0/24
switchport mode access
shutdown
!
interface GigabitEthernet0/1
switchport mode access
shutdown
!
interface GigabitEthernet0/2
switchport mode access
shutdown
!
interface Vlan1
ip address 172.27.0.13 255.255.255.0
!
ip default-gateway 172.27.0.2
ip http server
ip http secure-server
!
banner motd ^C Unauthorized Access is Prohibited! ^C
!
line con 0
password 7 030752180500
login
line vty 0 4
password 7 030752180500
login
line vty 5 15
password 7 030752180500
login
end

© Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 43 of 43