G S

0/0 0/0/0 2001:DB8:1:A

00::/64
G
0/1

192.168.1.15
Instructions for Final Exam Part 2- 7
2001:DB8:1:3::20/64
Complete the following activities. You must start by completing the forms listed and filling in the required
information on any tables listed in this document. The completed document must be submitted to
bakerjo@uhcl.edu along with the completed packet tracer. You may write in your answers and scan or take a
picture (as long as I can read it) or you can type your answers into the document and then save and return it.
Save both the answers from this document and the packet tracer with your first and last name in the document
title. The assignment is due by 4:15 on Monday, May 10, 2020. As a reminder, this assignment will require
some grading by me and is not completely auto graded, which results in the grading percentage being less
than 100% in packet tracer when you have completed the assignment.

Assessment Objectives
Part 1: Develop the IPv4 Address Scheme
Part 2: Complete Configuration of router IDF1 with IPv4
Part 3: Configure the switches Sales and Manufacturing
Part 4: Configure all PCs with appropriate IPv4 addresses
Part 5: Test and Verify IPv4 End-to-End Connectivity – troubleshoot if necessary
Part 6: Configure IPv6 Addressing on IDF1 and all PCs
Part 7: Test and Verify IPv6 End-to-End Connectivity – troubleshoot if necessary
Part 8: Configure additional security on IDF1
Part 9: Backup the IDF1 Configuration to a TFTP Server
Part 10: Use the IOS CLI to Gather Device Information
Part 1: Develop the IPv4 Addressing Scheme
You have been given the IP address 192.168.1.0 /24. You will need to use VLSM to subnet the IP address
range to meet the needs of the network.
Sales LAN = 47 hosts – Use the zero subnet
Manufacturing LAN = 60 hosts – Use the next available subnet
Management LAN = 24 host – Use next available after the Manufacturing subnet
WAN link requires a subnet with only 2 usable addresses – Use next available subnet after Mgmt LAN

Manufacturing LAN Subnet – 60 hosts

Specification Answer
Sales LAN Subnet = 47 hosts Network Prefix /X
Specification Answer New subnet mask (decimal)
Network Prefix /X Maximum number of usable host
New subnet mask (decimal) addresses in this subnet
Maximum number of usable host Network ID address
addresses in this subnet First IP Host Address
Network ID address Last IP Host Address
First IP Host Address Broadcast Address
Last IP Host Address
Broadcast Address

WAN Link Subnet = 2 hosts

Specification Answer
Management LAN Subnet = 24 hosts Network Prefix /X
Specification Answer New subnet mask (decimal)
Network Prefix /X Maximum number of usable host
New subnet mask (decimal) addresses in this subnet

Maximum number of usable host Network ID address

addresses in this subnet First IP Host Address
Network ID address Last IP Host Address
First IP Host Address Broadcast Address
Last IP Host Address
Broadcast Address
Use the first available host address in each subnet to address the router interfaces.
Use the second available host address in each subnet to address the PC.
Use the last available host address in each subnet to address the management interface of the switch.
The WAN link will use the first available address in the subnet

Device IP address Mask Gateway

IDF1 – G0/0 N/A

IDF1 – G0/1 N/A
IDF1 – S0/0/0 N/A
Sales switch
Sales PC
Manufacturing switch
Manufacturing PC
Management switch
Management PC
*NOTE: the Management switch has been preconfigured, as has been the Core Router
Part 2: Complete Basic Configuration of router IDF1 with IPv4 via console connection
Hostname IDF1
Encrypted password class123
Line password cisco123
Banner message NO UNAUTHORIZED ENTRY
G0/0 description Link to Sales LAN
G0/1 description Link to Manufacturing LAN
S0/0/0 description WAN Link to Management

*NOTE: banner and descriptions must match exactly to receive credit.

Configure the appropriate interfaces on the router with IP address, subnet mask, provide a description, and
enable the interface.
Save the running configuration.
Part 3: Configure the switches Sales and Manufacturing
Configure the switches with the information below and the addressing information previously determined. Be
sure to set the default gateway. The VLAN1 interface will require an IP address, subnet mask, description, and
it must be enabled.
Hostname Sales and Manufacturing
Encrypted password class123
Line password cisco123
Banner message NO UNAUTHORIZED ENTRY
VLAN1 description Switch management interface

Part 4: Configure all PCs with appropriate IPv4 addresses

See table in Step 1 for addressing information. Each PC will require an IP address, subnet mask, and default
gateway.
Part 5: Test and Verify IPv4 End-to-End Connectivity – troubleshoot if necessary
Use PING from the Command Prompt to test end-to-end connectivity. (all should be successful)
 Sales PC  Manufacturing PC
 Sales PC  Management PC
 Sales PC  TFTP server (192.168.1.157)
Part 6: Configure IPv6 Addressing on IDF1 and all PCs
Enable IPv6 on the IDF1 router.

You have been given 2001:DB8:1::/48 to subnet for your LANs.

The subnets will be:

Sales LAN – 1st Subnet (don’t use “0” subnet)
Manufacturing LAN – 2nd subnet
Management LAN – 3rd subnet – but you will just configure the PC as the rest of this subnet on Core &
Management Switch has already been configured – so make sure you get the right subnet.
Configure the GIG 0/0 Sales LAN interfaces on IDF1 with the 1st available address in its respective subnet
Use the next IPv6 subnet to configure the Manufacturing LAN.
The Management LAN uses the third IPv6 subnet. You will just configure the PC on this LAN
Use the first host address for the router interface and FE80::1 as the link local address.
Use the second host address for the PC - Default gateway on the PC should be the Link-Local address.
Device / Interface Address Default gateway Link local
IDF1 – G0/0
IDF1 – G0/1
IDF1 – S0/0/0 2001:DB8:1:A00::2/64 FE80::1 3
Sales PC
Manufacturing PC
Management PC

Part 7: Test and Verify IPv6 End-to-End Connectivity – troubleshoot if necessary

Use PING from the Command Prompt to test end-to-end connectivity. (all should be successful)
 Sales PC  Manufacturing PC
 Sales PC  Management PC
 Sales PC  TFTP server (2001:DB8:1:3::20)
Part 8: Configure additional security on IDF1
Manually encrypt all clear text passwords on the router and switches.
Configure the domain northlake.com on the router.
Configure a local username and secret password on the router.
 Username: dog
 Password: class123
Configure the router with the command crypto key generate rsa
Set the set the modulus to 1024.
Configure SSH on the vty lines of the router and specify that it use the local login information.
Configure the minimum password length to be 8 characters.
Configure the router to block login attempts after 3 failed attempts within 60 seconds. The user should be
blocked for 2 minutes.
Part 9: Backup the IDF1 Configuration to a TFTP Server
Use the appropriate command to backup the router running configuration to the TFTP server (192.168.1.157)
Click on the TFTP server, then select the Services tab. Click on TFTP in the Services list. Verify that the
configuration has been successfully saved. ****note-this is not from the class notes, but it can be done using
information covered in the notes and with online resources. Failure to complete this will not negatively impact
your grade, but completing it will help make up for any points missing in other areas****
Part 10: Use the IOS CLI to Gather Device Information
Use show commands on the router to determine the following information.
Command Used Information Desired Value Found
IOS version
Number of files in flash
Brief description of all interfaces N/A
Start up configuration N/A
Address resolution table N/A
Help to configure clock settings N/A