Shared by www.ccna4u.

info
quocvuong.it@gmail.com

Semester 4 Group No: Login ID Device Score

Class: CNA Student 1: Site1

Instructor: Student 2: Site2, SW3

Le The Quyen Student 3: Site3
Date: Student 4: Link1
Examiner: Student 5: Link2
FRSW,
Total time: 150 mins Student 6:
SW1, SW2

Section 1: Network Diagram, major IP address = 172.168.0.0/16

Section 2: IP subnetting (20 points, for all team)

- Each Ethernet network requires 150 IPs (except VLAN default on SW3 take only
8 IPs for NAT inside global address)
- Use VLSM so that IPs are provided only as much as required.

Section 3: IP configuration (25 points, for all team)

a) Standard Configuration: Create standard configuration on all routers (hostname,
cisco password, meaningful banner and description, full host table…)

page 1 of 3
 Shared by www.ccna4u.info
quocvuong.it@gmail.com
b) Routing protocol: Use EIGRP 3000 routing protocol for the network sections as
described in the topology.

Section 4: Individual configurations (20 points, for each student)

Student1:
a) Configure Inter-VLAN routing
b) Configure PAT for VLAN default on SW3 with the local inside address of
10.0.0.0/16. Create point-to-point frame-relay subinterface connection
Student2:
a) Supply IP addresses for VLAN VL2, excluding router address, DNS address is
172.168.0.1. Create point-to-point frame-relay subinterface connections
b) Only allow hosts in VLAN VL2 to telnet to this router. Assign names, IPs and
passwords for SW3.

Vlan ‘VL2’ Default and trunk

SW3 port 1->6 all other ports

Student3:
a) Configure Inter-VLAN routing
b) Create point-to-point frame-relay subinterface connection. Do not allow traffic
between VLAN red and VLAN default. Other networks can not access VLANs on
SW1&SW2 by ftp.
Student4:
a) PPP multilink, PAP authentication on physical interfaces, require other to sent
username=pppmulti, password=authen.
b) Supply IP addresses for VLAN red, excluding router address, DNS address is
172.168.0.1. Only VLAN blue is not allow to access this router by web
Student5:
a) PPP multilink, PAP authentication on physical interfaces, required to sent
username=pppmulti, password=authen to connect to other router.
b) Supply IP addresses for VLAN blue, excluding router address, DNS address is
172.168.0.1. Only VLAN red is not allow to telnet to router
Student6:
a) VLAN & VTP: Assign names, IPs and passwords for SW1, SW2, SW3. Make
SW1 be the server and SW2 be the client; domain name = ‘color’. VLAN and port
assignment as in the following, apply port security for all ports belong to VLANs
default:

vlan ‘red’ ‘blue’ Default and trunk

SW1 port 7,8,9 port 4,5,6 all other ports
SW2 port 4,5,6 port 1,2,3 all other ports
b) Frame-relay switch: assign ‘fr_sw’ enable frame-relay switching function, create
PVCs as shown in network diagram, encapsulation IETF, lmi-type ANSI.
Test ACL: define an ACL to allow all subnet to telnet to this router except VLAN
VL2 va VLAN red (this is for testing only, you can configure ACL on this router,
but it is not applicable while it functions as a switch)

page 2 of 3
 Shared by www.ccna4u.info
quocvuong.it@gmail.com
Section 5: Practical theory (35 points, for each student)
Each student will receive a paper sheet with questions, read carefully before you
answer.

– END –

page 3 of 3