CCNA VTP SIM Question

Question This task requires you to use the CLI of Sw-AC3 to answer five
multiple-choice questions. This does not require any configuration.
To answer the multiple-choice questions, click on the numbered boxes in
the right panel.

There are five multiple-choice questions with this task. Be sure to answer all
five questions before leaving this item.
Question 1:What interface did Sw-AC3 associate with source MAC address
0010.5a0c.ffba ?
a) Fa0/1 b) Fa0/3 c) Fa0/6 d) Fa0/8 e) Fa0/9 f) Fa0/12
Answer: Fa 0/8
Explanation: to find out which interface associated with a given MAC
address, use the show mac-address-table command. It shows the learned
MAC addresses and their associated interfaces. After entering this
command, you will see a MAC address table like this:
From this table we can figure out that the MAC address 0010.5a0c.ffba is
associated with interface Fa0/8
Question 2:
What ports on Sw-AC3 are operating has trunks (choose three)?
a) Fa0/1 b) Fa0/3 c) Fa0/4 d) Fa0/6 e) Fa0/9 f) Fa0/12
Answer: Fa0/3, Fa0/9 and Fa0/12
Explanation: Use the show interface trunk command to determine the
trunking status of a link and VLAN status. This command lists port, its
mode, encapsulation and whether it is trunking. The image below shows
how it works:

(This image is used for demonstration only)

Question 3:What kind of router is VLAN-R1?
a) 1720 b) 1841 c) 2611 d) 2620 Answer: 2620
Explanation: VLAN-R1 is the router directly connected to Sw-Ac3 switch, so
we can use the show cdp neighbors command to see:
1. Neighbor Device ID : The name of the neighbor device;
2. Local Interface : The interface to which this neighbor is heard
3. Capability: Capability of this neighboring device - R for router, S for
switch, H for Host etc.
4. Platform: Which type of device the neighbor is
5. Port ID: The interface of the remote neighbor you receive CDP information
6. Holdtime: Decremental hold time in seconds
Sample output of show cdp neighbors command:

One thing I want to notice you is "Local Intrfce" in the image above refers to
the local interface on the device you are running the "show cdp neighbors"
command
Question 4: Which switch is the root bridge for VLAN 1?
Answer: Sw-DS1
Explanation: First we use the show spanning-tree vlan 1 to view the
spanning-tree information of VLAN 1

From the "Cost 19", we learn that the root switch is directly connected to the
Sw-Ac3 switch over a 100Mbps Ethernet link
Notice that if you see all of the interface roles are Desg (designated) then
you can confirm Sw-Ac3 switch is the root bridge for this VLAN (VLAN 1).
If you see there is at least one Root port in the interface roles then you can
confirm Sw-Ac3 is not the root bridge because root bridge does not have
root port. In this case, we notice that the root port on Sw-Ac3 switch is
FastEthernet0/12, so we have to figure out which switch is associated with
this port -> it is the root bridge. You can verify it with the show cdp
neighbors command:

The "Local Intrfce" column refers to the interface on the switch running
"show cdp neighbors" command. In this case, Sw-DS1 is associated with
interface FastEthernet0/12 -> Sw-DS1 is the root bridge
Question 5: What address should be configured as the default-gateway for
the host connected to interface fa 0/4 of SW-Ac3?
Answer: 192.168.44.254
Explanation:
First we have to identify which VLAN interface Fa0/4 belongs to by the show
vlan command
From the exhibit we know that VLAN 44 is configured on router using sub-
interface Fa0/0.44 with IP address 192.168.44.254/24

Therefore the default gateway of the host should be 192.168.44.254

Question 6: From which switch did Sw-Ac3 receive VLAN information ?

Answer: Sw-AC2
Explanation: to view the VTP configuration information, use the show vtp
status command

So we knew Sw-Ac3 received VLAN information from 163.5.8.3 (notice:the IP

address may be different). Finally we use the show cdp neighbors detail to
find out who 163.5.8.3 is:
Question 7: Refer to the exibit, SwX was taken out of the production network
for maintenance. It will be reconnected to the Fa 0/16 port of Sw-Ac3. What
happens to the network when it is reconnected and a trunk exists between
the two switches?

A - All VLANs except the default VLAN win be removed from all switches
B - All existing switches will have the students, admin, faculty, Servers,
Management, Production, and no-where VLANs
C - The VLANs Servers, Management, Production and no-where will replace
the VLANs on SwX
D - The VLANs Servers, Management, Production and no-where will be
removed from existing switches
Answer and Explanation:
First we should view the VTP configuration of switch Sw-Ac3 by using the
show vtp status command on Sw-Ac3

Notice that its configuration revision number is 5 and VTP Domain Name is
home-office
Next, from the exhibit we know that SwX has a revision number of 6, which
is greater than that of Sw-Ac3 switch, and both of them have same VTP
Domain Name called "home-office".

Therefore SwX will replace vlan information on other switches with its own
information. We should check vlan information of Sw-Ac3 switch with show
vlan command

So the correct answer is D - The VLANs Servers, Management, Production

and no-where will be removed from existing switches
Please notice that in the real CCNA exam you may see a different
configuration revision of Sw-Ac3 or of SwX. In general, which switch has a
higher revision number it will become the updater and other switches will
overwrite their current databases with the new information received from
the updater (provided that they are on the same domain and that switch is
not in transparent mode).In particular, if the revision number of SwX is lower
than that of Sw-Ac3, the answer should be "C - The VLANs Servers,
Management, Production and no-where will replace the VLANs on SwX".
Also, some recent comments have said that the new switch's VTP Operating
Mode is Server but the answer is still the same.
Question 8:
Out of which ports will a frame be forwarded that has source mac-address
0010.5a0c.fd86 and destination mac-address 000a.8a47.e612? (Choose
three)
A - Fa0/8 B - Fa0/3 C - Fa0/1 D - Fa0/12
Answer: B C D
Explanation:
First we check to see which ports the source mac-address and the
destination mac-address belong to by using show mac-address-table
command

We notice that the source mac-address 0010.5a0c.fd86 is listed in the table

and it belongs to Vlan 33 but we can't find the destination mac-address
000a.8a47.e612 in this table. In this case, the switch will flood to all ports of
Vlan 33 and flood to all the trunk links, except the port it received this frame
(port Fa0/6). Therefore from the output above, we can figure out it will flood
this frame to Fa0/1, Fa0/3 and Fa0/12.
Please notice that the "show mac-address-table" command just lists
information that was learned by the switch, it means that there can be other
ports besides Fa0/1, Fa0/3 and Fa0/12 belong to Vlan 33. You can use the
show vlan command to see which ports belong to vlan 33

And we found other ports which belong to vlan 33, they are Fa0/2, Fa0/5 and
Fa0/7. Our switch will flood the frame to these ports, too.
And we can check which trunk ports will receive this frame by the show
interface trunk command

-> Port Fa0/9 will also receive this frame!

Question 9:
If one of the host connected to Sw-AC3 wants to send something for the ip
190.0.2.5 (or any ip that is not on the same subnet) what will be the
destination MAC address
Answer and Explanation:
Because the destination address is not on the same subnet with the switch,
it will forward the packet to its default gateway. So we have to find out who
is the default gateway of this switch by using the show running-config
command

From the output, we notice that its default-gateway is 192.168.1.254. In fact,

we can easily guess that its default gateway should be a layer 3 device like a
router; and in this case, the VLAN-R1 router. To verify our theory, use the
show cdp neighbor detail command and focus on the description of VLAN-
R1 router

From this output, we can confirm the switch's default gateway is VLAN-R1
router (with the IP address of 192.168.1.254). And "the interface:
FastEthernet0/3" tells us that the switch is connected to VLAN-R1 router
through Fa0/3 port (Fa0/3 is the port on the switch).
Finally we just need to use the show mac-address-table command to find
out which MAC address is associated with this interface
(Notice that in the real CCNA exam the MAC address or port may be
different)
And we find out the corresponding MAC address is 000a.b7e9.8360.
Although there are some entries of port Fa0/3 with different Vlans but they
have the same MAC address
CCNA Access List Sim 2
Wednesday, 03 March 2010 06:49

Question
A network associate is adding security to the configuration of the Corp1
router. The user on host C should be able to use a web browser to access
financial information from the Finance Web Server. No other hosts from the
LAN nor the Core should be able to use a web browser to access this
server. Since there are multiple resources for the corporation at this
location including other resources on the Finance Web Server, all other
traffic should be allowed.

The task is to create and apply an access-list with no more than three
statements that will allow ONLY host C web access to the Finance Web
Server. No other hosts will have web access to the Finance Web Server. All
other traffic is permitted.
Access to the router CLI can be gained by clicking on the appropriate host.

All passwords have been temporarily set to "cisco".

The Core connection uses an IP address of 198.18.196.65
The computers in the Hosts LAN have been assigned addresses of
192.168.33.1 - 192.168.33.254
Host A 192.168.33.1
Host B 192.168.33.2
Host C 192.168.33.3
Host D 192.168.33.4
The servers in the Server LAN have been assigned addresses of
172.22.242.17 - 172.22.242.30
The Finance Web Server is assigned an IP address of 172.22.242.23.

Answer and Explanation

Corp1>enable (you may enter "cisco" as it passwords here)

We should create an access-list and apply it to the interface which is

connected to the Server LAN because it can filter out traffic from both Sw-2
and Core networks. The Server LAN network has been assigned addresses
of 172.22.242.17 - 172.22.242.30 so we can guess the interface connected to
them has an IP address of 172.22.242.30 (.30 is the number shown in the
figure). Use the "show running-config" command to check which interface
has the IP address of 172.22.242.30.

Corp1#show running-config
We learn that interface FastEthernet0/1 is the interface connected to Server
LAN network. It is the interface we will apply our access-list (for outbound
direction).
Corp1#configure terminal
Our access-list needs to allow host C - 192.168.33.3 to the Finance Web
Server 172.22.242.23 via web (port 80)
Corp1(config)#access-list 100 permit tcp host 192.168.33.3 host
172.22.242.23 eq 80
Deny other hosts access to the Finance Web Server via web
Corp1(config)#access-list 100 deny tcp any host 172.22.242.23 eq 80
All other traffic is permitted
Corp1(config)#access-list 100 permit ip any any
Apply this access-list to Fa0/1 interface (outbound direction)
Corp1(config)#interface fa0/1
Corp1(config-if)#ip access-group 100 out
Notice: We have to apply the access-list to Fa0/1 interface (not Fa0/0
interface) so that the access-list can filter traffic coming from the Core
network.
In the real exam, just click on host C and open its web browser. In the
address box type http://172.22.242.23 to check if you are allowed to access
Finance Web Server or not. If your configuration is correct then you can
access it.
Click on other hosts (A, B and D) and check to make sure you can't access
Finance Web Server from these hosts.
Finally, save the configuration
Corp1(config-if)#end
Corp1#copy running-config startup-config
(This configuration only prevents hosts from accessing Finance Web Server
via web but if this server supports other traffic - like FTP, SMTP... then other
hosts can access it, too.)
Notice: In the real exam, you might be asked to allow other host (A, B or D)
to access the Finance Web Server so please read the requirement carefully.
I created this sim in Packet Tracer v5.2.1 so you can practice with it. You will
need new version of Packet Tracer to open it (v5.1+).
Notice: After typing the commands above, if you make a "ping" from other
hosts (PC0, PC1, PC3) then PC4 (Finance Web Server) can still reply
because we just filter HTTP traffic, not ICMP traffic. To generate HTTP
traffic, select "Web Browser" in the "Desktop" tab of these PCs. When a web
browser opens, type the IP address of Finance Web Server and you can see
how traffic flows in Simulation Mode.

And notice that in the initial configuration of this sim the Core network can
ping Finance Web Server. We have to create an access-list that can filter
this traffic too.

CCNA Access List Sim

Friday, 06 March 2009 06:02

Question:
An administrator is trying to ping and telnet from Switch to Router with the
results shown below:
Switch>
Switch> ping 10.4.4.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.4.4.3,timeout is 2 seconds:
.U.U.U
Success rate is 0 percent (0/5)
Switch>
Switch> telnet 10.4.4.3
Trying 10.4.4.3 ...
% Destination unreachable; gateway or host down
Switch>
Click the console connected to Router and issue the appropriate commands
to answer the questions
Answer and Explanation
For this question we only need to use the show running-config command to
answer all the questions below
Router>enable
Router#show running-config
Question 1: Which will fix the issue and allow ONLY ping to work while
keeping telnet disabled?

A - Correctly assign an IP address to interface fa0/1

B - Change the ip access-group command on fa0/0 from "in" to "out"
C - Remove access-group 106 in from interface fa0/0 and add access-group
115 in.
D - Remove access-group 102 out from interface s0/0/0 and add access-
group 114 in
E - Remove access-group 106 in from interface fa0/0 and add access-group
104 in
Answer: E

Explanation:Let's have a look at the access list 104:

The question does not ask about ftp traffic so we don't care about the two
first lines. The 3rd line denies all telnet traffic and the 4th line allows icmp
traffic to be sent (ping). Remember that the access list 104 is applied on the
inbound direction so the 5th line "access-list 104 deny icmp any any echo-
reply" will not affect our icmp traffic because the "echo-reply" message will
be sent over the outbound direction.

Question 2:What would be the effect of issuing the command ip access-

group 114 in to the fa0/0 interface?

A - Attempts to telnet to the router would fail

B - It would allow all traffic from the 10.4.4.0 network
C - IP traffic would be passed through the interface but TCP and UDP traffic
would not
D - Routing protocol updates for the 10.4.4.0 network would not be accepted
from the fa0/0 interface

Answer: B

Explanation: From the output of access-list 114: access-list 114 permit ip

10.4.4.0 0.0.0.255 any we can easily understand that this access list allows
all traffic (ip) from 10.4.4.0/24 network

Question 3:What would be the effect of issuing the command access-group

115 in on the s0/0/1 interface?

A - No host could connect to Router through s0/0/1

B - Telnet and ping would work but routing updates would fail.
C - FTP, FTP-DATA, echo, and www would work but telnet would fail
D - Only traffic from the 10.4.4.0 network would pass through the interface

Answer: A

Explanation:First let's see what was configured on interface S0/0/1:

Recall that each interface only accepts one access-list, so when using the
command “ip access-group 115 in” on the s0/0/1 interface it will overwrite
the initial access-list 102. Therefore any telnet connection will be accepted
(so we can eliminate answer C).
B is not correct because if telnet and ping can work then routing updates
can, too.
D is not correct because access-list 115 does not mention about 10.4.4.0
network. So the most reasonable answer is A.

But here raise a question…

The wildcard mask of access-list 115, which is 255.255.255.0, means that

only host with ip addresses in the form of x.x.x.0 will be accepted. But we all
know that x.x.x.0 is likely to be a network address so the answer A: “no host
could connect to Router through s0/0/1” seems right…

But what will happen if we don’t use a subnet mask of 255.255.255.0? For
example we can use an ip address of 10.45.45.0 255.255.0.0, such a host
with that ip address exists and we can connect to the router through that
host. Now answer A seems incorrect! Please comment if you have any idea
for this sim!

Well, the title said it all. Here are some screenshots about the labs in Packet
Tracer Simulator:

CCNA Drag And Drop SIM:

CCNA EIGRP SIM:

Configuration SIM:

Please say thanks to Runiya, who created these lab-sim questions on

Packet Tracer. Now you can practice with real labs in your CCNA exam!
The lab file includes:

+ CCNA Implementation sim

+ CCNA drag and drop sim
+ CCNA EIGRP sim
+ CCNA NAT sim
+ CCNA RIP Configuration sim

Link to download these labs

Download lab files from 9tut

Fred contributed the new access-list sim for us, please say thanks to him,
too!

Download Access-list sim lab file from 9tut

Download the VTP sim shared by Zeldall:

http://www.valit.ca/lab/ccna/ccna_vtp_sim.zip

Please notice that in real exam, you have to click on host (PC) to access
command-line-interface of the router, not the router itself.
DHCP Group of Four Questions
Friday, 09 January 2009 01:55 administrator

(Updated on July-09-2010)

Refer to the exhibit. Using the information shown, answer the question

Question 1:
All hosts in the networks have been operational for several hours when the
DHCP server goes down. What happens to the hosts that have obtained
service from the DHCP server?

A - The hosts will not be able to communicate with any other hosts.
B - The hosts will continue to communicate normally for a period of time.
C - The hosts will be able to communicate with hosts outsides their own
network
D - The hosts will only be able to communicate with other hosts by IP
address not by hostname

Answer: B

Explanation:DHCP often uses dynamic allocation mechanism to save IP

addresses, which assigns an IP address to a client for a limited period of
time. So when the DHCP server goes down, that client can still use the
allocated IP address for a period of time

Question 2:

What is the purpose of the DHCP server?

A - to provide storage for email

B - to translate URLs to IP addresses
C - to translate IPv4 addresses to MAC addresses
D - to provide an IP configuration information to hosts

Answer: D

Explanation: The main purpose of the DHCP server is to provide IP

configuration parameters to hosts such as the default gateway, domain
name, Domain Name System (DNS) server...

Question 3:

How is the message sent from a PC2 when is first powers on and attempts
to contact the DHCP Server?

A - Layer 3 unicast
B - Layer 3 broadcast
C - Layer 3 multicast
D - Without any Layer 3 encapsulation

Answer: B
Explanation:When a client boots up for the first time, it transmits a
DHCPDISCOVER message on its local physical subnet. Because the client
has no way of knowing the subnet to which it belongs, the DHCPDISCOVER
is an all-subnets broadcast (destination IP address of 255.255.255.255,
which is a layer 3 broadcast address). The client does not have a configured
IP address, so the source IP address of 0.0.0.0 is used.

Question 4:

What is the default behavior of R1 when PC1 requests service from DHCP
server?

A - Drop the request

B - Broadcast the request to P4S2 and P4S3
C - Forward the request to P4S2
D - Broadcast the request to P452, P4S3 and ISP

Answer: A

Explanation:When PC1 requests service from DHCP server (for example, it

requests an IP address), it sends a broadcast packet. But R1 router, by
default, will not forward broadcast packet and drop it.

For your information, if you want to use the DHCP server from another
network (like in this case) you can use the ip helper-address command
which will make the router forward UDP broadcasts.

In the real exam you will be taken to a LAB simulation environment but it is,
in fact, just a group of 4 multi-choice questions!
CCNA Implementation SIM
Monday, 20 October 2008 11:16 administrator

This topology contains 3 routers and 1 switch. Complete the topology.

Drag the appropriate device icons to the labeled Device

Drag the appropriate connections to the locations labeled Connections.
Drag the appropriate IP addresses to the locations labeled IP address

(Hint: use the given host addresses and Main router information)
To remove a device or connection, drag it away from the topology.

Use information gathered from the Main router to complete the

configuration of any additional routers. No passwords are required to
access the Main router. The config terminal command has been disabled for
the HQ router. The router does not require any configuration.
Configure each additional router with the following:

Configure the interfaces with the correct IP address and enable the
interfaces.
Set the password to allow console access to consolepw
Set the password to allow telnet access to telnetpw
Set the password to allow privilege mode access to privpw

Note: Because routes are not being added to the configurations, you will
not be able to ping through the internetwork.
All devices have cable autosensing capabilities disabled.
All hosts are PC’s

Answer and explanation:

Specify appropriate devices and drag them on the "Device" boxes

For the device at the bottom-right box, we notice that it has 2 interfaces
Fa0/2 and Fa0/4; moreover the link connects the PC on the right with the
device on the bottom-right is a straight-through link -> it is a switch
The question stated that this topology contains 3 routers and 1 switch ->
two other devices are routers

Place them on appropriate locations as following:

(Host D and host E will be automatically added after placing two routers.
Click on them to access neighboring routers)
Specify appropriate connections between these devices:
+ The router on the left is connected with the Main router through
FastEthernet interfaces: use a crossover cable
+ The router on the right is connected with the Main router through Serial
interfaces: use a serial cable
+ The router on the right and the Switch: use a straight-through cable
+ The router on the left and the computer: use a crossover cable
(To remember which type of cable you should use, follow these tips:
- To connect two serial interfaces of 2 routers we use serial cable
- To specify when we use crossover cable or straight-through cable, we
should remember:
Group 1: Router, Host, Server
Group 2: Hub, Switch
One device in group 1 + One device in group 2: use straight-through cable
Two devices in the same group: use crossover cable
For example: we use straight-through cable to connect switch to router,
switch to host, hub to host, hub to server... and we use crossover cable to
connect switch to switch, switch to hub, router to router, host to host... )
Assign appropriate IP addresses for interfaces:

From Main router, use show running-config command:

(Notice that you may see different IP addresses in the real CCNA exam, the
ones shown above are just used for demonstration)
From the output we learned that the ip address of Fa0/0 interface of the
Main router is 192.168.152.177/28. This address belongs to a subnetwork
which has:
Increment: 16 (/28 = 255.255.255.240 or 1111 1111.1111 1111.1111 1111.1111
0000)
Network address: 192.168.152.176 (because 176 = 16 * 11 and 176 < 177)
Broadcast address: 192.168.152.191 (because 191 = 176 + 16 - 1)
And we can pick up an ip address from the list that belongs to this
subnetwork: 192.168.152.190 and assign it to the Fa0/0 interface the router
on the left
Use the same method for interface Serial0/0 with an ip address of
192.168.152.161
Increment: 16
Network address: 192.168.152.160 (because 160 = 16 * 10 and 160 < 161)
Broadcast address: 192.168.152.175 (because 176 = 160 + 16 - 1)
-> and we choose 192.168.152.174 for Serial0/0 interface of the router on the
right
Interface Fa0/1 of the router on the left
IP (of the computer on the left) : 192.168.152.129/28
Increment: 16
Network address: 192.168.152.128 (because 128 = 16 * 8 and 128 < 129)
Broadcast address: 192.168.152.143 (because 143 = 128 + 16 - 1)
-> we choose 192.168.152.142 from the list
Interface Fa0/0 of the router on the right
IP (of the computer on the left) : 192.168.152.225/28
Increment: 16
Network address: 192.168.152.224 (because 224 = 16 * 14 and 224 < 225)
Broadcast address: 192.168.152.239 (because 239 = 224 + 16 - 1)
-> we choose 192.168.152.238 from the list
Let's have a look at the picture below to summarize

’’’’’’
Configure two routers on the left and right with these commands:
Router1 = router on the left
Assign appropriate IP addresses to Fa0/0 & Fa0/1 interfaces:
Router1>enable
Router1#configure terminal
Router1(config)#interface fa0/0
Router1(config-if)#ip address 192.168.152.190 255.255.255.240
Router1(config-if)#no shutdown
Router1(config-if)#interface fa0/1
Router1(config-if)#ip address 192.168.152.142 255.255.255.240
Router1(config-if)#no shutdown
Set passwords (configure on two routers)
+ Console password:
Router1(config-if)#exit
Router1(config)#line console 0
Router1(config-line)#password consolepw
Router1(config-line)#login
Router1(config-line)#exit
+ Telnet password:
Router1(config)#line vty 0 4
Router1(config-line)#password telnetpw
Router1(config-line)#login
Router1(config-line)#exit
+ Privilege mode password:
Router1(config)#enable password privpw
Save the configuration:
Router1(config)#exit
Router1#copy running-config startup-config
Configure IP addresses of Router2 (router on the right)
Router2>enable
Router2#configure terminal
Router2(config)#interface fa0/0
Router2(config-if)#ip address 192.168.152.238 255.255.255.240
Router2(config-if)#no shutdown

Router2(config-if)#interface serial0/0
Router2(config-if)#ip address 192.168.152.174 255.255.255.240
Router2(config-if)#no shutdown
and set console, telnet and privilege mode passwords for Router2 as we did
for Router1, remember to save the configuration when you finished

CCNA Drag and Drop SIM Question

Saturday, 20 September 2008 12:39 administrator

(Updated on Sep-03-2010)

Question:
You have been hired by Specialty Hardware Incorporated to document the
layout of the network. Complete the following tasks: Complete the network
topology shown in the graphic by dragging the labels below with the
appropriate router types, interface types, and IP addresses to the graphic .
Find the information you need by using the router console attached to the
R-CENTER router.

Answer and explanation:

This is the simplest lab question in four labs you see in the real CCNA
exam. First we should identify the types of these routers by using the show
cdp neighbors command:

There are 3 columns we should pay more attention to:

+ Local Interface: the interface on the device you are using "show cdp
neighbors" command. In this case it is the interface of R-CENTER router
+ Platform: the platform of neighbor device
+ Port ID: the neighbor device's port or interface on which the CDP packets
are multicast
From the exhibit, the "Local Interface", "Platform" and "Port ID" columns,
we can identify where these four routers should be placed and their
corresponding associated ports

Finally, use the show running-config command to find out the ip addresses
of four interfaces on R-CENTER

And we can easily assign corresponding ip addresses to four neighbor

routers, which are on the same network with R-CENTER router's interfaces
Please remember in the real CCNA Exam the routers' types, ip addresses
and interfaces may be different! So make sure you understand how it works.

CCNA EIGRP LAB Question

Tuesday, 16 September 2008 05:03 administrator
Question:
After adding R3 router, no routing updates are being exchanged between R3
and the new location. All other inter connectivity and Internet access for the
existing locations of the company are working properly.
The task is to identify the fault(s) and correct the router configuration to
provide full connectivity between the routers.

Access to the router CLI can be gained by clicking on the appropriate host.
All passwords on all routers are cisco.

IP addresses are listed in the chart below.

R1 R2
Fa0/0: 192.168.77.33 Fa0/0: 192.168.60.97
S1/0: 198.0.18.6 Fa0/1: 192.168.60.113
S0/1: 192.168.60.25 S0/0: 192.168.36.14
R3 R4
Fa0/0: 192.168.77.34 Fa0/0: 192.168.60.129
Fa0/1: 192.168.60.65 Fa0/1: 192.168.60.145
Fa1/0: 192.168.60.81 S0/1: 192.168.60.26
Answer and explanation

We should check the configuration of the new added router first because it
does not function properly while others work well. From the command line
interface of R3 router, enter the show running-config command

From the output above, we know that this router was wrongly configured
with an autonomous number (AS) of 22. When the AS numbers among
routers are mismatched, no adjacency is formed.
(You should check the AS numbers on other routers for sure)

To solve this problem, we simply re-configure router R3 with the following

commands:

R3>enable (you have to enter cisco as its password here)

R3#configure terminal
R3(config)#no router eigrp 22
R3(config)#router eigrp 212
R3(config-router)#network 192.168.60.0
R3(config-router)#network 192.168.77.0
R3(config-router)#no auto-summary
R3(config-router)#end
R3#copy running-config startup-config
Check R1 router with the show running-config command:

Notice that it is missing a definition to the network R3. Therefore we have to

add it so that it can recognize R3 router
R1>enable (you have to enter cisco as its password here)
R1#configure terminal
R1(config)#router eigrp 212
R1(config-router)#network 192.168.77.0
R1(config-router)#end
R1#copy running-config startup-config
Now the whole network will work well. You should check again with ping
command from router R3 to other routers!

CCNA NAT SIM Question 1

Monday, 11 August 2008 01:14 administrator

Question:
A network associate is configuring a router for the CCNA Training company
to provide internet access. The ISP has provided the company six public IP
addresses of 198.18.184.105 198.18.184.110. The company has 14 hosts that
need to access the internet simultaneously. The hosts in the CCNA Training
company LAN have been assigned private space addresses in the range of
192.168.100.17 – 192.168.100.30.
The task is to complete the NAT configuration using all IP addresses
assigned by the ISP to provide Internet access for the hosts in the Weaver
LAN. Functionality can be tested by clicking on the host provided for
testing.
Configuration information
router name - Weaver
inside global addresses - 198.18.184.105 198.18.184.110/29
inside local addresses - 192.168.100.17 - 192.168.100.30/28
number of inside hosts - 14

The following have already been configured on the router：

- The basic router configuration

- The appropriate interfaces have been configured for NAT inside and NAT
outside
- The appropriate static routes have also been configured (since the
company will be a stub network, no routing protocol will be required.)
- All passwords have been temporarily set to "cisco"
Solution:
The CCNA Training company has 14 hosts that need to access the internet
simultaneously but we just have 6 public IP addresses from 198.18.184.105
to 198.18.184.110/29. Therefore we have to use NAT overload (or PAT)
Double click on the Weaver router to open it
Router>enable
Router#configure terminal
First you should change the router's name to Weaver
Router(config)#hostname Weaver
Create a NAT pool of global addresses to be allocated with their netmask
(/29 = 255.255.255.248). There were reports that the simulator in the real
exam did not accept "prefix-length" keryword so you should use "netmask"
keyword.
Weaver(config)#ip nat pool mypool 198.18.184.105 198.18.184.110 netmask
255.255.255.248
Create a standard access control list that permits the addresses that are to
be translated
Weaver(config)#access-list 1 permit 192.168.100.16 0.0.0.15

Establish dynamic source translation, specifying the access list that was
defined in the prior step
Weaver(config)#ip nat inside source list 1 pool mypool overload
This command translates all source addresses that pass access list 1,
which means a source address from 192.168.100.17 to 192.168.100.30, into
an address from the pool named mypool (the pool contains addresses from
198.18.184.105 to 198.18.184.110)
Overload keyword allows to map multiple IP addresses to a single
registered IP address (many-to-one) by using different ports

The question said that appropriate interfaces have been configured for NAT
inside and NAT outside statements.
This is how to configure the NAT inside and NAT outside, just for your
understanding:
Weaver(config)#interface fa0/0
Weaver(config-if)#ip nat inside
Weaver(config-if)#exit
Weaver(config)#interface s0/0
Weaver(config-if)#ip nat outside
Weaver(config-if)#end
Finally, we should save all your work with the following command:
Weaver#copy running-config startup-config
Check your configuration by going to "Host for testing" and type:
C:\>ping 192.0.2.114
The ping should work well and you will be replied from 192.0.2.114
CCNA - OSPF Questions
Saturday, 21 August 2010 13:09 administrator

Here you will find answers to OSPF Questions

Question 1:

Which of the following statements below best describe the process

identifier that is used to run OSPF on a router? (Choose two)

A - It is an optional parameter required only if multiple OSPF processes are

running on the router
B - It is locally significant
C - It is needed to identify a unique instance of an OSPF database
D - All routers in the same OSPF area must have the same process ID if they
are to exchange routing information

Answer: B C

Question 2:

Why R1 can't establish an OSPF neighbor relationship with R3 according to

the following graphic? (Choose two)

A - Configure EIGRP on these routers with a lower administrative distance

B - All routers should be configured for backbone Area 1
C - R1 and R3 have been configured in different areas
D - The hello and dead interval timers are not configured the same values
on R1 and R3

Answer: C D
Explanation:

A is not correct because configure EIGRP on these routers (with a lower

administrative distance) will force these routers to run EIGRP, not OSPF.

B is not correct because the backbone area of OSPF is always Area 0.

C and D are correct because these entries must match on neighboring

routers:

- Hello and dead intervals

- Area ID (Area 0 in this case)
- Authentication password
- Stub area flag

Question 3:

Which items are correct about the routing protocol OSPF? (Choose three)

A - Support VLSM
B - Increase routing overhead on the network
C - Confine network instability to one area of the network
D - Allow extensive control of routing updates

Answer: A C D

Explanation:

Routing overhead is the amount of information needed to describe the

changes in a dynamic network topology. All routers in an OSPF area have
identical copies of the topology database and the topology database of one
area is hidden from the rest of the areas to reduce routing overhead
because fewer routing updates are sent and smaller routing trees are
computed and maintained (allow extensive control of routing updates and
confine network instability to one area of the network).

Question 4:

Which three features are of OSPF routing protocol? (Choose three)

A - Converge quickly
B - OSPF is a classful routing protocol
C - Identify the best route by use of cost
D - Before exchanging routing information, OSPF routers find out neighbors
Answer: A C D

Question 5:

OSPF routing uses the concept of areas. What are the characteristics of
OSPF areas? (Chose three)

A - Each OSPF area requires a loopback interface to be configured

B - Areas may be assigned any number from 0 to 65535
C - Area 0 is called the backbone area
D - Hierarchical OSPF networks do not require multiple areas
E - Multiple OSPF areas must connect to area 0
F - Single area OSPF networks must be configured in area 1

Answer: B C E

Explanation:

I used to think the answers should be C D E and here is my explanation:

OSPF can use an active interface for its router ID, so a loopback interface is
not a must -> A is incorrect.

OSPF Area is a 32-bit number so we can use up to 232 - 1 = 4294967296 - 1

(since Area 0 is the first area). Remember that only process ID is a 16-bit
number and ranges from 1 to 65535 -> B is incorrect.

F is incorrect too because single area OSPF netwoks must be configured in

Area 0, which is called the backbone area.

For answer D, it is a bit hard to guess what they want to say about
"hierarchical" but we should understand "Hierarchical OSPF networks" as
"OSPF networks". D is correct bercause we can only have one area (area 0 -
the backbone area) for our networks.

But TT commented on 01-11-2010:

Especially to note on choice B, D, and E:

Choice B: we all know that The areas can be any number from 0 to 4.2
billion and 1 to 65,535 for the Process ID. As choice B specifies 'area' (be
aware, it's not saying 'process id), there is no reason to say that we cannot
assign numbers from 0 to 65535 for area # (it is using 'may be', not 'have to
be' or 'ought to be'). Hence, we do not worry about assigning '0'.

Choice E: as Area 0 is the backbone, we all understand that any areas in a

OSPF network have to be connected to it. And actually this is implicitly
saying that multiple areas form a hierarchical OSPF network, as Area 0
being a root and others being its leaves.

Choice D: when it specifies 'Hierarchical', at least 2 areas should be

required to form such topology (of course that includes Area 0)

Although Choice B is not an absolutely accurate statement since it not only

can be assigned up to 65535, it is still a correct answer. And again, it
specifies 'area', not 'process id', so '0' can be included. Finally, it would be
meaningless to call OSPF a hierarchical network if no more than one area is
present.

----------------------------------------------------------------------------------------------------

I reviewed the question and think it is a more suitable solution with choice B
than choice D, surely it is a tricky question!

Question 6:

Part of the OSPF network is shown below:

Configuration exhibit:

R1 routing commands:

ip route 0.0.0.0 0.0.0.0 serial0/0

router ospf 1
network 172.16.100.0 0.0.0.3 area 0
network 172.16.100.64 0.0.0.63 area 0
network 172.16.100.128 0.0.0.31 area 0
default-information originate
You work as a network technician, study the exhibits carefully. Assume that
all router interfaces are operational and correctly configured. In addition,
assume that OSPF has been correctly configured on router R2. How will the
default route configured on R1 affect the operation of R2?

A - Any packet destined for a network that is not directly connected to

router R2 will be dropped immediately
B - Any packet destined for a network that is not directly connected to
router R1 will be dropped
C - Any packet destined for a network that is not directly connected to
router R2 will be dropped immediately because of the lack of a gateway on
R1
D - The network directly connected to a router R2 will not be able to
communicate with the 172.16.100.0, 172.16.100.28 and 172.16.100.64
subnetworks.
E - Any packet destined for a network that is not referenced in the routing
table of router R2 will be directed to R1. R1 will then send that packet back
to R2 and a routing loop will occur

Answer: E

Explanation:

First, notice that the more-specific routes will always be favored over less-
specific routes regardless of the administrative distance set for a protocol.
In this case, because we use OSPF for three networks (172.16.100.0 0.0.0.3,
172.16.100.64 0.0.0.63, 172.16.100.128 0.0.0.31) so the packets destined for
these networks will not be affected by the default route.

The default route configured on R1 "ip route 0.0.0.0 0.0.0.0 serial0/0" will
send any packet whose destination network is not referenced in the routing
table of router R2 to R1, it doesn't drop anything so answers A, B and C are
not correct. D is not correct too because these routes are declared in R1
and the question says that "OSPF has been correctly configured on router
R2", so network directly connected to router R2 can communicate with
those three subnetworks.

As said above, the default route configured on R1 will send any packet
destined for a network that is not referenced in its routing table to R2; R2 in
turn sends it to R1 because it is the only way and a routing loop will occur.