Ccna 2 Final Skills Exam

ip route (destination network) (destination subnet mask) (exit interface)

ip route 0.0.0.0 0.0.0.0 (exit interface)

1. create OSPF and name process ID 2. create router-id, such as 1.1.1.1 3. create network statement(s) for area 4. prevent routing updates on LAN interfaces 5. optional - OSPF cost 6. optional - bandwidth

R2(config)# router ospf 10 (process ID) R2(config-router)# router-id 2.2.2.2 R2(config-router)# network 192.168.10.104 0.0.0.3 area 0 R2(config-router)#passive-interface g0/0

R2(config)# int s0/0/0 R2(config-if)# ip ospf cost 7500 R2(config-if)# bandwidth 128

1. name VLANs 2. configure trunk ports 3. configure access ports 4. shut down unused ports 5. configure management VLAN 101

S1(config)# vlan 45 S1(config-vlan) name finance

S1(config)# int g1/1 S1(config-if)# switchport mode trunk S1(config-if)# no shut

S1(config)# int f0/10 S1(config-if)# switchport mode access S1(config-if)# switchport access vlan 45 S1(config-if)# no shut

S1(config)# int range f0/1-9, f0/11-14, f0/16-24 S1(config-if-range)# switchport mode access S1(config-if-range)# shutdown

S1(config)#ip default-gateway 192.168.101.1 S1(config)#int vlan 101 S1(config-if)#ip address 192.168.101.2 255.255.255.0

1. exclude range of static addresses 2. configure address pool name 3. define address range with network statement 4. define default gateway 5. optional - define dns server

R1(config)#ip dhcp excluded-address 192.168.45.1 192.168.45.20

R1(config)#ip dhcp pool VLAN45

R1(dhcp-config)#network 192.168.45.0 255.255.255.0

R1(dhcp-config)#default-router 192.168.45.1 R1(dhcp-config)#dns-server 192.168.18.100

1. create mapping between inside local and inside global addresses 2. configure interface as inside 3. configure interface as outside

R2(config)#ip nat inside source static 192.168.18.46 198.51.100.14

R2(config)#interface g0/0 R2(config-if)#ip nat inside R2(config)#interface s0/1/0 R2(config-if)#ip nat outside

1. define pool of inside global addresses 2. configure a standard ACL to permit inside local addresses to be translated 3. bind the ACL to the pool 4. configure inside interfaces 5. configure outside interfaces

R2(config)#ip nat pool INTERNET 198.51.100.3 198.51.100.13 netmask 255.255.255.240

R2(config)# access-list 1 permit 192.168.45.0 0.0.0.255

ip nat inside source list 1 pool INTERNET

int s0/0/0 ip nat inside int s0/1/0 ip nat outside

1. create named standard ACL 2. create permit or deny statement 3. link ACL to an interface

R2(config)# ip access-list standard MANAGE

R2(config-std-nacl)# permit host 203.0.113.18 R2(config-std-nacl)# deny any R2(config-std-nacl)# exit

R2(config)# int s0/1/0 R2(config-if)# ip access-group MANAGE IN

1. used to permit or deny traffic only from source IPv4 addresses 2. to permit/deny 1 host, use address + wildcard, or host + address 3. to permit/deny all hosts, use any 4. ACL is applied inbound or outbound on the router interface closest to the destination of the traffic

1. create & name access-list - use both host & destination address and wildcard 2. keyword host can be used before address so that you don't have to state the wildcard 3. keyword any can be used instead of host source address or instead of destination address 4. put a protocol after deny/permit, such as tcp 5. if you want to permit traffic back to the host from a website, use keyword established in the statement 6. an extended ACL is applied inbound or outbound on the router interface that is closest to the source of the traffic