CCNA Comprehensive Experimental Questions

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/6E/E5/wKiom1WKr_6AAPapAAGP85Yftw0383.jpg "title=" 2015-06-24_212357.jpg "alt=" Wkiom1wkr_6aapapaagp85yftw0383.jpg "/>

R1 configuration:

Username Weishuai Password 0 weishuai123

!
Crypto ISAKMP Policy 10
ENCR AES
Hash MD5
Authentication Pre-share
Group 2
Crypto ISAKMP key Qytang address 192.168.1.2
!
!
Crypto IPSec Transform-set Qyt Esp-aes
!

Crypto map CCNA IPSEC-ISAKMP
Set Peer 192.168.1.2
Set Transform-set Qyt
Match Address VPN
!
Interface ethernet0/0
No IP address
!
Interface ethernet0/0.10
Encapsulation dot1q 10
IP address 192.168.10.254 255.255.255.0
IP helper-address 192.168.200.1
IP nat Inside
IP virtual-reassembly in
!
Interface ethernet0/0.20
Encapsulation dot1q 20
IP address 192.168.20.254 255.255.255.0
IP helper-address 192.168.200.1
IP nat Inside
IP virtual-reassembly in
!
Interface ethernet0/0.200
Encapsulation dot1q 200
IP address 192.168.200.254 255.255.255.0
IP nat Inside
IP virtual-reassembly in
!
Interface ETHERNET0/1
No IP address
Shutdown
!
Interface ETHERNET0/2
No IP address
Shutdown
!
Interface ETHERNET0/3
No IP address
Shutdown
!
Interface serial1/0
IP address 192.168.1.1 255.255.255.252
IP nat Inside
IP virtual-reassembly in
Encapsulation PPP
PPP Authentication PAP
Serial Restart-delay 0
Crypto map CCNA
!
Interface SERIAL1/1
IP address 123.10.1.2 255.255.255.252
IP Nat Outside
IP virtual-reassembly in
Encapsulation PPP
PPP chap hostname Weichun
PPP chap password 0 weichun123
Serial Restart-delay 0
!
Interface SERIAL1/2
No IP address
Shutdown
Serial Restart-delay 0
!
Interface SERIAL1/3
No IP address
Shutdown
Serial Restart-delay 0
!
IP forward-protocol nd
!
!
No IP HTTP Server
No IP http secure-server
IP NAT inside Source list interface SERIAL1/1 overload
IP nat inside source static TCP 192.168.200.1 123.10.1.2 8008 extendable
IP Route 0.0.0.0 0.0.0.0 123.10.1.1
IP Route 192.168.30.0 255.255.255.0 192.168.1.2
!
IP Access-list Extended VPN
Permit IP 192.168.10.0 0.0.0.255 192.168.30.0 0.0.0.255
Permit IP 192.168.20.0 0.0.0.255 192.168.30.0 0.0.0.255
!
Access-list Permit 192.168.10.0 0.0.0.255
Access-list Permit 192.168.30.0 0.0.0.255
Access-list Permit 192.168.20.0 0.0.0.255
Access-list Permit 192.168.200.0 0.0.0.255
!

R2 configuration:

Crypto ISAKMP Policy 10
ENCR AES
Hash MD5
Authentication Pre-share
Group 2
Crypto ISAKMP key Qytang address 192.168.1.1
!
Crypto IPSec Transform-set Qyt Esp-aes
!
Crypto map CCNA IPSEC-ISAKMP
Set Peer 192.168.1.1
Set Transform-set Qyt
Match Address VPN
!
Interface ethernet0/0
IP address 192.168.30.254 255.255.255.0
!
Interface ETHERNET0/1
No IP address
Shutdown
!
Interface ETHERNET0/2
No IP address
Shutdown
!
Interface ETHERNET0/3
No IP address
Shutdown
!
Interface serial1/0
IP address 192.168.1.2 255.255.255.252
Encapsulation PPP
PPP pap sent-username Weishuai password 0 weishuai123
Serial Restart-delay 0
Crypto map CCNA
!
Interface SERIAL1/1
No IP address
Shutdown
Serial Restart-delay 0
!
Interface SERIAL1/2
No IP address
Shutdown
Serial Restart-delay 0
!
Interface SERIAL1/3
No IP address
Shutdown
Serial Restart-delay 0
!
IP forward-protocol nd
!
!
No IP HTTP Server
No IP http secure-server
IP Route 0.0.0.0 0.0.0.0 192.168.1.1
!
IP Access-list Extended VPN
Permit IP 192.168.30.0 0.0.0.255 192.168.10.0 0.0.0.255
Permit IP 192.168.30.0 0.0.0.255 192.168.20.0 0.0.0.255

ISP configuration:

Interface Loopback1
IP address 200.200.200.1 255.255.255.255

!
Interface SERIAL1/1
IP address 123.10.1.1 255.255.255.252
Encapsulation PPP
PPP Authentication CHAP

SW1 configuration:

interface port-channel1
 switchport
 switchport Trunk Encapsulation dot1q
 switchport trunk allowed VLAN 10,20,200
 switchport mode trunk
!
Interface ethernet0/0
 switchport trunk encapsulation dot1q
 switchport mode trunk
 duplex Auto
!         
Interface ETHERNET0/1
 switchport access VLAN
 switchport mode access
 duplex Auto
!
Interface ETHERNET0/2
 switchport trunk encapsulation dot1q
 switchport trunk allowed VLAN 10,20,200
 switchport mode trunk
 duplex auto
 channel-group 1 mode on
!
Interface ETHERNET0/3
 switchport trunk encapsulation dot1q
 switchport trunk allowed VLAN 10,20,200
 switchport mode trunk
 duplex auto
 channel-group 1 mode on


SW2 configuration:

interface port-channel1
 switchport
 switchport Trunk Encapsulation dot1q
 switchport trunk allowed VLAN 10,20,200
 switchport mode trunk
!
Interface ethernet0/0
 switchport access VLAN
 switchport mode access
 duplex Auto
!          
Interface ETHERNET0/1
 switchport access VLAN
 switchport mode access
 duplex Auto
!
Interface ETHERNET0/2
 switchport trunk encapsulation dot1q
 switchport trunk allowed VLAN 10,20,200
 switchport mode trunk
 duplex auto
 channel-group 1 mode on
!
Interface ETHERNET0/3
 switchport trunk encapsulation dot1q
 switchport trunk allowed VLAN 10,20,200
 switchport mode trunk
 duplex auto
 channel-group 1 mode on

This article is from "Dream Star" blog, please be sure to keep this source http://wcrichard.blog.51cto.com/5081959/1665233

CCNA Comprehensive Experimental Questions