CCNA Routing and Switching

Switched Networks

SCAN Skills Assessment - Packet Tracer

Introduction
In Part I, you will configure dynamic routing with EIGRP for IP v4 and static and default routes.
In Part II of this skills assessment, you will configure the network with port security, EtherChannel, HS RP, DHCP,
VLANs and trunking, and routing bet ween VLA Ns. In addition you will perform an initial configuration on a switch,
secure unused switch ports and secure SV Is.
When you have been given a text value, such a s a password, user name, DHCP pool name, VLAN name,
etc, you must enter these values exactly as they are given in these instructions. If the values do not
match exactly, you may not receive credit for your configuration.
For the sake of time, many repetitive but important configuration tasks have been omitted from this activity. Many
of these tasks, especially those related to device security, are essential elements of a net work configuration. The
intent of this activity is not to diminish the importance of full device configurations.
You will be assessed on the following skills:

Configuration of initial devic e settings

IP v4 address assignment and configuration
Configuration and addressing of device int erfaces
Configuration of the E IGRP for IP v4 routing protocol
Configuration of a default route
Configuration of switch management settings
Configuration of port security
Configuration of unused switch ports according to security best practices
Configuration of HSRP
Configuration of EtherChannel
Configuration of a router as a DHCP server
Configuration of VLA Ns and trunks
Configuration of routing bet ween VLANs

You are required to do the following:

R1:

Configure initial device settings.

Configure interfaces with IP v4 addresses and other settings.
Configure and customize EIGRP for IP v4.
Configuration of HSRP

Page 1 of 7

Scaling Networks Skill s Asse ssment - Packet Tracer

CCNA ScaN

R2:

Configure interfaces with IP v4 addresses, descriptions, and other settings.

Configure and customize EIGRP for IP v4.
Configure and propagat e a default rout e through EIGRP for IP v4.

Configure interfaces with IP v4 addresses, descriptions, and other settings.

Configure DHCP pools and excluded addresses.
Configure routing between VLA Ns.
Configure EIGRP for IP v4.
Configure EIGRP for IP v4 route summarization
Configure an A CL to limit access to the switch management net work
Configuration of HSRP

R3:

Sw-A:

Create and name VLA Ns.

Configure EtherChannel.
Configure trunking.
Assign access ports to VLANs
Configure remote management settings.
Secure unused switch ports.
Configure port security.

Sw-C:

Create and name VLA Ns

Configure EtherChannel
Configure trunking
Assign access ports to VLANs
Configure remote management settings

Internal PC hosts:

Configure as DHCP clients

Assign Static IPv4 addresses where indicated.

Tables
Note: You are provided with the net works that interfaces should be configured on. Unless you are told to do
differently in the detailed instructions below, you are free to choose the host addresses to assign.
Addressing Table:

Page 2 of 7

Scaling Networks Skill s Asse ssment - Packet Tracer

Device

CCNA ScaN

Interface

Network

Configuration Details

S0/0/0

192.168.100.20/30

192.168.100.21 255.255.255.252

S0/0/1

192.168.100.28/30

192.168.100.29 255.255.255.252

G0/1.2

10.10. 2.0/24

10.10. 2.1 255.255.255.0

G0/1.4

10.10. 4.0/24

10.10. 4.1 255.255.255.0

G0/1.8

10.10. 8.0/24

10.10. 8.1 255.255.255.0

G0/1.18

10.10. 18.0/24

10.10. 18.1 255.255.255.0

G0/1.25

10.10. 25.0/24

10.10. 25.1 255.255.255.0

S0/0/0

192.168.100.20/30

192.168.100.21 255.255.255.252

S0/0/1

192.168.100.36/30

192.168.100.37 255.255.255.252

Lo0

203.0. 113.16/29

203.0. 113.18 255.255.255.248

S0/0/0

192.168.100.28/30

192.168.100.29 255.255.255.252

S0/0/1

192.168.100.36/30

192.168.100.37 255.255.255.252

G0/1.2

10.10. 2.0/24

10.10. 2.3 255.255.255.0

G0/1.4

10.10. 4.0/24

10.10. 4.3 255.255.255.0

G0/1.8

10.10. 8.0/24

10.10. 8.3 255.255.255.0

G0/1.18

10.10. 18.0/24

10.10. 18.3 255.255.255.0

G0/1.25

10.10. 25.0/24

10.10. 25.3 255.255.255.0

Sw-A

SVI

10.10. 25.0/24

10.10. 25.254 255.255.255.0

Sw-C

SVI

10.10. 25.0/24

10.10. 25.252 255.255.255.0

R1

R2

R3

VLAN Switch Port Assignment Table:

VLAN

Name

Network

Engineering

10.10. 2.0/24

Production

10.10. 4.0/24

IT

10.10. 8.0/24

18

Admin

10.10. 18.0/24

25

Management

10.10. 25.0/24

44

Reserved

N/A

Device

Switch Ports

Sw-A

Fa0/10

Sw-C

Fa0/10

Sw-A

Fa0/12

Sw-C

Fa0/12

Sw-A

Fa0/14

Sw-C

Fa0/14

Sw-A

Fa0/8

Sw-C

Fa0/8

Sw-A

SVI

Sw-B

SVI

Sw-C

SVI

Sw-A

all unused ports

Page 3 of 7

Scaling Networks Skill s Asse ssment - Packet Tracer

CCNA ScaN

Port-Channel Group Interfaces:

Channel
1

Device

Interfaces

Sw-A

Fa0/1- Fa0/4

Sw-C

Fa0/1-Fa0/4

Instructions
Part I: EIGRP Router Configuration
Step 1: Plan the Addressing.
Determine the IP addresses that you will use for the required interfaces on the devices and LA N hosts. Follow the
configuration details provided in the Addressing Table.
Step 2: On all routers configure the initial settings:

Configure the router host name. This value must be entered exactly as it appears here.
Prevent the router from attempting to resolve command line entries to IP addresses.
Protect devic e configurations from unauthorized access with an encrypt ed secret password. (class)
Secure the router console and remote access lines. (cisco)
Prevent system status messages from interrupting console output.
Configure a message-of-the-day banner.
Encrypt all clear text passwords.

Step 3: Configure the Router Interfaces.

Use the information in the addressing table to configure the interfaces of all routers for full connectivity with the
following:

Configure IP addressing.
Configure DCE settings where required. Use a rate of 128000.
The Ethernet subinterfaces on R3 will be configured later in this assessment.

Step 4: Configure inter-VLAN routing on R3.

Configure router R1 and R3 to route bet ween VLA Ns using information in the Addressing Table and VLA N Switch
Port Assignment Table. The VLA Ns will be configured on the switches later in this assessment.

Do not route the VLAN 44 net work.

Step 5: Configure EIGRP Routing and a default route.

a. On all routers:

Configure EIGRP for IP v4 to route bet ween the internal networks. Use ASN 15.
Use the precise wild card masks for all network statements.
You are not required to rout e the Management VLAN network over EIGRP.
Prevent routing updates from being sent on the LA N net works. Do not use the default keyword version
of the command to do so.
Prevent EIGRP for IP v4 from performing automatic route summarization on all rout ers.

Page 4 of 7

Scaling Networks Skill s Asse ssment - Packet Tracer

CCNA ScaN

b. On the R2 router:

Configure a default route to the Internet. Use the exit interfac e argument.
Configure EIGRP for IP v4 to distribute the default rout e to the other routers.

Step 6: Customize EIGRP for IPv4.

Customize EIGRP for IP v4 by performing the following configuration tasks:

Set the bandwidth of the link between R1 and R2 to 128 kb/ s.

Create a summary route for the LA Ns connected to Sw Switches. It should include all net works from
10.10. 0.0 to 10.10.15.0.
Do not include the Management VLAN net work in the summary route.
Configure EIGRP for IP v4 with the rout e summary so that it will be sent to the other routers. Be sure to
configure the summary on all of the appropriat e interfaces.

Part II: Switching and DHCP Configuration

Step 1: Create and name VLANs.
On all three switches that are attached to R3, create and name the VLA Ns shown in the VLAN Table.

The VLA N names that you configure must match the values in the table exactly.
Each switch should be configured with all of the VLA Ns shown in the table.

Step 2: Assign switch ports to VLANs.

Using the VLA N table, assign the switch ports to the VLANs you created in Step 1, as follows:

All switch ports that you assign to VLANs should be configured to static acce ss mode.
All switch ports that you assign to VLANs should be activated.

Step 3: Configure the SVIs.

Refer to the Addressing Table. Create and address the SVIs on all three of the switches that are attached to R3.
Configure the switches so that they can communicate with hosts on other networks. Full connectivity will be
established after routing between VLANs has been configured lat er in this assessment.
Step 4: Configure HS RP
a. On R1 router:
Configure the HS RP virtual IP address on each sub-interface of G0/1
Group 1
Virtual IP Address: 10.10. X.2 (where X is the VLAN Number)
Make this the primary HSRP router
Configure so this router becomes the primary HS RP router on a reboot

Page 5 of 7

Scaling Networks Skill s Asse ssment - Packet Tracer

CCNA ScaN

b. On R3 router:
Configure the HS RP virtual IP address on each sub-interface of G0/1
Group 1
Virtual IP Address: 10.10. X.2 (where X is the VLAN Number)

Step 5: Configure Trunking and EtherChannel.

a. Use the information in the Port-Channel Groups table to configure EtherChannel as follows:

Use PAgP.
The switch ports on both sides of Channels 1 should initiate negotiations for channel establishment.
All channels should be ready to forward data after they have been configured.

b. Configure all port-channel interfaces as trunks.

c. Configure static trunking on the switch port on Sw-C that is connected to R3. Configure static trunking on the
switch port on Sw-A that is connected to R1.
Step 6: Configure Spanning-Tree
Activate PortFast and BPDU Guard on the active Sw-C switch access ports.

Configure PortFast on all access ports that are connected to hosts.

Activate BP DU Guard on all access ports that are connected to hosts.

Step 7: Configure switch securi ty.

You are required to complete the following only on some of the devices in the network for this assessment. In
reality, security should be configured on all devices in the network.
a. Secure unus ed switch ports. Following security best practices, do the following on Sw-A only:

Shutdown all unused switch ports.

Configure all unused switch ports as static access ports.
Ensure that all unused switch ports have been assigned to VLAN 44.

b. Configure port security on all active access ports on Sw-A.

Each switch port should accept only two MAC addresses before a security action occurs.
The learned MA C addresses should be recorded in the running configuration.
If a security violation occurs, the switch ports should provide notification that a violation has occurred but
not place the int erface in an err-disabled state.

Step 8: Configure R3 as a DHCP server for the hosts attached to the Sw -A and Sw-C switche s.
Configure three DHCP pools as follows:

Create a DHCP pool for hosts on VLA N 2 using the pool name Engineering.
Create a DHCP pool for hosts on VLA N 4 using the pool name Production.
Create a DHCP pool for hosts on VLA N 8 using the pool name IT.
All VLAN pool names must match the provided values above exactly.
Exclude the first five addresses from eac h pool.

Page 6 of 7

Scaling Networks Skill s Asse ssment - Packet Tracer

CCNA ScaN

All hosts should be able to communication wit h hosts on other net works.
Use the virtual ip address as the default gateway for all hosts and switches. (10.10.X.2 where X is the
VLAN number.

Step 9: Configure host addressing.

All hosts should be able to ping each ot her after they have been addressed.

Hosts on VLANs 2, 4, and 8 should be configured to receive addresses dynamic ally over DHCP.
Hosts on VLAN 18 should be addressed statically as indicated in the addressing table. Once
configured, the hosts should be able to ping hosts on other networks.

Page 7 of 7