ExamGecko
Question list
Search
Search

Question 637 - 200-301 discussion

Report
Export


Connectivity between three routers has been established, and IP services must be configured jn the order presented to complete the implementation Tasks assigned include configuration of NAT, NTP, DHCP, and SSH services.

1. All traffic sent from R3 to the R1 Loopback address must be configured for NAT on R2. All source addresses must be translated from R3 to the IP address of Ethernet0/0 on R2, while using only a standard access list named NAT To verify, a ping must be successful to the R1 Loopback address sourced from R3. Do not use NVI NAT configuration.

2. Configure R1 as an NTP server and R2 as a client, not as a peer, using the IP address of the R1 Ethernet0/2 interface. Set the clock on the NTP server for midnight on January 1, 2019.

3. Configure R1 as a DHCP server for the network 10.1.3.0/24 in a pool named TEST. Using a single command, exclude addresses 1-10 from the range. Interface Ethernet0/2 on R3 must be issued the IP address of 10.1.3.11 via DHCP.

4. Configure SSH connectivity from R1 to R3, while excluding access via other remote connection protocols. Access for user root and password Cisco must be set on router R3 using RSA and 1024 bits.

Verify connectivity using an SSH session from router R1 using a destination address of 10.1.3.11. Do NOT modify console access or line numbers to accomplish this task.

A.

See the Explanation below.

Answers
A.

See the Explanation below.

Suggested answer: A

Explanation:

Answer as below configuration:


NAT:

R2(config)# ip access list standard PUBNET

R2(config-std-nacl)# permit 10.2.3.3

R2(config-std-nacl)# permit 10.1.3.11

R2(config-std-nacl)# permit 192.168.3.1

R2(config-std-nacl)# exit

R2(config)# interface e0/1

R2(config-if)# ip nat inside

R2(config)# interface e0/0

R2(config-if)# ip nat outside

R2(config)# ip nat inside source list PUBNET interface e0/0 overload


Verification

R3#ping 192.168.1.1


NTP:

R1#clock set 00:00:00 January 1 2019 //Midnight means 00:00:00

R1(config)# ntp master 1

R2(config)# ntp server 10.1.3.1


DHCP:

R1(config)# ip dhcp pool NETPOOL

R1(dhcp-config)# network 10.1.3.0 255.255.255.0

R1(config)# exit

R1(config)# ip dhcp excluded-address 10.1. 3.1 10.1.3.10

R3(config)# interface e0/2

R3(config-if)# ip address dhcp


SSH:

R3(config)# username netadmin password N3t4ccess

R3(config)# line vty 0 4

R3(config-line)# login local

R3(config-line)# exit

R3(config)# ip domain-name cisco.com

R3(config)# crypto key generate rsa modulus 1024


Verification

R1# ssh -l root -p cisco 10.1.3.11


As the guidelines clearly stated that we have to save the configuration to NVRAM so please save all your configurations on R1, R2 and R3:

R1#, R2#, R3#copy running-config startup-config

asked 07/10/2024
Lina Brown
40 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first