CCNA 4 Chapter 5 v5 exam answers 2014

January 15, 2014 | Filed under: CCNA 4 Connecting Networks v5 0 Answers 201! and tagged wit": ccna 4 c"a#ter 5 v5, CCNA 4 C"a#ter 5 v5 e$a% answers 201!, cisco ccna v5 answers routing and switc"ing, connecting networks answers v5, e$a% ccna v5 answers &"are CCCNA 4 Chapter 5 v5 exam answers R&S Connecting Networks C'&C( CCNA AN&)*+& ,5 +(-.'N/ AN0 &)'.C1'N/ .*&. 2-*&.'(N AN0 AN&)*+& 201!32014 1 .y#ically, w"ic" network device would 4e used to #er5or% NA. 5or a cor#orate environ%ent6 01C7 server "ost device router server switc" 2 )"at is t"e grou# o5 #u4lic '7v4 addresses used on a NA.3ena4led router known as6 outside local addresses inside local addresses inside g o!a addresses outside glo4al addresses ! )"en NA. is e%#loyed in a s%all o55ice, w"ic" address ty#e is ty#ically used 5or "osts on t"e local 8AN6 private "# addresses glo4al #u4lic '7 addresses 'nternet3routa4le addresses 4ot" #rivate and #u4lic '7 addresses 4 )"ic" version o5 NA. allows %any "osts inside a #rivate network to si%ultaneously use a single inside glo4al address 5or connecting to t"e 'nternet6 #A$ static NA. dyna%ic NA. #ort 5orwarding 5 )"ic" ty#e o5 NA. %a#s a single inside local address to a single inside glo4al address6 dyna%ic static #ort address translation overloading 9 &everal key servers in an organi:ation %ust 4e directly accessi4le 5ro% t"e 'nternet )"at addressing #olicy s"ould 4e i%#le%ented 5or t"ese servers6 -se dyna%ic NA. to #rovide addresses 5or t"e servers 1

7lace all o5 t"e servers in t"eir own Class C #rivate su4net -se 01C7 to assign addresses 5ro% t"e #ool o5 Class ; addresses Assign static interna addresses and pu! ic externa addresses to each o% the servers < )"at is a disadvantage o5 NA.6 $here is no end&to&end addressing' ."e router does not need to alter t"e c"ecksu% o5 t"e '7v4 #ackets ."e internal "osts "ave to use a single #u4lic '7v4 address 5or e$ternal co%%unication ."e costs o5 readdressing "osts can 4e signi5icant 5or a #u4licly addressed network =

+e5er to t"e e$"i4it )"at "as to 4e done in order to co%#lete t"e static NA. con5iguration on +16 +1 s"ould 4e con5igured wit" t"e co%%and i# nat inside source static 20> 195 200 1 1>2 19= 11 11 +1 s"ould 4e con5igured wit" t"e co%%and i# nat inside source static 20> 195 200 200 1>2 19= 11 11 "nter%ace S0(0(0 shou d !e con%igured with the command ip nat outside' 'nter5ace Fa0?0 s"ould 4e con5igured wit" t"e co%%and no i# nat inside

>

+e5er to t"e e$"i4it +1 is con5igured 5or NA. as dis#layed )"at is wrong wit" t"e con5iguration6 Access3list 1 is %iscon5igured NA$&#))*2 is not !ound to AC* 1' 'nter5ace Fa0?0 s"ould 4e identi5ied as an outside NA. inter5ace ."e NA. #ool is incorrect 10 )"ic" state%ent accurately descri4es dyna%ic NA.6 't always %a#s a #rivate '7 address to a #u4lic '7 address "t provides an automated mapping o% inside oca to inside g o!a "# addresses' 't #rovides a %a##ing o5 internal "ost na%es to '7 addresses 't dyna%ically #rovides '7 addressing to internal "osts 11 A network ad%inistrator con5igures t"e 4order router wit" t"e co%%and +1@con5igAB i# nat inside source list 4 #ool cor# )"at is reCuired to 4e con5igured in order 5or t"is #articular co%%and to 4e 5unctional6 a NA$ poo named corp that de%ines the starting and ending pu! ic "# addresses an access list na%ed cor# t"at de5ines t"e #rivate addresses t"at are a55ected 4y NA. an access list nu%4ered 4 t"at de5ines t"e starting and ending #u4lic '7 addresses i# nat outside to 4e ena4led on t"e inter5ace t"at connects to t"e 8AN a55ected 4y t"e NA. a ,8AN na%ed cor# to 4e ena4led and active and routed 4y +1 12 )"en dyna%ic NA. wit"out overloading is 4eing used, w"at "a##ens i5 seven users atte%#t to access a #u4lic server on t"e 'nternet w"en only si$ addresses are availa4le in t"e NA. #ool6 No users can access t"e server $he re+uest to the server %or the seventh user %ai s' All users can access t"e server ."e 5irst user gets disconnected w"en t"e sevent" user %akes t"e reCuest

1! A network engineer "as con5igured a router wit" t"e co%%and i# nat inside source list 4 #ool cor# overload )"y did t"e engineer use t"e overload o#tion6 $he compan, has more private "# addresses than avai a! e pu! ic "# addresses' ."e co%#any needs to "ave %ore #u4lic '7 addresses availa4le to 4e used on t"e 'nternet ."e co%#any router %ust t"rottle or 4u55er tra55ic 4ecause t"e #rocessing #ower o5 t"e router is not enoug" to "andle t"e nor%al load o5 e$ternal34ound 'nternet tra55ic ."e co%#any "as a s%all nu%4er o5 servers t"at s"ould 4e accessi4le 4y clients 5ro% t"e 'nternet 14

+e5er to t"e e$"i4it )"at will 4e t"e e55ect o5 entering t"e co%%and t"at is s"own in t"e e$"i4it on +2 as #art o5 t"e dyna%ic NA. con5iguration6 't will de5ine a #ool o5 addresses 5or translation 't will identi5y an inside NA. inter5ace "t wi !ind NA$&#))*1 with AC* 1' 't will de5ine t"e source AC8 5or t"e e$ternal inter5ace 15 )"ic" con5iguration would 4e a##ro#riate 5or a s%all 4usiness t"at "as t"e #u4lic '7 address o5 20> 195 200 225?!0 assigned to t"e e$ternal inter5ace on t"e router t"at connects to t"e 'nternet6 access& ist 1 permit 10'0'0'0 0'255'255'255 ip nat inside source ist 1 inter%ace seria 0(0(0 over oad access3list 1 #er%it 10 0 0 0 0 255 255 255 i# nat #ool co%# 1>2 0 2 1 1>2 0 2 = net%ask 255 255 255 240 i# nat inside source list 1 #ool co%# access3list 1 #er%it 10 0 0 0 0 255 255 255 i# nat #ool co%# 1>2 0 2 1 1>2 0 2 = net%ask 255 255 255 240 i# nat inside source list 1 #ool co%# overload access3list 1 #er%it 10 0 0 0 0 255 255 255 i# nat #ool co%# 1>2 0 2 1 1>2 0 2 = net%ask 255 255 255 240 i# nat inside source list 1 #ool co%# overload i# nat inside source static 10 0 0 5 20> 195 200 225 19 )"at are two reCuired ste#s to con5igure 7A.6 @C"oose two A -e%ine a poo o% g o!a addresses to !e used %or over oad trans ation' 0e5ine a standard access list denying t"e addresses t"at s"ould 4e translated 0e5ine t"e range o5 #orts to 4e used "denti%, the inside inter%ace' 0e5ine a standard access list t"at allow t"e outside glo4al addresses to 4e used

1<

+e5er to t"e e$"i4it )"at is t"e #ur#ose o5 t"e co%%and %arked wit" an arrow s"own in t"e #artial con5iguration out#ut o5 a Cisco 4road4and router6 de%ines which addresses can !e trans ated de5ines w"ic" addresses are allowed into t"e router de5ines w"ic" addresses are assigned to a NA. #ool de5ines w"ic" addresses are allowed out o5 t"e router 1= )"at is t"e #ur#ose o5 #ort 5orwarding6 #ort %orwarding a ows an externa user to reach a service on a private "#v4 address that is ocated inside a *AN' 7ort 5orwarding allows users to reac" servers on t"e 'nternet t"at are not using standard #ort nu%4ers 7ort 5orwarding allows an internal user to reac" a service on a #u4lic '7v4 address t"at is located outside a 8AN 7ort 5orwarding allows 5or translating inside local '7 addresses to outside local addresses 1> )"at is a c"aracteristic o5 uniCue local addresses6 $he, a ow sites to !e com!ined without creating an, address con% icts' ."ey are designed to i%#rove t"e security o5 '7v9 networks ."eir i%#le%entation de#ends on '&7s #roviding t"e service ."ey are de5ined in +FC !>2< 20

+e5er to t"e e$"i4it ;ased on t"e out#ut t"at is s"own, w"at ty#e o5 NA. "as 4een i%#le%ented6 dyna%ic NA. wit" a #ool o5 two #u4lic '7 addresses #A$ using an externa inter%ace static NA. wit" one entry static NA. wit" a NA. #ool 5

21

+e5er to t"e e$"i4it ."e NA. con5iguration a##lied to t"e router is as 5ollows: *+tr@con5igAB access3list 1 #er%it 10 0 0 0 0 255 255 255 *+tr@con5igAB i# nat #ool cor# 20> 195 201 9 20> 195 201 !0 net%ask 255 255 255 224 *+tr@con5igAB i# nat inside source list 1 #ool cor# overload *+tr@con5igAB i# nat inside source static 10 10 10 55 20> 195 201 4 *+tr@con5igAB inter5ace giga4itet"ernet 0?0 *+tr@con5ig3i5AB i# nat inside *+tr@con5ig3i5AB inter5ace serial 0?0?0 *+tr@con5ig3i5AB i# nat outside 22 ;ased on t"e con5iguration and t"e out#ut s"own, w"at can 4e deter%ined a4out t"e NA. status wit"in t"e organi:ation6 NA. is working &tatic NA. is working, 4ut dyna%ic NA. is not 0yna%ic NA. is working, 4ut static NA. is not Not enough in%ormation is given to determine i% !oth static and d,namic NA$ are working'

2!

(#en t"e 7. Activity 7er5or% t"e tasks in t"e activity instructions and t"en answer t"e Cuestion )"at #ro4le% is causing 7C3A to 4e una4le to co%%unicate wit" t"e 'nternet6 ."e static route s"ould not re5erence t"e inter5ace, 4ut t"e outside address instead ."is router s"ould 4e con5igured to use static NA. instead o5 7A. ."e i# nat inside source co%%and re5ers to t"e wrong inter5ace ."e access list used in t"e NA. #rocess is re5erencing t"e wrong su4net $he NA$ inter%aces are not correct , assigned'

<

24

# ace the options in the %o owing order. & not scored / step 5 step 2 step 4 step 1 step 0 25 )"at are two o5 t"e reCuired ste#s to con5igure 7A.6 @C"oose two A Create a standard access list to de5ine a##lications t"at s"ould 4e translated 'denti5y t"e inside inter5ace D 0e5ine t"e range o5 source #orts to 4e used 0e5ine t"e "ello and interval ti%ers to %atc" t"e adEacent neig"4or router -e%ine a poo o% g o!a addresses to !e used %or over oad trans ation'