http://www.ccna4u.org/2011/04/ccna-4-skill-2011-ccna-exploration.html http://www.scribd.

com/doc/59487263/Accessing-the-WAN-Student-Skills-Based-Assess ment-Lab-Answer-Key

hostname R1 ! enable secret class ! username R2 password 0 cisco ! no ip domain-lookup ! interface FastEthernet0/0 no ip address shutdown ! interface FastEthernet0/1 ip address 10.0.0.1 255.255.255.128 ! interface Serial0/0/0 ip address 172.16.0.1 255.255.255.252 encapsulation ppp ppp authentication chap ip access-group 102 in clock rate 64000 ! interface Serial0/0/1 ip address 172.16.0.9 255.255.255.252 encapsulation frame-relay frame-relay map ip 172.16.0.9 101 broadcast frame-relay map ip 172.16.0.10 101 broadcast frame-relay interface-dlci 101 no keepalive ip access-group 102 in ! interface Vlan1 no ip address shutdown ! router rip version 2 passive-interface FastEthernet0/1 network 10.0.0.0 network 172.16.0.0 no auto-summary ! ip classless ! access-list 102 permit tcp 172.16.0.0 0.0.0.3 172.16.0.0 0.0.0.3 eq telnet access-list 102 deny tcp any any eq telnet access-list 102 permit ip any any ! banner motd #R1# !! line con 0 password cisco

logging synchronous login line vty 0 4 password cisco login ! ! ! end

hostname R2 ! enable secret class ! username R1 password 0 cisco ! no ip domain-lookup ! interface Loopback0 ip address 209.165.200.161 255.255.255.224 ip access-group 103 in ! interface FastEthernet0/0 no ip address shutdown ! interface FastEthernet0/1 no ip address shutdown ! interface Serial0/0/0 ip address 172.16.0.2 255.255.255.252 encapsulation ppp ppp authentication chap ip access-group 103 out ! interface Serial0/0/1 ip address 172.16.0.6 255.255.255.252 ip access-group 103 out clock rate 64000 router rip version 2 network 10.0.0.0 network 172.16.0.0 no auto-summary ! ip classless ip route 0.0.0.0 0.0.0.0 Loopback0 ! access-list 103 deny tcp 209.165.200.160 0.0.0.31 host 10.0.0.10 eq www access-list 103 deny tcp 209.165.200.160 0.0.0.31 host 10.0.0.10 eq telnet access-list 103 deny tcp 209.165.200.160 0.0.0.31 host 10.0.0.10 eq ftp access-list 103 permit ip any any ! banner motd #R2# !

line con 0 password cisco logging synchronous login line vty 0 4 password cisco login ! ! ! end

hostname R3 ! enable secret class ! no ip domain-lookup ! interface FastEthernet0/0 no ip address shutdown ! interface FastEthernet0/1 ip address 10.0.0.129 255.255.255.128 ip nat inside ! interface Serial0/0/0 ip address 172.16.0.10 255.255.255.252 encapsulation frame-relay frame-relay map ip 172.16.0.10 101 broadcast frame-relay map ip 172.16.0.9 101 broadcast frame-relay interface-dlci 101 no keepalive ip access-group 102 in ip access-group 103 out ip nat outside clock rate 64000 ! interface Serial0/0/1 ip address 172.16.0.6 255.255.255.252 ip access-group 102 in ! interface Vlan1 no ip address shutdown ! router rip version 2 passive-interface FastEthernet0/1 network 10.0.0.0 network 172.16.0.0 no auto-summary ! ip nat inside source list 1 interface Serial0/0/0 overload ip classless

! access-list 102 permit tcp 172.16.0.4 0.0.0.3 172.16.0.4 0.0.0.3 eq telnet access-list 102 permit tcp any any eq telnet access-list 102 permit ip any any access-list 103 deny ip 10.0.0.128 0.0.0.127 host 10.0.0.10 access-list 103 permit ip any any access-list 1 permit 10.0.0.128 0.0.0.127 ! banner motd #R3# ! line con 0 password cisco logging synchronous login line vty 0 4 password cisco login ! ! ! end