Pro Domain 1: Device Setup and Configuration

You manage the small branch office shown in the network diagram. You have connected all devices. Now you need to configure the hostname and interface descriptions on each Cisco device at the branch location. In this lab, your task is to: Change the hostname on the switch to Branch1. Change the router name to SFO. Configure the following interface descriptions: DeviceInterfaceDescriptiontext Branch1FastEthernet0/1Wrk1FastEthernet0/2Wrk2FastEthernet0/3Wrk3FastEthernet0/24Default gatewaySFOFastEthernet0/0Link to branch officeSerial0/1/0Link to main officeSerial0/1/1Link to internet

Configure the hostname and the interface descriptions on the switch. Select Branch 1 in the diagram. Press Enter to get started. At the > prompt, type enable and press Enter. At the # prompt, type configure terminal and press Enter. At the (config)# prompt, type hostname Branch1 and press Enter. At the Branch1(config)# prompt, type interface FastEthernet0/1 and press Enter. At the Branch1(config-if)# prompt, type description Wrk1 and press Enter. At the Branch1(config-if)# prompt, type interface FastEthernet0/2 and press Enter. At the Branch1(config-if)# prompt, type description Wrk2 and press Enter. At the Branch1(config-if)# prompt, type interface FastEthernet0/3 and press Enter. At the Branch1(config-if)# prompt, type description Wrk3 and press Enter. At the Branch1(config-if)# prompt, type interface FastEthernet0/24 and press Enter. At the Branch1(config-if)# prompt, type description Default gateway and press Enter. At the Branch1(config-if)# prompt, type exit and press Enter. At the Branch1(config)# prompt, type exit and press Enter. At the Branch1# prompt, type copy running-config startup-config and press Enter. Press Enter. Configure the hostname and the interface descriptions on the router. Select SFO in the diagram. Press Enter to get started. At the > prompt, type enable and press Enter. At the # prompt, type configure terminal and press Enter. At the (config)# prompt, type hostname SFO and press Enter. At the SFO(config)# prompt, type interface FastEthernet0/0 and press Enter. At the SFO(config-if)# prompt, type description Link to branch office and press Enter. At the SFO(config-if)# prompt, type interface Serial0/1/0 and press Enter. At the SFO(config-if)# prompt, type description Link to main office and press Enter. At the SFO(config-if)# prompt, type interface Serial0/1/1 and press Enter. At the SFO(config-if)# prompt, type description Link to internet and press Enter. At the SFO(config-if)# prompt, type exit and press Enter. At the SFO(config)# prompt, type exit and press Enter. At the SFO# prompt, type copy running-config startup-config and press Enter. Press Enter.

You're the IT security administrator for a small corporate network. You need to increase the security on the switch in the networking closet by restricting access management and by updating the switch's firmware. In this lab, your task is to: Create an access profile called MgtAccess and configure it with the following settings: SettingValueAccess Profile NameMgtAccessRule Priority1Management MethodAllActionDenyApplies to InterfaceAllApplies to Source IP addressAll Add a profile rule to the MgtAccess profile with the following settings:SettingValueRule Priority2Management MethodHTTPActionPermitApplies to interfaceAllApplies to Source IP addressUser definedIP Version: Version 4IP Address: 192.168.0.10Network Mask: 255.255.255.0 Set the MgtAccess profile as the active access profile. Save the changes to the switch's startup configuration file. Update the firmware image to the latest version by downloading the firmware files found in C:\Sx300_Firmware\Sx300_FW-1.2.7.76.ros. If you need to log back in to the switch, the user name is ITSwitchAdmin and the password is Admin$0nly2017 (0 is zero).

Create an access profile. From the left menu, expand Security. Expand Mgmt Access Method. Select Access Profiles. Under Access Profile Table, select Add. Enter the access profile name. Enter the rule priority. Under Management Method, make sure All is selected. Enter the action. Under Applies to Interface, make sure All is selected. Under Applies to Source IP Address, make sure All is selected. Select Apply. Select Close. Add a profile rule. From the left menu, select Profile Rules under Mgmt Access Method. Select the MgtAccess profile. Select Add. Enter the rule priority. Select the management method. Under Action, make sure Permit is selected. Under Applies to Interface, make sure All is selected. Under Applies to Source IP Address, select User Defined. Under IP Version, make sure Version 4 is selected. Enter the IP address. Enter the network mask. Select Apply. Select Close. Set the MgtAccess profile as the active access profile. From the left menu, select Access Profiles. From the Active Access Profile drop-down list, select MgtAccess. Select Apply. Select OK. Save the changes to the switch's startup configuration file. At the top, select Save. Under Source File Name, make sure Running configuration is selected. Under Destination File Name, make sure Startup configuration is selected. Select Apply. Select OK. Upgrade the firmware image to the latest version. From the left menu, select Getting Started. Select Upgrade Device Software. Under File Name, select Choose File. Browse to and select C:\Sx300_Firmware\Sx300_FW-1.2.7.76.ros. Select Open. Select Apply. Select OK. Under File Management in the left menu, select Active Image. Under Active Image After Reboot, select Image 2 from the drop-down list. Select Apply. From the left menu under Administration, select Reboot. Select Reboot. Select OK. Log back in as user ITSwitchAdmin with the password Admin$0nly2017 (0 is zero). Select Log In.

You have just connected two routers through their serial ports in a back-to-back configuration. You've already configured IP addresses on the Fa0/0 and Fa0/1 interfaces for both routers and have configured a static route on each router for the networks accessible through the other router. You need to complete the configuration by configuring the serial link between the two routers. Remember that a 30-bit mask has a magic number of 4. Valid subnets are 192.168.2.0, 192.168.2.4, 192.168.2.8, etc. The seventh subnet is 192.168.2.24. The first valid address on that subnet is 192.168.2.25. The last valid address on that subnet is 192.168.2.26. A 30-bit mask uses a mask value of 255.255.255.252. In this lab, your task is to: Assign an IP address to each serial interface. Use the seventh subnet on network 192.168.2.0 using a 30-bit mask:For S0/0/0 on RouterA, assign the first address on the subnet.For S0/0/1 on RouterB, assign the last address on the subnet. Use the show controllers command to identify the DCE device. On the DCE interface, configure a clock rate of 9600 using the clock rate command. Bring both interfaces up.

Find the DCE interface. Select RouterA. Press Enter to get started. At the RouterA> prompt, type show controllers s0/0/0 and press Enter. Select RouterB. Press Enter to get started. At the RouterB> prompt, type show controllers s0/0/1 and press Enter. RouterB has the DCE interface. Configure RouterB. At the RouterB> prompt, type enable and press Enter. At the RouterB# prompt, type config t and press Enter. At the RouterB(config)# prompt, type interface s0/0/1 and press Enter. At the RouterB(config-if)# prompt, type ip address 192.168.2.26 255.255.255.252 and press Enter. At the RouterB(config-if)# prompt, type clock rate 9600 and press Enter. At the RouterB(config-if)# prompt, type no shutdown and press Enter. Press Ctrl + Z. At the RouterB# prompt, type copy run start and press Enter. Press Enter to begin building the configuration. Configure RouterA. At the RouterA> prompt, type enable and press Enter. At the RouterA# prompt, type config t and press Enter. At the RouterA(config)# prompt, type interface s0/0/0 and press Enter. At the RouterA(config-if)# prompt, type ip address 192.168.2.25 255.255.255.252 and press Enter. At the RouterA(config-if)# prompt, type no shutdown and press Enter. Press Ctrl + Z. At the RouterA# prompt, type copy run start and press Enter. Press Enter to begin building the configuration.

The SFO router has several banners configured. You've configured a console password of cisco. The login banner displays before the login prompt, and the EXEC banner displays immediately after a successful login. In this lab, your task is to modify the current configuration as follows: Change the banner that shows before the login prompt to:Please enter the administrator password:(do not include a hard return in the banner text) Delete the banner that displays after a successful login. Save your changes to the startup-config file. Before you end the lab, type exit in user or privileged mode and log back on to the router to test your configuration.

Select SFO. Press Enter to get started. Type cisco for the password and press Enter. At the SFO> prompt, type enable and press Enter. At the SFO# prompt, type configure terminal and press Enter. At the SFO(config)# prompt, type banner login *Please enter the administrator password:* and press Enter. At the SFO(config)# prompt, type no bann exec and press Enter. Press Ctrl + Z. Save your changes to the startup-config file. At the SFO# prompt, type copy running-config startup-config and press Enter. Press Enter to begin building the configuration.

You are configuring the SFO router. You've already configured a console password of cisco. Now you need to configure the banners. Use the banner command to set the banner. Banners display in the following order: The message of the day (motd) banner shows first. The login banner shows before the console or VTY login prompt. The exec banner shows after a successful login. In this lab, your task is to: Create the following banners with the appropriate punctuation in the banner text, but do not include a hard return in the banner except where noted: BannerBanner textMessage of the day bannerYou have connected to the SFO router.Banner that displays before the login prompt(Place each sentence on a different line)Authorized personnel only.Unauthorized users will be vaporized immediately!Banner that displays after a successful loginBeam me up Scotty! Save your changes in the startup-config file.

Select SFO. Press Enter to get started. Type cisco for the password and press Enter. At the SFO> prompt, type enable and press Enter. At the SFO# prompt, type configure terminal and press Enter. At the SFO(config)# prompt, type banner motd *You have connected to the SFO router.* and press Enter. At the SFO(config)# prompt, type banner login &Authorized personnel only. and press Enter. Type Unauthorized users will be vaporized immediately!& and press Enter. At the SFO(config)# prompt, type banner exec (Beam me up Scotty!( and press Enter. At the SFO(config)# prompt, type exit and press Enter. Save your changes to the startup-config file as follows: At the SFO# prompt, type copy running-config startup-config and press Enter. Press Enter to begin building the configuration.

You are working with a single active router. You need to gather information about the router. In this lab, your task is to answer the following questions using the CLI: What is the IOS version? How much NVRAM is available on the router? How much DRAM does the router have? How many serial interfaces does the router have?

What is the IOS version? 12.4 How much NVRAM (non-volatile RAM) is available on the router? 191K bytes of NVRAM How much DRAM does the router have? 256 MB How many serial interfaces does the router have? 4