Pro Domain 5: Network IP Services

The accounting department is testing a new payroll system server. To facilitate their tests, they would like to add the payroll server to DNS to support name resolution. You need to create a new zone to support their request and accelerate lookups. You also need to place a copy of this zone on the DNS server in Building B. In this lab, your task is to: Create a primary forward lookup zone on CorpDC using the following parameters:Deselect Store the zone in Active Directory.Use the zone name acct.CorpNet.local.Use the default name for the zone file.Do not allow dynamic updates.Allow zone transfers to any server. Create a secondary forward lookup zone using the following parameters:Use the host server CorpDC3Use the zone name acct.CorpNet.local as the secondary zone name.Specify CorpDC or 192.168.0.11 as the master DNS server for the zone.

Create a primary forward lookup zone. In Hyper-V Manager, select CORPSERVER. Maximize the window to view all virtual machines. Right-click CorpDC and select Connect (maximize the window for easier viewing if desired). In Server Manager, select Tools > DNS. Expand CorpDC to host the zone. Right-click Forward Lookup Zones and select New Zone. In the New Zone wizard, select Next. Make sure Primary zone is selected. Deselect Store the zone in Active Directory (this option is only available for domain controllers); then select Next. In the Zone name field, enter acct.CorpNet.local for the zone and select Next. Make sure Create a new file with this file name is selected and select Next. Specify the updates that will be accepted for the DNS zone and select Next. Select Finish to complete the New Zone wizard. Configure zone transfer. Under Forward Lookup Zones, right-click the new zone and select Properties. Select the Zone Transfers tab. Make sure Allow zone transfers is selected. Select To any server. Select OK. Create a Secondary Forward Zone. From DNS Manager, expand the CorpDC3 that will host the new zone. Right-click Forward Lookup Zones and select New Zone. Select Next. On the Zone Type dialog, select Secondary zone as the zone type and select Next. Enter the acct.CorpNet.local; then select Next. In the Master Servers box, select Click here below IP Address. Enter the IP address or the name of a server that hosts a copy of the zone. Press Enter or click away from the IP address to begin validation. After it is validated, select Next. Select Finish to complete the New Zone wizard.

You are the IT administrator for a small corporate network. You have two servers and a DNS server that use static IP addresses on the 192.168.0.0/24 subnet. You plan to install three more servers soon, so you need to create DNS records for these servers on the CorpDC server. In this lab, your task is to: Create an IPv4 Active-Directory-integrated primary reverse lookup zone for subnet 192.168.0.0/24. Be sure to accept the default replication and dynamic updates settings. Create A records and PTR records for the following hosts:

Create a primary reverse lookup zone as follows: In Hyper-V Manager, select CORPSERVER. Right-click CorpDC and select Connect. In Server Manager, select Tools > DNS. Expand CORPDC. Right-click Reverse Lookup Zones and select New Zone. Select Next. Make sure Primary zone is selected. Make sure Store the zone in Active Directory is selected and then select Next. Keep the default replication scope setting and select Next. Keep the default reverse lookup zone settings and select Next. In the Network ID field, type 192.168.0 as the network ID Select Next. Keep the default dynamic update settings and select Next. Select Finish. Create a host (A) and associated pointer (PTR) record as follows: In DNS Manager, expand Forward Lookup Zones. Right-click CorpNet.local and select New Host (A or AAAA). In the Name field, enter the host name. In the IP address field, enter the IP address. Select Create associated pointer (PTR) record. The reverse lookup zone must exist for this record to be created. Select Add Host. Select OK. Repeat steps 2c - 2g to add additional host records. Select Done.

The sales department wants to create an intranet for all sales employees. Internet Information Services (IIS) is installed on CorpWeb and will be used to host the intranet site. Employees need the ability to access the web server using any of the following URLs: http://sales.private http://intranet.sales.private http://www.sales.private You created the sales.private zone on the CorpDC server. Now you need to allow clients to connect to the web server by creating DNS records in the zone. Use CorpWeb.CorpNet.com as the fully qualified domain name. In this lab, your task is to: Create an ALIAS (CNAME) record and leave the name blank. (This allows users to connect to the server using the sales.private URL) Create an ALIAS (CNAME) record named intranet Create an ALIAS (CNAME) record named www

In Hyper-V Manager, select CORPSERVER. Right-click CorpDC and select Connect. In Server Manager, select Tools > DNS. Expand CORPDC. Expand the Forward Lookup Zones. Right-click the sales.private zone and select New Alias (CNAME). In the Alias name field, enter the alias name (to use the parent domain name for the alias, leave the field blank). Enter the fully qualified domain name of the host. Click OK. Repeat steps 6 - 9 to create additional records.

You're helping a friend in college with his network connection. The dormitory where he lives has a 1000BaseT Ethernet network that uses automatic IP addressing with IP address, default gateway, and DNS server information delivered by a DHCP server. You would like to configure your friend's computer (Dorm-PC) to use a different set of DNS server addresses than those delivered by the DHCP server. In this lab, your task is to complete the following: Configure the IPv4 settings for the Local Area Connection network connection to use the following DNS server addresses:Preferred DNS server: 208.67.222.222First alternate DNS server: 208.67.222.220Second alternate DNS server: 208.67.220.123 Have Dorm-PC validate the static DNS server information.

In the notification area, right-click the Network icon and select Open Network & Internet settings. Select Ethernet. Select Change adapter options. Right-click Ethernet and select Properties. Select Internet Protocol Version 4 (TCP/IPv4). Select Properties. Select Use the following DNS server addresses to manually configure the DNS server addresses. Select Advanced to configure more than two DNS server addresses. Select the DNS tab. Select Add to configure DNS server addresses. Enter a DNS server address. Select Add. Repeat steps 10-12 to configure additional DNS server addresses. Select OK. Select Validate settings upon exit and then select OK. Select Close to close Ethernet Properties.

You are the administrator for the CorpNet.com domain. The CorpDC and CorpDC3 servers are the DNS servers for the domain. You're responsible for CorpDC, which resides in Building A. Users report that they are unable to contact the CorpWeb server. In this lab, your task is to: Ping the CorpWeb server using its full name of CorpWeb.CorpNet.com. What happens? Ping the CorpWeb server using its IP address, 192.168.0.15. What happens? Create any DNS records needed to fix the problem.Hostname: CorpWebIP address: 192.168.0.15 Use the ping command to verify that the problem is fixed.

Right-click Start and select Windows PowerShell (Admin). At the command prompt, enter ping CorpWeb.CorpNet.local and press Enter. Notice that the ping is unable to find CorpWeb. Type ping 192.168.0.15 and press Enter. This time the ping succeeds using the IP address, indicating that there is a problem with the CorpWeb DNS record. In Hyper-V Manager, select CORPSERVER. Resize the window to view all virtual machines. Right-click CorpDC and select Connect (maximize the window for easier viewing if desired). In Server Manager, select Tools > DNS. Expand CORPDC. Expand Forward Lookup Zones. Right-click CorpNet.local and select New Host (A or AAAA). In the Name field, enter CorpWeb. In the IP Address field, enter the 192.168.0.15. Select Create associated pointer (PTR) record to automatically create the PTR record for the new host. Select Add Host. Select OK. Select Done to close the New Host dialog. From the Windows PowerShell window on CorpServer, enter ping CorpWeb.CorpNet.local and press Enter. Now the ping succeeds.

You have a single router that connects your private network to the internet. You have two subnets on the private network, and the internet connection is through the Serial0/0/0 interface. Your ISP has given you six outside addresses that you can use for NAT configuration. You can use addresses 70.0.0.64 through 70.0.0.69. All hosts on your private network must be allowed internet access using those six addresses. There should be no limit to the number of clients on the private network that can access the internet at the same time. In this lab, your task is to: Designate both FastEthernet interfaces as inside NAT interfaces. Configure the Serial0/0/0 interface as an outside NAT interface. Create a standard access list number 50 that allows both inside networks.Fa0/0 is on network 192.168.1.0/24, and Fa0/1 is on network 192.168.2.0/24.With the access-list command, use a wildcard mask of 0.0.0.255. Create a NAT pool named my_addrs identifying the six addresses.With the ip nat pool command, identify the first and last addresses in the range that can be used for NAT.Use the netmask parameter to configure the addresses using a 29-bit mask.A 29-bit mask has the binary form of 255.255.255.248. You will use this value with the netmask parameter of ip nat pool command. Use the ip nat inside source command to link the access list with the address pool.Use the list parameter to identify the access list number.Use the pool parameter to identify the address pool name (my_addrs).Use the overload parameter so that all the private clients have simultaneous access and are not limited to the number of outside addresses. Without this parameter, only six inside clients have internet access at a time. Save your changes to the startup-config file.

Select Fiji. Press Enter to get started. At the Fiji> prompt, type enable and press Enter. At the Fiji# prompt, type config t and press Enter. At the Fiji(config)# prompt, type interface fa0/0 and press Enter. At the Fiji(config-if)# prompt, type ip nat inside and press Enter. At the Fiji(config-if)# prompt, type interface fa0/1 and press Enter. At the Fiji(config-if)# prompt, type ip nat inside and press Enter. At the Fiji(config-if)# prompt, type interface s0/0/0 and press Enter. At the Fiji(config-if)# prompt, type ip nat outside and press Enter. At the Fiji(config-if)# prompt, type access-list 50 permit 192.168.1.0 0.0.0.255 and press Enter. At the Fiji(config)# prompt, type access-list 50 permit 192.168.2.0 0.0.0.255 and press Enter. At the Fiji(config)# prompt, type ip nat pool my_addrs 70.0.0.64 70.0.0.69 netmask 255.255.255.248 and press Enter. At the Fiji(config)# prompt, type ip nat inside source list 50 pool my_addrs overload and press Enter. Press Ctrl + Z. At the Fiji# prompt, type copy run start and press Enter. Press Enter to begin building the configuration.

You have a single router connected to the internet through its Serial0/0/0 interface. The router is used to create a screened subnet. Internal hosts accessible through the Fa0/0 interface should be able to be contacted by other hosts on the internet. You want to use NAT to translate the inside local address to an inside global address. In this lab, your task is to: Configure Fa0/0 interface as an inside NAT interfaces. Configure Serial0/0/0 interface as a outside NAT interfaces. Use the ip nat inside source static command to configure four static NAT mappings to map an inside local address to an inside global address as follows:

Select Router. Press Enter to get started. At the Router> prompt, type enable and press Enter. At the Router# prompt, type config t and press Enter. At the Router(config)# prompt, type int fa0/0 and press Enter. At the Router(config-if)# prompt, type ip nat inside and press Enter. At the Router(config-if)# prompt, type int s0/0/0 and press Enter. At the Router(config-if)# prompt, type ip nat outside and press Enter. At the Router(config-if)# prompt, type ip nat inside source static 192.168.1.2 20.11.15.65 and press Enter. At the Router(config)# prompt, type ip nat inside source static 192.168.1.3 20.11.15.66 and press Enter. At the Router(config)# prompt, type ip nat inside source static 192.168.1.4 20.11.15.67 and press Enter. At the Router(config)# prompt, type ip nat inside source static 192.168.1.5 20.11.15.68 and press Enter. Press Ctrl + Z. At the Router# prompt, type copy run start and press Enter. Press Enter to begin building the configuration.

You have a small network connected to the internet as shown in the diagram. Previously, you've used private addressing for your network. Now you'd like to use NAT to share a single IP address for all hosts on the private network. In this lab, your task is to: Change the IP address assigned on the Fa0/0 interface to use the last address in the 172.16.0.0/24 subnet. This changes the inside network to use private addressing. Designate Fa0/0 as a NAT inside interface. Designate Serial0/0/0 as a NAT outside interface. Create a standard access list number 1 that permits all source addresses on the 172.16.0.0/24 network. Use the ip nat inside source command to configure NAT to use the access list number 1 and the Serial0/0/0 interface. Include the overload parameter. This configures NAT to translate all inside host addresses on the 172.16.0.0/24 network to the public IP address assigned to the Serial0/0/0 interface. Save your changes to the startup-config file.

Select Router. Press Enter to get started. At the Router> prompt, type enable and press Enter. At the Router# prompt, type config t and press Enter. At the Router(config)# prompt, type interface fa0/0 and press Enter. At the Router(config)# prompt, type ip address 172.16.0.254 255.255.255.0 and press Enter. At the Router(config-if)# prompt, type ip nat inside and press Enter. At the Router(config-if)# prompt, type interface s0/0/0 and press Enter. At the Router(config-if)# prompt, type ip nat outside and press Enter. At the Router(config-if)# prompt, type exit and press Enter. At the Router(config)# prompt, type access-list 1 permit 172.16.0.0 0.0.0.255 and press Enter. At the Router(config)# prompt, type ip nat inside source list 1 interface s0/0/0 overload and press Enter. Press Ctrl + Z. At the Router# prompt, type copy run start and press Enter. Press Enter to begin building the configuration.

You have two routers, a single switch, and several clients connected as shown in the network diagram. RouterB is connected to RouterA over the 172.16.1.0/30 network. RouterA has been configured as a DHCP server for the 192.168.1.0/24 network connected to RouterB. SwitchA has several clients that are configured to obtain their IP address, subnet mask, default gateway information, and DNS server IP addresses from a DHCP server. In this lab, your task is to configure RouterB as a DHCP relay agent to forward the clients' broadcast DHCPDISCOVER packets as unicast IP packets addressed to the DHCP server. Configure Fa 0/1 to forward all DHCP packets to 172.16.1.1. Restrict the following UDP broadcast protocols from being forwarded to RouterA:Port 137: NetBIOS Name ServicePort 138: NetBIOS Datagram Service When you're finished, save the configuration changes on RouterB.

Select RouterB. Press Enter to get started. At the RouterB> prompt, type enable and press Enter. At the RouterB# prompt, type config t and press Enter. At the RouterB (config)# prompt, type int fa0/1 and press Enter. At the RouterB(config-if)# prompt, type ip helper-address 172.16.1.1 and press Enter. At the RouterB(config-if)# prompt, type exit and press Enter. At the RouterB(config)# prompt, type no ip forward-protocol udp 137 and press Enter. At the RouterB(config)# prompt, type no ip forward-protocol udp 138 and press Enter. Press Ctrl + Z. At the RouterB# prompt, type copy run start and press Enter. Press Enter to begin building the configuration.

You have a single router, a single switch, and several clients connected as shown in the network diagram. RouterB is connected to SwitchA. SwitchA is connected to three clients that belong to the same VLAN. Each client is configured to obtain its IP address, subnet mask, default gateway, and DNS server IP addresses from a DHCP server. There is no database agent to save automatic IP address to MAC address bindings. SwitchA has a manually assigned IP address of 192.168.1.254/24 for remote management, and there are two DNS servers, which have IP addresses of 192.168.5.2/24 and 192.168.5.3/24 (not shown in the network diagram). When configuring a DHCP server: Use the ip dhcp excluded-address global configuration command to exclude addresses from being assigned. If there is a range of addresses, identify the starting and ending addresses. Use the default-router DHCP pool configuration command to identify the default gateway address. In this lab, your task is to configure RouterB as a DHCP server that will respond to the clients' DHCPDISCOVER packets. Force the DHCP server process on RouterB not to log IP address conflicts. Exclude IP addresses 192.168.1.1 and 192.168.1.254 from being assigned to hosts. Create the DHCP address pool as follows:Name: VLAN10Network and Mask: 192.168.1.0 255.255.255.0Domain name: Eastsim.comDNS servers: 192.168.5.2 and 192.168.5.3Default gateway: 192.168.1.1Lease: 13 days When you're finished, save the configuration changes on RouterB.

Select RouterB. Press Enter to get started. At the RouterB> prompt, type enable and press Enter. At the RouterB# prompt, type config t and press Enter. At the RouterB(config)# prompt, type no ip dhcp conflict logging and press Enter. At the RouterB(config)# prompt, type ip dhcp excluded-address 192.168.1.1 and press Enter. At the RouterB(config)# prompt, type ip dhcp excluded-address 192.168.1.254 and press Enter. At the RouterB(config)# prompt, type ip dhcp pool VLAN10 and press Enter. At the RouterB(dhcp-config)# prompt, type network 192.168.1.0 255.255.255.0 and press Enter. At the RouterB(dhcp-config)# prompt, type domain-name Eastsim.com and press Enter. At the RouterB(dhcp-config)# prompt, type dns-server 192.168.5.2 192.168.5.3 and press Enter. At the RouterB(dhcp-config)# prompt, type default-router 192.168.1.1 and press Enter. At the RouterB(dhcp-config)# prompt, type lease 13 and press Enter. Press Ctrl + Z. At the RouterB# prompt, type copy run start and press Enter. Press Enter to begin building the configuration.