CCNA Discovery 3 Module 2 Exam Answers Version 4.0

CCNA Discovery 3 Module 2 Exam Answers Version 4.0

1. What type of connection point is a point of presence (POP)?
• between a client and a host
• between two local networks
• between a computer and a switch
• between an ISP and an Enterprise network

jawaban = between an ISP and an Enterprise network

2. A network administrator needs to configure Telnet access to a router. Which group of commandsenable Telnet access to the router?
• Router(config)# enable password class
Router(config)# line con 0
Router(config-line)# login
Router(config-line)# password cisco
• Router(config)# ip host 192.168.1.1 NewYork
Router(config)# enable password cisco
• Router(config)# line aux 0
Router(config-line)# login
Router(config-line)# password cisco
• Router(config)# enable password class
Router(config)# line vty 0 4
Router(config-line)# login
Router(config-line)# password cisco

jawaban = • Router(config)# enable password class
Router(config)# line vty 0 4
Router(config-line)# login
Router(config-line)# password cisco

3. Which two types of information should be included in a business continuity plan? (Choose two.)
• maintenance time periods
• intrusion monitoring records
• offsite data storage procedures
• alternate IT processing locations*
• problem resolution escalation steps
jawaban = • alternate IT processing locations*
                • problem resolution escalation steps

4. Which two router parameters can be set from interface configuration mode? (Choose two.)
• IP address
• Telnet password
• hostname
• console password
• subnet mask
• enable secret password
jawaban = IP address dan subnet mask

5. Which two devices protect a corporate network against malicious attacks at the enterprise edge ?(Choose two.)
• demarc
• IP security (IPSec)
• Data Service Unit (DSU)
• intrusion prevention system (IPS)
• intrusion detection system (IDS)
jawaban =

6. Which three steps must be performed to remove all VLAN information from a switch but retain therest of the configuration? (Choose three.)
• Remove all VLAN associations from the interfaces.
• Remove the 802.1q encapsulation from the interfac
• Issue the command copy start run.
• Issue the command delete flash:vlan.dat.
• Issue the command erase start.
• Reload the switch.
jawaban = • Issue the command delete flash:vlan.dat.
                • Issue the command erase start.
                • Reload the switch

7. What is the demarcation?
• physical point where the ISP responsibilty ends and the customer responsibilty begins
• physical location where all server farm connections meet before being distributed into the Core
• point of entry for outside attacks and is often vulnerable
• point of entry for all Access Layer connections from the Distribution Layer devices
jawaban = • physical point where the ISP responsibilty ends and the customer responsibilty begins

8. Which device is responsible for moving packets between multiple network segments?
• router
• switch
• CSU/DSU
• IDS device
jawaban = router

10. What information can an administrator learn using the show version command?
• Cisco IOS filename
• configured routing protocol
• status of each interface
• IP addresses of all interfaces
jawaban = Cisco IOS filename

11. Which two situations require a network administrator to use out-of-band management to change arouter configuration? (Choose two.)
• Network links to the router are down.
• No Telnet password has been configured on the router.
• The administrator can only connect to the router using SSH.
• The network interfaces of the router are not configured with IP addresses.
• Company security policy requires that only HTTPS be used to connect to routers.
jawaban = Network links to the router are down.

                 The network interfaces of the router are not configured with IP addresses.

12. It is crucial that network administrators be able to examine and configure network devices fromtheir homes. Which two approaches allow this connectivity without increasing vulnerability to externalattacks? (Choose two.)
• Configure a special link at the POP to allow external entry from the home computer.
• Set up VPN access between the home computer and the network.
• Install a cable modem in the home to link to the network.
• Configure ACLs on the edge routers that allow only authorized users to access management portson network devices.
• Configure a server in the DMZ with a special username and password to allow external access.
jawaban =

13. A network administrator must define specific business processes to implement if a catastrophicdisaster prevents a company from performing daily business routines. Which portion of the networkdocumentation is the administrator defining?
• business security plan
• business continuity plan
• network solvency plan
• service level agreement
• network maintenance plan
jawaban = • business continuity plan

14. A DoS attack crippled the daily operations of a large company for 8 hours. Which two optionscould be implemented by the network administrator to possibly prevent such an attack in the future?(Choose two.)
• install security devices with IDS and IPS at the enterprise edge
• reset all user passwords every 30 days
• filter packets based on IP address, traffic pattern, and protocol
• deny external workers VPN access to internal resources
• ensure critical devices are physically secure and placed behind the demarc
jawaban = install security devices with IDS and IPS at the enterprise edge

                 filter packets based on IP address, traffic pattern, and protocol

15. A network manager wants to have processes in place to ensure that network upgrades do not affectbusiness operations. What will the network manager create for this purpose?
• business security plan
• business continuity plan
• service level agreement
• network maintenance plan
jawaban = network maintenance plan

16. An investment company has multiple servers that hold mission critical datThey are worried that ifsomething happens to these servers, they will lose this valuable information. Which type of plan isneeded for this company to help minimize loss in the event of a server crash?
• business security
• business continuity
• network maintenance
• service level agreement
jawaban = business security

17. When searching for information about authentication methods and usernames of companypersonnel, where can a network administrator look?
• Business Continuity Plan
• Business Security Plan
• Network Maintenance Plan
• Service Level Agreement
jawaban = Business Security Plan

18. Refer to the exhibit. Which statement is true about port Fa5/1?
• When a violation is detected, the port will log the information to a syslog server.
• When a violation is detected, the port will go into err-disable mod
• There have been 11 security violations since the last reloa
• The port is currently in the shutdown state.

jawaban =  The port is currently in the shutdown state.

CCNA Discovery 3 Module 1 Exam Answers Version 4.0

CCNA Discovery 3 Module 1 Exam Answers Version 4.0

1. What can be found at the enterprise edge?
• Internet, VPN, and WAN modules
• Internet, PSTN, and WAN services
• server farms and network management
• campus infrastructure, including access layer devices

jawaban = • Internet, VPN, and WAN modules

2. In which functional area of the Cisco Enterprise Architecture should IDS and IPS be located to detect and prevent services from accessing hosts?
• Enterprise Campus
• Edge Distribution
• Enterprise Edge
• Service Provider Edge
jawaban = • Enterprise Edge

3. A business consultant must use Internet websites to research a report on the e-business strategies of several firms and then electronically deliver the report to a group of clients in cities throughout the world. Which two teleworker tools can the consultant use to accomplish this project? (Choose two.)
• VoIP
• VPN
• HTTP
• Telnet
• email
jawaban = HTTP dan email

4. Which two measures help ensure that a hardware problem does not cause an outage in an enterprise LAN that supports mission critical services? (Choose two.)
• providing failover capability
• installing redundant power supplies
• purchasing more bandwidth from the ISP
• implementing broadcast containment with VLANs
• installing routers that can handle a greater amount of throughput
jawaban = • providing failover capability
                 • installing redundant power supplies

5. Which task would typically only require services located at the access layer of the hierarchical design model?
• connecting to the corporate web server to update sales figures
• using a VPN from home to send data to the main office servers
• printing a meeting agenda on a local departmental network printer
• placing a VoIP call to a business associate in another country
• responding to an e-mail from a co-worker in another department
jawaban = printing a meeting agenda on a local departmental network printer

6. How does a VPN work to support remote user productivity?
• It uses SSL to encrypt remote user logins to the corporate intranet.
• It uses secure Telnet for remote user connections to internal network devices.
• It creates a virtual circuit that allows real-time communications between any two Internet endpoints.
• It uses encapsulation to create a secure tunnel for transmission of data across non-secure networks.
jawaban = • It uses encapsulation to create a secure tunnel for transmission of data across non-secure networks. 

7. A remote user needs to access a networking device on the internal network of the company. The transactions between the remote user and the device must be secure. Which protocol enables this to happen securely?
• HTTP
• SSH
• Telnet
• FTP
jawaban = • SSH

8. What does VoIP provide to telecommuters?
• high-quality, live-video presentations
• real-time voice communications over the Internet
• ability to share desktop applications simultaneously
• secure, encrypted data transmissions through the Internet
jawaban = • real-time voice communications over the Internet

9. Which functional component of the Cisco Enterprise Architecture is responsible for hosting internal servers?
• enterprise campus
• enterprise edge
• service provider edge
• building distribution
jawaban = enterprise campus

10. What is the purpose of the Cisco Enterprise Architecture?
• remove the three-layer hierarchical model and use a flat network approach
• divide the network into functional components while still maintaining the concept of Core, Distribution, and Access Layers
• provide services and functionality to the core layer by grouping various components into a single
• component located in the access layer
• reduce overall network traffic by grouping server farms, the management server, corporate intranet, and e-commerce routers in the same layer
jawaban = divide the network into functional components while still maintaining the concept of Core, Distribution, and Access Layers

11. Which two solutions would an enterprise IT department use to facilitate secure intranet access for remote workers? (Choose two.)
• VPN
• NAT
• user authentication
• client firewall software
• packet sniffing

jawaban = VPN dan user authentication

12. Which statement describes the difference between an enterprise WAN and an enterprise extranet?
• An enterprise WAN is designed to interconnect local LANs, while an enterprise extranet is designed to interconnect remote branch offices.
• An enterprise WAN is designed to interconnect branch offices, while an enterprise extranet is designed to give access to external business partners.
• An enterprise WAN is designed to provide remote access for its teleworkers, while an enterprise extranet is designed to provide Internet connectivity for the enterprise.
• An enterprise WAN is designed to provide Internet connectivity for the enterprise, while an enterprise extranet is designed to provide remote access to the enterprise network for teleworkers.
jawaban = • An enterprise WAN is designed to interconnect branch offices, while an enterprise extranet is designed to give access to external business partners.

13. Why would a network administrator want to limit the size of failure domains when designing a network?
• reduces the effect of Ethernet collisions
• reduces the impact of a key device or service failure
• reduces the impact of Internet congestion on critical traffic
• reduces the impact of blocking broadcast packets at the edge of the local network
jawaban = • reduces the impact of a key device or service failure

14. What is the main purpose of the Access Layer in a hierarchically designed network?
• performs routing and packet manipulation
• supplies redundancy and failover protection
• provides a high-speed, low-latency backbone
• serves as a network connection point for end-user devices
jawaban = serves as a network connection point for end-user devices

15. Which three functions are performed at the Distribution Layer of the hierarchical network model? (Choose three.)
• forwards traffic that is destined for other networks
• isolates network problems to prevent them from affecting the Core Layer
• allows end users to access the local network
• provides a connection point for separate local networks
• transports large amounts of data between different geographic sites
• forwards traffic to other hosts on the same logical network
jawaban = • forwards traffic that is destined for other networks
                 • isolates network problems to prevent them from affecting the Core Layer

• provides a connection point for separate local networks

16. What is a benefit of having an extranet?
• It provides web-like access to company information for employees only.
• It limits access to corporate information to secure VPN or remote access connections only.
• It allows customers and partners to access company information by connecting to a public web server.
• It allows suppliers and contractors to access confidential internal information using controlled external connections.
jawaban = • It allows suppliers and contractors to access confidential internal information using controlled external connections.

17. What are two important characteristics or functions of devices at the Enterprise Edge? (Choose two.)
• providing Internet, telephone, and WAN services to the enterprise network
• providing a connection point for end-user devices to the enterprise network
• providing high-speed backbone connectivity with redundant connections
• providing intrusion detection and intrusion prevention to protect the network against malicious activity
• providing packet inspection to determine if incoming packets should be allowed on the enterprise network
jawaban = • providing intrusion detection and intrusion prevention to protect the network against malicious activity
                 • providing packet inspection to determine if incoming packets should be allowed on the enterprise network

18. Why is TCP the preferred Layer 4 protocol for transmitting data files?
• TCP is more reliable than UDP because it requires lost packets to be retransmitted.
• TCP requires less processing by the source and destination hosts than UDP.
• UDP introduces delays that degrade the quality of the data applications.
• TCP ensures fast delivery because it does not require sequencing or acknowlegements.
jawaban = • TCP is more reliable than UDP because it requires lost packets to be retransmitted.

19. The ABC Corporation implements the network for its new headquarters using the Cisco Enterprise Architecture. The network administrator wants to filter the traffic from and to the outside world. Where should the administrator deploy a firewall device?
• server farm
• enterprise edge
• enterprise campus
• service provider edge
jawaban = enterprise edge

20. Which two statements are reasons why UDP is used for voice and video traffic instead of TCP?(Choose two.)
• TCP requires all data packets to be delivered for the data to be usable.
• The acknowledgment process of TCP introduces delays that break the streams of data.
• UDP does not have mechanisms for retransmitting lost packets.
• UDP tolerates delays and compensates for them.
• TCP is a connectionless protocol that provides end-to-end reliability.
• UDP is a connection-oriented protocol that provides end-to-end reliability.

jawaban =  • The acknowledgment process of TCP introduces delays that break the streams of data.
          • UDP does not have mechanisms for retransmitting lost packets.

Lab 5.2.3 Configuring an ISR with SDM Express

Lab 5.2.3 Configuring an ISR with SDM Express

Objectives

•  Configure basic router global settings – router name, users, and login passwords – using Cisco SDM Express.

•  Configure LAN and Internet connections on a Cisco ISR using Cisco SDM Express. Background / Preparation Cisco Router and Security Device Manager (SDM) is a Java-based web application and a device-management tool for Cisco IOS Software-based routers. The Cisco SDM simplifies router and security configuration through the use of smart wizards, which allows you to deploy, configure, and monitor a Cisco router without requiring knowledge of the command-line interface (CLI). The Cisco SDM is supported on a wide range of Cisco routers and Cisco IOS Software releases. Many newer Cisco routers come with SDM preinstalled. If you are using an 1841 router, SDM (and SDM Express) is pre-installed.  This lab assumes the use of a Cisco 1841 router. You can use another router model as long as it is capable of supporting SDM. If you are using a supported router that does not have SDM installed, you can download the latest version free of charge from the following location: http://www.cisco.com/pcgi-bin/tablebuild.pl/sdm From the URL shown above, view or download the document “Downloading and Installing Cisco Router and Security Device Manager.” This document provides instructions for installing SDM on your router. It lists specific model numbers and IOS versions that can support SDM, and the amount of memory required. Cisco SDM Express is a component of SDM. SDM Express automatically runs a GUI wizard that allows you to perform an initial basic configuration of a Cisco router using a browser and the web interface of the router. SDM Express will only be activated when the router is in its factory-default state. In this lab, you will use Cisco SDM Express to configure LAN and Internet connections on a Cisco ISR. The following resources are required:

•  Cisco 1841 ISR router with SDM version 2.4 installed (critical – see Note 2 in Step 1)

•  Cisco 1841 ISR router configured with factory default settings and with a serial port add-in module (critical – see Notes 1 and 3 in Step 1)

•  (Optional) Other Cisco router model with SDM installed 

•  Windows XP computer with Internet Explorer 5.5 or higher and SUN Java Runtime Environment (JRE) version 1.4.2_05 or later (or Java Virtual Machine (JVM) 5.0.0.3810). (See Note 3 in Step 1)

•  Straight-through or crossover category 5 Ethernet cable

•  Access to PC network TCP/IP configuration 

Step 1: Configure the PC to connect to the router and then launch Cisco SDM

a.  Power up the router.

b.  Power up the PC.

c.  Disable any popup blocker programs. Popup blockers prevent SDM Express windows from

displaying.

d.  Connect the PC NIC to the FastEthernet 0/0 port on the Cisco 1841 ISR router with the Ethernet cable.

NOTE: An SDM router other than the 1841 may require connection to different port in order to access SDM. 

e.  Configure the IP address of the PC to be 10.10.10.2 with a subnet mask of 255.255.255.248.

f.  SDM does not load automatically on the router. You must open the web browser to reach the SDM.

Open the web browser on the PC and connect to the following URL: http://10.10.10.1  NOTE 1 – If browser connection to router fails: If you cannot connect and see the login screen, check your cabling and connections and make sure the IP configuration of the PC is correct. The router may have been previously configured to an address of 192.168.1.1 on the Fa0/0 interface. Try setting the IP address of the PC to 192.168.1.2 with a subnet mask of 255.255.255.0 and connect to http://192.168.1.1 using the browser. If you have difficulty with this procedure, contact your instructor for assistance. If the startup-config is erased in an SDM router, SDM will no longer come up by default when the router is restarted. It will be necessary to build a basic router configuration using IOS commands.

Refer to the procedure at the end of this lab or contact your instructor. g. In the Connect to dialog box, enter cisco for the username and cisco for the password. Click OK. The main SDM web application will start and you will be prompted to use HTTPS. Click Cancel. In the Security Warning window, click Yes to trust the Cisco application. h.  In the Welcome to the Cisco SDM Express Wizard window, read the message and then click Next.

i. Verify that you are using the latest version of SDM. The initial SDM screen that displays immediately after the login shows the current version number. It is also displayed on the main SDM screen shown below, along with IOS version. NOTE 3 – If SDM Express Wizard fails to start: If you connect to the router and SDM Express starts but the SDM Express Setup Wizard shown above does not start automatically, the router may be partially configured and needs to be reset to its factory defaults. If the SDM Express main screen is displayed, choose the Reset to Factory Defaults option, repeat Steps 1a through 1e, and log in again. If the full SDM application starts (not SMD Express), choose the Reset to Factory Defaults option from the File menu on the main SDM screen, repeat Steps 1a through 1e, and log in again. If you have difficulty with this procedure, contact your instructor for assistance. Also note that the Windows XP computer you are using must have Internet Explorer 5.5 or higher and SUN Java Runtime Environment (JRE) version 1.4.2_05 or later (or Java Virtual Machine (JVM) 5.0.0.3810). If it does not, SDM will not start. You will need to download and install JRE on the PC before continuing with the lab.

NOTE 2: If the current version is not 2.4 or higher, notify your instructor before continuing with this lab. You will need to download the latest zip file from the URL listed above and save it to the PC. From the Tools menu of the SDM GUI, use the Update SDM option to specify the location of the zip file and start the update.

Step 2: Perform initial basic configuration

a.  In the Basic Configuration window, enter the following information. When you complete the basic configuration, click Next to continue. b.  From the Router Provisioning window, click the radio button next to SDM Express and then click

Next.

•  In the Host Name field, enter CustomerRouter. 

•  In the Domain Name field, enter the domain name customer.com.

•  Enter the username admin and the password cisco123 for SDM Express users and Telnet users. This password gives access to SDM locally, through the console connection, or remotely using Telnet.

• Enter the enable secret password of cisco123. This entry creates an encrypted password that prevents casual users from entering privileged mode and modifying the configuration of the router using the CLI.

 Step 3: Configure the LAN IP address

In the LAN Interface Configuration window, choose FastEthernet0/0 from the Interface list. For interface FastEthernet 0/0, enter the IP address of 192.168.1.1 and subnet mask of 255.255.255.0. You can also enter the subnet mask information in a different format: entering a count of the number of binary digits or bits in the subnet mask, such as 255.255.255.0 or 24 subnet bits.

Step 4: De-select DHCP server

At this point, do not enable the DHCP server. This procedure is covered in a later section of this course. In the DHCP server configuration window, ensure that the Enable DHCP server on the LAN interface check box is cleared before proceeding. Click Next to continue. Step 5: Configure the WAN interface

a.  In the WAN Configuration window, choose Serial0/0/0 interface from the list and click the Add Connection button. The Add Connection window appears.

NOTE: With the 1841 router, the serial interface is designated by 3 digits – C/S/P, where

C=Controller#, S=Slot# and P=Port#. The 1841 has two modular slots. The designation Serial0/0/0 indicates that the serial interface module is on controller 0, in slot 0, and that the interface to be used is the first one (0). The second interface is Serial0/0/1. The serial module is normally installed in slot 0 but may be may be installed in slot 1. If this is the case, the designation for the first serial interface on the module would be Serial0/1/0 and the second would be Serial0/1/1.

b.  From the Add Serial0/0/0 Connection dialog box, choose PPP from the Encapsulation list. From the Address Type list, choose Static IP Address. Enter 209.165.200.225 for the IP address and 255.255.255.224 for the Subnet mask. Click OK to continue. Notice that this subnet mask translates to a /27, or 27 bits for the mask.

c.  Notice that the IP address that you just set for the serial WAN interface now appears in the Interface List. Click Next to continue.

d.  Enter the IP address 209.165.200.226 as the Next Hop IP Address for the Default Route. Click Next to continue.

e.  Ensure that the check box next to Enable NAT is cleared. This procedure is covered in a later section of this course. Click Next to continue.

Step 6: Enable the firewall and security settings

a.  Depending on the router IOS version, the next step may be Firewall Configuration. In the Firewall Configuration window, click the radio button that enables the firewall and then click Next. The Security Configuration window appears.

b.  Leave all the default security options checked in the Security Configuration window and then click Next.

Step 7: Review and complete the configuration

a.  If you are not satisfied with the Cisco SDM Express Summary, click Back to fix any changes and then click Finish to commit the changes to the router. b. Click OK after reading the Reconnection Instructions. Save these instructions to a file for future reference, if desired. 

NOTE: Before the next time you connect, you will need to change the IP address of the PC to be compatible with the new address that you configured to FastEthernet 0/0. The Reconnection

instructions are shown below.

 c.  When the delivery of the configuration to the router is complete. Click OK to close Cisco SDM Express.

Step 8: Reflection

a.  What feature makes configuring the router easy?  

b.  Summarize the steps that are configured by the Cisco SDM Express SDM router basic IOS configuration to bring up SDM  If the startup-config is erased in an SDM router, SDM will no longer come up by default when the router is restarted. It will be necessary to build a basic config as follows. Further details regarding the setup and use of SDM are can be found in the SDM Quick Start Guide:           http://www.cisco.com/en/US/products/sw/secursw/ps5318/products_quick_start09186a0080511c89.html#wp44788

1) Set the router Fa0/0 IP address

(This is the interface that a PC will connect to using a browser to bring up SDM. The PC IP address should be set to 10.10.10.2  255.255.255.248)

 NOTE: An SDM router other than the 1841 may require connection to different port in order to access SDM.

Router(config)# interface Fa0/0

Router(config-if)# ip address 10.10.10.1 255.255.255.248

Router(config-if)# no shutdown

2)  Enable the HTTP/HTTPS server of the router, using the following Cisco

IOS commands: 

Router(config)#ip http server

Router(config)#ip http secure-server

Router(config)#ip http authentication local

3) Create a user account with privilege level 15 (enable privileges). 

Router(config)# username <username> privilege 15 password 0 <password>

Replace <username> and <password> with the username and password that

you want to configure.  4)  Configure SSH and Telnet for local login and privilege level 15: 

Router(config)# line vty 0 4

Router(config-line)# privilege level 15

Router(config-line)# login local

Router(config-line)# transport input telnet

Router(config-line)# transport input telnet ssh

Router(config-line)# exit

Lab 5.1.2 Powering Up an Integrated Services Router

Lab 5.1.2 Powering Up an Integrated Services Router

Objectives

·         Set up a new Cisco 1841 Integrated Services Router ( ISR ).

·         Connect a computer to the router console interface.

·         Configure Hyper Terminal so that the computer can communicate with the router

Background / Preparation

This lab focuses on the initial setup of the Cisco 1841 ISR. If a Cisco 1841 ISR is not available, you can use another router  model. The information in this lab applies to other routers. A Cisco ISR combines routing and switching functions, security, voice, and LAN and WAN connectivity into a single device, which makes it appropriate for small-sized to medium-sized businesses and for ISP-managed customers.

Some steps in this lab are normally only performed once during initial setup. These steps are indicated as optional.

The following resources are required :

·         Cisco 1841 ISR other comparable router.

·         Power Cable

·         Windows PC with terminal emulation program

·         RJ45-to-DB9 connector console cable.

Step 1 : position router and connect ground wire (Optional)

Note : this Step is optional and is required only if the router is being set up for the first time. Read through it to become familiar with the process.

a.       Position the router chassis to allow unrestricted air  flow for chassis cooling. Keep at least 1inch  ( 2.5 4 c m ) of clear space beside the cooling inlet and exhaust vents. CAUTION: Do not place any items that weigh more than 10 pounds ( 4.5  kilograms )  on top of the chassis, and do not stack routers on top of each other.

b . Connect the chassis to a reliable earth ground using a ring terminal and size 14AWG (2 mm ) wire using these step :

NOTE: Your instructor should inform you where a reliable earth ground is

1)   Strip one end of the ground wire to expose approximately 3/4 inch ( 20mm ) of conductor.

2)   Crimp the 14AWG (2 mm ) green ground wire to a UL Listed / CS A certified ring terminal using a crimping tool that is recommended by the ring terminal manufacturer. The ring terminal provided on the back panel of the Cisco 1841 ISR router is suitable for a Number 6 grounding screw.

3)   Attach the ring terminal to the chassis as shown in the figure below. Use a Number 2 Phillips screw driver and the screw that is supplied with the ring terminal and tighten the screw

4)   Connect the other end of the ground wire to a suitable earth ground that the instructor indicates.

Step 2 : Install the Compact Flash memory card ( Optional)

NOTE: This step is optional and is required only if the router is being set up for the first time. To avoid wear on the memory card and ejector mechanism, do not actually perform this step. Read through it to become familiar with the process. Attach a grounding strap to your wrist to avoid electro shock damage to the card. Seat the external Compact Flash memory card properly into the slot. This step depends on the type of router. Not all routers have flash cards.

b . If  the router has a Compact Flash memory card, check that the ejector mechanism is fully seated. The

ejector button is next to the Compact Flash memory card. Connect the power cable to the ISR and to the power outlet.

Step 4: Power up the ISR

a . Move the power switch on the back of the ISR to the ON position. During this step, the LEDs on the chassis turn on and off, not necessarily at the same time. The LED  activity depends on what is installed in  the ISR .

b .  Observe the startup messages as they appear in the terminal emulation  program window. While these messages are appearing, do not press any keys  on the keyboard. Pressing a key interrupts the router start up process. Some examples of start up messages displayed are the amount of main memory installed and the image type of the Cisco IOS software that the computer is using. Can you find these example start up  messages in the following figure?

Step 5 : Reflection

a .  Is  there anything about this procedure that is risky?

b .  Why do the router cover, all modules, and cover plates need to be installed?

c .  How many routers can you safely stack on top of each other ?

1)      0

2)      1

3)      2

4)      3

Lab 4.2.4 Determining PAT Translations

Lab 4.2.4 Determining PAT Translations

1.       Client on a private network sends a request to a web server on the public Internet.

2.       N A T  router translates source address and forwards the request to the web server

3.       T h e web server responds to the client’s translated address

4.        The N A T router translates the client address ( destination)  back to the original private address

Objectives

·         Explain the active network connections open on a computer when viewing a particular web page.

·         Determine what an internal IP address and port number are translated to using port address.

Background / Preparation

Port address translation (PAT) is a form of network address translation ( N A T ) .With PAT, the router. translates multiple internal ( usually private) addresses to a single public IP address on an interface that is connected to the Internet. Port numbers are used, in combination with IP addresses, to keep track of individual connections. In this lab, you use the ipconfig and netstat commands to view open ports on a computer. You will be able to see the initial IP address and port combination, and determine the translated  IP address and port combination The following resources are required:

·         Computer running Windows XP Professional.

·         Connection to a gateway router or an  I S R  using  P A T.

·         Internet connection.

·         Access to the PC command prompt.

Step 1: Determine the IP address of the computer

a.       Open a Command  Prompt window by clicking Start  >  Run and typing cmd. Alternatively, you may click Start  >  All  programs  >  Accessories >  Command Prompt. At the prompt, type the ipconfig command to display the IP address of the computer.

b.      What is the IP address of the computer? 192.168.194.175

c.       Is  there a port number shown, and why or why not?Ya, ada port number yang muncul, hal ini karena access point telah dikelompokkan atau dibagi dalam beberapa titik akses, sehingga memiliki default gateway yaitu 192.168.194.129

Step 2 : Determine the IP addresses of the gateway router or ISR

Check with your instruct or to get the IP addresses for the ISR NAT router gateway.

Internal Ethernet Address :

External Internet Address :

Step 3 : Display base line netstat results.

a.       At  the command  prompt, type the netstat  –n command.

b.      What  type of information does the netstat  –n command  return?

Protocol, IP address, Foreign address.

c.       Where does the IP address found in Step 1 appear? Is there a port number associated with it? Why or why not?

Ya ditemukan, karena menggunakan port gateway.

Step 4 : Display active network connections

a.       Ping www.cisco.com and record the address.

b.      Open a web browser and enter www.cisco.com in the address bar.

c.       Go back to the Command Prompt Window. Type the netstat –n command again, and then  type the command without the – n option. The output looks similar to the following figure, depending on what other network applications and connections are open when you issued the command.

d.      What is the difference in the output between the netstat and netstat – n commands?

Perbedaannya ialah pada netstat –n hanya menampilakan informasi dari address local ke foreign address. Sedangkan netstat tampa –n akan menapilakn informasi secara details mulai dari ip address, alamat protocol yang digunakan, lokasi isp. Dan user.

e.       Write down the connection entries for the client IP address and the IP address of the www.cisco.com web server.

Local client IP address and port number :	Foreign IP address and port number :
127.0.0.1 :1227	127.0.0.1 :1228
127.0.0.1 :1228	127.0.0.1 :1227
127.0.0.1 :1229	127.0.0.1 :1230
192.168.194.175:2233	64.233.181.136 :80
192.168.194.175:52103	192.168.194.129 :53
192.168.194.175:54674	192.168.194.129:53
192.168.194.175:58266	192.168.194.129:53
192.168.194.175:64274	192.168.194.129:53
192.168.194.175:64293	192.168.194.129:53
192.168.194.175:65399	192.168.194.129:53

f.       Are there more netstat entries the second time? Tidak ada lagi perintah nestat yang berbeda meskipun untuk pengulangan kedua kalinya.

STEP 6 : REFLECTIONS

a.       Port address translation (PAT) is also called NAT with overload. What does the term “overload” refer to?

overload merupakan istilah ditujukan pada IP address karena pada nat overload bukan hanya satu alamat ip public yang terekspos,bisa lebih dari satu jika berupa overload.

b.      The NAT terminology used in the lab includes four type of address: Inside-local, inside-global, outside-local, and outside-global. In many connections that pass through NAT routers, two of these address are often the same. Which two of these four addresses normally remain unchanged, and why do you think that is the case?