200-301 Question #1758: Real Exam Question with Answer & Explanation

Question

Lab Simulation 65 Please use the "Tasks" and "Topology" tabs to complete this lablet. Topology Tasks Task 1 Complete the configuration of NAT/PAT on the R1 router using the predefined configuration. R1 Predefined Configuration interface Ethernet0/0 ip nat outside interfaceEthernet0/1 ip nat inside access-list 192 permit ip 192.168.0.0 0.0.3.255 any Task Configure NTP on R1 and Sw1 using the following information: - NTP server = R1 - Source = Loopback 0 - Client = Sw1 Task 3 R1 is preconfigured with a DHCP pool and associated information. PC1 is configured to obtain an IP address automatically. - Configure a relay agent on Sw1. Task 4 Sw1 is preconfigured with a local user account and a domain name. Complete the SSH configuration on Sw1. - RSA Key = 2048 bits - SSH Version = 2 Answer: Task 1 - Complete NAT/PAT on R1 Predefined config already contains: ip nat inside ip nat outside access-list 192 permit ip 192.168.0.0 0.0.3.255 any Add the missing PAT rule: R1# conf t ip nat inside source list 192 interface e0/0 overload PAT requires mapping ACL 192 to the outside interface with overload. Task 2 - Configure NTP (R1 = server, Sw1 = client, source = Loopback0) R1 (NTP Server) R1# conf t interface Loopback0 ip address 10.1.1.1 255.255.255.255 ! example; use lab IP if different ntp master ntp source Loopback0 Sw1 (NTP Client) Sw1# conf t ntp server 10.1.1.1 ntp source vlan 1 ! or relevant SVI used for management NTP server sets its time source to Loopback0; Sw1 points to R1 as the server. Task 3 - Configure DHCP Relay on Sw1 R1 is the DHCP server. Sw1 must forward DHCP broadcasts. On Sw1, enable the helper on the VLAN interface used by PC1/PC2 (likely VLAN 1 unless otherwise specified): Sw1# conf t interface vlan 1 ip helper-address 172.16.0.9 ! R1 E0/1 IP from topology forwards DHCP requests toward R1. ip helper-address Task 4 - Complete SSH Configuration on Sw1 (RSA 2048, SSHv2) Sw1 already has username + domain name; generate key and enable SSH: Sw1# conf t crypto key generate rsa modulus 2048 ip ssh version 2 line vty 0 4 transport input ssh login local SSH requires an RSA key and SSH version 2. VTY lines must accept SSH and use local authentication.

Options

• taskComplete Lab Simulation 65 by configuring NAT/PAT on R1, NTP on R1 (server) and Sw1 (client), DHCP relay on Sw1, and SSH on Sw1.
• prerequisitesR1 Predefined Configuration: interface Ethernet0/0 ip nat outside, interfaceEthernet0/1 ip nat inside, access-list 192 permit ip 192.168.0.0 0.0.3.255 any. R1 is preconfigured with a DHCP pool and associated information, and PC1 is configured to obtain an IP address automatically. Sw1 is preconfigured with a local user account and a domain name.