200-301 Question #689: Real Exam Question with Answer & Explanation

Question

Lab Simulation 7 Guidelines This is a lab item in which tasks will be performed on virtual devices. - Refer to the Tasks tab to view the tasks for this lab item. - Refer to the Topology tab to access the device console(s) and perform the tasks. - Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window. - All necessary preconfigurations have been applied. - Do not change the enable password or hostname for any device. - Save your configurations to NVRAM before moving to the next item. - Click Next at the bottom of the screen to submit this lab and move to the next question. - When Next is clicked, the lab closes and cannot be reopened. Topology Tasks Connectivity between three routers has been established, and IP services must be configured jn the order presented to complete the implementation Tasks assigned include configuration of NAT, NTP, DHCP, and SSH services. 1. All traffic sent from R3 to the R1 Loopback address must be configured for NAT on R2. All source addresses must be translated from R3 to the IP address of Ethernet0/0 on R2, while using only a standard access list named NAT To verify, a ping must be successful to the R1 Loopback address sourced from R3. Do not use NVI NAT configuration. 2. Configure R1 as an NTP server and R2 as a client, not as a peer, using the IP address of the R1 Ethernet0/2 interface. Set the clock on the NTP server for midnight on January 1, 2019. 3. Configure R1 as a DHCP server for the network 10.1.3.0/24 in a pool named TEST. Using a single command, exclude addresses 1-10 from the range. Interface Ethernet0/2 on R3 must be issued the IP address of 10.1.3.11 via DHCP. 4. Configure SSH connectivity from R1 to R3, while excluding access via other remote connection protocols. Access for user root and password Cisco must be set on router R3 using RSA and 1024 bits. Verify connectivity using an SSH session from router R1 using a destination address of 10.1.3.11. Do NOT modify console access or line numbers to accomplish this task. Answer: NAT: R2(config)# ip access list standard PUBNET R2(config-std-nacl)# permit 10.2.3.3 R2(config-std-nacl)# permit 10.1.3.11 R2(config-std-nacl)# permit 192.168.3.1 R2(config-std-nacl)# exit R2(config)# interface e0/1 R2(config-if)# ip nat inside R2(config)# interface e0/0 R2(config-if)# ip nat outside R2(config)# ip nat inside source list PUBNET interface e0/0 overload NTP: R1# clock set 00:00:00 jan 1 2019 R1(config)# ntp master 1 R2(config)# ntp server 10.1.3.1 DHCP: R1(config)# ip dhcp pool NETPOOL R1(dhcp-config)# network 10.1.3.0 255.255.255.0 R1(config)# exit R1(config)# ip dhcp excluded-address 10.1. 3.1 10.1.3.10 R3(config)# interface e0/2 R3(config-if)# ip address dhcp SSH: R3(config)# username netadmin password N3t4ccess R3(config)# line vty 0 4 R3(config-line)# login local R3(config-line)# exit R3(config)# ip domain-name cisco.com R3(config)# crypto key generate rsa