VERSION 1/A

Student name _____________________ Date _________________ Start time ____________

Circle one:

Location: Anniston

Version 1

Instructor provided information:

WAN IP network address: 192.168.1.0

with a subnet mask : 255.255.255.0
Local LAN IP network address: 172.31.0.0
Each subnet needs to accommodate: 10 host addresses
Usable subnet for the LAN: ______.
Do not use subnet zero as the first subnet.
Subnet number of a LAN: 1 ( equal to version number )
IGRP AS number: 1 ( equal to version number )
WAN interface of GAD ___________ ( lowest usable address in subnetwork )
WAN address for the S0, or S0/0, interface of the assigned router
___________ ( second lowest usable address in subnetwork)
Production workstations: - assigned the lower half of the IP addresses.
Network devices and Management stations - assigned the upper half of the IP addresses.
Ethernet router interface - to be assigned the highest usable address.
IP address of the Ethernet interface on the assigned router.
___________________ (based on exam version number and subnet assignment)
Step 1: Basic Planning Time: 20 minutes Points __________________

Subnet Subnet
Subnet First host Last host Broadcast
Address mask (/x)

Branch: IP address range

Anniston or Boaz
Production Host Range
(Lower half)
Management Host Range
(Upper half)

Production Host
IP address ___________________________
Subnet Mask __________________
Default Gateway ___________________________

Management Host
IP address ___________________________
Subnet Mask __________________
Default Gateway ___________________________

Instructor _______________________________
Step 2: Security Planning Time: 30 minutes Points __________________

1. The company has an Intranet Web server host that all systems can reach at IP address
172.16.0.1 with only HTTP access. No other protocols will be permitted to this site.

2. The company also has a server pool in the 209.0.0.0/24 network. The server pool addresses
are divided in half. The servers in the upper half of the address range are reachable only by
management hosts using all possible IP protocols. The servers in the upper half of the address
range are not reachable by production hosts using all IP protocols The servers in the lower
half of the address range are reachable by all LAN hosts using all possible IP protocols. The
servers should not be accessible by any other hosts.

3. The company has discovered an Internet Web server at 198.0.0.1 that is known to contain
viruses. All hosts are to be banned from reaching this site.

4.All other traffic should be permitted to any destination.

! Allow all company hosts to access intra server with only HTTP access

! No other protocols will be permitted to intraserver

! servers in the upper half of the address range are NOT reachable by production hosts

! servers in the upper half of the address range are reachable by management
hosts using all possible IP protocols

! servers in the upper half of the address range are NOT reachable by any other hosts

! all hosts are to be banned from reaching this site Internet Web server at 198.0.0.1

! All other traffic should be permitted to any destination.

! assign to the interface

Instructor _______________________________

Step 3: Cabling Time: 10 minutes Points __________________

Instructor _______________________________
Step 4: Basic Configuration Time: 15 minutes Points__________________

Instructor _______________________________

Step 5: Security Configuration Time: 15 minutes Points _______________

Instructor _______________________________

Step 6: Troubleshooting Time: 10 minutes Points __________________

Instructor _______________________________ End time __________________