CCNAv7 ENSA Skills Assessment

Показать описание

Enterprise Networking, Security and Automation v7.0 ENSA - CCNAv7 ENSA Skills Assessment

Рекомендации по теме

Комментарии

Hey, I just want to tell you for help get this far in cisco. You helped me quite a bit. I subbed to the channel. Appreciate what you've done so far.

why

Hey man! Awesome walk through, really nicely put together. Saved me a bunch, keep it up.

KIoakk

Those who are still able to use this. There are multiple ways to do ACL's. I would recommend figuring out a different way to do the ACL as in this example and the itanswers answer is not fully correct and if you only do what they tell you, you will not get 100%. All I'm trying to say is, if you think the ACL looks off, that's because it is. :) I figured it out and I don't understand much of this. I believe in you :)

CCcummins

A few things regarding Part 4. You don't actually have to create a whole second server on 10.67.1.50 - I'm running Packet Tracer 7.3 (or whatever the latest version is). PC-B has TFTP server functionality on it. Just treat it identical as a server. The commands and everything are the same. (meaning you can also restore a device from PC-B using TFTP. yay science!)

However, I still have the exact same problems with S1. How do we know it will work in real life? I don't have that much hands on experience....

hermessanhao

<< crypto key generate rsa general-keys modulus 1024 >> This will work on PT, maybe since i'm doing it now its been updated. I see your video is posted 4 years ago. Thanks again for saving the day right now!!

callen

Part 4 the new ccna3 is
Step 1: Configure host computers.
Configure the host computers PC-A and PC-B with IPv4 addresses.
Description PC-A PC-B
IP Address (PC-A) 192.168.1.50 / (PC-B) 10.67.1.50
Subnet Mask (PC-A) 255.255.255.0 / (PC-B) 255.255.255.0
Default Gateway (PC-A) 192.168.1.1 / (PC-B) 10.67.1.1

PC-A -> PC-B Ping -> Success
PC-A -> 209.165.201.1 Ping -> Success
PC-A -> 209.165.201.1 SSH -> Success
PC-B -> 209.165.201.1 SSH -> Success

On part 4 the new ccna3 is
Step 2: Configure Access Control on R2.
Create and apply an access control list on R2 named R2-SECURITY to do the following:
Create an access control list R2-SECURITY
Control ICMP traffic
: ICMP traffic from hosts on the 192.168.1.0/24 network is

not allowed to the loopback on R2 (209.165.201).
Control SSH traffic SSH is not allowed to the address 209.165.201.1
Permit traffic All other traffic, regardless of protocol, is allowed
Apply the ACL Filter traffic originating from R1

PC-A -> PC-B Ping -> Success
PC-A -> 209.165.201.1 Ping -> Failure
PC-A -> 209.165.201.1 SSH -> Failure
R1 -> 209.165.201.1 Ping ->Success
R1 - >209.165.201.1 SSH -> Failure

I cant figure out how to do on step 2 regarding the ICMP / ACL method.

darthvader

PC-A is not pinging PC-B but it can ping R1 interfaces g0/0/0 and g0/0/0 but not R2. Same with PC-B, it can ping R2 interfaces but not R1. Help! Thanks in advance.

joemarket

the network between the two routers also comes from the 10.0.0.0/8 network so wouldnt the acl deny packets coming from that?. also i still dont get why u didnt use 10.0.0.0/8 as the source in the acl instead of any. since it says only hosts from 10.0.0.0/8 network

rohailbukhari

Thanks man u saved me but part 4 copying file to the tftp server, it can't copy is says error opening tftp on switches and routers , i tried but still fails with time out

abdihalim