17.8.2 Packet Tracer - Skills Integration Challenge (Instructions Answer)

! ==============================================================
!--- 17.8.2 Packet Tracer - Skills Integration Challenge
!--- ANSWER SCRIPT FOR ROUTER R1
!--- Usage: copy this whole file and paste it into the ROUTER R1 terminal (start at the Router> prompt). Every line beginning with "!" is a comment; IOS ignores it, so pasting a comment by accident is harmless.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Basic security settings
! --------------------------------------------------------------

!--- Encrypt all plaintext passwords (set first so every password below is stored encrypted).
service password-encryption

!--- Require a minimum of 10 characters for all passwords (set BEFORE the passwords below).
security passwords min-length 10

!--- Assign the device name.
hostname R1

!--- Disable DNS lookup.
no ip domain-lookup

!--- Encrypted privileged EXEC password: Ciscoenpa55.
enable secret Ciscoenpa55

!--- Block anyone for 3 minutes (180 s) who fails 4 login attempts within 2 minutes (120 s).
login block-for 180 attempts 4 within 120

!--- Banner warning against unauthorized access. (The answer key leaves a placeholder 'Any text' here - replace it with a real warning.)
banner motd #Unauthorized access is prohibited!#

!--- Enable IPv6 routing so R1 forwards IPv6 between the LANs.
ipv6 unicast-routing

! --------------------------------------------------------------
!--- SSH configuration
! --------------------------------------------------------------

!--- Set the domain name (required before RSA keys can be generated).
ip domain-name CCNA-lab.com

!--- Create the SSH admin account with privilege level 15 and password Admin1pa55.
username Admin1 privilege 15 secret Admin1pa55

!--- Generate the 1024-bit RSA key. This one-line form supplies the modulus, so there is no interactive prompt to answer.
crypto key generate rsa general-keys modulus 1024

! --------------------------------------------------------------
!--- Console and VTY lines (log out after 5 minutes of inactivity)
! --------------------------------------------------------------

!--- Console: password Ciscoconpa55, require login, 5-minute idle timeout.
line console 0
 password Ciscoconpa55
 login
 exec-timeout 5 0
 exit

!--- VTY: SSH only, authenticate with the local user database, 5-minute idle timeout.
line vty 0 4
 login local
 transport input ssh
 exec-timeout 5 0
 exit

! --------------------------------------------------------------
!--- Interfaces - IPv4 per the new subnetting scheme + IPv6 per the Addressing Table
! --------------------------------------------------------------

!--- G0/0 - Staff LAN: 192.168.0.0/25 (100 hosts), first host as the gateway.
interface g0/0
 ip address 192.168.0.1 255.255.255.128
 ipv6 address 2001:db8:acad::1/64
 ipv6 address fe80::1 link-local
 no shutdown
 exit

!--- G0/1 - Sales LAN: 192.168.0.128/26 (50 hosts), first host as the gateway.
interface g0/1
 ip address 192.168.0.129 255.255.255.192
 ipv6 address 2001:db8:acad:1::1/64
 ipv6 address fe80::1 link-local
 no shutdown
 exit

!--- G0/2 - IT LAN: 192.168.0.192/27 (25 hosts), first host as the gateway.
interface g0/2
 ip address 192.168.0.193 255.255.255.224
 ipv6 address 2001:db8:acad:2::1/64
 ipv6 address fe80::1 link-local
 no shutdown
 exit

!--- S0/0/1 - WAN link to the Central router (already listed in the answer key; re-applying is harmless).
interface s0/0/1
 ip address 172.16.1.2 255.255.255.252
 ipv6 address 2001:db8:2::1/64
 ipv6 address fe80::1 link-local
 no shutdown
 exit

end

! --------------------------------------------------------------
!--- Save the configuration to NVRAM. (Press Enter when prompted.)
! --------------------------------------------------------------
copy running-config startup-config


! ==============================================================
!--- Verification:
!---   show ip interface brief    -> all Gigabit interfaces up/up
!---   show ipv6 interface brief  -> GUA + fe80::1 on each interface
!---   show ip route              -> three connected LAN subnets
!---   show ip ssh                -> SSH enabled, RSA key present
! ==============================================================

! ==============================================================
!--- 17.8.2 Packet Tracer - Skills Integration Challenge
!--- ANSWER SCRIPT FOR SWITCH S1
!--- Usage: copy this whole file and paste it into the SWITCH S1 terminal (start at the Switch> prompt). Every line beginning with "!" is a comment; IOS ignores it, so pasting a comment by accident is harmless.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Basic security settings
! --------------------------------------------------------------

!--- Encrypt all plaintext passwords (set first so every password below is stored encrypted).
service password-encryption

!--- Assign the device name.
hostname S1

!--- Disable DNS lookup.
no ip domain-lookup

!--- Encrypted privileged EXEC password: Ciscoenpa55.
enable secret Ciscoenpa55

! --------------------------------------------------------------
!--- Console and VTY lines (log out after 5 minutes of inactivity)
! --------------------------------------------------------------

!--- Console: password Ciscoconpa55, require login, 5-minute idle timeout.
line console 0
 password Ciscoconpa55
 login
 exec-timeout 5 0
 exit

!--- VTY lines: 5-minute idle timeout and require login (per the answer key).
line vty 0 4
 login
 exec-timeout 5 0
 exit
line vty 5 15
 login
 exec-timeout 5 0
 exit

! --------------------------------------------------------------
!--- Management interface
! --------------------------------------------------------------

!--- VLAN 1 SVI on the Staff LAN, second host of the subnet.
interface vlan 1
 ip address 192.168.0.2 255.255.255.128
 no shutdown
 exit

!--- Default gateway (the R1 interface on this LAN).
ip default-gateway 192.168.0.1

end

! --------------------------------------------------------------
!--- Save the configuration to NVRAM. (Press Enter when prompted.)
! --------------------------------------------------------------
copy running-config startup-config


! ==============================================================
!--- Verification:
!---   show ip interface brief  -> VLAN 1 up/up with its IP
!---   ping 192.168.0.1         -> reach the default gateway
! ==============================================================

! ==============================================================
!--- 17.8.2 Packet Tracer - Skills Integration Challenge
!--- ANSWER SCRIPT FOR SWITCH S2
!--- Usage: copy this whole file and paste it into the SWITCH S2 terminal (start at the Switch> prompt). Every line beginning with "!" is a comment; IOS ignores it, so pasting a comment by accident is harmless.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Basic security settings
! --------------------------------------------------------------

!--- Encrypt all plaintext passwords (set first so every password below is stored encrypted).
service password-encryption

!--- Assign the device name.
hostname S2

!--- Disable DNS lookup.
no ip domain-lookup

!--- Encrypted privileged EXEC password: Ciscoenpa55.
enable secret Ciscoenpa55

! --------------------------------------------------------------
!--- Console and VTY lines (log out after 5 minutes of inactivity)
! --------------------------------------------------------------

!--- Console: password Ciscoconpa55, require login, 5-minute idle timeout.
line console 0
 password Ciscoconpa55
 login
 exec-timeout 5 0
 exit

!--- VTY lines: 5-minute idle timeout and require login (per the answer key).
line vty 0 4
 login
 exec-timeout 5 0
 exit
line vty 5 15
 login
 exec-timeout 5 0
 exit

! --------------------------------------------------------------
!--- Management interface
! --------------------------------------------------------------

!--- VLAN 1 SVI on the Sales LAN, second host of the subnet.
interface vlan 1
 ip address 192.168.0.130 255.255.255.192
 no shutdown
 exit

!--- Default gateway (the R1 interface on this LAN).
ip default-gateway 192.168.0.129

end

! --------------------------------------------------------------
!--- Save the configuration to NVRAM. (Press Enter when prompted.)
! --------------------------------------------------------------
copy running-config startup-config


! ==============================================================
!--- Verification:
!---   show ip interface brief  -> VLAN 1 up/up with its IP
!---   ping 192.168.0.129         -> reach the default gateway
! ==============================================================

! ==============================================================
!--- 17.8.2 Packet Tracer - Skills Integration Challenge
!--- ANSWER SCRIPT FOR SWITCH S3
!--- Usage: copy this whole file and paste it into the SWITCH S3 terminal (start at the Switch> prompt). Every line beginning with "!" is a comment; IOS ignores it, so pasting a comment by accident is harmless.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Basic security settings
! --------------------------------------------------------------

!--- Encrypt all plaintext passwords (set first so every password below is stored encrypted).
service password-encryption

!--- Assign the device name.
hostname S3

!--- Disable DNS lookup.
no ip domain-lookup

!--- Encrypted privileged EXEC password: Ciscoenpa55.
enable secret Ciscoenpa55

! --------------------------------------------------------------
!--- Console and VTY lines (log out after 5 minutes of inactivity)
! --------------------------------------------------------------

!--- Console: password Ciscoconpa55, require login, 5-minute idle timeout.
line console 0
 password Ciscoconpa55
 login
 exec-timeout 5 0
 exit

!--- VTY lines: 5-minute idle timeout and require login (per the answer key).
line vty 0 4
 login
 exec-timeout 5 0
 exit
line vty 5 15
 login
 exec-timeout 5 0
 exit

! --------------------------------------------------------------
!--- Management interface
! --------------------------------------------------------------

!--- VLAN 1 SVI on the IT LAN, second host of the subnet.
interface vlan 1
 ip address 192.168.0.194 255.255.255.224
 no shutdown
 exit

!--- Default gateway (the R1 interface on this LAN).
ip default-gateway 192.168.0.193

end

! --------------------------------------------------------------
!--- Save the configuration to NVRAM. (Press Enter when prompted.)
! --------------------------------------------------------------
copy running-config startup-config


! ==============================================================
!--- Verification:
!---   show ip interface brief  -> VLAN 1 up/up with its IP
!---   ping 192.168.0.193         -> reach the default gateway
! ==============================================================