ITN (Version 7.00) Final PT Skills Assessment (PTSA) Exam Answers

! ==============================================================
!--- ITN (Version 7.00) Final PT Skills Assessment (PTSA) - Form 1 (192.168.x.x), ID 011
!--- ANSWER SCRIPT FOR ROUTER R1
!--- Usage: connect a console cable from PC-A to the router, open Desktop > Terminal and paste this whole file at the Router> prompt. Every line beginning with "!" is a comment; IOS ignores it.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Part 3: Configure Basic Device Settings.
! --------------------------------------------------------------

!--- Step 1a. Disable DNS lookup.
no ip domain-lookup

!--- Step 1b. Configure the router hostname.
hostname R1

!--- Step 1d. Configure an appropriate banner.
banner motd #Unauthorized access to this device is prohibited!#

!--- Step 1e. Allow console logins with the password C@nsPassw!
line console 0
 password C@nsPassw!
 login
 exit

!--- Step 2a. G0/0/0 - LAN 2: first host address of the second subnet.
interface gigabitethernet 0/0/0
 description Connect to Subnet B
 ip address 192.168.10.129 255.255.255.192
 no shutdown
 exit

!--- Step 2a. G0/0/1 - LAN 1: first host address of the first subnet.
interface gigabitethernet 0/0/1
 description Connect to Subnet A
 ip address 192.168.10.1 255.255.255.128
 no shutdown
 exit

! --------------------------------------------------------------
!--- Part 4: Configure Security Settings on R1 and S1.
! --------------------------------------------------------------

!--- Step 1a. Encrypted privileged EXEC password.
enable secret DontTellAnyone

!--- Step 1b. Encrypt all plaintext passwords.
service password-encryption

!--- Step 1c. Minimum password length of 10.
security passwords min-length 10

!--- Step 2a. Domain name.
ip domain-name netsec.com

!--- Step 2b. Local user netadmin with the secret password Ci$co12345.
username netadmin secret Ci$co12345

!--- Step 2c and 2d. VTY lines: local database login, SSH only.
line vty 0 15
 login local
 transport input ssh
 exit

!--- Step 2e. RSA key with a 1024-bit modulus (one line, no prompt).
crypto key generate rsa general-keys modulus 1024

end

! --------------------------------------------------------------
!--- Save the configuration to NVRAM. (Press Enter when prompted for the destination filename.)
! --------------------------------------------------------------
copy running-config startup-config


! ==============================================================
!--- Verification:
!---   show ip interface brief  -> G0/0/0 192.168.10.129 and G0/0/1 192.168.10.1 up/up
!---   show ip ssh              -> SSH Enabled
!---   From PC-A: ping 192.168.10.190, then ssh -l netadmin 192.168.10.1 (password Ci$co12345)
! ==============================================================

! ==============================================================
!--- ITN (Version 7.00) Final PT Skills Assessment (PTSA) - Form 1 (192.168.x.x), ID 011
!--- ANSWER SCRIPT FOR SWITCH S1
!--- Usage: connect a console cable from PC-B to the switch, open Desktop > Terminal and paste this whole file at the Switch> prompt. Every line beginning with "!" is a comment; IOS ignores it.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Part 3: Configure Basic Device Settings.
! --------------------------------------------------------------

!--- Step 1a. Disable DNS lookup.
no ip domain-lookup

!--- Step 1c. Configure the switch hostname.
hostname S1

!--- Step 1d. Configure an appropriate banner.
banner motd #Unauthorized access to this device is prohibited!#

!--- Step 1e. Allow console logins with the password C@nsPassw!
line console 0
 password C@nsPassw!
 login
 exit

!--- Step 2b. VLAN 1 SVI: second host address of LAN 1.
interface vlan 1
 description Switch Subnet A
 ip address 192.168.10.2 255.255.255.128
 no shutdown
 exit

!--- Step 2b. Default gateway so the switch is reachable from other networks.
ip default-gateway 192.168.10.1

! --------------------------------------------------------------
!--- Part 4: Configure Security Settings on R1 and S1.
! --------------------------------------------------------------

!--- Step 1a. Encrypted privileged EXEC password.
enable secret DontTellAnyone

!--- Step 1b. Encrypt all plaintext passwords.
service password-encryption

!--- Step 2a. Domain name.
ip domain-name netsec.com

!--- Step 2b. Local user netadmin with the secret password Ci$co12345.
username netadmin secret Ci$co12345

!--- Step 2c and 2d. VTY lines: local database login, SSH only.
line vty 0 15
 login local
 transport input ssh
 exit

!--- Step 2e. RSA key with a 1024-bit modulus (one line, no prompt).
crypto key generate rsa general-keys modulus 1024

!--- Step 3a and 3b. Describe and shut down every unused port (F0/5 = router, F0/6 = PC-A are in use).
interface range fastethernet 0/1 - 4, fastethernet 0/7 - 24, gigabitethernet 0/1 - 2
 description Unused switch ports
 shutdown
 exit

end

! --------------------------------------------------------------
!--- Save the configuration to NVRAM. (Press Enter when prompted for the destination filename.)
! --------------------------------------------------------------
copy running-config startup-config


! ==============================================================
!--- Verification:
!---   show ip interface brief  -> Vlan1 192.168.10.2 up/up; unused ports administratively down
!---   show interfaces status   -> only Fa0/5 and Fa0/6 connected, the rest disabled
!---   ping 192.168.10.1        -> reaches the router G0/0/1
! ==============================================================

! ==============================================================
!--- ITN (Version 7.00) Final PT Skills Assessment (PTSA) - Form 2 (172.16.x.x), ID 120
!--- ANSWER SCRIPT FOR ROUTER Router-A
!--- Usage: connect a console cable from Host-A to the router, open Desktop > Terminal and paste this whole file at the Router> prompt. Every line beginning with "!" is a comment; IOS ignores it.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Part 3: Configure Basic Device Settings.
! --------------------------------------------------------------

!--- Step 1a. Disable DNS lookup.
no ip domain-lookup

!--- Step 1b. Configure the router hostname.
hostname Router-A

!--- Step 1d. Configure an appropriate banner.
banner motd #Unauthorized access to this device is prohibited!#

!--- Step 1e. Allow console logins with the password C@nsPassw!
line console 0
 password C@nsPassw!
 login
 exit

!--- Step 2a. G0/0/0 - LAN 2: first host address of the second subnet.
interface gigabitethernet 0/0/0
 description Connect to Subnet B
 ip address 172.16.1.65 255.255.255.224
 no shutdown
 exit

!--- Step 2a. G0/0/1 - LAN 1: first host address of the first subnet.
interface gigabitethernet 0/0/1
 description Connect to Subnet A
 ip address 172.16.1.1 255.255.255.192
 no shutdown
 exit

! --------------------------------------------------------------
!--- Part 4: Configure Security Settings on Router-A and Switch-A.
! --------------------------------------------------------------

!--- Step 1a. Encrypted privileged EXEC password.
enable secret NoOneShouldKnow

!--- Step 1b. Encrypt all plaintext passwords.
service password-encryption

!--- Step 1c. Minimum password length of 10.
security passwords min-length 10

!--- Step 2a. Domain name.
ip domain-name netsec.com

!--- Step 2b. Local user netadmin with the secret password Ci$co12345.
username netadmin secret Ci$co12345

!--- Step 2c and 2d. VTY lines: local database login, SSH only.
line vty 0 15
 login local
 transport input ssh
 exit

!--- Step 2e. RSA key with a 1024-bit modulus (one line, no prompt).
crypto key generate rsa general-keys modulus 1024

end

! --------------------------------------------------------------
!--- Save the configuration to NVRAM. (Press Enter when prompted for the destination filename.)
! --------------------------------------------------------------
copy running-config startup-config


! ==============================================================
!--- Verification:
!---   show ip interface brief  -> G0/0/0 172.16.1.65 and G0/0/1 172.16.1.1 up/up
!---   show ip ssh              -> SSH Enabled
!---   From Host-A: ping 172.16.1.94, then ssh -l netadmin 172.16.1.1 (password Ci$co12345)
! ==============================================================

! ==============================================================
!--- ITN (Version 7.00) Final PT Skills Assessment (PTSA) - Form 2 (172.16.x.x), ID 120
!--- ANSWER SCRIPT FOR SWITCH Switch-A
!--- Usage: connect a console cable from Host-B to the switch, open Desktop > Terminal and paste this whole file at the Switch> prompt. Every line beginning with "!" is a comment; IOS ignores it.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Part 3: Configure Basic Device Settings.
! --------------------------------------------------------------

!--- Step 1a. Disable DNS lookup.
no ip domain-lookup

!--- Step 1c. Configure the switch hostname.
hostname Switch-A

!--- Step 1d. Configure an appropriate banner.
banner motd #Unauthorized access to this device is prohibited!#

!--- Step 1e. Allow console logins with the password C@nsPassw!
line console 0
 password C@nsPassw!
 login
 exit

!--- Step 2b. VLAN 1 SVI: second host address of LAN 1.
interface vlan 1
 description Switch Subnet A
 ip address 172.16.1.2 255.255.255.192
 no shutdown
 exit

!--- Step 2b. Default gateway so the switch is reachable from other networks.
ip default-gateway 172.16.1.1

! --------------------------------------------------------------
!--- Part 4: Configure Security Settings on Router-A and Switch-A.
! --------------------------------------------------------------

!--- Step 1a. Encrypted privileged EXEC password.
enable secret NoOneShouldKnow

!--- Step 1b. Encrypt all plaintext passwords.
service password-encryption

!--- Step 2a. Domain name.
ip domain-name netsec.com

!--- Step 2b. Local user netadmin with the secret password Ci$co12345.
username netadmin secret Ci$co12345

!--- Step 2c and 2d. VTY lines: local database login, SSH only.
line vty 0 15
 login local
 transport input ssh
 exit

!--- Step 2e. RSA key with a 1024-bit modulus (one line, no prompt).
crypto key generate rsa general-keys modulus 1024

!--- Step 3a and 3b. Describe and shut down every unused port (F0/5 = router, F0/6 = Host-A are in use).
interface range fastethernet 0/1 - 4, fastethernet 0/7 - 24, gigabitethernet 0/1 - 2
 description Unused switch ports
 shutdown
 exit

end

! --------------------------------------------------------------
!--- Save the configuration to NVRAM. (Press Enter when prompted for the destination filename.)
! --------------------------------------------------------------
copy running-config startup-config


! ==============================================================
!--- Verification:
!---   show ip interface brief  -> Vlan1 172.16.1.2 up/up; unused ports administratively down
!---   show interfaces status   -> only Fa0/5 and Fa0/6 connected, the rest disabled
!---   ping 172.16.1.1          -> reaches the router G0/0/1
! ==============================================================

! ==============================================================
!--- ITN (Version 7.00) Final PT Skills Assessment (PTSA) - Form 3 (209.165.x.x), ID 211
!--- ANSWER SCRIPT FOR ROUTER Central-RT
!--- Usage: connect a console cable from User-A to the router, open Desktop > Terminal and paste this whole file at the Router> prompt. Every line beginning with "!" is a comment; IOS ignores it.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Part 3: Configure Basic Device Settings.
! --------------------------------------------------------------

!--- Step 1a. Disable DNS lookup.
no ip domain-lookup

!--- Step 1b. Configure the router hostname.
hostname Central-RT

!--- Step 1d. Configure an appropriate banner.
banner motd #Unauthorized access to this device is prohibited!#

!--- Step 1e. Allow console logins with the password C@nsPassw!
line console 0
 password C@nsPassw!
 login
 exit

!--- Step 2a. G0/0/0 - LAN 2: first host address of the second subnet.
interface gigabitethernet 0/0/0
 description Connect to Subnet B
 ip address 209.165.201.33 255.255.255.224
 no shutdown
 exit

!--- Step 2a. G0/0/1 - LAN 1: first host address of the first subnet.
interface gigabitethernet 0/0/1
 description Connect to Subnet A
 ip address 209.165.201.1 255.255.255.224
 no shutdown
 exit

! --------------------------------------------------------------
!--- Part 4: Configure Security Settings on Central-RT and Central-SW.
! --------------------------------------------------------------

!--- Step 1a. Encrypted privileged EXEC password.
enable secret NoOneShouldKnow

!--- Step 1b. Encrypt all plaintext passwords.
service password-encryption

!--- Step 1c. Minimum password length of 10.
security passwords min-length 10

!--- Step 2a. Domain name.
ip domain-name netsec.com

!--- Step 2b. Local user netadmin with the secret password Ci$co12345.
username netadmin secret Ci$co12345

!--- Step 2c and 2d. VTY lines: local database login, SSH only.
line vty 0 15
 login local
 transport input ssh
 exit

!--- Step 2e. RSA key with a 1024-bit modulus (one line, no prompt).
crypto key generate rsa general-keys modulus 1024

end

! --------------------------------------------------------------
!--- Save the configuration to NVRAM. (Press Enter when prompted for the destination filename.)
! --------------------------------------------------------------
copy running-config startup-config


! ==============================================================
!--- Verification:
!---   show ip interface brief  -> G0/0/0 209.165.201.33 and G0/0/1 209.165.201.1 up/up
!---   show ip ssh              -> SSH Enabled
!---   From User-A: ping 209.165.201.62, then ssh -l netadmin 209.165.201.1 (password Ci$co12345)
! ==============================================================

! ==============================================================
!--- ITN (Version 7.00) Final PT Skills Assessment (PTSA) - Form 3 (209.165.x.x), ID 211
!--- ANSWER SCRIPT FOR SWITCH Central-SW
!--- Usage: connect a console cable from User-B to the switch, open Desktop > Terminal and paste this whole file at the Switch> prompt. Every line beginning with "!" is a comment; IOS ignores it.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Part 3: Configure Basic Device Settings.
! --------------------------------------------------------------

!--- Step 1a. Disable DNS lookup.
no ip domain-lookup

!--- Step 1c. Configure the switch hostname.
hostname Central-SW

!--- Step 1d. Configure an appropriate banner.
banner motd #Unauthorized access to this device is prohibited!#

!--- Step 1e. Allow console logins with the password C@nsPassw!
line console 0
 password C@nsPassw!
 login
 exit

!--- Step 2b. VLAN 1 SVI: second host address of LAN 1.
interface vlan 1
 description Switch Subnet A
 ip address 209.165.201.2 255.255.255.224
 no shutdown
 exit

!--- Step 2b. Default gateway so the switch is reachable from other networks.
ip default-gateway 209.165.201.1

! --------------------------------------------------------------
!--- Part 4: Configure Security Settings on Central-RT and Central-SW.
! --------------------------------------------------------------

!--- Step 1a. Encrypted privileged EXEC password.
enable secret NoOneShouldKnow

!--- Step 1b. Encrypt all plaintext passwords.
service password-encryption

!--- Step 2a. Domain name.
ip domain-name netsec.com

!--- Step 2b. Local user netadmin with the secret password Ci$co12345.
username netadmin secret Ci$co12345

!--- Step 2c and 2d. VTY lines: local database login, SSH only.
line vty 0 15
 login local
 transport input ssh
 exit

!--- Step 2e. RSA key with a 1024-bit modulus (one line, no prompt).
crypto key generate rsa general-keys modulus 1024

!--- Step 3a and 3b. Describe and shut down every unused port (F0/5 = router, F0/6 = User-A are in use).
interface range fastethernet 0/1 - 4, fastethernet 0/7 - 24, gigabitethernet 0/1 - 2
 description Unused switch ports
 shutdown
 exit

end

! --------------------------------------------------------------
!--- Save the configuration to NVRAM. (Press Enter when prompted for the destination filename.)
! --------------------------------------------------------------
copy running-config startup-config


! ==============================================================
!--- Verification:
!---   show ip interface brief  -> Vlan1 209.165.201.2 up/up; unused ports administratively down
!---   show interfaces status   -> only Fa0/5 and Fa0/6 connected, the rest disabled
!---   ping 209.165.201.1       -> reaches the router G0/0/1
! ==============================================================