SRWE (Version 7.00) Final PT Skills Assessment Exam (PTSA) Answers

Last Updated: Oct 28, 2026 CCNA v7 Course #2, CCNA v7.0 136 Comments

CCNA 2 SRWE Final PT Skills Assessment (PTSA)

Topology

SRWE Final PT Skills Assessment (PTSA)

Topology - SRWE Final PT Skills Assessment (PTSA)

VLAN Table

VLAN Router Subinterface VLAN Name
2 G0/0/1.2 Bikes
3 G0/0/1.3 Trikes
4 G0/0/1.4 Management
5 N/A Parking
6 G0/0/1.6 Native

Addressing Table

Device / Interface IP Address/Prefix/Link Local Address Default Gateway
R1 G0/0/1.2 10.19.8.1 /26 N/A
2001:db8:acad:a::1 /64 N/A
fe80::1 N/A
R1 G0/0/1.3 10.19.8.65 /27 N/A
2001:db8:acad:b::1 /64 N/A
fe80::1 N/A
R1 G0/0/1.4 10.19.8.97 /29 N/A
2001:db8:acad:c::1 /64 N/A
fe80::1 N/A
R1 G0/0/1.6 N/A N/A
R1 Loopback0 209.165.201.1 /27 N/A
2001:db8:acad:209::1 /64 N/A
fe80::1 N/A
S1 VLAN 4 SVI 10.19.8.98 /29 10.19.8.97
S2 VLAN 4 SVI 10.19.8.99 /29 10.19.8.97
PC-A NIC DHCP for IPv4 address DHCP for IPv4 default gateway
2001:db8:acad:a::50 /64 fe80::1
PC-B NIC DHCP for IPv4 address DHCP for IPv4 default gateway
2001:db8:acad:b::50 /64 fe80::1

Note: There is no interface on the router that supports VLAN 5.

SRWE Final PT Skills Assessment (PTSA)

SRWE Final PT Skills Assessment (PTSA)

SRWE Final PT Skills Assessment (PTSA)


A few things to keep in mind while completing this activity:

  1. Do not use the browser Back button or close or reload any exam windows during the exam.
  2. Do not close Packet Tracer when you are done. It will close automatically.
  3. Click the Submit Assessment button in the browser window to submit your work.

Assessment Objectives

  • Part 1: Build the Network
  • Part 2: Configure Initial Device Settings
  • Part 3: Configure Network Infrastructure Settings (VLANs, Trunking, EtherChannel)
  • Part 4: Configure Host Support

Introduction

In this Packet Tracer Skills Assessment (PTSA) you will configure the devices in a small network. You must configure a router, two switches, and two PCs to support both IPv4 and IPv6 connectivity. Your router and switches must also be managed securely. You will configure inter-VLAN routing, DHCP, Etherchannel, and port-security.
All of your tasks will be performed in PT Physical Mode. You will not be able to access the logical topology for this assessment. Network devices must be configured from a direct console connection.

Instructions

Part 1: Build the Network

a. Move the required devices into the equipment rack.

b. Place the PCs on the table.

c. Connect the devices according to the topology diagram.

Use Copper Straight-Through cables for all the network connections: R1 G0/0/1 to S1 F0/5, S1 F0/1 - F0/2 to S2 F0/1 - F0/2, PC-A to S1 F0/6, and PC-B to S2 F0/18.

SRWE Final PT Skills Assessment (PTSA)

SRWE Final PT Skills Assessment (PTSA)


Turn on the PCs and the router.

Part 2: Configure Initial Device Settings

All IOS device configuration must be made through a direct console connection.

In Physical Mode, the switch Console port is on the back panel. To see it, right-click the switch and choose Inspect Rear. Then connect a Console cable from the RS-232 port of the PC to the Console port of the device you want to configure, and open Terminal on the PC Desktop.


SRWE Final PT Skills Assessment (PTSA)

Step 1: Configure R1 Basic Settings and Device Hardening

a. Configure basic settings.

  1. Prevent the router from attempting to resolve incorrectly entered commands as domain names. 
    Router(config)# no ip domain lookup
  2. Configure the R1 hostname. 
    Router(config)# hostname R1
  3. Configure an appropriate MOTD banner. 
    R1(config)# banner motd #Unauthorized Access is Prohibited!#

b. Configure password security.

  1. Configure the console password and enable connections. 
    R1(config)# line console 0
R1(config-line)# password ciscoconpass
R1(config-line)# login
  2. Configure an enable secret password. 
    R1(config)# enable secret ciscoenpass
  3. Encrypt all clear text passwords. 
    R1(config)# service password-encryption
  4. Set the minimum length of newly created passwords to 10 characters. 
    R1(config)# security passwords min-length 10

c. Configure SSH.

  1. Create an administrative user in the local user database.
    • Username: admin
    • Encrypted Password: admin1pass
    R1(config)# username admin secret admin1pass
  2. Configure the domain name as ccna-ptsa.com 
    R1(config)# ip domain name ccna-ptsa.com
  3. Create an RSA crypto key with a modulus of 1024 bits. 
    R1(config)# crypto key generate rsa general-keys modulus 1024
  4. Ensure that more secure version of SSH will be used. 
    R1(config)# ip ssh version 2
  5. Configure the vty lines to authenticate logins against the local user database. 
    R1(config)# line vty 0 15
R1(config-line)# login local
  6. Configure the vty lines to only accept connections over SSH. 
    R1(config)# line vty 0 15
R1(config-line)# transport input ssh
Step 2: Configure router interfaces.

a. Configure R1 with a loopback interface. Configure the loopback0 with IPv4 and IPv6 addressing according to the addressing table.

R1(config)# interface loopback 0
R1(config-if)# ip address 209.165.201.1 255.255.255.224
R1(config-if)# ipv6 address 2001:db8:acad:209::1/64
R1(config-if)# ipv6 address fe80::1 link-local

b. Configure Router Subinterfaces

  1. Prepare the router to be configured with IPv6 addresses on its interfaces. 
    R1(config)# ipv6 unicast-routing
  2. Use the information in the Addressing Table and VLAN Table to configure subinterfaces on R1:
    • Interfaces should be configured with IPv4 and IPv6 addressing.
    • All addressed interfaces should use fe80::1 as the link local address.
    • Use the VLAN table to assign VLAN membership to the subinterfaces.
    R1(config)# interface gigabitethernet 0/0/1.2
R1(config-subif)# encapsulation dot1Q 2
R1(config-subif)# ip address 10.19.8.1 255.255.255.192
R1(config-subif)# ipv6 address 2001:db8:acad:a::1/64
R1(config-subif)# ipv6 address fe80::1 link-local
R1(config-subif)# interface gigabitethernet 0/0/1.3
R1(config-subif)# encapsulation dot1Q 3
R1(config-subif)# ip address 10.19.8.65 255.255.255.224
R1(config-subif)# ipv6 address 2001:db8:acad:b::1/64
R1(config-subif)# ipv6 address fe80::1 link-local
R1(config-subif)# interface gigabitethernet 0/0/1.4
R1(config-subif)# encapsulation dot1Q 4
R1(config-subif)# ip address 10.19.8.97 255.255.255.248
R1(config-subif)# ipv6 address 2001:db8:acad:c::1/64
R1(config-subif)# ipv6 address fe80::1 link-local
R1(config-subif)# interface gigabitethernet 0/0/1
R1(config-if)# no shutdown
  3. Be sure to configure the native VLAN interface. 
    R1(config)# interface gigabitethernet 0/0/1.6
R1(config-subif)# encapsulation dot1Q 6 native
  4. Configure descriptions for all interfaces. 
    R1(config)# interface loopback 0
R1(config-if)# description Simulated Internet connection
R1(config-if)# interface gigabitethernet 0/0/1
R1(config-if)# description Trunk link to S1 F0/5
R1(config-if)# interface gigabitethernet 0/0/1.2
R1(config-subif)# description Gateway for VLAN 2 - Bikes
R1(config-subif)# interface gigabitethernet 0/0/1.3
R1(config-subif)# description Gateway for VLAN 3 - Trikes
R1(config-subif)# interface gigabitethernet 0/0/1.4
R1(config-subif)# description Gateway for VLAN 4 - Management
R1(config-subif)# interface gigabitethernet 0/0/1.6
R1(config-subif)# description Native VLAN 6 - untagged traffic
Step 3: Configure S1 and S2 with Basic Settings and Device Hardening.

Configuration tasks for the switches S1 and S2 include the following:

a. Configure Basic Settings on S1 and S2

  1. Prevent the switches from attempting to resolve incorrectly entered commands as domain names.
    S1:

    Switch(config)# no ip domain lookup

    S2:

    Switch(config)# no ip domain lookup
  2. Configure the S1 or S2 hostname.
    S1:

    Switch(config)# hostname S1

    S2:

    Switch(config)# hostname S2
  3. Configure an appropriate MOTD banner on both switches.
    S1:

    S1(config)# banner motd #Unauthorized Access is Prohibited!#

    S2:

    S2(config)# banner motd #Unauthorized Access is Prohibited!#

b. Configure Device Hardening on S1 and S2

  1. Configure the console password and enable connections.
    S1:

    S1(config)# line console 0
S1(config-line)# password ciscoconpass
S1(config-line)# login

    S2:

    S2(config)# line console 0
S2(config-line)# password ciscoconpass
S2(config-line)# login
  2. Configure an enable secret password.
    S1:

    S1(config)# enable secret ciscoenpass

    S2:

    S2(config)# enable secret ciscoenpass
  3. Encrypt all clear text passwords.
    S1:

    S1(config)# service password-encryption

    S2:

    S2(config)# service password-encryption

c. Configure SSH on S1 and S2

  1. Create an administrative user in the local user database.
    • Username: admin
    • Password: admin1pass

    S1:

    S1(config)# username admin secret admin1pass

    S2:

    S2(config)# username admin secret admin1pass
  2. Configure the domain name as ccna-ptsa.com
    S1:

    S1(config)# ip domain name ccna-ptsa.com

    S2:

    S2(config)# ip domain name ccna-ptsa.com
  3. Create an RSA crypto key with a modulus of 1024 bits.
    S1:

    S1(config)# crypto key generate rsa general-keys modulus 1024

    S2:

    S2(config)# crypto key generate rsa general-keys modulus 1024
  4. Ensure that more secure version of SSH will be used.
    S1:

    S1(config)# ip ssh version 2

    S2:

    S2(config)# ip ssh version 2
  5. Configure the vty lines to authenticate logins against the local user database.
    S1:

    S1(config)# line vty 0 15
S1(config-line)# login local

    S2:

    S2(config)# line vty 0 15
S2(config-line)# login local
  6. Configure the vty lines to accept connections over SSH only.
    S1:

    S1(config)# line vty 0 15
S1(config-line)# transport input ssh

    S2:

    S2(config)# line vty 0 15
S2(config-line)# transport input ssh
Step 4: Configure SVIs on S1 and S2

Configure the SVI on both switches.

a. Use the information in the Addressing Table to configure SVIs on S1 and S2 for the Management VLAN.
S1:

S1(config)# interface vlan 4
S1(config-if)# description Management SVI - VLAN 4
S1(config-if)# ip address 10.19.8.98 255.255.255.248
S1(config-if)# no shutdown

S2:

S2(config)# interface vlan 4
S2(config-if)# description Management SVI - VLAN 4
S2(config-if)# ip address 10.19.8.99 255.255.255.248
S2(config-if)# no shutdown

b. Configure the switch so that the SVI can be reached from other networks over the Management VLAN.
S1:

S1(config)# ip default-gateway 10.19.8.97

S2:

S2(config)# ip default-gateway 10.19.8.97

Part 3: Configure Network Infrastructure Settings (VLANs, Trunking, EtherChannel)

On S1 and S2, configure the following.

Step 1: Configure VLANs and Trunking.

a. Create the VLANs according to the VLAN table.
S1:

S1(config)# vlan 2
S1(config-vlan)# name Bikes
S1(config-vlan)# vlan 3
S1(config-vlan)# name Trikes
S1(config-vlan)# vlan 4
S1(config-vlan)# name Management
S1(config-vlan)# vlan 5
S1(config-vlan)# name Parking
S1(config-vlan)# vlan 6
S1(config-vlan)# name Native

S2:

S2(config)# vlan 2
S2(config-vlan)# name Bikes
S2(config-vlan)# vlan 3
S2(config-vlan)# name Trikes
S2(config-vlan)# vlan 4
S2(config-vlan)# name Management
S2(config-vlan)# vlan 5
S2(config-vlan)# name Parking
S2(config-vlan)# vlan 6
S2(config-vlan)# name Native

b. Create 802.1Q VLAN trunks on ports F0/1 and F0/2. On S1, F0/5 should also be configured as a trunk. Use VLAN 6 as the native VLAN.
S1:

S1(config)# interface range fastethernet 0/1 - 2
S1(config-if-range)# switchport mode trunk
S1(config-if-range)# switchport trunk native vlan 6
S1(config-if-range)# switchport trunk allowed vlan 2,3,4,5,6
S1(config-if-range)# interface fastethernet 0/5
S1(config-if)# description Trunk link to R1 G0/0/1
S1(config-if)# switchport mode trunk
S1(config-if)# switchport trunk native vlan 6
S1(config-if)# switchport trunk allowed vlan 2,3,4,5,6

S2:

S2(config)# interface range fastethernet 0/1 - 2
S2(config-if-range)# switchport mode trunk
S2(config-if-range)# switchport trunk native vlan 6
S2(config-if-range)# switchport trunk allowed vlan 2,3,4,5,6
Step 2: Configure Etherchannel.

Create Layer 2 EtherChannel port group 1 that uses interfaces F0/1 and F0/2 on S1 and S2. Both ends of the channel should negotiate the LACP link.
S1:

S1(config)# interface range fastethernet 0/1 - 2
S1(config-if-range)# channel-group 1 mode active
S1(config-if-range)# interface port-channel 1
S1(config-if)# description EtherChannel to S2
S1(config-if)# switchport mode trunk
S1(config-if)# switchport trunk native vlan 6
S1(config-if)# switchport trunk allowed vlan 2,3,4,5,6

S2:

S2(config)# interface range fastethernet 0/1 - 2
S2(config-if-range)# channel-group 1 mode active
S2(config-if-range)# interface port-channel 1
S2(config-if)# description EtherChannel to S1
S2(config-if)# switchport mode trunk
S2(config-if)# switchport trunk native vlan 6
S2(config-if)# switchport trunk allowed vlan 2,3,4,5,6
Step 3: Configure Switchports.

a. On S1, configure the port that is connected to the host with static access mode in VLAN 2.

S1(config)# interface fastethernet 0/6
S1(config-if)# description Access port to PC-A - VLAN 2
S1(config-if)# switchport mode access
S1(config-if)# switchport access vlan 2

b. On S2, configure the port that is connected to the host with static access mode in VLAN 3.

S2(config)# interface fastethernet 0/18
S2(config-if)# description Access port to PC-B - VLAN 3
S2(config-if)# switchport mode access
S2(config-if)# switchport access vlan 3

c. Configure port security on the S1 and S2 active access ports to accept only three learned MAC addresses.
S1:

S1(config)# interface fastethernet 0/6
S1(config-if)# switchport port-security
S1(config-if)# switchport port-security maximum 3

S2:

S2(config)# interface fastethernet 0/18
S2(config-if)# switchport port-security
S2(config-if)# switchport port-security maximum 3

d. Assign all unused switch ports to VLAN 5 on both switches and shut down the ports.
S1:

S1(config)# interface range fastethernet 0/3 - 4, fastethernet 0/7 - 24, gigabitethernet 0/1 - 2
S1(config-if-range)# switchport mode access
S1(config-if-range)# switchport access vlan 5
S1(config-if-range)# shutdown

S2:

S2(config)# interface range fastethernet 0/3 - 17, fastethernet 0/19 - 24, gigabitethernet 0/1 - 2
S2(config-if-range)# switchport mode access
S2(config-if-range)# switchport access vlan 5
S2(config-if-range)# shutdown

e. Configure a description on the unused ports that is relevant to their status.
S1:

S1(config)# interface range fastethernet 0/3 - 4, fastethernet 0/7 - 24, gigabitethernet 0/1 - 2
S1(config-if-range)# description Unused port - shut down

S2:

S2(config)# interface range fastethernet 0/3 - 17, fastethernet 0/19 - 24, gigabitethernet 0/1 - 2
S2(config-if-range)# description Unused port - shut down

Part 4: Configure Host Support

Step 1: Configure Default Routing on R1

If the Console cable is still connected to a switch, move it back to the Console port of R1 and open Terminal on the PC. R1 now asks for passwords: enter the console password ciscoconpass, type enable, and then enter the enable secret ciscoenpass.

a. Configure an IPv4 default route that uses the Lo0 interface as the exit interface.

R1(config)# ip route 0.0.0.0 0.0.0.0 Loopback0

b. Configure an IPv6 default route that uses the Lo0 interface as the exit interface.

R1(config)# ipv6 route ::/0 Loopback0
Step 2: Configure IPv4 DHCP for VLAN 2

a. On R1, create a DHCP pool called CCNA-A that consists of the last 10 host addresses in the VLAN 2 subnet only.

R1(config)# ip dhcp excluded-address 10.19.8.1 10.19.8.52
R1(config)# ip dhcp pool CCNA-A
R1(dhcp-config)# network 10.19.8.0 255.255.255.192

b. Configure the correct default gateway address in the pool.

R1(dhcp-config)# default-router 10.19.8.1

c. Configure the domain name of ccna-a.net.

R1(dhcp-config)# domain-name ccna-a.net
Step 3: Configure IPv4 DHCP for VLAN 3

a. On R1, create a DHCP pool called CCNA-B that consists of the last 10 host addresses in the VLAN 3 subnet only.

R1(config)# ip dhcp excluded-address 10.19.8.65 10.19.8.84
R1(config)# ip dhcp pool CCNA-B
R1(dhcp-config)# network 10.19.8.64 255.255.255.224

b. Configure the correct default gateway address in the pool.

R1(dhcp-config)# default-router 10.19.8.65

c. Configure the domain name of ccna-b.net.

R1(dhcp-config)# domain-name ccna-b.net
Step 4: Configure host computers.

a. Configure the host computers to use DHCP for IPv4 addressing.

b. Statically assign the IPv6 GUA and default gateway addresses using the values in the Addressing Table.

Configure host computer A

Configure host computer A

Configure host computer B

Configure host computer B

Device Configs - Final

ROUTER R1

! ==============================================================
!--- CCNA 2 SRWE Final PT Skills Assessment (PTSA)
!--- ANSWER SCRIPT FOR ROUTER R1
!--- Usage: copy this whole file and paste it into the R1 console terminal (start at the Router> prompt). Every line beginning with "!" is a comment; IOS ignores it, so pasting a comment by accident is harmless.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Part 2: Configure Initial Device Settings.
! --------------------------------------------------------------

!--- Step 1a-1. Prevent the router from resolving mistyped commands as domain names.
no ip domain lookup

!--- Step 1a-2. Configure the R1 hostname.
hostname R1

!--- Step 1a-3. Configure an appropriate MOTD banner.
banner motd #Unauthorized Access is Prohibited!#

!--- Step 1b-1. Console password and login for console connections.
line console 0
 password ciscoconpass
 login
 exit

!--- Step 1b-2. Enable secret password.
enable secret ciscoenpass

!--- Step 1b-3. Encrypt all clear text passwords.
service password-encryption

!--- Step 1b-4. Minimum length of newly created passwords: 10 characters.
security passwords min-length 10

!--- Step 1c-1. Administrative user in the local user database (encrypted password).
username admin secret admin1pass

!--- Step 1c-2. Domain name (needed before the RSA keys are generated).
ip domain name ccna-ptsa.com

!--- Step 1c-3. RSA crypto key with a 1024-bit modulus.
crypto key generate rsa general-keys modulus 1024

!--- Step 1c-4. Use the more secure SSH version 2.
ip ssh version 2

!--- Step 1c-5/6. VTY lines: authenticate against the local user database, SSH only.
line vty 0 15
 login local
 transport input ssh
 exit

!--- Step 2a. Loopback0 with IPv4, IPv6 and link-local addressing from the Addressing Table.
interface loopback 0
 description Simulated Internet connection
 ip address 209.165.201.1 255.255.255.224
 ipv6 address 2001:db8:acad:209::1/64
 ipv6 address fe80::1 link-local
 exit

!--- Step 2b-1. Prepare the router to route IPv6.
ipv6 unicast-routing

!--- Step 2b-2. Subinterface for VLAN 2 (Bikes).
interface gigabitethernet 0/0/1.2
 description Gateway for VLAN 2 - Bikes
 encapsulation dot1Q 2
 ip address 10.19.8.1 255.255.255.192
 ipv6 address 2001:db8:acad:a::1/64
 ipv6 address fe80::1 link-local
 exit

!--- Step 2b-2. Subinterface for VLAN 3 (Trikes).
interface gigabitethernet 0/0/1.3
 description Gateway for VLAN 3 - Trikes
 encapsulation dot1Q 3
 ip address 10.19.8.65 255.255.255.224
 ipv6 address 2001:db8:acad:b::1/64
 ipv6 address fe80::1 link-local
 exit

!--- Step 2b-2. Subinterface for VLAN 4 (Management).
interface gigabitethernet 0/0/1.4
 description Gateway for VLAN 4 - Management
 encapsulation dot1Q 4
 ip address 10.19.8.97 255.255.255.248
 ipv6 address 2001:db8:acad:c::1/64
 ipv6 address fe80::1 link-local
 exit

!--- Step 2b-3. Native VLAN 6 subinterface (no addressing).
interface gigabitethernet 0/0/1.6
 description Native VLAN 6 - untagged traffic
 encapsulation dot1Q 6 native
 exit

!--- Step 2b-4. Description on the physical trunk interface, then enable it.
interface gigabitethernet 0/0/1
 description Trunk link to S1 F0/5
 no shutdown
 exit

! --------------------------------------------------------------
!--- Part 4: Configure Host Support.
! --------------------------------------------------------------

!--- Step 1a. IPv4 default route using Lo0 as the exit interface.
ip route 0.0.0.0 0.0.0.0 Loopback0

!--- Step 1b. IPv6 default route using Lo0 as the exit interface.
ipv6 route ::/0 Loopback0

!--- Step 2. DHCP pool CCNA-A: only the last 10 hosts of VLAN 2 (10.19.8.53 - .62) are leased.
ip dhcp excluded-address 10.19.8.1 10.19.8.52
ip dhcp pool CCNA-A
 network 10.19.8.0 255.255.255.192
 default-router 10.19.8.1
 domain-name ccna-a.net
 exit

!--- Step 3. DHCP pool CCNA-B: only the last 10 hosts of VLAN 3 (10.19.8.85 - .94) are leased.
ip dhcp excluded-address 10.19.8.65 10.19.8.84
ip dhcp pool CCNA-B
 network 10.19.8.64 255.255.255.224
 default-router 10.19.8.65
 domain-name ccna-b.net
 exit

end

! --------------------------------------------------------------
!--- Save the configuration to NVRAM. (Press Enter when prompted for the destination filename.)
! --------------------------------------------------------------
copy running-config startup-config


! ==============================================================
!--- Verification:
!---   show ip interface brief       -> G0/0/1 and subinterfaces .2/.3/.4 up/up, Lo0 up/up
!---   show interfaces description   -> a description on every interface
!---   show ipv6 interface brief     -> GUA + fe80::1 on Lo0 and G0/0/1.2/.3/.4
!---   show ip route                 -> S* 0.0.0.0/0 is directly connected, Loopback0
!---   show ip dhcp binding          -> PC-A gets 10.19.8.53 - .62, PC-B gets 10.19.8.85 - .94
!--- Note: in Part 4 the console cable is moved back to R1; log in with ciscoconpass, then enable with ciscoenpass.
! ==============================================================

SWITCH S1

! ==============================================================
!--- CCNA 2 SRWE Final PT Skills Assessment (PTSA)
!--- ANSWER SCRIPT FOR SWITCH S1
!--- Usage: copy this whole file and paste it into the S1 console terminal (start at the Switch> prompt). Every line beginning with "!" is a comment; IOS ignores it, so pasting a comment by accident is harmless.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Part 2: Configure Initial Device Settings.
! --------------------------------------------------------------

!--- Step 3a-1. Prevent the switch from resolving mistyped commands as domain names.
no ip domain lookup

!--- Step 3a-2. Configure the S1 hostname.
hostname S1

!--- Step 3a-3. Configure an appropriate MOTD banner.
banner motd #Unauthorized Access is Prohibited!#

!--- Step 3b-1. Console password and login for console connections.
line console 0
 password ciscoconpass
 login
 exit

!--- Step 3b-2. Enable secret password.
enable secret ciscoenpass

!--- Step 3b-3. Encrypt all clear text passwords.
service password-encryption

!--- Step 3c-1. Administrative user in the local user database.
username admin secret admin1pass

!--- Step 3c-2. Domain name (needed before the RSA keys are generated).
ip domain name ccna-ptsa.com

!--- Step 3c-3. RSA crypto key with a 1024-bit modulus.
crypto key generate rsa general-keys modulus 1024

!--- Step 3c-4. Use the more secure SSH version 2.
ip ssh version 2

!--- Step 3c-5/6. VTY lines: authenticate against the local user database, SSH only.
line vty 0 15
 login local
 transport input ssh
 exit

!--- Step 4a. Management SVI in VLAN 4 from the Addressing Table.
interface vlan 4
 description Management SVI - VLAN 4
 ip address 10.19.8.98 255.255.255.248
 no shutdown
 exit

!--- Step 4b. Default gateway so the SVI can be reached from other networks.
ip default-gateway 10.19.8.97

! --------------------------------------------------------------
!--- Part 3: Configure Network Infrastructure Settings (VLANs, Trunking, EtherChannel).
! --------------------------------------------------------------

!--- Step 1a. Create the VLANs according to the VLAN Table.
vlan 2
 name Bikes
vlan 3
 name Trikes
vlan 4
 name Management
vlan 5
 name Parking
vlan 6
 name Native
 exit

!--- Step 1b. 802.1Q trunks on F0/1 - F0/2 (to S2) with native VLAN 6.
interface range fastethernet 0/1 - 2
 switchport mode trunk
 switchport trunk native vlan 6
 switchport trunk allowed vlan 2,3,4,5,6
 exit

!--- Step 1b. F0/5 (to R1) is also a trunk with native VLAN 6.
interface fastethernet 0/5
 description Trunk link to R1 G0/0/1
 switchport mode trunk
 switchport trunk native vlan 6
 switchport trunk allowed vlan 2,3,4,5,6
 exit

!--- Step 2. EtherChannel group 1 on F0/1 - F0/2, LACP active.
interface range fastethernet 0/1 - 2
 channel-group 1 mode active
 exit

!--- Step 2. Port-channel 1 keeps the same trunk settings as its member ports.
interface port-channel 1
 description EtherChannel to S2
 switchport mode trunk
 switchport trunk native vlan 6
 switchport trunk allowed vlan 2,3,4,5,6
 exit

!--- Step 3a/3c. F0/6 (PC-A): static access port in VLAN 2, port security with 3 learned MACs.
interface fastethernet 0/6
 description Access port to PC-A - VLAN 2
 switchport mode access
 switchport access vlan 2
 switchport port-security
 switchport port-security maximum 3
 exit

!--- Step 3d/3e. All unused ports: VLAN 5, a status description, shut down.
interface range fastethernet 0/3 - 4, fastethernet 0/7 - 24, gigabitethernet 0/1 - 2
 description Unused port - shut down
 switchport mode access
 switchport access vlan 5
 shutdown
 exit

end

! --------------------------------------------------------------
!--- Save the configuration to NVRAM. (Press Enter when prompted for the destination filename.)
! --------------------------------------------------------------
copy running-config startup-config


! ==============================================================
!--- Verification:
!---   show vlan brief            -> VLANs 2-6 named; Fa0/6 in VLAN 2; unused ports in VLAN 5
!---   show etherchannel summary  -> 1  Po1(SU)  LACP  Fa0/1(P) Fa0/2(P)
!---   show interfaces trunk      -> Po1 and Fa0/5 trunking, native VLAN 6
!---   show port-security         -> Fa0/6  MaxSecureAddr 3
!---   ping 10.19.8.97            -> R1 G0/0/1.4 reachable from the SVI
! ==============================================================

SWITCH S2

! ==============================================================
!--- CCNA 2 SRWE Final PT Skills Assessment (PTSA)
!--- ANSWER SCRIPT FOR SWITCH S2
!--- Usage: copy this whole file and paste it into the S2 console terminal (start at the Switch> prompt). Every line beginning with "!" is a comment; IOS ignores it, so pasting a comment by accident is harmless.
! ==============================================================

enable
configure terminal

! --------------------------------------------------------------
!--- Part 2: Configure Initial Device Settings.
! --------------------------------------------------------------

!--- Step 3a-1. Prevent the switch from resolving mistyped commands as domain names.
no ip domain lookup

!--- Step 3a-2. Configure the S2 hostname.
hostname S2

!--- Step 3a-3. Configure an appropriate MOTD banner.
banner motd #Unauthorized Access is Prohibited!#

!--- Step 3b-1. Console password and login for console connections.
line console 0
 password ciscoconpass
 login
 exit

!--- Step 3b-2. Enable secret password.
enable secret ciscoenpass

!--- Step 3b-3. Encrypt all clear text passwords.
service password-encryption

!--- Step 3c-1. Administrative user in the local user database.
username admin secret admin1pass

!--- Step 3c-2. Domain name (needed before the RSA keys are generated).
ip domain name ccna-ptsa.com

!--- Step 3c-3. RSA crypto key with a 1024-bit modulus.
crypto key generate rsa general-keys modulus 1024

!--- Step 3c-4. Use the more secure SSH version 2.
ip ssh version 2

!--- Step 3c-5/6. VTY lines: authenticate against the local user database, SSH only.
line vty 0 15
 login local
 transport input ssh
 exit

!--- Step 4a. Management SVI in VLAN 4 from the Addressing Table.
interface vlan 4
 description Management SVI - VLAN 4
 ip address 10.19.8.99 255.255.255.248
 no shutdown
 exit

!--- Step 4b. Default gateway so the SVI can be reached from other networks.
ip default-gateway 10.19.8.97

! --------------------------------------------------------------
!--- Part 3: Configure Network Infrastructure Settings (VLANs, Trunking, EtherChannel).
! --------------------------------------------------------------

!--- Step 1a. Create the VLANs according to the VLAN Table.
vlan 2
 name Bikes
vlan 3
 name Trikes
vlan 4
 name Management
vlan 5
 name Parking
vlan 6
 name Native
 exit

!--- Step 1b. 802.1Q trunks on F0/1 - F0/2 (to S1) with native VLAN 6.
interface range fastethernet 0/1 - 2
 switchport mode trunk
 switchport trunk native vlan 6
 switchport trunk allowed vlan 2,3,4,5,6
 exit

!--- Step 2. EtherChannel group 1 on F0/1 - F0/2, LACP active.
interface range fastethernet 0/1 - 2
 channel-group 1 mode active
 exit

!--- Step 2. Port-channel 1 keeps the same trunk settings as its member ports.
interface port-channel 1
 description EtherChannel to S1
 switchport mode trunk
 switchport trunk native vlan 6
 switchport trunk allowed vlan 2,3,4,5,6
 exit

!--- Step 3b/3c. F0/18 (PC-B): static access port in VLAN 3, port security with 3 learned MACs.
interface fastethernet 0/18
 description Access port to PC-B - VLAN 3
 switchport mode access
 switchport access vlan 3
 switchport port-security
 switchport port-security maximum 3
 exit

!--- Step 3d/3e. All unused ports: VLAN 5, a status description, shut down.
interface range fastethernet 0/3 - 17, fastethernet 0/19 - 24, gigabitethernet 0/1 - 2
 description Unused port - shut down
 switchport mode access
 switchport access vlan 5
 shutdown
 exit

end

! --------------------------------------------------------------
!--- Save the configuration to NVRAM. (Press Enter when prompted for the destination filename.)
! --------------------------------------------------------------
copy running-config startup-config


! ==============================================================
!--- Verification:
!---   show vlan brief            -> VLANs 2-6 named; Fa0/18 in VLAN 3; unused ports in VLAN 5
!---   show etherchannel summary  -> 1  Po1(SU)  LACP  Fa0/1(P) Fa0/2(P)
!---   show interfaces trunk      -> Po1 trunking, native VLAN 6
!---   show port-security         -> Fa0/18  MaxSecureAddr 3
!---   ping 10.19.8.97            -> R1 G0/0/1.4 reachable from the SVI
! ==============================================================

PC-A

PC-APC
IPv6
IPv6 Address2001:db8:acad:a::50/64
IPv6 Gatewayfe80::1

PC-B

PC-BPC
IPv6
IPv6 Address2001:db8:acad:b::50/64
IPv6 Gatewayfe80::1

Download SRWE Final Skills Exam (PTSA) Packet Tracer pka:

Icon
SRWE Final PT Skills Assessment Packet Tracer pka
1 file(s) 189.17 KB
Download
Tags:, , , , ,

About The Author

ITExam Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.

Related Posts

Subscribe
Notify of
guest

136 Corrections & Clarifications