CCNA Guide to Cisco Networking, Fourth Edition Chapter 10 Lab Solutions
Chapter 10 Lab Solutions
It is important that the routers are set up correctly for the Chapter 10 labs. The last labs
may have involved moving cables and changing addresses. The cables must be
reattached and the IP addresses must be changed to reflect the standard lab setup
shown in Figure 10-1.
The first two labs in this chapter require that students write out the access list before
configuring the router. They should also check the lists with their teammates before
configuration and check with you if there are any questions. Failure to do this will result
in excessively long lab times.
Instructor Tips Lab 10.1
Some PC configuration must be done in this lab. Specifically, the lab-a computer must
be hooked up to the hub off the f0/1 interface on the lab-a router. This is so the student
can test the access list on the lab-d router. The instructions are part of the lab, but you
may want to check that the student completed the instructions, or the lab won’t work as
designed.
Activity Questions Lab 10.1
2. access-list 1 deny 205.7.5.0 0.0.0.255
access-list 1 permit any
4. Answer varies; 1-99
5. Int f0/0 out on lab-d router; because that is as close to the destination as
possible
6. ip access-group 1 out (number varies)
12. So if you make a change to the list, when you add it to the router, it will
replace the old list and not add to it
16. As soon as it is applied to an interface
21. Show ip access-list
26. Unreachable; the access list is working, hopefully
Review Questions Lab 10.1
1. How does using Notepad facilitate creating access lists in the router?
2. Why must standard IP access lists be applied as close to the destination as possible?
2
3. What is the wildcard mask that filters any host on a class B network?
4. What is the wildcard mask that filters any host on a class A network?
Instructor Tips Lab 10.2
This lab involves pinging from the lab-b workstation to the lab-a workstation. This means
both workstations have to be connected via patch cables to the correct hubs, as shown
in Figure 10-1. The lab-a workstation should be attached to the hub off the f0/1 interface
on the lab-a router. The lab-b workstation should be attached to the hub off the f0/0
interface on the lab-b router. The students do this as part of the lab, but if the
connections are incorrect, they won’t be able to ping.
Activity Questions Lab 10.2
1. As close to the source as possible
2. access-list 100 deny icmp host 219.17.100.2 host 205.7.5.2
access-list 100 permit ip any any
3. All packets will be denied because of the implicit deny all
5. Int f0/0 in on lab-b router; because that is as close to the source as possible
11. Reply from 205.7.5.2; successful ping
21. As soon as it is applied to an interface
30. Shows all access lists on the router with each access list line
32. Clears the matches (counters) so you can troubleshoot the list
33. Hopefully, yes
Review Questions Lab 10.2
1. What does the host keyword represent?
2. What does the any keyword represent?
3. With standard IP lists, the 0.0.0.0 wildcard mask is assumed. Is it also assumed with
extended IP lists?
Activity Questions Lab 10.3
6. Denies any Web traffic to host 223.8.151.2
14. Destination unreachable
CCNA Guide to Cisco Networking, Fourth Edition Chapter 10 Lab Solutions
3
Review Questions Lab 10.3
1. What is an advantage of using named lists?
2. What is the advantage of using extended lists over standard lists?
3. Which Cisco IOS version allows you to use named lists?