Exam 200-301 topic 1 question 1334 discussion

SIMULATION
-


Guidelines
-

This is a lab item in which tasks will be performed on virtual devices

• Refer to the Tasks tab to view the tasks for this lab item.
• Refer to the Topology tab to access the device console(s) and perform the tasks.
• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.
• All necessary preconfigurations have been applied.
• Do not change the enable password or hostname for any device.
• Save your configurations to NVRAM before moving to the next item.
• Click Next at the bottom of the screen to submit this lab and move to the next question.
• When Next is clicked the lab closes and cannot be reopened.


Topology
-




Tasks
-

Refer to the topology. All physical cabling is in place. Configure local users accounts, modify the Named ACL (NACL), and configure DHCP Snooping. The current contents of the NACL must remain intact.

1. Configure a local account on Sw103 with telnet access only on virtual ports 0-4. Use the following information:
• Username: devnet
• Password: access8cli
• Algorithm type: SHA256
• Privilege level: Exec mode

2. Using the minimum number of ACEs, modify the existing NACL "INTERNET_ACL" to control network traffic destined for the Internet, and apply the ACL on R1:
• Allow HTTPS from 172.16.0.0/16
• Allow Telnet only for VLAN 101
• Restrict all other traffic and log the ingress interface, source MAC address, the packet's source and destination IP addresses, and ports

3. Configure Sw101:
• Enable DHCP Snooping for VLAN 101
• Disable DHCP Option-82 data insertion
• Enable DHCP Snooping MAC address verification

Suggested Answer: