5NC4 Practice Skills Test-Part 1-Ver0.2

7/28/2019 5NC4 Practice Skills Test-Part 1-Ver0.2

1/32

TAFE SA 5NC4Information Technology

Practice Skills Test

152512134.doc TAFESA South IT Studies Page 1 of 32


2/32


Advanced Diploma in IT (Networking)

5NC4

Assessment Task Stage 1Student Name: ....................................................................

Student Email: ....................................................................



3/32


Date: ....................................................................

Lecturer: ....................................................................

Assessment Method: Practical

Description: Group Task (3 or 4 students)

Time: Approximately 2 hours

This paper is to be handed back to the facilitator.



4/32


You must not use or access solutions to past test papers or trial assessments.You may use your journal.

ResultsAttempts: 1st 2nd

Skills Test: Markers Initials: ............ ............

Dates: .... .. ... ... .... ... ... ..



5/32


RESIT NOTIFICATION

Instructions

1. Read through all instructions and questions once, before commencing the paper.

2. Mark each task with a tick as it is completed. When you have finished a stage, have your lecturercheck your progress.

3. Stage 1 is handed out a week before the practical component, for the group to design the IPaddressing scheme. Stage 2 is handed out just prior to sitting the practical test.



6/32


Merit Component



7/32


Element Performance Criteria Task 1

TheoryChapte

r

Task 2

Final

Task 3

Skills

ICAA5145A Identify best-fit topology for a wide area network



8/32


1. Identify WANneeds

1.1 Identify the different local area network(LAN)/wireless local area network(WLAN) or virtual private network(VPN) segments of the proposed widearea network (WAN)

1.2 Determine segment needs usingfunctional analysis

1.3 Estimate traffic content and volumesaccording to expected organisationalusage, by examiningtelecommunications infrastructure



9/32


1.4 Develop an organisational WANfunctional matrix

2. Create WANspecification

2.1 Determine resource requirements foreach LAN/WLAN or VPN segment onthe basis of functional analysis

2.2 Consider and report how features ofthe physical environment affect WANdesign



10/32


2.3 Choose a WAN service appropriate tothe amount and type oftrafficexpected to access the WAN

2.4 Include redundant links in theproposed WAN connectivity for link

back-up purposes, in case the mainlink is disrupted

(Over)



11/32


Element Performance Criteria Task 1

TheoryChapte

r

Task 2

Final

Task 3

Skills

ICAS5192A Configure an Internet gateway

1. Confirm clientrequirements and

1.1 Confirm and validate clientrequirements



12/32


networkequipment

1.2 Determine scope of internet serviceswith reference to clientrequirements.

1.3 Identify and install components, bothhardware andsoftware

1.4 Verify equipment specifications andavailability of components

2. Review securityissues

2.1 Assess security features of internetgateways with reference toarchitecture andsecurity plan



13/32


2.2 Review security measures with theinternetservice provider(ISP) withreference tofirewalls and othermeasures as required

2.3 Brief users on thesecurityplan with

reference to internet use and hazardpossibilities

3. Install andconfigure

3.1 Identify and select installation andconfiguration options



14/32


gateway productsand equipment

3.2 Install and configure gateway productsand equipment as required by technicalguidelines

3.3 Plan and execute tests with referenceto clientrequirements and network

impact

3.4 Analyse error reports and makechanges as required

4. Configure andtest node

4.1 Assign node to specific gateway asrequired by networkarchitecture andclientrequirements



15/32


4.2 Determine connection type andconfigure with reference to networkarchitecture and clientrequirements

4.3 Ensure nodesoftware and/orhardware is configured as required

according to vendor specifications andclientrequirements



16/32


Stage 1 Addressing scheme

You need to design a VLSM addressing scheme for the network topology below.



17/32




18/32


The addressing scheme has the following requirements:1. You will have to subnet the 1 5 5 . 4 4 . 0 . 0 / 1 6 network, for the addressing

scheme.

Networks

2. There are five Ethernet networks and two serial networks.3. The two serial networks, and the one Ethernet network between the

NoarlungaEast and NoarlungaWestLAN routers, need only two valid hostaddresses each.

4. The first Ethernet network, (PC1) needs 800 valid IP addresses.



19/32


5. The second Ethernet network, (PC2) needs 400 valid IP addresses.6. The third Ethernet network (ServerVLAN i.e. a server farm), needs 20 valid IP

addresses.7. The fourth Ethernet network, (PC3) needs 50 valid IP addresses.8. You need to configure a serial interface on the ISP router, to act as the Internet.



20/32


1841 router

2960 model s

OSPF9. You will have to specify interface priorities to be used for OSPF elections, such

that the NoarlungaWest router becomes the DR.10. You will need to configure other Router IDs for OSPF routing.



21/32


PPP

11. The serial link to the ISP needs to use PPP encapsulation, with username /password local authentication.

12. Use student for the username and Tafe5aS0utH as the password.

Frame Relay

13. You need to configure the serial link fromAdelaide to NoarlungaWest as a FrameRelay service.



22/32


14. The Frame Relay switch is to be emulated by a router. Your lecturer willconfigure this router, and as such, it will not be a tested feature of thisassessment.

15. Your DLCI number are 102 @ Adelaide and 201 @ NoarlungaWest .

VLANs

16. There are three VLANs in total: two user VLANS: VLAN1 and VLAN2. VLAN1plus a server farm VLAN. VLAN1 in on network PC1 and VLAN2 in on network



23/32


PC2. VLAN 1 IS called Production and VlAN2 is called Admin. The third VLANis called Servers

DHCP

17. Each of the Noarlunga routers needs to offer a DHCP service to its LANs, except,of course, to the ServerVLAN, which has static addresses.



24/32


NAT

18. You have bought only one public address from your ISP, i.e.2 1 1 . 2 3 . 1 2 4 9 \ 3 0 and so you will need to configure Network AddressTranslation (NAT), on theAdelaide router. But no telnet or ftp

ACLs

19. The FastEthernet interface on the NoarlungaWest router will need to havesubinterfaces set up for its three VLANs, as they allow inter-VLAN traffic,(which happens by default, when configuring subinterfaces).



25/32


20. Therefore, for security reasons, you will need to write and apply Access ControlLists to prevent VLAN1 and VLAN2 user traffic from flowing between eachothers VLAN. (I.e. no VLAN1 to VLAN2 traffic, and vice-versa, allowed).However, both VLAN1 and VLAN2 will need access to the Server VLAN.

Security

To harden the routers, you will need to set, activate, or deactivate, the followingfeatures:21. Password encryption



26/32


22. Authentication23. Secure all VTY lines24. Disable unused services25. Run autosecure



27/32


Fill in the following tables for your addressing scheme:

Overall Addressing Scheme

Subnet SubnetAddress

Subnet Mask First HostAddress

Last HostAddress

BroadcastAddress

PPP Serial 211.23.1.248 255.255.255.252 211.23.1.249 211.23.1.250 211.168.1.251

Frame RelaySerial

172.22.14.36 255.255.255.252 172.22.14.37 172.22.14.38 172.22.14.39

PC1 Ethernet 172.22.0.0 255.255.248.0 172.22.0.1 172.22.7.254 172.22.7.255



28/32


PC2 Ethernet 172.22.8.0 255.255.252.0 172.22.8.1 172.22.11.254 172.22.11.255

PC3 Ethernet 172.22.12.0 255.255.254.0 172.22.12.1 172.22.13.254 172.22.13.255

ServerEthernet

172.22.14.0 255.255.255224.

172.22.14.1 172.22.14.30 172.22.14.31

Router Adelaide

Interface IP Address Subnet Mask



29/32


S0/0/0 211.23.1.249 255.255.255.252

S0/0/1 172.22.14.38 255.255.255.252

Loopback (OSPF)

Router NoarlungaWest


Fa0/0 172.22.14.33 255.255.255.252



30/32


Fa0/1.10 VLAN10 172.22.0.1 255.255.248.0

Fa0/1.2 VLAN2 172.22.8.1 255.255.252.0

Fa0/1.3 VLAN3 172.22.14.1 255.255.255.224

Serial0/0 172.22.14.37 255.255.255.252

Loopback (OSPF) 172.255.255.1 255.255.255

Router NoarlungaEast




31/32


Fa0/0 172.22.14.34 255.255.255.252

Fa0/1 172.22.12.1 255.255.254.0

Loopback (OSPF)



32/32


Router ISP


S0/0/0 211.23.1.250 255.255.255.252

Student Checks __________ __________ __________ Lecturer Check __________


Documents

5NC4 Practice Skills Test-Part 1-Ver0.2