The connected access ports the sw-a and sw-b

Answer Booklet & Marking Guide

Student Must Fill this Section
Student Name:
	S20235	Term: 4th	Year: 2021


Student Signature: Date: 4th Feb 2021

	Page \| 1

• All work is to be entirely of the student.

Re-assessment of Result& Academic Appeal procedures:

If a student is not happy with his/ her results, that student may appeal against their grade via a written letter, clearly stating

• ACADEMIC MANAGER will delegate another member to review the assessment.

• The student will be advised of the review result done by another assessor.

• If the student is still not satisfied with the result, he / she has the right to seek independent advice or follow

external mediation option with nominated mediation agency.

Academic Appeals:

• If you are dissatisfied with the outcome of the re-evaluation process, you have a right to appeal through

contact details:

stern Sydney College (WSC), 55 High St, Parramatta NSW 2150, Email:

in support of a deferred appeal. The notice of appeal must be made within three working days of the concluding

date shown on the medical certificate.

International College of Australia Pty Ltd T/A Western Sydney College

RTO: 45360 | CRICOS: 03690M

1. Configure using router operating system (OS) commands to mitigate layer 2 attacks 2. Implement identity-based networking services (IBNS) on switches to provide layer 2 security
3. Implement identity management using access control system (ACS) as the authentication server

Senario:

		Page \| 3


	WSC-ASSICTSUS501-V1.3-10112019

International College of Australia Pty Ltd T/A Western Sydney College

Objectives

  	1 Router (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable) 2 Switch (Cisco 2950 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable) 4 PCs (Windows 10, 8, or 7 with terminal emulation program, such as Tera Term) Console cables to configure the Cisco IOS devices via the console ports Ethernet cables as shown in the topology

Assessment Tasks

Student need to complete the following tasks:

a) Assign static IPv4 information to the PC interfaces.

b) Create VLAN
c) Configure router operating system (OS) using CLI.

International College of Australia Pty Ltd T/A Western Sydney College

PC configuration screen shots:

Routers configuration screenshot (CLI code):

Switches configuration screen shot (CLI code): S1 and S2 switches code: Central> show spanning-tree SW-1>show spanning-tree Which switch is the current root bridge? SW-1 Based on the current root bridge, what is the resulting spanning tree? (Draw the spanning-tree topology.)

Step 2: Assign Central as the primary root bridge. Using the spanning-tree vlan 1 root primary command, assign Central as the root bridge. Step 4: Verify the spanning-tree configuration. Issue the show spanning-tree command to verify that Central is the root bridge.

International College of Australia Pty Ltd T/A Western Sydney College

RTO: 45360 | CRICOS: 03690M

PortFast is configured on access ports that connect to a single workstation or server to enable them to become active more quickly. On the connected access ports of the SW-A and SW-B, use the spanning-tree portfast command. SW-A(config) # int range fa0/1-4 SW-A(config-if-range) # spanning-tree portfast

Step 6: Enable BPDU guard on all access ports.

Step 7: Enable root guard.

Root guard can be enabled on all ports on a switch that are not root ports. It is best deployed on ports that connect to other non-root switches. Use the show spanning-tree command to determine the location of the root port on each switch.

Step 8: Enable storm control for broadcasts.

a. Enable storm control for broadcasts on all ports connecting switches (trunk ports). b. Enable storm control on interfaces connecting Central, SW-1, and SW-2. Set a50percent rising suppression level using the storm-control broadcast command.

SW-2(config) #interface gig0/1 SW-2(config-if) #storm-control broadcast level 50 SW-2(config-if) #interface fa0/1 SW-2(config-if) #storm-control broadcast level 50 SW-2(config-if) #interface fa0/23 SW-2(config-if) #storm-control broadcast level 50 SW-2(config-if) #interface fa0/24 SW-2(config-if) #storm-control broadcast level 50

International College of Australia Pty Ltd T/A Western Sydney College

International College of Australia Pty Ltd T/A Western Sydney College

This procedure should be performed on all access ports on SW-A and SW-B. Set the maximum number of learned MAC address to 2, allow the MAC address to be learned dynamically, and set the violation to shutdown.

SW-A(config) # int range fa0/1-22
SW-A(config-if-range) # switchport mode access
SW-A(config-if-range) # switchport port-security
SW-A(config-if-range) # switchport port-security maximum 2
SW-A(config-if-range) # switchport port-security mac-address sticky SW-A(config-if-range) # switchport port-security violation shutdown

Step 11: Verify port security.

On SW-A, issue the show port-security interface fa0/1 command to verify that port security has been configured.

RTO: 45360 | CRICOS: 03690M

International College of Australia Pty Ltd T/A Western Sydney College

intrusion prevention system (OS-IPS).

Objectives

WSC-ASSICTSUS501-V1.3-10112019 Page | 20