CCNP系列認證CCNP(642-813)判斷題每日一練(2020.04.27)

Acme is a small shipping company that has an existing enterprise network comprised of 2 
switches；DSW1 and ASW2. The topology diagram indicates their layer 2 mapping. VLAN 40 is a new VLAN that will be used to provide the shipping personnel access to the server. For security reasons， it is necessary to restrict access to VLAN 20 in the following manner： 
- Users connecting to ASW1’s port must be authenticate before they are given access to the network. -Authentication is to be done via a Radius server：
- Radius server host： 172.120.39.46
-Radius key： rad123 
- Authentication should be implemented as close to the host device possible. 
- Devices on VLAN 20 are restricted to in the address range of 172.120.40.0/24. 
- Packets from devices in the address range of 172.120.40.0/24 should be passed on VLAN 20. 
- Packets from devices in any other address range should be dropped on VLAN 20. 
- Filtering should be implemented as close to the server farm as possible. 
The Radius server and application servers will be installed at a future date. You have been tasked with implementing the above access control as a pre-condition to installing the servers. You must use the available IOS switch features.
 

Network topology exhibit：
 

3 configuration exhibit： 
 

You work as a network technician at . is a large international company with offices in the US and in 
Europe. You work at the New York Office. Recently a new switch block with multiple VLANs configured were added to the Barcelona LAN. 
Your boss at， Miss， tells you that the personal at the Barcelona office failed to document the spanning tree topology during installation. She gives you a plane ticket to Barcelona and orders to provide a baseline of configuration information in regard to the switch block spanning tree topology. Two days later you arrive at the Barcelona office. You study the network topology carefully， see exhibit. Then you connect to the   3 switch； issue the show spanning tree command. Please refer to the exhibit for the output. You are then required to answer the scenario questions using the information that is available.

topology exhibit： 
 

 
You work as a network engineer at . is a large international company with offices on all continents. You work at the Chicago Office. Your boss at ，Miss ，has asked you to install a Catalyst 3500 to provide for another 24 users. Your instructions are as follows： 
* install it in an IDF 
* extremely import to have the proper configuration of the Catalyst before it is placed into the product information 
* it should not participate in VTP 
* it should forward VTP advertisements that are received on trunk ports 
* all nontrunking interfaces， Fa0/1 to Fa0/24） should immediately to the forwarding state of the Spanning tree. 
* configure all Fast Ethernet ports （the user ports） such as they are nontrunking. 
* the fastEthernet interfaces 0/12 through 0/24 should be placed in VLAN 20

Network topology exhibit： 
 

You work as a network administrator at . You study the network topology exhibit carefully. is a small 
company that has an existing enterprise network consisting of two switches named 1 and 2. The network topology schemata indicates their layer 2 mapping. VLAN 40 is a new VLAN that will be used to provide the shipping personnel access to the server. For security reasons， it is necessary to restrict access to VLAN 20 in the following manner： 
Users connecting to 1’s port must be authenticate before they are given access to the network. Authentication is to be done via a Radius server： 
Radius server host： 172.120.39.46 
Radius key： key 
Authentication should be implemented as close to the host device possible. 
Devices on VLAN 20 are restricted to in the address range of 172.120.40.0/24. 
Packets from devices in the address range of 172.120.40.0/24 should be passed on VLAN 20. 
Packets from devices in any other address range should be dropped on VLAN 20. Filtering should be implemented as close to the server farm as possible. 
The Radius server and application servers will be installed at a future date. You have been tasked with implementing the above access control as a pre-condition to installing the servers. You must use the available IOS switch features.

Network topology Exhibit： 

You work as a network engineer for. You are required to set up the network being displayed in the network topology exhibit through the console using IOS commands.