CCNP TSHOOT 6.0 - The Cisco Learning Network

CCNPv6 TSHOOT
Section 1—Trouble Tickets and Troubleshooting Logs
Task 1: Trouble Ticket Lab 9-3 TT-A
Step 1: Review trouble ticket Lab 9-3 TT-A.
As a security measure, your company has decided to implement stateful packet inspection using a Cisco IOS
firewall on edge router R1. The firewall will allow traffic from external hosts only if it is a response to a
legitimate request from an internal host. The only exception is that Internet access to the internal SRV1 webbased
application will be allowed. Internal users should be able to access the Internet (simulated by Lo1 on
R2) using various protocols, such as ICMP, FTP, Telnet, DNS, and HTTP. The firewall implementation must
work in conjunction with the dynamic NAT currently being employed on R1. In addition, internal network
devices must be able to obtain the correct time from the ISP (R2).
You colleague has configured the firewall and the necessary access lists on R1. However, users on the office
VLAN cannot access Internet websites, and remote users on the Internet cannot access the web-based
application on SRV1. Your colleague has asked for your help in diagnosing and solving the problem.
Step 2: Load the device trouble ticket configuration files for TT-A.
Using the procedure described in Lab 3-1, verify that the lab configuration files are present in flash. Load the
proper configuration files as indicated in the Device Configuration File table.
Note: The following device access methods are in effect after loading the configuration files:
• Console access requires no username or password.
• Telnet and SSH require username admin and password adminpa55.
• The enable password is ciscoenpa55.
Device Configuration File Table
Device Name File to Load Notes
ALS1 Lab93-ALS1-TT-A-Cfg.txt
DLS1 Lab93-DLS1-TT-A-Cfg.txt
DLS2 Lab93-DLS2-TT-A-Cfg.txt
R1 Lab93-R1-TT-A-Cfg.txt
R2 Lab93-R2-TT-A-Cfg.txt
R3 Lab93-R3-TT-A-Cfg.txt
SRV1 N/A Static IP: 10.1.50.1
Default gateway: 10.1.50.254
PC-B N/A DHCP
PC-C N/A DHCP
Step 3: Configure SRV1.
Configure SRV1 with static IP address 10.1.50.1/24 and default gateway 10.1.50.254.
Step 4: Release and renew the DHCP lease on PC-B.
a. Ensure that PC-B is configured as a DHCP client in the OFFICE VLAN.
b. After loading all TT-A device configuration files, issue the ipconfig /release and ipconfig
/renew commands on PC-B.
All contents are Copyright © 1992–2010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 4 of 16