a. Referring to the topology diagram, connect a console cable from PC1 to the console port on R1. Connect a consolecable from PC2 to the console port on R2.

b. Apply power to all PCs and routers.

c. Open a HyperTerminal session on each PC and establish a session to the respective router.

Within the global configuration mode of R1, enter the following commands:

Router(config)#hostname Router1

Router1(config)#interface serial 0/1/0

Router1(config-if)#ip address 192.168.1.1 255.255.255.0

Router1(config-if)#no shutdown

Router1(config-if)#end

Router1#

Within the global configuration mode of R2, enter the following commands:

Router(config)#hostname Router2

Router2(config)#interface serial 0/1/1

Router2(config-if)#ip address 192.168.1.2 255.255.255.0

Router2(config-if)#clock rate 56000

Router2(config-if)#no shutdown

Router2(config-if)#end

Router2#

a. On Router1, issue the show interface serial 0/1/0 command from the privileged EXEC

mode to view the encapsulation type.

Router1#show interface serial 0/1/0

Serial0/1/0 is up, line protocol is up

Hardware is GT96K Serial

Internet address is 192.168.1.1/24

MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation HDLC, loopback not set

Keepalive set (10 sec)

Last input 00:00:09, output 00:00:08, output hang never

Last clearing of “show interface” counters 00:19:54

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/40 (size/max)

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

14 packets input, 980 bytes, 0 no buffer

Received 9 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

14 packets output, 1026 bytes, 0 underruns

0 output errors, 0 collisions, 8 interface resets

0 output buffer failures, 0 output buffers swapped out

0 carrier transitions

DCD=up DSR=down DTR=up RTS=up CTS=up

What is the encapsulation type?

b. On Router2, issue the show interface serial 0/1/1 command from the privileged EXEC

mode to view the encapsulation type.

Router2#show interface serial 0/1/1

Serial0/1/1 is up, line protocol is up

Hardware is HD64570

Internet address is 192.168.1.2/24

MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255

Encapsulation HDLC, loopback not set, keepalive set (10 sec)

Last input 00:00:05, output 00:00:06, output hang never

Last clearing of “show interface” counters never

Queueing strategy: fifo

Output queue 0/40, 0 drops; input queue 0/75, 0 drops

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

9 packets input, 616 bytes, 0 no buffer

Received 4 broadcasts, 0 runts, 0 giants, 0 throttles

2673 input errors, 2673 CRC, 0 frame, 0 overrun, 0 ignored, 1 abort

101 packets output, 4001 bytes, 0 underruns

0 output errors, 0 collisions, 43 interface resets

0 output buffer failures, 0 output buffers swapped out

5 carrier transitions

DCD=up DSR=up DTR=up RTS=up CTS=up

What is the encapsulation type?

From Router2, ping Router1 to test connectivity.

Router2#ping 192.168.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 32/32/36 ms

If the ping is unsuccessful, troubleshoot the routers until connectivity is attained.

From the privileged EXEC mode, issue the following commands to change the encapsulation type on the

connecting serial interfaces of both routers to PPP.

Router1#config terminal

Router1(config)#interface serial 0/1/0

Router1(config-if)#encapsulation ppp

Router1(config-if)#end

Router1#

Router2#config terminal

Router2(config)#interface serial 0/1/1

Router2(config-if)#encapsulation ppp

Router2(config-if)#end

Router2#

a. On Router1, issue the show interface serial 0/1/0 command from the privileged EXEC

mode to view the encapsulation type.

Router1#show interface serial 0/1/0

Serial0/1/0 is up, line protocol is up

Hardware is GT96K Serial

Internet address is 192.168.1.1/24

MTU 1500 bytes, BW 128 Kbit, DLY 20000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation PPP, LCP Open

Open: IPCP, CDPCP, loopback not set

Keepalive set (10 sec)

Last input 00:00:18, output 00:00:03, output hang never

Last clearing of “show interface” counters 00:01:49

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/40 (size/max)

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

31 packets input, 1837 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

40 packets output, 2960 bytes, 0 underruns

0 output errors, 0 collisions, 2 interface resets

0 output buffer failures, 0 output buffers swapped out

8 carrier transitions

DCD=up DSR=down DTR=up RTS=up CTS=up

b. On Router2, issue the show interface serial 0/1/1 command from privileged EXEC mode to

view the encapsulation type.

Router2#show interface serial 0/1/1

Serial0/1/1 is up, line protocol is up

Hardware is HD64570

Internet address is 192.168.1.2/24

MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load

1/255

Encapsulation PPP, loopback not set, keepalive set (10 sec)

LCP Open

Open: IPCP, CDPCP

Last input 00:00:01, output 00:00:01, output hang never

Last clearing of “show interface” counters never

Queueing strategy: fifo

Output queue 0/40, 0 drops; input queue 0/75, 0 drops

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

54 packets input, 4042 bytes, 0 no buffer

Received 28 broadcasts, 0 runts, 0 giants, 0 throttles

2673 input errors, 2673 CRC, 0 frame, 0 overrun, 0 ignored, 1 abort

137 packets output, 6252 bytes, 0 underruns

0 output errors, 0 collisions, 47 interface resets

0 output buffer failures, 0 output buffers swapped out

5 carrier transitions

DCD=up DSR=up DTR=up RTS=up CTS=up

Can the serial interface on Router2 be pinged from Router1?

Can the serial interface on Router1 be pinged from Router2?

If the answer is no for either question, troubleshoot the router configurations to find the error.

Then issue the pings again until the answer to both questions is yes.

a. Configure the CHAP username and password on the R1 router. The username must be identical to

the hostname of the other router. Both the password and usernames are case-sensitive. Define the

username and password to expect from the remote router. On Cisco routers, the secret password

must be the same for both routers.

Router1(config)#username Router2 password cisco

Router1(config)#interface serial 0/1/0

Router1(config-if)#ppp authentication chap

Router1(config-if)#end

Router1#

a. Configure the CHAP username and password on the R2 router. The passwords must be the

same on both routers. The username must be identical to the hostname on the other router. Both

the password and user names are case-sensitive. Define the username and password to expect

from the remote router.

Router2(config)#username Router1 password cisco

Router2(config)#interface serial 0/1/1

Router2(config-if)#ppp authentication chap

Router2(config-if)#end

Router2#

Verify that the serial connection is functioning by pinging the serial interface of R1.

Was it successful?

Router2#ping 192.168.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 28/28/28 ms

Why or why not?

a. Erase the configurations and reload the routers.

b. Disconnect and store the cabling.

c. For PC hosts that are normally connected to other networks (such as the school LAN or to the

Internet), reconnect the appropriate cabling and restore the TCP/IP settings.

Download the WAN Design Test Plan. What is the purpose of this WAN design test? Which elements

of the design will be tested using this plan?

The purpose of this prototype is to demonstrate the use of Frame Relay WAN links to connect a remote site router to a central site router through a router that simulates a Frame Relay switch. Backup Ethernet links from the remote site and central site to a 4th router simulate a VPN backup capability and provide an alternate path in the event that one of the Frame Relay WAN links goes down.

a. Document the purpose of the test in the Introduction section of the WAN Design Test Plan.

b.Review the tests that will be run to validate the prototype.

Review the list of all equipment needed to build the prototype and to perform the tests. Be sure to include

cables, optional connectors or components, and software. If the recommended equipment is not available in your lab, discuss possible substitutes with your instructor and classmates, based on interface requirements of the topology.

a. If substitute equipment must be used, list the devices here:

b. Determine the amount of each type of cabling necessary to create the prototype test topology. Record the information on the Equipment chart in the WAN Design Test Plan.

c. Document any special configuration or cabling issues that might arise if substitute equipment is used.

Why is Frame Relay a good choice as a primary WAN technology?

Ini adalah teknologi yang fleksibel yang banyak didukung oleh peralatan vendor. Layanan ini biasanya tersedia dari sebagian besar penyedia layanan Telecom (TSPS). Memberikan kestabilan data digital link dengan berbagai CIRs tergantung pada kebutuhan pelanggan. Mendukung berbagai topologi. SLA biasanya available.

When is it most important to have a backup link? How does a backup link compare to a redundant link?

a. Connect the routers as shown in the topology diagram. Refer to the Test Plan in Lab 8.2.2 for cabling

required.

b. For each of the routers to be configured, use the erase startup-config and the reload commands from the privileged EXEC prompt, to ensure that you are starting with a clean configuration.

Connect a PC to the console port of the router to perform configurations using a terminal emulation

program.

Configure the router with hostname, passwords, message-of-the–day, and no ip domain lookup.

Router(config)#hostname ISPX

ISPX(config)#line console 0

ISPX(config-line)#password cisco

ISPX(config-line)#login

ISPX(config-line)#exit

ISPX(config)#line vty 0 4

ISPX(config-line)#password cisco

ISPX(config-line)#login

ISPX(config-line)#exit

ISPX(config)#enable password cisco

ISPX(config)#enable secret class

ISPX(config)#no ip domain-lookup

ISPX(config)#banner motd #Unauthorized use prohibited#

Configure the FastEthernet interfaces for the backup links to the Edge2 and BR3 routers. Configure a

description and the IP address, and activate each interface.

On the ISPX router, configure a normal static route to the BR3 network 172.18.225.0/25 via the Fa0/0

interface on BR3.

On the ISPX router, configure a normal static route to the Edge2 network 172.18.3.0/24 via the Fa0/1

interface on Edge2.

Connect a PC to the console port of the router to perform configurations using a terminal emulation program. Erase and reload the router before starting.

Configure the router with a hostname, passwords, message-of-the–day, and no ip domain lookup.

Configure the Serial 0/1/1 interface with Frame Relay encapsulation. Configure a point-to-point

subinterface for DLCI 110.

Edge2(config)#interface serial0/1/1

Edge2(config-if)#description primary link to BR3

Edge2(config-if)#encapsulation frame-relay

Edge2(config-if)#no shutdown

Edge2(config-if)#interface serial0/1/1.110 point-to-point

Edge2(config-subif)#ip address 172.18.0.9 255.255.255.252

Edge2(config-subif)#frame-relay interface-dlci 110

Edge2(config-fr-dlci)#end

Configure FastEthernet 0/0 interface for the stadium LAN network 172.18.3.0/24.

Configure FastEthernet 0/1 interface for the backup link to the ISPX router per the topology diagram.

On Edge2, configure the EIGRP routing protocol to advertise the 172.18.3.0/24 network and the

172.18.0.8/30 network. Use EIGRP process ID 10. Disable auto-summary.

Configure EIGRP MD5 authentication to accept updates from the FilmCompany router BR3 on the Frame Relay subinterface.

Sample steps to configure EIGRP authentication are:

Edge2#configure terminal

Edge2(config)#key chain MYCHAIN

Edge2(config-keychain)#key 1

Edge2(config-keychain-key)#key-string securetraffic

Edge2(config-keychain-key)#exit

Edge2(config)#interface serial 0/1/1.110

Edge2(config-subif)#ip authentication mode eigrp 10 md5

Edge2(config-subif)#ip authentication key-chain eigrp 10 MYCHAIN

Edge2(config-subif)#end

Edge2#

Until EIGRP and MD5 configuration are complete on router BR3, no EIGRP updates will be received.

The debug eigrp packet command can be used to view the EIGRP exchange as it is occurring

between the routers.

Connect a PC to the console port of the router to perform configurations using a terminal emulation

program. Erase and reload the router before starting.

Configure the router with a hostname, passwords, message-of-the–day, and no ip domain lookup.

Configure Serial 0/1/0 interface with Frame Relay encapsulation. Configure a point-to-point

subinterface for DLCI 100.

BR3(config)#interface serial0/1/0

BR3(config-if)#description primary link to Edge2

BR3(config-if)#encapsulation frame-relay

BR3(config-if)#no shutdown

BR3(config-if)#interface serial0/1/0.100 point-to-point

BR3(config-subif)#ip address 172.18.0.10 255.255.255.252

BR3(config-subif)#frame-relay interface-dlci 100

BR3(config-fr-dlci)#end

Configure FastEthernet 0/1 interface for the FilmCompany LAN network 172.18.225.0/25.

Configure FastEthernet 0/0 interface for the backup link to the ISPX router per the topology diagram.

On BR3, configure the EIGRP routing protocol to advertise the 172.18.225.0/25 network and the

172.18.0.8/30 network. Use EIGRP process ID 10. Disable auto-summary.

Configure EIGRP MD5 authentication to accept routing updates from the Edge2 router on interface

serial0/1/0.100.

BR3#configure terminal

BR3(config)#key chain MYCHAIN

BR3(config-keychain)#key 1

BR3(config-keychain-key)#key-string securetraffic

BR3(config-keychain-key)#exit

BR3(config)#interface serial 0/1/0.100

BR3(config-subif)#ip authentication mode eigrp 10 md5

BR3(config-subif)#ip authentication key-chain eigrp 10 MYCHAIN

BR3(config-subif)#end

When authentication is configured, both Edge2 and BR3 should begin accepting EIGRP updates. Use

the show ip route command to verify that the routes to the LAN devices have been learned.

Until EIGRP and MD5 configuration are complete on router BR3, no EIGRP updates will be received

successfully. The command debug eigrp packet shows when EIGRP authentication is

successful. Example output of the debug eigrp packet command once BR3 is correctly

configured is shown below:

BR3#debug eigrp packet

00:47:04: EIGRP: received packet with MD5 authentication, key id = 1

00:47:04: EIGRP: Received HELLO on Serial0/1/0.100 nbr 172.18.0.9

Execute the procedures outlined in Test 1 to test the simulated Frame relay network. Record the results of the tests in the Test 1: Results and Conclusions section.

Issue the show running-config command for each of the routers to verify passwords, IP addressing, and Frame Relay configuration. See end of lab for router configs.

Use show frame-relay commands to verify the Frame Relay configurations. See Lab 8.2.4 for command output.

show frame-relay map – Status of point-to-point links

show frame-relay pvc – Permanent Virtual Circuit (PVC) status and statistics

show frame-relay lmi – Local Management Interface (LMI) statistics

show frame-relay route – DLCI/interface routing (FR1 switch only)

Display the routing table for Edge2 using the show ip route command.

Edge2#sh ip route

Codes: C – connected, S – static, R – RIP, M – mobile, B – BGP

D – EIGRP, EX – EIGRP external, O – OSPF, IA – OSPF inter area

N1 – OSPF NSSA external type 1, N2 – OSPF NSSA external type 2

E1 – OSPF external type 1, E2 – OSPF external type 2

i – IS-IS, su – IS-IS summary, L1 – IS-IS level-1, L2 – IS-IS

level-2

ia – IS-IS inter area, * – candidate default, U – per-user static

route

o – ODR, P – periodic downloaded static route

Gateway of last resort is not set

172.18.0.0/16 is variably subnetted, 4 subnets, 3 masks

C 172.18.0.248/30 is directly connected, FastEthernet0/1

D 172.18.225.0/25

[90/2172416] via 172.18.0.10, 00:09:33, Serial0/0/1.110

C 172.18.0.8/30 is directly connected, Serial0/0/1.110

C 172.18.3.0/24 is directly connected, FastEthernet0/0

Is there an EIGRP route to the FilmCompany LAN 172.18.225.0/25?

What is the AD of this route?

What is the next hop IP address to get to this network?

Does the primary route take the Frame Relay link?

Display the routing table for BR3 using the show ip route command.

BR3#sh ip route

Codes: C – connected, S – static, R – RIP, M – mobile, B – BGP

D – EIGRP, EX – EIGRP external, O – OSPF, IA – OSPF inter area

N1 – OSPF NSSA external type 1, N2 – OSPF NSSA external type 2

E1 – OSPF external type 1, E2 – OSPF external type 2

i – IS-IS, su – IS-IS summary, L1 – IS-IS level-1, L2 – IS-IS

level-2

ia – IS-IS inter area, * – candidate default, U – per-user static

route

o – ODR, P – periodic downloaded static route

Gateway of last resort is not set

172.18.0.0/16 is variably subnetted, 4 subnets, 3 masks

C 172.18.225.0/25 is directly connected, FastEthernet0/1

C 172.18.225.248/30 is directly connected, FastEthernet0/0

C 172.18.0.8/30 is directly connected, Serial0/0/0.100

D 172.18.3.0/24 [90/2172416] via 172.18.0.9, 00:11:59,

Serial0/0/0.100

Is there an EIGRP route to the Edge2 network 172.18.3.1/24?

What is the AD of this route?

Display the routing table for ISPX using the show ip route command.

ISPX#show ip route

Codes: C – connected, S – static, R – RIP, M – mobile, B – BGP

D – EIGRP, EX – EIGRP external, O – OSPF, IA – OSPF inter area

N1 – OSPF NSSA external type 1, N2 – OSPF NSSA external type 2

E1 – OSPF external type 1, E2 – OSPF external type 2

i – IS-IS, su – IS-IS summary, L1 – IS-IS level-1, L2 – IS-IS

level-2

ia – IS-IS inter area, * – candidate default, U – per-user

static route

o – ODR, P – periodic downloaded static route

Gateway of last resort is not set

172.18.0.0/16 is variably subnetted, 4 subnets, 3 masks

C 172.18.0.248/30 is directly connected, FastEthernet0/1

S 172.18.225.0/25 [1/0] via 172.18.225.249

C 172.18.225.248/30 is directly connected, FastEthernet0/0

S 172.18.3.0/24 [1/0] via 172.18.0.249

Are there any EIGRP routes?

Why or why not?

Are there any static routes and if so, to what network?

What is the purpose of these static routes?

Ping from Edge2 to the IP address of host PC2. Was the ping successful?

If not, troubleshoot until successful.

Ping from BR3 to the IP address of host PC1.

Was the ping successful?

If not, troubleshoot until successful.

Verify that traffic is taking the correct path by using the traceroute command.

Turn off all debugging using the undebug all command.

Record all results in the WAN Design Test Plan document in the Test 1: Results and Conclusions section.

On Edge2, configure a static route to the FilmCompany LAN (172.18.225.0/25) using the next hop

address of the interface Fa0/1 on router ISPX. Configure the administrative distance on the floating

static routes to be 130, greater than the administrative distance of the EIGRP learned route.

On BR3, configure a static route to the stadium LAN (172.18.3.0/24) using the next hop address of

the interface Fa0/0 on router ISPX. Configure the administrative distance on the floating static route

to be 130, greater than the administrative distance of the EIGRP learned route.

Cause the Frame Relay link from Edge2 to FR1 to fail by shutting down the Serial 0/1/1 interface.

Display the routing table for Edge2 using the show ip route command.

Edge2#sh ip route

Codes: C – connected, S – static, R – RIP, M – mobile, B – BGP

D – EIGRP, EX – EIGRP external, O – OSPF, IA – OSPF inter area

N1 – OSPF NSSA external type 1, N2 – OSPF NSSA external type 2

E1 – OSPF external type 1, E2 – OSPF external type 2

i – IS-IS, su – IS-IS summary, L1 – IS-IS level-1, L2 – IS-IS

level-2

ia – IS-IS inter area, * – candidate default, U – per-user

static route

o – ODR, P – periodic downloaded static route

Gateway of last resort is not set

172.18.0.0/16 is variably subnetted, 3 subnets, 3 masks

C 172.18.0.248/30 is directly connected, FastEthernet0/1

S 172.18.225.0/25 [130/0] via 172.18.0.250

C 172.18.3.0/24 is directly connected, FastEthernet0/0

Is there an EIGRP route to the FilmCompany network 172.18.225.0/25 now?

Is the floating static backup route to the FilmCompany network 172.18.225.0/25 that you defined

earlier now present?

What is the AD of this route?

What is the next hop IP address to get to the 172.18.225.0/25 network?

Does the backup route take the ISPX link?

Display the routing table for BR3 using the show ip route command.

BR3#sh ip route

Codes: C – connected, S – static, R – RIP, M – mobile, B – BGP

D – EIGRP, EX – EIGRP external, O – OSPF, IA – OSPF inter area

N1 – OSPF NSSA external type 1, N2 – OSPF NSSA external type 2

E1 – OSPF external type 1, E2 – OSPF external type 2

i – IS-IS, su – IS-IS summary, L1 – IS-IS level-1, L2 – IS-IS

level-2

ia – IS-IS inter area, * – candidate default, U – per-user static

route

o – ODR, P – periodic downloaded static route

Gateway of last resort is not set

172.18.0.0/16 is variably subnetted, 3 subnets, 3 masks

C 172.18.225.0/25 is directly connected, FastEthernet0/1

C 172.18.225.248/30 is directly connected, FastEthernet0/0

S 172.18.3.0/24 [130/0] via 172.18.225.250

Continue to issue the show ip route command until the EIGRP route is gone and the floating

static route is installed, otherwise ping responses (echo reply) cannot be sent back to Edge2.

Is there an EIGRP route to the Edge2 network 172.18.3.0/24?

Is there a floating static route?

What is the AD of this route?

What is the next hop IP address to get to the 172.18.3.0/24 network?

a. Ping from PC1 on Edge2 to the IP address of host PC2.

Was the ping successful?

If not, troubleshoot until successful.

Verify that traffic is taking the backup link by using the tracert command from PC1 to PC2. Record the results in the WAN Design Test Plan section Test 2: Results and Conclusions.

Turn off any debugging using the undebug all command.

Erase the configurations and reload the routers. Disconnect and store the cabling. For PC hosts that are

normally connected to other networks (such as the school LAN or to the Internet), reconnect the

appropriate cabling and restore the TCP/IP settings.

When is it most important to have a backup link? How does a backup link compare to a redundant link?

This lab uses the RIP dynamic routing protocol and floating static routes to demonstrate primary and backup routes. Would it be possible to use all static routes and no dynamic routing protocol?

Is the Frame Relay WAN design able to scale to meet the expected growth?

Do the results of the prototype test indicate that the Frame Relay configuration will work as expected?

Are there any weaknesses associated with using the VPN connections as backup to the Frame Relay WAN?

Will a failure of the primary link cause the FilmCompany to lose connectivity to the Stadium LAN?

Does the EIGRP authentication provide for a secure transmission of the routing updates?

If, in Step 1, you identify weaknesses in the proposed design, what risks do these weaknesses present to

FilmCompany?

In what ways could the proposed design be improved to reduce the areas of risk?

In the Results and Conclusions section of the test plan, record any weaknesses, risks, and suggested improvements.

Why do you think it is important to identify weaknesses and risks in the proposed design before presenting it to the customer? What are some reasons that weaknesses cannot be corrected?

Review the VPN Design Test Plan. Note the tests that the designer indicates are necessary to perform using the prototype network.

Test 1: Description and purpose:

Test 2: Description and purpose:

Konektivitas Test Klien VPN

Which device will be used as the VPN server in the prototype network? 1841 Router

What IOS version is necessary to configure the EasyVPN server? Advanced Layanan IP versi 12,4 atau di atas dan Cisco SDM

Is equipment available in your lab with the correct IOS to build the prototype network configuration?

At the top of this lab, the actual VPN topology is shown, as well as the topology being used in the prototype test. Compare both topologies. Remote workers usually connect to the Internet and then use client software to create the VPN tunnel to the server. In the prototype environment, the connection between the VPN client and the VPN server is a much more direct connection.

What is the risk of testing the VPN operation in a prototype environment?

The designer needs to verify that the EasyVPN server can be configured and managed by the existing

personnel. It is important to document how the Cisco SDM software can be used to configure and manage the VPN server.

Read through the Test 2 information in the test plan. Determine an appropriate goal for Test 2 and fill in the table in the VPN Design Test Plan.

After reading the Procedures section, what do you think would be a successful outcome of completing the

Test 2 procedures?

Successful connection to the VPN server using the external VPN client

Successful tunnel establishment

VPN client has received an internal IP address from the VPN server.

VPN client can ping an internal host or connect to an internal server service

Record your answers in the Expected Results and Success Criteria section for Test 2.

Why do you think it is important to test the VPN operation in a pilot installation, as well as a prototype test?

What are the benefits of managing the VPN server with internal personnel, rather than using the ISP to

manage it?