CCIE Security Practice Labs

Section 9.0: IP Services and Protocol-Independent Features (10 points)

9.1. NAT (3 points)

1. Configure network address translation on R4, R6, and R8 for private networks to communicate with public networks.

2. Configure PAT using the next IP address of the egress interface subnet.

3. No network address translation should occur when communicating between private networks.

9.2. NTP (3 points)

1. R1 should update its clock from R2.

2. R3 should dynamically synchronize with R1. Do not configure any NTP server statement on R3 to achieve this task.

3. Configure strong authentication between NTP peers.

4. Use Loopback-1 for NTP updates.

9.3. Traffic Shaping (2 points)

1. The Frame Relay link on R1 with DLCI 106 is experiencing heavy congestion. This is resulting in OSPF losing ...