CCIE Security Practice Labs

Section 9.0: IP Services and Protocol-Independent Features (10 points)

9.1. NAT (4 points)

1. Configure TCP NAT load distribution on R4 for Telnet traffic between R2 and R3 to Virtual IP 120.5.72.150.

2. Use Destination NAT.

3. When the user from R5 Telnets to Virtual IP, the Telnet prompt should load balance between R2 and R3.

9.2. NTP (3 points)

1. Configure R7 as the NTP server.

2. Use Loopback1 as the source interface for NTP updates.

3. Update the system calendar with NTP.

4. Configure strong authentication.

5. Configure R4 to synchronize its clock with the NTP server.

9.3. Policy-Based Routing (3 points)

1. Configure R5 with Policy-Based Routing for packets arriving from R3 with no explicit route for the packet's destination to black-hole it instead of using the default ...