SRWE Final PT Skills Assessment Exam (PTSA) Cheat Sheet (DRAFT) by scoob

Step 1: Configure R1 Basic Settings and Device Hardening

Router(config)#no ip domain lookup 
Router(config)#hostname R1
R1(config)#banner motd #Unauthorized Acess is Prohibited#

R1(config)#line console 0
R1(config-line)#password ciscoconpass
R1(config-line)#login
R1(config-line)#exit

R1(config)#enable secret ciscoenpass

R1(config)#service password-encryption 

R1(config)#security passwords min-length 10


R1(config)#username admin secret admin1pass

R1(config)#ip domain name ccna-ptsa.com

R1(config)#crypto key generate rsa
1024

R1(config)#ip ssh version 2

R1(config)#line vty 0 15
R1(config-line)#login local
R1(config-line)#transport input ssh 
R1(config-line)#exit 


Step 2: Configure router interfaces.

R1(config)#interface Loopback 0
R1(config-if)#description Loopback
R1(config-if)#ip address 209.165.201.1 255.255.255.224
R1(config-if)#ipv6 address 2001:db8:acad:209::1/64
R1(config-if)#ipv6 address fe80::1 link-local
R1(config-if)#exit


Configure subinterfaces

R1(config)#ipv6 unicast-routing 

R1(config)#interface g0/0/1.2
R1(config-subif)#encapsulation dot1Q 2
R1(config-subif)#description Bikes
R1(config-subif)#ip address 10.19.8.1 255.255.255.192
R1(config-subif)#ipv6 address 2001:db8:acad:a::1/64
R1(config-subif)#ipv6 address fe80::1 link-local

R1(config-subif)#interface g0/0/1.3
R1(config-subif)#encapsulation dot1Q 3
R1(config-subif)#description Trikes
R1(config-subif)#ip address 10.19.8.65 255.255.255.224
R1(config-subif)#ipv6 address 2001:db8:acad:b::1/64
R1(config-subif)#ipv6 address fe80::1 link-local 

R1(config-subif)#interface g0/0/1.4
R1(config-subif)#encapsulation dot1Q 4
R1(config-subif)#description Management
R1(config-subif)#ip address 10.19.8.97 255.255.255.248
R1(config-subif)#ipv6 address 2001:db8:acad:c::1/64
R1(config-subif)#ipv6 address fe80::1 link-local 

R1(config-subif)#interface g0/0/1.6
R1(config-subif)#encapsulation dot1Q 6 native
R1(config-subif)#description Native

R1(config)#interface g0/0/1
R1(config-if)#no shutdown

Switch1(config)#no ip domain lookup
Switch1(config)#hostname S1
S1(config)#banner motd #Unauthorized Access is Prohibitted!#

Switch2(config)#no ip domain lookup 
Switch2(config)#hostname S2
S2(config)#banner motd #Unauthorized Access is Prohibitted!#

S1(config)#line console 0
S1(config-line)#password ciscoconpass
S1(config-line)#login
S1(config-line)#exit

S1(config)#enable secret ciscoenpass

S1(config)#service password-encryption 

S2(config)#line console 0
S2(config-line)#password ciscoconpass
S2(config-line)#login
S2(config-line)#exit

S2(config)#enable secret ciscoenpass

S2(config)#service password-encryption 

Configure SSH

S1(config)#username admin secret admin1pass

S1(config)#ip domain name ccna-ptsa.com

S1(config)#crypto key generate rsa
1024

S1(config)#ip ssh version 2

S1(config)#line vty 0 15
S1(config-line)#login local
S1(config-line)#transport input ssh
S1(config-line)#exit

S2(config)#username admin secret admin1pass

S2(config)#ip domain name ccna-ptsa.com

S2(config)#crypto key generate rsa
1024

S2(config)#ip ssh version 2

S2(config)#line vty 0 15
S2(config-line)#login local
S2(config-line)#transport input ssh 
S2(config-line)#exit

S1(config)#interface vlan 4
S1(config-if)#ip address 10.19.8.98 255.255.255.248
S1(config-if)#description Management Interface
S1(config-if)#no shutdown
S1(config-if)#exit

S1(config)#ip default-gateway 10.19.8.97

S2(config)#interface vlan 4
S2(config-if)#ip address 10.19.8.99 255.255.255.248
S2(config-if)#description Management Interface
S2(config-if)#no shutdown
S2(config-if)#exit

S2(config)#ip default-gateway 10.19.8.97