Users complain that they are unable to reach internet sites. You are troubleshooting internet connectivity problem at main office. Which statement correctly identifies the problem on Router R1?
A. Interesting traffic for NAT ACL is incorrectly configured.
B. NAT configurations on the interfaces are incorrectly configured
C. NAT translation statement incorrectly configured.
D. Only static NAT translation configured for the server, missing Dynamic NAT or Dynamic NAT overloading for internal networks.
R1 Configuration
interface Ethernet0/0
description ***Link to ISP***
ip address 209.165.200.225 255.255.255.224
ip nat outside
ip virtual-reassembly in
!
interface Ethernet0/1
description ***Link to Server1 Segment***
ip address 172.16.200.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Ethernet0/2
description ***Link to R2***
ip address 192.168.10.1 255.255.255.252
ip access-group R2LANBLOCK in
ip nat inside
ip virtual-reassembly in
!
interface Ethernet0/3
no ip address
shutdown
!
router rip
version2
ip nat inside source list LOCAL interface Ethernet0/0 overload
iproute 0.0.0.0 0.0.0.0 209.165.200.226
!
ip access-list standard R2LANBLOCK
deny 10.100.20.0 0.0.0.255
permit any
!
ip access-list extended LOCAL
permit ip host 127.0.0.1 any
!
!
!
!
control-plane
!
!
!
!
!
!
!
line con 0
logging synchronous
line aux 0
line vty 0 4
login
transport input all
!
ntp server 209.165.200.226
!
end
R1#
Sentinel
May 4th, 2017
@Digong…
Is this the configuration as it was shown on the test you took because what you posted as the run con is incorrectly posted according to the 9Tut Sim, it shows the link to the ISP as ip nat inside and the other as outside which would be wrong and (B) would be the correct answer..
If what you posted is from the test then it has to be something far different like perhaps NAT translation statement incorrectly configured
-ip nat inside source list LOCAL interface Ethernet0/0 overload
-iproute 0.0.0.0 0.0.0.0 209.165.200.226
I would guess the IP address is wrong, it’s pointing to the IP of the inbound interface of the ISP… 209.165.200.266
Someone correct me if I’m wrong on this assumption.
sawier
May 5th, 2017
its just blank
Ruby
May 13th, 2017
I had the same output – what is the answer?
Ruby
May 13th, 2017
@Digong – Isn’t ip route 0.0.0.0 0.0.0.0 209.165.200.226 the default route with a the next hop to the ISP interface?
E0/0 IP Addr is: interface Ethernet0/0
description ***Link to ISP***
ip address 209.165.200.225 255.255.255.224
ip nat outside
ip virtual-reassembly in
Elite Book
May 23rd, 2017
The correct answer is the letter A.
Why?
1. The NAT interfaces configuration area correct. The ip nat statement on interfaces (inside/outside) are in place, pointing to the correct direction.
2. Interfaces address are correct.
3. The GLOBAL command to create a the PAT (NAT overloaded) are correct. The (overload) is applied to outside interfaces, in this case eth0/0. The statement also is pointing to a existing access-list.
4. The access-list is WRONG!!!! This access-list is pointing a local host address. The 127.0.0.1 is assigned to local host (local loopback). So the INTERESTED traffic is not PROCEEDING trough the NAT statement.
enjoy….
Elite Book
May 23rd, 2017
@Digong If you have the other router config, please post them.
Vagabond
June 21st, 2017
@Elitebook what do you mean pointing to the correct direction I thought the isp is suppose to have the same IP NAT configured as the others?
Dennis
July 13th, 2017
I still don’t know how to make the sims work, Help!!
besti
July 13th, 2017
use IE
Anonymous
September 14th, 2017
The questions are not opening today on any sims (prem member) is this maint time ?
keepad
September 14th, 2017
That is the questions on the quiz not opening, just to be clear.
9tut
September 14th, 2017
@keepad: Please make sure you have installed latest Flash plugin at: https://get.adobe.com/flashplayer and enable it for your web browser.
keepad
September 14th, 2017
Thank you
Anonymous
October 6th, 2017
hi.Admin I bought a subscription but unable to access to DHCP Simulator.
9tut
October 7th, 2017
@Anonymous: Please type your “show” commands into the single-line textboxes. If your problem still exists, please take a screenshot of your problem and send to support@9tut.net so that we can help you.
White Knight
December 8th, 2017
I don’t see the explanations for the quiz for this testlet, Question “Why is R3 not receiving IPP address via DHCP. Could some one explain what would be the configuration for the connection?
White Knight
December 8th, 2017
The line between R2 and R3 is in admin shutdown, but the testlet quiz says that is not the correct answer, please fix the quiz!
Fani
December 17th, 2017
I have passed the exam so many questions from this new updated questions above .only issue I was having was that in dhcp sim question when I use sh run command for R1 and also for others R2 and R3 it was not displaying all the info in the output like dhcp pool , nat, ntp info were missing ? Anyone knows why it was like that? Or I was doing something wrong ?
And thanks to 9tut
Need help
January 28th, 2018
in the command “ip dhcp pool DHCPASSIGN3”
network 192.168.20.0 255.255.255.252
Is 192.168.20.0 255.255.255.252 looks wrong? because the LAN connected to R3 is 10.100.10.0
Is that dhcp pool should be according to 10.100.10.0?
Please help. THANK YOU
Mermaid
January 29th, 2018
@DHCP
– 1st the DHCP statement is completely missing at R3
– 2nd the Hosts on LAN 10.x.x.x are the ones requesting the DHCP address – not the ‘target’ address for DHCP pool
Anonymous
February 5th, 2018
Where can I find practice questions for simulations?
Regards
Abuga
March 20th, 2018
I just sat the ICND1 exam, and this DHCP and the Security simulation were 100% the same. And I passed.
examcomming
March 22nd, 2018
same lab on my exam today
9tutPHI
April 9th, 2018
Hi all, 9tut,
I will pass my CCENT in 15 days, (for 1st time passing cisco exam). Does anyone can tell me if for the simtest, only the ”show running-config” command is enough? I mean could it happend that we need to play command as show ip interfaces brief, or many else? Also, does the short-cut are activated? like sh run etc…
Many thank for answer
Kind regards
Hi all,
April 9th, 2018
i passed the exam yesterday, some questions about rip,acl, informational messages, spot the difference, debug and ipv6, and drop and match the questions,
9tut cover partial
sim are two were there.
Show Configuration Simulator. and
Security Testlet Simulator.
but i think it is better to remember all of these three just in case >> DHCP Simulator here.
i passed because of 9 tut the materials i studied, thanks 9tut
Viber
April 28th, 2018
I totally agree with Hi all!!!
I had Dhcp and security testlet!!! Beware!!! Study the explanations, don’t just learn by heart the answers!!!
Thank you 9tut!!!!!!!!!!!!!!!!!!!!!!!!!!! 930+/1000
Viber
April 28th, 2018
The only command that i needed was “show run” in sims
nofile
August 4th, 2018
no packet tracer file I can download to practice this sim?
Jae87
December 6th, 2018
I’m assuming these no special configuration need for this simulation, we just need to run show run command to get the answer?
GettingReady!
March 28th, 2019
Hi, has anyone taken the icnd1 in the past month or so who can verify if the sims above are still being used ? 🙂
I’m booked to take at the weekend
Princess Leia
April 2nd, 2019
@GettingReady
how did you test go?
KB
April 6th, 2019
I took the test last week and missed it by 50 points however these sims are def on the test I took on March 30- Going again this April 5th
April
April 13th, 2019
Anyone else take ICND1 recently and can confirm if any of these SIMS are still coming up? What about the questions?
@KB, hopefully you passed the 2nd time. Did the same SIMS come up the 2nd time?
Summer
July 4th, 2019
Has anyone taken ICND1 recently and are these the sims? I heard an OSPF sim was on the exam? What about the questions?
Prep4ICND1
September 1st, 2019
@Elite Book. The show running posted is different from simlet on 9 tut, but I agree with your answer and analysis. Just wanted to add that interface Ethernet 0/2 has an access list that would block addresses in the 10.100.20.0/24 network. Then, even if the NAT had a proper access-list and had translated incoming traffic with the 10.100.20.0/24 network, the traffic would have been blocked when trying to come out of Ethernet 0/2. Am I wrong?
Second
October 19th, 2019
Same questions as others, anyone taken it recently and got these sims?
Ladytechie
November 13th, 2019
in some sims in the real exam the show running config is disabled fyi!!!!
notthing simulatin here
Click the “R1-3” on th upper right corner for simulator.
@Anonymous: Please click the “R1-3” button on the right side to access the CLIs of the routers.
Hello, When I click on R1-R3 to see configuration, I only see three blank screens. Can we get this updated plz?
@anon: You need to type your “show” commands to get the output like in the CLIs.
Please read the explanation at https://www.9tut.net/icnd1/labsim/dhcp-sim (Question 2)
but is blank where are the explanations for Q??
@STUDing hard: This link (https://www.9tut.net/icnd1/labsim/dhcp-sim) is accessible. Please try again.
Big thank you 9tut
thanks
Hi guys,
what is the answer?
Users complain that they are unable to reach internet sites. You are troubleshooting internet connectivity problem at main office. Which statement correctly identifies the problem on Router R1?
A. Interesting traffic for NAT ACL is incorrectly configured.
B. NAT configurations on the interfaces are incorrectly configured
C. NAT translation statement incorrectly configured.
D. Only static NAT translation configured for the server, missing Dynamic NAT or Dynamic NAT overloading for internal networks.
R1 Configuration
interface Ethernet0/0
description ***Link to ISP***
ip address 209.165.200.225 255.255.255.224
ip nat outside
ip virtual-reassembly in
!
interface Ethernet0/1
description ***Link to Server1 Segment***
ip address 172.16.200.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Ethernet0/2
description ***Link to R2***
ip address 192.168.10.1 255.255.255.252
ip access-group R2LANBLOCK in
ip nat inside
ip virtual-reassembly in
!
interface Ethernet0/3
no ip address
shutdown
!
router rip
version2
ip nat inside source list LOCAL interface Ethernet0/0 overload
iproute 0.0.0.0 0.0.0.0 209.165.200.226
!
ip access-list standard R2LANBLOCK
deny 10.100.20.0 0.0.0.255
permit any
!
ip access-list extended LOCAL
permit ip host 127.0.0.1 any
!
!
!
!
control-plane
!
!
!
!
!
!
!
line con 0
logging synchronous
line aux 0
line vty 0 4
login
transport input all
!
ntp server 209.165.200.226
!
end
R1#
@Digong…
Is this the configuration as it was shown on the test you took because what you posted as the run con is incorrectly posted according to the 9Tut Sim, it shows the link to the ISP as ip nat inside and the other as outside which would be wrong and (B) would be the correct answer..
If what you posted is from the test then it has to be something far different like perhaps NAT translation statement incorrectly configured
-ip nat inside source list LOCAL interface Ethernet0/0 overload
-iproute 0.0.0.0 0.0.0.0 209.165.200.226
I would guess the IP address is wrong, it’s pointing to the IP of the inbound interface of the ISP… 209.165.200.266
Someone correct me if I’m wrong on this assumption.
its just blank
I had the same output – what is the answer?
@Digong – Isn’t ip route 0.0.0.0 0.0.0.0 209.165.200.226 the default route with a the next hop to the ISP interface?
E0/0 IP Addr is: interface Ethernet0/0
description ***Link to ISP***
ip address 209.165.200.225 255.255.255.224
ip nat outside
ip virtual-reassembly in
The correct answer is the letter A.
Why?
1. The NAT interfaces configuration area correct. The ip nat statement on interfaces (inside/outside) are in place, pointing to the correct direction.
2. Interfaces address are correct.
3. The GLOBAL command to create a the PAT (NAT overloaded) are correct. The (overload) is applied to outside interfaces, in this case eth0/0. The statement also is pointing to a existing access-list.
4. The access-list is WRONG!!!! This access-list is pointing a local host address. The 127.0.0.1 is assigned to local host (local loopback). So the INTERESTED traffic is not PROCEEDING trough the NAT statement.
enjoy….
@Digong If you have the other router config, please post them.
@Elitebook what do you mean pointing to the correct direction I thought the isp is suppose to have the same IP NAT configured as the others?
I still don’t know how to make the sims work, Help!!
use IE
The questions are not opening today on any sims (prem member) is this maint time ?
That is the questions on the quiz not opening, just to be clear.
@keepad: Please make sure you have installed latest Flash plugin at: https://get.adobe.com/flashplayer and enable it for your web browser.
Thank you
hi.Admin I bought a subscription but unable to access to DHCP Simulator.
@Anonymous: Please type your “show” commands into the single-line textboxes. If your problem still exists, please take a screenshot of your problem and send to support@9tut.net so that we can help you.
I don’t see the explanations for the quiz for this testlet, Question “Why is R3 not receiving IPP address via DHCP. Could some one explain what would be the configuration for the connection?
The line between R2 and R3 is in admin shutdown, but the testlet quiz says that is not the correct answer, please fix the quiz!
I have passed the exam so many questions from this new updated questions above .only issue I was having was that in dhcp sim question when I use sh run command for R1 and also for others R2 and R3 it was not displaying all the info in the output like dhcp pool , nat, ntp info were missing ? Anyone knows why it was like that? Or I was doing something wrong ?
And thanks to 9tut
in the command “ip dhcp pool DHCPASSIGN3”
network 192.168.20.0 255.255.255.252
Is 192.168.20.0 255.255.255.252 looks wrong? because the LAN connected to R3 is 10.100.10.0
Is that dhcp pool should be according to 10.100.10.0?
Please help. THANK YOU
@DHCP
– 1st the DHCP statement is completely missing at R3
– 2nd the Hosts on LAN 10.x.x.x are the ones requesting the DHCP address – not the ‘target’ address for DHCP pool
Where can I find practice questions for simulations?
Regards
I just sat the ICND1 exam, and this DHCP and the Security simulation were 100% the same. And I passed.
same lab on my exam today
Hi all, 9tut,
I will pass my CCENT in 15 days, (for 1st time passing cisco exam). Does anyone can tell me if for the simtest, only the ”show running-config” command is enough? I mean could it happend that we need to play command as show ip interfaces brief, or many else? Also, does the short-cut are activated? like sh run etc…
Many thank for answer
Kind regards
i passed the exam yesterday, some questions about rip,acl, informational messages, spot the difference, debug and ipv6, and drop and match the questions,
9tut cover partial
sim are two were there.
Show Configuration Simulator. and
Security Testlet Simulator.
but i think it is better to remember all of these three just in case >> DHCP Simulator here.
i passed because of 9 tut the materials i studied, thanks 9tut
I totally agree with Hi all!!!
I had Dhcp and security testlet!!! Beware!!! Study the explanations, don’t just learn by heart the answers!!!
Thank you 9tut!!!!!!!!!!!!!!!!!!!!!!!!!!! 930+/1000
The only command that i needed was “show run” in sims
no packet tracer file I can download to practice this sim?
I’m assuming these no special configuration need for this simulation, we just need to run show run command to get the answer?
Hi, has anyone taken the icnd1 in the past month or so who can verify if the sims above are still being used ? 🙂
I’m booked to take at the weekend
@GettingReady
how did you test go?
I took the test last week and missed it by 50 points however these sims are def on the test I took on March 30- Going again this April 5th
Anyone else take ICND1 recently and can confirm if any of these SIMS are still coming up? What about the questions?
@KB, hopefully you passed the 2nd time. Did the same SIMS come up the 2nd time?
Has anyone taken ICND1 recently and are these the sims? I heard an OSPF sim was on the exam? What about the questions?
@Elite Book. The show running posted is different from simlet on 9 tut, but I agree with your answer and analysis. Just wanted to add that interface Ethernet 0/2 has an access list that would block addresses in the 10.100.20.0/24 network. Then, even if the NAT had a proper access-list and had translated incoming traffic with the 10.100.20.0/24 network, the traffic would have been blocked when trying to come out of Ethernet 0/2. Am I wrong?
Same questions as others, anyone taken it recently and got these sims?
in some sims in the real exam the show running config is disabled fyi!!!!