Complete step-by-step Packet Tracer (.PKA) lab solution for 11.10.1 Packet Tracer - Design and Implement a VLSM Addressing Scheme (Full .PKA Solution). Includes the Topology Addressing Table, Missing Score Checklist (93% -> 100% Fix), multi-device Cisco IOS CLI scripts, and 10 interactive lab verification questions.
1. Topology & Addressing Table (11.10.1)
| Device | Interface | IP Address | Subnet Mask | Gateway |
|---|---|---|---|---|
| R2 (NAT Border) | S0/0/0 (Outside) | 209.165.200.225 | 255.255.255.252 | ISP Gateway |
| LocalPKA Server | FastEthernet0 | 192.168.20.254 | 255.255.255.252 | ISP Gateway |
⚠️ Stuck at 93% in Packet Tracer? (3 Hidden Grader Checks)
1. Check #1: Forgot the 'overload' keyword at the end of 'ip nat inside source list 1 pool R2POOL overload'.
2. Check #2: Swapped 'ip nat inside' and 'ip nat outside' on Serial0/0/0 and Serial0/0/1.
3. Check #3: Used wrong wildcard mask in ACL 1 for matching the 192.168.0.0/16 internal networks.
2. Complete Multi-Device Cisco IOS CLI Solution (11.10.1)
R2 (NAT Border) Configuration Script
R2 (NAT Border) — IOS CLI
enable configure terminal ip nat inside source static 192.168.20.254 209.165.202.131 access-list 1 permit 192.168.0.0 0.0.255.255 ip nat pool R2POOL 209.165.202.129 209.165.202.130 netmask 255.255.255.252 ip nat inside source list 1 pool R2POOL overload end
LocalPKA Server Configuration Script
LocalPKA Server — IOS CLI
enable configure terminal interface s0/0/0 ip nat outside interface g0/0 ip nat inside interface s0/0/1 ip nat inside end copy running-config startup-config
3. Practical Lab Verification Quiz (10 Interactive Questions)
Lab Question 1While configuring 11.10.1 in Packet Tracer, your score is stuck at 93% even though pings succeed. What is the #1 configuration item missed?
✔ Correct Answer: A. Forgot the 'overload' keyword at the end of 'ip nat inside source list 1 pool R2POOL overload'.
Lab Verification Note: Always verify with
show ip nat translations | show ip nat statistics and save configuration to NVRAM.Lab Question 2Refer to the Addressing Table in 11.10.1. Which command sequence configures R2 (NAT Border) (S0/0/0 (Outside))?
✔ Correct Answer: B. ip address 209.165.200.225 255.255.255.252 and no shutdown
Lab Verification Note: Always verify with
show ip nat translations | show ip nat statistics and save configuration to NVRAM.Lab Question 3During Part 2 of 11.10.1, which second common mistake prevents reaching 100%?
✔ Correct Answer: C. Swapped 'ip nat inside' and 'ip nat outside' on Serial0/0/0 and Serial0/0/1.
Lab Verification Note: Always verify with
show ip nat translations | show ip nat statistics and save configuration to NVRAM.Lab Question 4Which Cisco IOS verification command confirms operational status for 11.10.1?
✔ Correct Answer: A. show ip nat translations | show ip nat statistics
Lab Verification Note: Always verify with
show ip nat translations | show ip nat statistics and save configuration to NVRAM.Lab Question 5What is the third critical grader check required before submitting 11.10.1?
✔ Correct Answer: D. Used wrong wildcard mask in ACL 1 for matching the 192.168.0.0/16 internal networks.
Lab Verification Note: Always verify with
show ip nat translations | show ip nat statistics and save configuration to NVRAM.Lab Question 6What happens if the Native VLAN is mismatched on an 802.1Q trunk link in 11.10.1?
✔ Correct Answer: B. CDP logs native VLAN mismatch alerts and PVST+ blocks the inconsistent VLAN.
Lab Verification Note: Always verify with
show ip nat translations | show ip nat statistics and save configuration to NVRAM.Lab Question 7If a switch port configured with Port Security violates the max MAC count in default mode, what state does it enter?
✔ Correct Answer: C. err-disabled (requires shutdown and no shutdown to recover)
Lab Verification Note: Always verify with
show ip nat translations | show ip nat statistics and save configuration to NVRAM.Lab Question 8Why must you execute 'copy running-config startup-config' before submitting 11.10.1 or a 200-301 PBQ Simlet?
✔ Correct Answer: A. To save active RAM configuration into non-volatile NVRAM so grading scripts score it.
Lab Verification Note: Always verify with
show ip nat translations | show ip nat statistics and save configuration to NVRAM.Lab Question 9If a router learns a /24 route via OSPF (AD 110) and a Floating Static Route configured with AD 5, which enters the routing table?
✔ Correct Answer: B. The Floating Static Route (AD 5) because 5 is lower than OSPF AD 110.
Lab Verification Note: Always verify with
show ip nat translations | show ip nat statistics and save configuration to NVRAM.Lab Question 10Where should an Extended IPv4 ACL (100-199) be placed according to Cisco best practices?
✔ Correct Answer: D. As close to the SOURCE of the traffic as possible.
Lab Verification Note: Always verify with
show ip nat translations | show ip nat statistics and save configuration to NVRAM.