Complete step-by-step Packet Tracer (.PKA) lab solution for 5.4.12 Packet Tracer - Configure Extended IPv4 ACLs - Scenario 1 (Full .PKA Lab Solution). Includes the Topology Addressing Table, Missing Score Checklist (94% -> 100% Fix), multi-device Cisco IOS CLI scripts, and 10 interactive lab verification questions.
1. Topology & Addressing Table (5.4.12)
| Device | Interface | IP Address | Subnet Mask | Gateway |
|---|---|---|---|---|
| RT1 (Router 1) | G0/0 & G0/1 | 172.22.34.65 | 255.255.255.224 | Inbound ACL |
| Web/FTP Server | NIC0 | 172.22.34.62 | 255.255.255.224 | Inbound ACL |
⚠️ Stuck at 94% in Packet Tracer? (3 Hidden Grader Checks)
1. Check #1: Applied the ACL in the wrong direction ('out' instead of 'in' on G0/0 and G0/1).
2. Check #2: Calculated wrong wildcard mask for /27 (0.0.0.31) or /28 (0.0.0.15).
3. Check #3: Forgot 'permit icmp' line after permitting TCP FTP/HTTP traffic.
2. Complete Multi-Device Cisco IOS CLI Solution (5.4.12)
RT1 (Router 1) Configuration Script
RT1 (Router 1) — IOS CLI
enable configure terminal access-list 100 permit tcp 172.22.34.64 0.0.0.31 host 172.22.34.62 eq ftp access-list 100 permit icmp 172.22.34.64 0.0.0.31 host 172.22.34.62 interface g0/0 ip access-group 100 in end
Web/FTP Server Configuration Script
Web/FTP Server — IOS CLI
enable configure terminal ip access-list extended HTTP_ONLY permit tcp 172.22.34.96 0.0.0.15 host 172.22.34.62 eq www permit icmp 172.22.34.96 0.0.0.15 host 172.22.34.62 interface g0/1 ip access-group HTTP_ONLY in end copy running-config startup-config
3. Practical Lab Verification Quiz (10 Interactive Questions)
Lab Question 1While configuring 5.4.12 in Packet Tracer, your score is stuck at 94% even though pings succeed. What is the #1 configuration item missed?
✔ Correct Answer: A. Applied the ACL in the wrong direction ('out' instead of 'in' on G0/0 and G0/1).
Lab Verification Note: Always verify with
show access-lists | show ip interface g0/0 and save configuration to NVRAM.Lab Question 2Refer to the Addressing Table in 5.4.12. Which command sequence configures RT1 (Router 1) (G0/0 & G0/1)?
✔ Correct Answer: B. ip address 172.22.34.65 255.255.255.224 and no shutdown
Lab Verification Note: Always verify with
show access-lists | show ip interface g0/0 and save configuration to NVRAM.Lab Question 3During Part 2 of 5.4.12, which second common mistake prevents reaching 100%?
✔ Correct Answer: C. Calculated wrong wildcard mask for /27 (0.0.0.31) or /28 (0.0.0.15).
Lab Verification Note: Always verify with
show access-lists | show ip interface g0/0 and save configuration to NVRAM.Lab Question 4Which Cisco IOS verification command confirms operational status for 5.4.12?
✔ Correct Answer: A. show access-lists | show ip interface g0/0
Lab Verification Note: Always verify with
show access-lists | show ip interface g0/0 and save configuration to NVRAM.Lab Question 5What is the third critical grader check required before submitting 5.4.12?
✔ Correct Answer: D. Forgot 'permit icmp' line after permitting TCP FTP/HTTP traffic.
Lab Verification Note: Always verify with
show access-lists | show ip interface g0/0 and save configuration to NVRAM.Lab Question 6What happens if the Native VLAN is mismatched on an 802.1Q trunk link in 5.4.12?
✔ Correct Answer: B. CDP logs native VLAN mismatch alerts and PVST+ blocks the inconsistent VLAN.
Lab Verification Note: Always verify with
show access-lists | show ip interface g0/0 and save configuration to NVRAM.Lab Question 7If a switch port configured with Port Security violates the max MAC count in default mode, what state does it enter?
✔ Correct Answer: C. err-disabled (requires shutdown and no shutdown to recover)
Lab Verification Note: Always verify with
show access-lists | show ip interface g0/0 and save configuration to NVRAM.Lab Question 8Why must you execute 'copy running-config startup-config' before submitting 5.4.12 or a 200-301 PBQ Simlet?
✔ Correct Answer: A. To save active RAM configuration into non-volatile NVRAM so grading scripts score it.
Lab Verification Note: Always verify with
show access-lists | show ip interface g0/0 and save configuration to NVRAM.Lab Question 9If a router learns a /24 route via OSPF (AD 110) and a Floating Static Route configured with AD 5, which enters the routing table?
✔ Correct Answer: B. The Floating Static Route (AD 5) because 5 is lower than OSPF AD 110.
Lab Verification Note: Always verify with
show access-lists | show ip interface g0/0 and save configuration to NVRAM.Lab Question 10Where should an Extended IPv4 ACL (100-199) be placed according to Cisco best practices?
✔ Correct Answer: D. As close to the SOURCE of the traffic as possible.
Lab Verification Note: Always verify with
show access-lists | show ip interface g0/0 and save configuration to NVRAM.