Complete step-by-step Packet Tracer (.PKA) lab solution for CCNA 1 v7.02 & v8 Modules 1 - 3 Checkpoint Exam & Basic Switch Connectivity Lab. Includes the Topology Addressing Table, Missing Score Checklist (95% or 97% -> 100% Fix), multi-device Cisco IOS CLI scripts, and 10 interactive lab verification questions.
1. Topology & Addressing Table (CHK-ITN-1-3)
| Device | Interface | IP Address | Subnet Mask | Gateway |
|---|---|---|---|---|
| S1 (Central Switch) | VLAN 100 (SVI) | 192.168.100.11 | 255.255.255.0 | 192.168.100.1 |
| S2 (Access Switch) | VLAN 100 (SVI) | 192.168.100.12 | 255.255.255.0 | 192.168.100.1 |
⚠️ Stuck at 95% or 97% in Packet Tracer? (3 Hidden Grader Checks)
1. Check #1: Forgot 'spanning-tree bpduguard enable' on all active access ports (F0/10, F0/24).
2. Check #2: Used 'mac-address-table' instead of 'switchport port-security mac-address sticky' on FastEthernet ports.
3. Check #3: Did not administratively shut down unused ports ('interface range f0/3-9, f0/11-23' -> 'shutdown') and move to VLAN 999.
2. Complete Multi-Device Cisco IOS CLI Solution (CHK-ITN-1-3)
S1 (Central Switch) Configuration Script
S1 (Central Switch) — IOS CLI
enable configure terminal interface range f0/1 - 2 switchport mode trunk switchport nonegotiate switchport trunk native vlan 100 interface range f0/10, f0/24 switchport mode access switchport access vlan 10 switchport port-security switchport port-security maximum 2 switchport port-security violation restrict switchport port-security mac-address sticky spanning-tree portfast spanning-tree bpduguard enable interface range f0/3 - 9, f0/11 - 23 switchport access vlan 999 shutdown end copy running-config startup-config
S2 (Access Switch) Configuration Script
S2 (Access Switch) — IOS CLI
enable configure terminal ip dhcp snooping ip dhcp snooping vlan 10 ip arp inspection vlan 10 interface range f0/1 - 2 ip dhcp snooping trust ip arp inspection trust interface range f0/10, f0/24 ip dhcp snooping limit rate 5 end copy running-config startup-config
3. Practical Lab Verification Quiz (10 Interactive Questions)
Lab Question 1While configuring CHK-ITN-1-3 in Packet Tracer, your score is stuck at 95% or 97% even though pings succeed. What is the #1 configuration item missed?
✔ Correct Answer: A. Forgot 'spanning-tree bpduguard enable' on all active access ports (F0/10, F0/24).
Lab Verification Note: Always verify with
show port-security interface f0/10 | show ip dhcp snooping binding and save configuration to NVRAM.Lab Question 2Refer to the Addressing Table in CHK-ITN-1-3. Which command sequence configures S1 (Central Switch) (VLAN 100 (SVI))?
✔ Correct Answer: B. ip address 192.168.100.11 255.255.255.0 and no shutdown
Lab Verification Note: Always verify with
show port-security interface f0/10 | show ip dhcp snooping binding and save configuration to NVRAM.Lab Question 3During Part 2 of CHK-ITN-1-3, which second common mistake prevents reaching 100%?
✔ Correct Answer: C. Used 'mac-address-table' instead of 'switchport port-security mac-address sticky' on FastEthernet ports.
Lab Verification Note: Always verify with
show port-security interface f0/10 | show ip dhcp snooping binding and save configuration to NVRAM.Lab Question 4Which Cisco IOS verification command confirms operational status for CHK-ITN-1-3?
✔ Correct Answer: A. show port-security interface f0/10 | show ip dhcp snooping binding
Lab Verification Note: Always verify with
show port-security interface f0/10 | show ip dhcp snooping binding and save configuration to NVRAM.Lab Question 5What is the third critical grader check required before submitting CHK-ITN-1-3?
✔ Correct Answer: D. Did not administratively shut down unused ports ('interface range f0/3-9, f0/11-23' -> 'shutdown') and move to VLAN 999.
Lab Verification Note: Always verify with
show port-security interface f0/10 | show ip dhcp snooping binding and save configuration to NVRAM.Lab Question 6What happens if the Native VLAN is mismatched on an 802.1Q trunk link in CHK-ITN-1-3?
✔ Correct Answer: B. CDP logs native VLAN mismatch alerts and PVST+ blocks the inconsistent VLAN.
Lab Verification Note: Always verify with
show port-security interface f0/10 | show ip dhcp snooping binding and save configuration to NVRAM.Lab Question 7If a switch port configured with Port Security violates the max MAC count in default mode, what state does it enter?
✔ Correct Answer: C. err-disabled (requires shutdown and no shutdown to recover)
Lab Verification Note: Always verify with
show port-security interface f0/10 | show ip dhcp snooping binding and save configuration to NVRAM.Lab Question 8Why must you execute 'copy running-config startup-config' before submitting CHK-ITN-1-3 or a 200-301 PBQ Simlet?
✔ Correct Answer: A. To save active RAM configuration into non-volatile NVRAM so grading scripts score it.
Lab Verification Note: Always verify with
show port-security interface f0/10 | show ip dhcp snooping binding and save configuration to NVRAM.Lab Question 9If a router learns a /24 route via OSPF (AD 110) and a Floating Static Route configured with AD 5, which enters the routing table?
✔ Correct Answer: B. The Floating Static Route (AD 5) because 5 is lower than OSPF AD 110.
Lab Verification Note: Always verify with
show port-security interface f0/10 | show ip dhcp snooping binding and save configuration to NVRAM.Lab Question 10Where should an Extended IPv4 ACL (100-199) be placed according to Cisco best practices?
✔ Correct Answer: D. As close to the SOURCE of the traffic as possible.
Lab Verification Note: Always verify with
show port-security interface f0/10 | show ip dhcp snooping binding and save configuration to NVRAM.