153.4.2 Lab Answers

Abraham McClain, Mike Scruggs, Justin Hairston Packet Tracer – Configuring VPN Transport Mode 1 Addressing Table Device Private IP Address Public IP Address Subnet Mask Site Private_FTP server 10.44.2.254 N/A 255.255.255.0 Gotham Healthcare Branch Public_FTP server 10.44.2.253 209.165.201.20 255.255.255.0 Gotham Healthcare Branch Branch_Router N/A 209.165.201.19 255.255.255.248 Gotham Healthcare Branch Phil’s computer 10.44.0.2 N/A 255.255.255.0 Metropolis Bank HQ 2 Objectives Part 1: Sending Unencrypted FTP Traffic Part 2: Configuring the VPN Client within Metropolis Part 3: Sending Encrypted FTP Traffic 3 Background In this activity, you will observe the transfer of unencrypted FTP traffic between a client and a remote site. You will then configure a VPN client to connect to the Gotham Healthcare Branch site and send encrypted FTP traffic. The IP addressing, network configuration, and service configurations are already complete. You will use a client device within Metropolis Bank HQ to transfer unencrypted and encrypted FTP data. Part 1: Sending Unencrypted FTP Traffic Step 1.1: Access the Cyber Criminals Sniffer. 1.1.a. Click the Cyber Criminals Sniffer and click the GUI tab. 1.1.b. Click the Clear button to remove any possible traffic entries viewed by the sniffer. 1.1.c. Minimize the Cyber Criminals Sniffer . Step 1.2: Connect to the Public_FTP server using an insecure FTP connection. 1.2.a. Click the Metropolis Bank HQ site and click Phil’s laptop. 1.2.b. Click the Desktop tab and click on Command Prompt . 1.2.c. Use the ipconfig command to view the current IP address of Phil’s computer. © 2016 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 3

Packet Tracer – Configuring VPN Transport Mode 1.2.d. Connect to the Public_FTP server at Gotham Healthcare Branch by entering ftp 209.165.201.20 in the command prompt. 1.2.e. Enter the username of cisco and password of publickey to login to the Public_FTP server. 1.2.f. Use the put command to upload the file PublicInfo.txt file to the Public_FTP server. Step 1.3: View the traffic on the Cyber Criminals Sniffer. 1.3.a. Maximize the Cyber Criminals Sniffer that was previously minimized. 1.3.b. Click the FTP messages displayed on the sniffer and scroll to the bottom of each one. What information is displayed in clear text? _User, pass, ___________________________________________________________________________________ 1.3.c. Type quit to exit Public_FTP server. Part 2: Configuring the VPN Client on Phil’s Computer 1.1.a. From Phil’s computer, use the ping command and target the IP address of the Branch_Router . The first few pings may timeout. Enter the ping to get four successful pings. 1.1.b. On the Desktop tab, click on VPN 1.1.c. Within the VPN Configuration window, enter the following settings: GroupName: VPNGROUP Group Key: 123 Host IP (Server IP): 209.165.201.19 Username: phil Password: cisco123 1.1.d. Click Connect and Click OK on the next window. What is the Client IP for the client-to-site VPN connection? __________________________________ 10.44.2.200 ________________________________________ __________ Part 3: Sending Encrypted FTP Traffic Step 1.1: View the current IP addressing on Phil’s computer. 1.1.a. Within the Metropolis Bank HQ site, click Phil’s computer. 1.1.b. Click the Desktop tab and click on Command Prompt . 1.1.c. Use the ipconfig command to view the current IP address of Phil’s PC. What extra IP address is now shown that was not shown before in Part 1 Step 2c? __________________________________ ___Tunnel Interface IP Address ..... : 10.44.2.200 _______________________________________________ © 2016 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 3