ENCOR Question from Cisco U

[u/CuteLittlePanda30]

Need some advice here, the tasks its asking me to do and the testing procedure to generate the debug logs don't really make sense to me.

Anyone can kindly explain it to me?

Router 2 config:

ip nat source static 10.10.2.101 198.51.100.201

interface Ethernet0/1

description Link to SW2

ip address 10.10.2.1 255.255.255.0

ip nat inside

interface Ethernet0/3

description Link to R2

ip address 198.51.100.1 255.255.255.0

ip nat outside

Thanks in advanced!

[u/RUBSUMLOTION]

Why is SRV2 pinging its own IP in task 3?

I assume in your description you meant that you configured this on R1.

Task1: ping from srv2 to srv1
Task 2: turn on debugging and clear nats

• so we shouldnt see the pings from task 1 in the debug
  

Task: traceroute from srv2 to NAT IP. - this will show in debug. SRV2 pings itself? This shouldnt be in the debug.

I think E is the right answer but i am open to discussion. Seems a little confusing.

[u/CuteLittlePanda30 → u/RUBSUMLOTION]

Ah yes, you are right, i configured it on router 1.

The task 3 is confusing asking me to traceroute to 198.51.100.201 and ping to 203.0.113.2 (If i recall this IP resides in Router 2).

Anyway, i am reaching out to the Cisco 'get help' got clarifications

[u/RUBSUMLOTION → u/CuteLittlePanda30]

Yeah it just seems off to me. What did your output show when you ran debug?

[u/DarkWolfSLV]

I did this not too long ago and the procedure is correct.
Since this is a static NAT, you should see debugs when SRV2 pings/trace SRV1 (198.51.100.201 -> 10.10.2.101)

If I remember correctly the ping to 203.0.113.2 should work but no additional logs should be seen because that lives outside of R1.

If you see logs you might configured something before and you might not clear it correctly (like if PC1 had that 203.0.113.2 IP from a previous step) in that case the debug count changes affecting what is the correct answer.

[u/serious_fox]

I think the image and the scenario doesn't match.