Author Archives: Anonymous
Lab Topology Design All the initial configuration for this n…
Lab Topology Design All the initial configuration for this network has been done for you. Your task is to limit traffic throughout this network using a variety of ACL types. Download and open this Packet Tracer. IP Addressing Scheme: Internal LAN (192.168.10.0/24): DMZ (172.16.20.0/24): External LAN (10.1.30.0/24): Lab Instructions and Tasks Open the Packet Tracer Template and Verify connectivity: Do not submit any screenshots for this part. Use the ping command to test connections. All pings should be successful. Use the show ip route command on each router to verify the routing table. Use the web browser app from PC0 to test PublicWebServer and InternalWebserver. What to submit for each task below: Take a screenshot and name it the following. (task1a, task2b, etc). Ensure you have captured the whole window that shows the PC you are testing from. Incomplete screenshots will not be given credit. Note if the test worked, submit answers on question 2 (yes/no) Submit completed packet tracer All screenshots The output of ‘show run’ of each router. zip all the files together before submitting your zip file. Task 1: Standard ACL Implementation. (13pts) Policy: PC3 (192.168.10.11) should be denied access to the 10.1.30.0/24 network. All other hosts on the Internal LAN should have full access. Use ACL 1. Verification: From PC0, ping 10.1.30.10 (PC4) (yes/no) From PC3, ping 10.1.30.10 (PC4) (yes/no) From PC3, ping 172.16.20.5 (InternalWebServer) (yes/no) Task 2: Extended ACL Implementation (13 pts) Policy: Traffic to the Internal Web Server in the DMZ should only allow HTTP (TCP port 80) and HTTPS (TCP port 443) and any ICMP traffic. All other traffic should be denied. Use access-list 101. Verification: HTTP/HTTPS Test: On PC4 go to Desktop > Web Browser and enter http://172.16.20.5 (yes/no) On PC0 go to Desktop > Web Browser and enter http://172.16.20.5 (yes/no) On PC0 go to Desktop > Web Browser and enter http://172.16.20.6 (yes/no) Task 3: Named Extended ACL Implementation (13pts) Policy: Using a named access list called Deny-External block all traffic to the Internal LAN if the return traffic does not originate from the Internal LAN. Allow any icmp echo-reply traffic. Verification: PC0 browse to PublicWebServer (10.1.30.5) (yes/no) PC0 browse to InternalWebServer (172.16.20.5) (yes/no) PC0 ping InternalWebServer(172.16.20.5) (yes/no) Public Webserver ping PC0 (192.168.10.10) (yes/no) InternalWebserver ping PC3 (192.168.10.10) (yes/no)
Read Details