Difference between revisions of "BO CCNA Course/coursematerials/ACL Configuration"
From Teknologisk videncenter
m (Created page with "Before you can continue with this assignment you need to complete the ACL Basic setup {| |[[Image:ScreenShot1272.jpg|800px|left|thumb...") |
m (→Tasks) |
||
(2 intermediate revisions by the same user not shown) | |||
Line 3: | Line 3: | ||
|[[Image:ScreenShot1272.jpg|800px|left|thumb|Setup]] | |[[Image:ScreenShot1272.jpg|800px|left|thumb|Setup]] | ||
|} | |} | ||
+ | ==Tasks== | ||
+ | #Configure standard ACLs | ||
+ | ##Lan 1 Computers should not be able to communicate with LAN 2 computers | ||
+ | #Configure extended ACLs | ||
+ | ##LAN 1 computers should only be allowed to access internal resources | ||
+ | ##LAN 2 computer should have access to the internet | ||
+ | ##Traffic from the internet should be blocked unless is originated from within the company | ||
+ | <br/> | ||
+ | '''Is it possible for the LAN1 computers to ping the LAN2 computers?''' | ||
+ | <br/> | ||
+ | <br/> | ||
+ | '''Is it possible for the LAN1 computers to ping the routers and the internal web server?''' | ||
+ | <br/> | ||
+ | <br/> | ||
+ | '''Is the www.google.com webserver able to ping or access the internal web server?''' | ||
+ | <br/> | ||
+ | #External computers should now be allowed to access the internal web server on port 80 only | ||
+ | #Configure an ACL on the serial interfaces on the firewall router that will deny ping packets to the internal web server from LAN1 and LAN2 | ||
+ | <br/> | ||
+ | '''Are the LAN2 hosts able to ping the www.google.com web server?''' | ||
+ | <br/> | ||
+ | #Configure line vty ACLs to only allow LAN2 hosts to telnet to the Routers in the network. |
Latest revision as of 09:36, 30 August 2012
Before you can continue with this assignment you need to complete the ACL Basic setup
Tasks
- Configure standard ACLs
- Lan 1 Computers should not be able to communicate with LAN 2 computers
- Configure extended ACLs
- LAN 1 computers should only be allowed to access internal resources
- LAN 2 computer should have access to the internet
- Traffic from the internet should be blocked unless is originated from within the company
Is it possible for the LAN1 computers to ping the LAN2 computers?
Is it possible for the LAN1 computers to ping the routers and the internal web server?
Is the www.google.com webserver able to ping or access the internal web server?
- External computers should now be allowed to access the internal web server on port 80 only
- Configure an ACL on the serial interfaces on the firewall router that will deny ping packets to the internal web server from LAN1 and LAN2
Are the LAN2 hosts able to ping the www.google.com web server?
- Configure line vty ACLs to only allow LAN2 hosts to telnet to the Routers in the network.