Network Security 1

Student Name _________________________________ Date _____________

SEC450 iLab2 Report

Initial Configuration Chicago Router

version 12.3(4)T7

!

hostname Chicago

!

interface FastEthernet0/0

ip address 192.168.200.1 255.255.255.0

!

interface FastEthernet0/1

ip address 192.168.20.1 255.255.255.0

shutdown

!

interface Serial0/0

ip address 200.100.20.2 255.255.255.0

!

interface Serial0/1

ip address 192.168.30.2 255.255.255.0

shutdown

!

router rip

network 192.168.200.0

network 200.100.20.0

!

ip default-network 200.100.20.0

ip route 0.0.0.0 0.0.0.0 serial0/0

!

!

line con 0

line aux 0

line vty 0 4

password cisco

line vty 5 15

password cisco

!

end

Note: RED text indicates the required answering questions

Task 1—Apply the ACL to meet initial requirements

#1. If you are applying an extended ACL to deny specific packets, where should you apply it? Explain your answer.

#2. If you are writing an ACL with multiples access-list commands, what order do you follow to write the commands?

#3. What port numbers do ftp and http servers use? Why does ftp server use two port numbers?

#4. In which interface and direction would you apply the ACL in Chicago router? Why?

#5. What is the hidden access-list command that exist in all ACL?

#6. Copy below Chicago router’s running-config file from page 2, and add the commands needed to create and apply the ACL in the router.

Task 2—Apply the ACL to meet later requirements

#7. Write below the commands needed to modify the ACL in Chicago router.

Save this document with all questions answered and upload it in Week 2 iLab Dropbox.

2

Revision Date: MAY14