SEC 450 short assignment regarding ACL commands on a router
omgitsdj
week_2_assignment.docxObjectives
In this assignment, the students will examine the following objectives.
· Create ACL to meet the requirements of the security demands
· Modify existing ACL to meet additional security requirements
Scenario
A small company is using the topology shown below. Minimal security measures have been implemented. Assume that the 200.100.0.0/16 network represents the Internet. The Dallas and Chicago Hosts need to be protected from specific types of malicious traffic from the Internet.
Topology
Initial Configuration
The Dallas and Chicago Routers’ FastEthernet and Serial interfaces used for the lab have been correctly configured and enabled. Unused interfaces have been shutdown. The RIP routing tables are complete for all routers and hosts. No ACLs have been applied to any of the routers. Below is the initial running-config file in Chicago router.
version 12.3(4)T7
!
hostname Chicago
!
interface FastEthernet0/0
ip address 192.168.200.1 255.255.255.0
!
interface FastEthernet0/1
ip address 192.168.20.1 255.255.255.0
shutdown
!
interface Serial0/0
ip address 200.100.20.2 255.255.255.0
!
interface Serial0/1
ip address 192.168.30.2 255.255.255.0
shutdown
!
router rip
network 192.168.200.0
network 200.100.20.0
!
ip default-network 200.100.20.0
ip route 0.0.0.0 0.0.0.0 serial0/0
!
!
line con 0
line aux 0
line vty 0 4
password cisco
line vty 5 15
password cisco
!
end
Apply the ACL to meet initial requirements
Your task as a network administrator is to configure an ACL in Chicago Router to meet the following requirements.
1. Permit ftp and http traffic from the Chicago host to the Dallas Server.
2. Deny all other TCP traffic from the Chicago host to the Dallas Server.
Permit all other traffic.
#2. Copy below Chicago router’s running-config file, and add the commands needed to create and apply the ACL in the router.
Apply the ACL to meet later requirements
1. Permit ftp traffic from the Chicago host to the Dallas Server.
2. Permit http traffic from any host in Chicago LAN to the Dallas Server.
3. Deny all other TCP traffic from the Chicago host to the Dallas Server.
4. Permit all other traffic.
#3. Write below the commands needed to modify the ACL in Chicago router.
