$17$ Capstone Part $117\mathrm{.}1$ Load Lab Configuration a$)$ In NDG$,$ make and reservice Lab $17$: Capstone. $1.$ For the Capstone, you will not be using the NDG Contents Lab in NDG for the Capstone. These are your Capstone Lab Instructions for Part $1.2.$ Ensure you complete Part $1$ in a single NDG reservation. $($If you make a mistake or need to start over, you may. Just ensure that you retake all screenshots so that they all are from the same NDG reservation. $$ You are limited to three reservations for Capstone Part $1($minus one exception listed above$)$ b$)$ In the web interface, select Device $>$ Setup $>$ Operations. c$)$ Click Load named configuration snapshot. d$)$ Select edu$-210-$lab$-17$a$-$start.xml and click OK$.$ e$)$ Click Close. f$)$ Commit all changes. $17\mathrm{.}2$ Configure Networking Complete the following objectives: a$)$ Configure three firewall interfaces using the following values: $1.$ Ethernet $1/1$: $203\mathrm{.}0\mathrm{.}113\mathrm{.}20/24-$ Layer $32.$ Ethernet $1/2$: $192\mathrm{.}168\mathrm{.}1\mathrm{.}1/24-$ Layer $33.$ Ethernet $1/3$: $192\mathrm{.}168\mathrm{.}50\mathrm{.}1/24-$ Layer $3$ b$)$ Create a virtual router called VR$-1$ for all configured firewall interfaces. c$)$ Create a default route for the firewall called Default$-$Route d$)$ Create an Interface Management Profile called Allow$-$ping that allows ping e$)$ Assign the Allow$-$ping Interface Management Profile to ethernet$1/217\mathrm{.}3$ Configure Security Zones Complete the following objectives: a$)$ Create a Security Zone called Internet and assign ethernet$1/1$ to the zone. b$)$ Create a Security Zone called Users and assign ethernet$1/2$ to the zone. $1.$ Configure the Users Zone for User$-$ID c$)$ Create a Security Zone called Extranet and assign ethernet$1/3$ to the zone. d$)$ Create and assign Tags for each Security Zone using the following names and colors. a$.$ Extranet $$ orange b$.$ Internet $$ black c$.$ Users $$ green e$)$ Create the following Tags using the following names and colors. a$.$ Allow $$ Lime b$.$ Block $$ Red $17\mathrm{.}4$ Configure NAT Policies Create Source NAT rules to meet the following requirements: a$)$ Rule Name $=$ Users$\_$to$\_$Internet $1.$ From Source Zone Users to Destination Zone Internet $2.$ Use ethernet$1/1$ on the firewall as the source translation address. $3.$ Tag $=$ Users $4.$ Nat rule must include a helpful description b$)$ Rule Name $=$ Extranet$\_$to$\_$Internet $1.$ From Source Zone Extranet to Destination Zone Internet $2.$ Use ethernet$1/1$ on the firewall as the source translation address $3.$ Tag $=$ Extranet $4.$ NAT rule must include a helpful Description. $17\mathrm{.}5$ Modify Security Policy Rules a$)$ Modify the interzone$-$default security policy rule to ensure that traffic is logged at session end. b$)$ Assign the proper Tag to both default security policy rules Now that you have completed the basic configuration of the firewall, on the following pages, provide the correct screenshots proving you have completed the above tasks correctly. Your firewall configuration screenshots must show that the changes you have made are active on the firewall $($i$.$e$.$ links must show green, etc.$)$ otherwise they are not completed. $$ Initial Setup Part $1($From the NDG Menu Bar, click on the Client Tab drop down arrow and select Actual Size. Next, click Applications $($bottom left$)$ and go to Setting $>$ Display. Take a screenshot of the Display Window showing the Resolution is $1280$x$768.$ Ensure you have aligned your PC browser correctly so that your NDG username, the Time Remaining and Trash are aligned. Those with laptop displays less than $1080$p$,$ ensure you have adjusted your zoom properly$)$ Initial Setup Part $2$ Click on the Firewall tab and ENSURE that the firewall has completely loaded, prior to starting the Capstone. You are not providing the above screenshots This is to remind you of how your screenshots need to be set up and to ensure the firewall is ready, prior to beginning. $$ Screenshot $1-$ After completing the firewall setup, provide a screenshot of Network $>$ Interfaces $>$ Ethernet confirming you have completed some of the objectives of the Capstone. Ensure all necessary columns and modification changes you had to make are fully visible in the screenshot. $$ Screenshot $2-$ After completing the firewall setup, provide a screenshot of Network $>$ Zones confirming you have completed some of the objectives of the Capstone. Ensure all necessary columns and modification changes you had to make are fully visible in the screenshot. $$ Screenshot $3-$ After completing the firewall setup, provide a screenshot of Objects $>$ Tags page confirming you have completed some of the objectives of the Capstone. Ensure all necessary columns and modification changes you had to make are fully visible in the screenshot. $$ Screenshot $4-$ After completing the firewall setup, provide a screenshot of Policies $>$ NAT confirming you have completed some of the objectives of the Capstone to include $17\mathrm{.}4$a and b$.$ Ensure all necessary columns and modification changes you had to make are fully visible in the screenshot