Question: Configuring IP on all interfaces Device Interface IP Address Subnet Mask Description R1 S0/0/0 12.1.1.1 255.255.255.252 Link to R2 Fa0/0 192.168.10.1 255.255.255.0 Link to

Configuring IP on all interfaces

DeviceInterfaceIP AddressSubnet MaskDescription

 

R1

S0/0/012.1.1.1255.255.255.252Link to R2
Fa0/0192.168.10.1255.255.255.0Link to Server

 

R2

S0/0/012.1.1.2255.255.255.252Link to R1
S0/0/123.1.1.1255.255.255.252Link to R3

 

R3

S0/0/034.1.1.1255.255.255.252Link to R4
S0/0/123.1.1.2255.255.255.252Link to R2
Loopback 192.168.30.1255.255.255.0Loopback Address
R4S0/0/034.1.1.2255.255.255.252Link to R3
Fa0/0192.168.20.1255.255.255.0Link to SW1
PC1F0192.168.10.2255.255.255.0 
PC2F0192.168.20.2255.255.255.0 

 

Objectives

  • Verify connectivity among devices before firewall configuration. 
  • Use ACLs to ensure remote access to the routers is available only from management station PC2.
  • Configure ACLs on R1 and R4 to mitigate attacks.
  • Verify ACL functionality. 

Introduction

Access to routers R1, R2, R3 and R4 should only be permitted from PC2, the management station. PC2 is also used for connectivity testing to PC1-SERVER, a server providing DNS, SMTP, FTP, and HTTPS services. 

Standard operating procedure is to apply ACLs on edge routers to mitigate common threats based on source and/or destination IP address. In this activity, you create ACLs on edge routers R1 and R4 to achieve this goal. You then verify ACL functionality from internal and external hosts.

The routers have been pre-configured with the following:

  • Enable password: ciscoenable
  • Password for console: ciscoconsole
  • Username for VTY lines: ssh
  • Password for VTY lines: passssh
  • IP addressing
  • RIP routing
  1. Verify Basic Network Connectivity - 20points

Verify network connectivity prior to configuring the IP ACLs.

 

Step1. From the PC2 command prompt, ping the PC1-SERVER server. 

Step2. From the PC2 command prompt, SSH to the router R3 Lo0 interface. Exit the SSH session.

Step 3. From PC2, open a web browser to the PC1-SERVER server (using the IP address : 192.168.10.2) to display the web page. Close the browser on PC2. 

Step 4. From the PC1-SERVER server command prompt, ping PC2.

 

Question: Need help with command steps from 1 to 4.


Topology: 192.168.10.0/24 Server-PT PC1-Server IP Address Table 2811 R1 2811 R3 12.1.1.0/30

Topology: 192.168.10.0/24 Server-PT PC1-Server IP Address Table 2811 R1 2811 R3 12.1.1.0/30 23.1.1.0/30 34.1.1.0/30 2811 R2 2811 RE 192.168.20.0/24 2960 24TT SW1 PC-PT PC2

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Computer Network Questions!