In this lab you will setup a basic firewall infrastructure.

The "external" web server should be accessible from the outside $($via its IP address$).$

All "users" and device on the inside $10\mathrm{.}1\mathrm{.}1\mathrm{.}0/24$ network should have web access to any IP and DNS resolution to $8\mathrm{.}8\mathrm{.}8\mathrm{.}8$

You can "browse" the web by enabling HTTP service on $8\mathrm{.}8\mathrm{.}8\mathrm{.}8$ router and to test "web access" from a router, perform the following $($capture the screen long$)$:

Telnet $8\mathrm{.}8\mathrm{.}8\mathrm{.}880$

GET$/$ HTTP$/1\mathrm{.}1$

The external web server should have IP address $10\mathrm{.}1\mathrm{.}1\mathrm{.}10$ and be NATed to $100\mathrm{.}1\mathrm{.}1\mathrm{.}11.$

All devices $($except web $1)$ should be PATed on the outside $100\mathrm{.}1\mathrm{.}1\mathrm{.}99($or physical interface IP address if you prefer$)-$ to test, you may change the IP address of R$1$ to $10\mathrm{.}1\mathrm{.}1\mathrm{.}44($or anything other than $\mathrm{.}10$ or $\mathrm{.}1)$

On the FW#$1,$ enable ping debugging and logging of all output $($and include in your submissions!$)$ via:

$-$conf t

$-$logging con $7$

$-$ logging con $50000$

$-$ Exit to #

$-$ Debug icmp trace

your enivronment should include the following:

A$.$ Router $1/$Server$-1(10\mathrm{.}1\mathrm{.}1\mathrm{.}10)$ can ping $8\mathrm{.}8\mathrm{.}8\mathrm{.}8$

B$.$ Router$1/$Server$-1(10\mathrm{.}1\mathrm{.}1\mathrm{.}10)$ can "browse" $8\mathrm{.}8\mathrm{.}8\mathrm{.}8$

C$.$ Router $8/$The internet can ping $100\mathrm{.}1\mathrm{.}1\mathrm{.}11$

D$.$ Router $8/$The internet can "browse" $100\mathrm{.}1\mathrm{.}1\mathrm{.}11$

E$.$ All the users in $10\mathrm{.}1\mathrm{.}1\mathrm{.}0$ can "browse" the internet $-$test by changing R$1$ ip addr

F$.$ Your access lists must be correct and minimize any unneccessary access