Week 11 Lab 11 1 - JadenGil/Jaden-Tech-Journal GitHub Wiki

Making it so 192.168.11.0 IP's Cannot Ping PC5:

Commands used:

R3# configure terminal
R3(config)# ip access-list standard STND-1
R3(config-std-nacl)# deny 192.168.11.0 0.0.0.255
R3(config-std-nacl)# permit any
R3(config)# interface Serial0/0/0
R3(config-if)# ip access-group STND-1 in
R3(config-if)# end
R3# write memory

PC3 Blocked Ping:

image

PC4 Blocked Ping:

image


R2 ACL Setup:

Commands Used:

R2# configure terminal
R2(config)# ip access-list extended EXTEND-1
R2(config-ext-nacl)# deny ip 192.168.10.0 0.0.0.255 host 200.200.200.1
R2(config-ext-nacl)# permit ip any any
R2(config)# interface Serial0/0/0
R2(config-if)# ip access-group EXTEND-1 out
R2(config-if)# end
R2# write memory

This configuration will keep any traffic from the 192.168.10.0/24 network from reaching the 200.200.200.1 host while allowing all other outbound traffic on the Serial 0/0/0 interface of Router 2.

PC1 Failed Ping to 200.200.200.1 and Successful Ping to 192.168.30.10:

image


VTY Exercise:

Commands Used:

R1# configure terminal
R1(config)# ip access-list standard STND-2
R1(config-ext-nacl)# permit 10.2.2.0 0.0.0.3
R1(config-ext-nacl)# permit 192.168.30.0 0.0.0.255
R1(config-ext-nacl)# deny any
R1(config-std-nacl)# exit
R1(config)# line vty 0 4
R1(config-line)# access-class STND-2 in
R1(config-line)# end
R1# write memory

Failed Telnet from R2 after implementation:

image

Successful Telnet from R3 after implementation:

image


Reflection:

Overall this lab wasn't too hard to grasp. It was mostly a lot of small troubleshooting issues due to me either misreading/misunderstanding the commands in the documentation I was referencing but it didn't take very long to get done and I don't have much to note other than that.