ACL Question ?
Fire Starter
Member Posts: 14 ■□□□□□□□□□
in CCNP
Info is:
Location: Anniston
version: 1st Subnet
WAN IP: 192.168.1.0/24
subnet mask: 255.255.255.0
Local LAN ip address 195.30.30.0
Subnets required 14 host addressses
Use 1st subnet for the LAN. do not use subnet zero as the first subnet
igrp number is: 1
scenario........
There are several security concerns in the internetwork. Develop a Access Control LIsts (ACLs) to address security issues. the following are the concerns:
1. The company has an intranet web server host that all systems can reach at ip address 172.16.0.1 with only http access. no other protocols will be permitted to this site.
2. The company also has a server pool in the 209.0.0./24 network. The server pool addresses are divided in half. The servers in the upper half of the address range are reachable only by management host using all possible IP protocols. The servers in the upper half of the address range are not reachable by production hosts using all IP protocols. The server should not be accessible by any other hosts.
3. The company has discovered an Internet Web server at 198.0.0.1 that is known to contain viruses. All hosts are to be banned from reaching this site.
4. The web browser on both hosts can bring up login of ip address 62.0.0.1
These security requirements should be accomplished with a single access list. PLan the access list required to accomplish these tasks, to which interface this will be applied, and the direction the list will be applied.
What would be the ACL plan ?
Location: Anniston
version: 1st Subnet
WAN IP: 192.168.1.0/24
subnet mask: 255.255.255.0
Local LAN ip address 195.30.30.0
Subnets required 14 host addressses
Use 1st subnet for the LAN. do not use subnet zero as the first subnet
igrp number is: 1
scenario........
There are several security concerns in the internetwork. Develop a Access Control LIsts (ACLs) to address security issues. the following are the concerns:
1. The company has an intranet web server host that all systems can reach at ip address 172.16.0.1 with only http access. no other protocols will be permitted to this site.
2. The company also has a server pool in the 209.0.0./24 network. The server pool addresses are divided in half. The servers in the upper half of the address range are reachable only by management host using all possible IP protocols. The servers in the upper half of the address range are not reachable by production hosts using all IP protocols. The server should not be accessible by any other hosts.
3. The company has discovered an Internet Web server at 198.0.0.1 that is known to contain viruses. All hosts are to be banned from reaching this site.
4. The web browser on both hosts can bring up login of ip address 62.0.0.1
These security requirements should be accomplished with a single access list. PLan the access list required to accomplish these tasks, to which interface this will be applied, and the direction the list will be applied.
What would be the ACL plan ?
Comments
-
Drakonblayde
Member Posts: 542
How about you tell us, and then we can dissect whether you're right or wrong?
= Marcus Drakonblayde
================
CCNP-O-Meter:
=[0%]==[25%]==[50%]==[75%]==[100%]
==[X]===[X]====[ ]=====[ ]====[ ]==
=CCNA==BSCI==BCMSN==BCRAN==CIT=