Lab 11 Report

docx

School

Northern Kentucky University *

*We aren’t endorsed by this school

Course

247

Subject

Computer Science

Date

Feb 20, 2024

Type

docx

Pages

Uploaded by MagistrateRoseOwl35

[Student’s Name] [Lab Partner’s Name*] [Instructor’s Name] CIT 247 [Date of Submission] CIT 247 Lab 11: ACL Configuration Instructions: Please answer the questions below and include screenshots when requested. When you are finished, add your last name or NKU username to the beginning of this document’s filename. After this, upload this lab report to Canvas. Do not submit your GNS3 work for this lab. *If you worked with a lab partner, please add his or her name after yours and separate the names with a semicolon. If not, simply delete the partner’s placeholder text. Questions: Q1.1: What are the subnet IDs for the three subnets in this lab? What are the broadcast addresses of these networks? 1. Subnet 1:  Subnet ID: 192.168.1.0  Broadcast Address: 192.168.1.63 2. Subnet 2:  Subnet ID: 192.168.1.64  Broadcast Address: 192.168.1.127 3. Subnet 3:  Subnet ID: 192.168.1.128  Broadcast Address: 192.168.1.131 Q1.2: Provide a screenshot of the two ping tests from PC-1 succeeding.

Q2.1: Which router and interface did you configure the standard ACL? Please explain why you placed it here. (3 sentences required) The standard ACL was configured on Router 1 (R1) on the interface f0/0. This interface was chosen because it is the interface that connects to the network segment where PC-1 resides, which is the source of the traffic we want to control. By applying the ACL on this interface, we effectively block unwanted traffic from PC-1 at its point of origin, preventing it from traversing the rest of the network and consuming unnecessary bandwidth. Q2.2: Please list (or screenshot) the commands you used to configure the ACL and apply it to the appropriate interface. Standard ACL 1 (To Block Traffic from PC-1 to R2's Local Subnet) R1# configure terminal R1(config)# access-list 1 deny host 192.168.1.21 R1(config)# access-list 1 permit any R1(config)# interface f0/0 R1(config-if)# ip access-group 1 in R1(config-if)# end

R1# write memory Q2.3: What was the ICMP response type for the failed ping attempt (Hint: This will be a number and a message explaining the failure)? Type:3, code:13, Communication administratively prohibited Q2.4: Provide a screenshot of PC-1’s failed ping attempts. Q2.5: Please explain why this ping fails. (Hint: Consider how a ping involves an echo request and echo reply). The pings from PC-3 failed because the Access Control List (ACL) on the router was configured to block ICMP echo requests from PC-3's network to the destination PC-1, preventing the necessary echo reply needed for a successful ping. Q2.6: Which router and interface did you configure the extended ACL? Please explain why you placed it here. (3 sentences required) The extended ACL was configured on Router 1 (R1), specifically on the interface f0/0. This interface was selected because it is connected to the network segment of PC-2, which is the source of the traffic that we aim to restrict. By applying the ACL on this interface, we efficiently block the specified traffic (from PC-2 to PC-4) right at its source, preventing it from traversing any further in the network and thereby enhancing network performance and security. Q2.7: Please list (or screenshot) the commands you used to configure the ACL and apply it to the appropriate interface. Extended ACL 100 (To Block Traffic from PC-2 to PC-4) R1# configure terminal R1(config)# access-list 100 deny ip host 192.168.1.22 host 192.168.1.104

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

R1(config)# access-list 100 permit ip any any R1(config)# interface f0/0 R1(config-if)# ip access-group 100 in R1(config-if)# end R1# write memory Q2.8: What was the ICMP response type for the failed ping attempt? ICMP type:3, code:13, Communication administratively prohibited) Q2.9: Provide a screenshot of PC-2’s failed ping attempts. Q2.10: Which ACL type did you select? Please briefly explain your selection. I selected an Extended ACL because it allows filtering by both source and destination IP addresses, as well as by protocol type (ICMP for pinging). Q2.11: Which router and interface did you configure the extended ACL? Please explain why you placed it here. (3 sentences required) I configured the Extended ACL on R1's interface connected to PC-1's subnet, likely f0/1. This placement is strategic because it directly controls the traffic entering the network segment where PC-1 is located. By applying the ACL here, we can effectively filter the unwanted ICMP echo requests from PC-3 and PC-4 towards PC-1, ensuring that the ACL operates as close to the source of unwanted traffic as possible. Q2.12: Please list (or screenshot) the commands you used to configure the ACL and apply it to the appropriate interface.

Q2.13: What was the ICMP response type for the failed ping attempt? ICMP type:3, code:13, Communication administratively prohibited) Q2.14: Provide screenshot(s) of PC-3’s and PC-4’s failed ping attempts. Q2.15: Please list (or screenshot) the commands you used to configure the ACL and apply it to the appropriate interface (Hint: Your assigned readings and the lecture materials can help you form your ACL statement).

Q2.16: Provide a screenshot of PC-1’s failed ping attempts.

Your preview ends here

Eager to read complete document? Join bartleby learn and gain access to the full version

Access to all documents
Unlimited textbook solutions
24/7 expert homework help

Related Documents

Lab Report Example-1.pdf

CMIT 351 - Project 2.docx

ECE404_Spring24_HW05.pdf

cis110-final-grade-examples.xlsx

PatelBhavya1.docx

ASUOnline-MIC 206-Activity Tracker Spring 2024 - Tagged.pdf

PatelBhavya3.docx

Recommended textbooks for you

COMPREHENSIVE MICROSOFT OFFICE 365 EXCE

Computer Science

ISBN:9780357392676

Author:FREUND, Steven

Publisher:CENGAGE L

Np Ms Office 365/Excel 2016 I Ntermed

Computer Science

ISBN:9781337508841

Author:Carey

Publisher:Cengage

New Perspectives on HTML5, CSS3, and JavaScript

Computer Science

ISBN:9781305503922

Author:Patrick M. Carey

Publisher:Cengage Learning

Oracle 12c: SQL

Computer Science

ISBN:9781305251038

Author:Joan Casteel

Publisher:Cengage Learning

SEE MORE TEXTBOOKS

Recommended textbooks for you

COMPREHENSIVE MICROSOFT OFFICE 365 EXCE
Computer Science
ISBN:9780357392676
Author:FREUND, Steven
Publisher:CENGAGE L
Np Ms Office 365/Excel 2016 I Ntermed
Computer Science
ISBN:9781337508841
Author:Carey
Publisher:Cengage
New Perspectives on HTML5, CSS3, and JavaScript
Computer Science
ISBN:9781305503922
Author:Patrick M. Carey
Publisher:Cengage Learning
Oracle 12c: SQL
Computer Science
ISBN:9781305251038
Author:Joan Casteel
Publisher:Cengage Learning