ITNW 2312 Lab 5.1.1a Access Control List Written Practice_
docx
keyboard_arrow_up
School
Texas State Technical College, Waco *
*We aren’t endorsed by this school
Course
2312
Subject
Information Systems
Date
Dec 6, 2023
Type
docx
Pages
7
Uploaded by ColonelDogMaster649
Access Control List Written Practice
Introduction
An Access List is a list of conditions that categorize packets, and are helpful when
needing to control network traffic. Access Lists filter unwanted packets when
implementing security policies. Once the lists are built, then they can be applied to
either inbound, or outbound, traffic on any interface. Applying Access Lists causes the
router to analyze every packet crossing that interface in the specified direction and take
the appropriate action.
Objective(s)
In this lab the student will:
●
Complete writing out Standard IP Access Control Lists, Extended IP Access Control
Lists and Named Access Control Lists
Equipment/Supplies Needed
●
Computer with Internet connection
Assignment
Create and apply Standard IP Access Lists, Extended IP Access Lists and Named Access
Control Lists to permit/deny traffic.
Standard Access Lists
1.
Using the topology below, write a Standard IP ACL to deny Debbie’s computer from
receiving information from Michael’s computer. Permit all other traffic.
(May not
use all of the lines provided)
ITNW 2312 Lab 5.1.1a Access Control List Written Practice
1
Place the ACL at:
Router Name:____Router B_____
Interface:_____FA 1______
ACL Number:____5_____
Writing and Applying the ACL:
Router(config)#access-list 5 deny host 223.190.32.16, access-list 35 permit any
Router(config)#interface __Fa0/1______
Router(config-if)#ip access-group _
out
__ in or out (select one)
2.
Using the same topology as #1, write a Standard IP ACL to permit Debbie’s
computer to receive information from Michael’s computer; but deny all other traffic
from the 223.190.32.0 network.
Deny all traffic from the 172.16.0.0 network.
Permit all other traffic.
(May not use all of the lines provided)
Place the ACL at:
Router Name:___Router B___
Interface:_____Fa0/1______
ACL Number:_____6____
Writing and Applying the ACL:
ITNW 2312 Lab 5.1.1a Access Control List Written Practice
2
Router(config)#______access-list 6 permit 223.19.32.16
access-list 6 deny 223.19.32.0 0.0.0.255, access-list 6 deny 172.16.0.0
0.0.255.255, access-list 6 permit any
Router(config)#interface _Fa0/1
Router(config-if)#ip access-group
out /
in or out (select one)
Extended Access Lists
3.
Using the above topology, write an Extended IP ACL to deny Jay’s computer from
receiving information from Cindy’s computer.
Permit all other traffic. (May not use
all of the lines provided)
Place the ACL at:
Router Name:___Router A_____
Interface:_____FA0/0____
ACL Number:____102___
Writing and Applying the ACL:
Router(config)#__access-list 102 deny ip host 172.20.70.89 host 192.168.122.128
Router(config)#interface _FA0/0__
Router(config-if)#ip access-group 102
in
or out (select one)
4.
Using the same topology as #3, write an Extended IP ACL to deny the 172.20.70.0
255.255.255.0 network from receiving packets from Jackie’s computer at
192.168.122.129.
Permit all other traffic.
(May not use all of the lines provided)
ITNW 2312 Lab 5.1.1a Access Control List Written Practice
3
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
Place the ACL at:
Router Name:__Router B___
Interface:_____FA0/1_____
ACL Number:___103____
Writing and Applying the ACL:
Router(config)#___access-list 102 deny ip host 192.168.12.129 172.20.70.0.
0.0.0.255________
Router(config)#interface __FA0/1_
Router(config-if)#ip access-group
103
in
or out (select one)
5.
Using the above topology, write an Extended IP ACL to permit Denise’s computer
to use TFTP with Bob’s computer.
Deny all other traffic from the 192.168.33.0
network to the 192.30.76.0 network.
Permit all other traffic. (May not use all of the
lines provided)
Place the ACL at:
Router Name:_Router B
Interface:__E1
ACL Number:__104
Writing and Applying the ACL:
Router(config)#__access-list 104 permit tftp 192.168.33.214 host
192.30.76.155_____
Router(config)#interface __E1_____
ITNW 2312 Lab 5.1.1a Access Control List Written Practice
4
Router(config-if)#ip access-group 104
in
or out (select one)
6.
Using the same topology as #5, write an Extended IP ACL to deny ICMP traffic from
the 10.250.4.0 255.255.252.0 network to the 172.16.16.0 255.255.240.0 network.
Permit all other traffic.
(May not use all of the lines provided)
Place the ACL at:
Router Name:___Router A___
Interface:____E1____
ACL Number:___105___
Writing and Applying the ACL:
Router(config)#___access-list 105 deny icmp 10.250.4.0 0.0.3.255 172.16.16.0____
Router(config)#interface _E1____
Router(config-if)#ip access-group _105__
in
or out (select one)
Named Access Lists
7.
Using the above topology, write a Standard IP Named ACL named “Block_Net” to deny
the 10.250.8.0 255.255.255.0 network from reaching the 10.250.2.0
255.255.255.0 network.
Permit all other traffic.(May not use all of the lines provided)
Place the ACL at:
Router Name:___Router A_
Interface:_____E1____
ACL Number:__Block_Net
ITNW 2312 Lab 5.1.1a Access Control List Written Practice
5
Writing and Applying the ACL:
Router(config)#__ip access-list standard Bock_Net_____
Router(config-std-nacl)#_____deny 10.25.8.0 0.0.0.255, permit any
Router(config-std-nacl)#interface ___E1__
Router(config-if)#ip access-group ___Block_Net____ in or
out
(select one)
8.
Using the same topology as #7, write an Extended IP Named ACL named “Block_Pings”
to deny ICMP traffic from the 192.168.45.0 255.255.255.0 network from reaching the
10.250.2.0 255.255.254.0 network.
Permit all other traffic.
(May not use all of the lines
provided)
Place the ACL at:
Router Name:____RouterB__
Interface:_____ FA0/1
ACL Number:___Block_Pings
Writing and Applying the ACL:
Router(config)#_______ip access-list Block_Pings
Router(config-ext-nacl)#_____deny icmp host 10.250.2.0 0.0.1.255 host
192.168.45.0 0.0.0.255
_______
Router(config-ext-nacl)#interface FA1
Router(config-if)#ip access-group _
Block_Pings_ in
or out (select one)
Rubric
Checklist/Single Point Mastery
Concerns
Working Towards
Proficiency
Criteria
Standards for This
Competency
Accomplished
Evidence of Mastering Competency
ITNW 2312 Lab 5.1.1a Access Control List Written Practice
6
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
ITNW 2312 Lab 5.1.1a Access Control List Written Practice
7