Bi gii 2.1 ti cc router ISP v Branch - t a ch IP cho cc interfaces the IP ADD trong s (nhn hnh) - to domain site10.

.com trn DNS SERVER Vo DNS SERVER -> config -> DNS -> name : site10.com, address : 210.10.6.9, n nt add. Vo pc1, pc2 -> ch t ip DNS server : 210.10.6.9 - To trang web trn web server Vo WEB SERVER -> config -> HTTP -> sa Packet Tracer Cisco thnh WELCOME TO SITE10 - To ti khon FTP Vo WEB SERVER -> config -> FTP -> username : root, pass : 123456, check vo tt c cc dng di -> n nt + 2.2 ti router CT t tn router

Router(config)#host R_10 - Pass priviledge R_10(config)#enable pass password Lu : t cu pass console n cu t ng xung hng lm trong mode cng console - Pass console R_10(config)#line console 0

R_10(config-line)#login R_10(config-line)#pass console - Thi gian logout R_10(config-line)#exec-timeout 5 30 - T ng xung hng R_10(config-line)#logging sync - pass telnet : R_10(config)#line vty 0 4 R_10(config-line)#pass telnet R_10(config-line)#login - a ch cc interfaces nh s (nhn hnh) - cu hnh defaut route R_10(config)#ip route 0.0.0.0 0.0.0.0 210.10.5.10 - cu hnh NAT R_10(config)#accesslist 1 per 192.168.1.0 0.0.0.255 R_10(config)#ip nat inside source list 1 interface s0/2/0 overload R_10(config)#int f0/0 R_10(config-if)#ip nat inside R_10(config-if)#exit R_10(config)#int s0/2/0

R_10(config-if)#ip nat outside R_10(config-if)exit Lu : trc khi lm accesslist phi kim tra c truy cp web v ftp trn 2 pc ko Truy cp web bng cch vo web brower nh a ch web : site10.com Truy cp ftp bng cch vo mn hnh console (mn hnh dng ping) nh lnh : ftp 210.10.6.9 ->username : root -> pass :123456 - access list cm pc 1 truy cp web v cm pc 2 truy cp ftp R_10(config)#access list 100 deny tcp host 192.168.1.10 host 210.10.6.9 eq 80 R_10(config)#access list 100 deny tcp host 192.168.1.20 host 210.10.6.9 eq ftp R_10(config)#access list 100 per ip any any R_10(config)#int f0/0 R_10(config-if)#ip access-group 100 in Xong ri kim tra s thy pc 1 ko truy cp c web nhng truy cp c ftp cn pc 2 th ngc li.