anus ‘CCNA Training » CCNA Accoss List Sim2 Ham > CCNA Access List Sin2 CCNA Access List Sim 2 February 15h, 2012 Go to commis Question ‘A xtwork assoc adding security to the cofguaton of be Corp router. Te ser omos C shoul be able to use a webbrowser‘ access ancl fomton fom the Finance Web Server Noor hse forthe LAN nor the Cove sul be abi 0 ea we browse to acess ths server Sine dee ae mpl esonces for de corporaon at ‘tis locus ching other resouces onthe Faance Wel Sever alot taf sol be alowed ‘The ask to create al appa mnbered access wi so me dade statements tat wil aw ONLY last C web acess othe Faunce Web Server. No ot hosts wi uve web access othe Finnce Web Server Alter tras permits Accesso te rower CLI ean be gated by eck on the appropri bait Allpaswords have bees emporariy sett "co" “Tae Core cormecton es an TP address oF 198. 18.196 55. “Tae computers inthe Hosts LAN have been assed adresses of192.168.33.1 ~192.168.38.254| Hos A 192-1563. Hos B 192168.332 Hos € 192.168333, Hos D 192.168334 “The servers he Server LAN hve heen assigned adresses of 172.22.282.17 = 172.22242.30 ‘Tae Fee Web Serer assigod an IP adress of 172.22 242.23, ‘The Public Web Server ase an Paes of 172.22.242.17, Fra owssewe «RAE Answer and Expaaton| (Note: youre not sure how to we uces-t, please check ou my acest oral at inva J comlaces- st. goclalbo some modifications about he acest Jaye hoot porte 9 you shoul read th “Some modieations secon athe ed of his queston understand rane. You anak downlad ths Sento pace (open wih Packet Tracer ee: ax comidouminadut cont Acsessls, sin pt ‘Complembl (yu may ener “cheat pasword Here) We should rate an access-lst and apply ito the iertice which scomectedt the Server LAN because ican er ou talc fom bot Sw-2 an Cote networks. The Sener LAN network hs been sind adresses of 12.22.2427 ~ 17222-24090 we can ges he erie connected to thr an Paes of 172.22242,30 (30 te ‘nue shown athe fae), Use the "show runing cone" command to chock wich ierice ashe IP addres of 172 22.242 30. Compson aeing-contg wn Su conv78-cena-access-list-sim-2imore-ét 6anus (CCNA Training » CCNA Accoss List Sim2 ‘Coralie ronning cong output omired> ‘We kam tat verte Faster the ierfcecomcted a Server LAN netwon. Ihe terice we wil apply our acces fr oubound dkctn, ‘Comp deonfgne terminal ‘Ow scces-t nods to albw host C— 192,168.33. othe Fiance Web Server 172.22.242.28 va web (por 80) ‘Comp confiaces- et 100 pert tp hos 192,168.38 3 host 172.22.24.28 eq 80 Deny oder ss ces tthe Fhance Web Server va web Comp (confeacces-st 100 deny ep any host 172.22.242.23 eg 80 Aller wats penta ‘Compl contacoses-et 100 peitip any any Apply access sto Fall inerfce(oubour deton) Corp (contre 01 Col conipiip sees op 100 on. "Nose: Weave wo apply the access to Fa tere (nt F200 ierice so that he access Kt can Ber wa coming omboth the LAN andthe Core networks. we apply access to he hound mefice we ean any er tal or the LAN net, Inthe real exam just cS ou host C and open is we Inova. Ins adtess box spe hps72.22.242 23 w ehack fyouate alowed access Faance Web Server or mt. IF yn confgsttn seme then yu ean asc (Clik on ote oss (A, Band) and check to make ste youcut access Faunce Web Server for hse oss nly, save he conirtion Compl(conteiiend ‘Comp ¥eopy using cont sarc (Thi congeaton ony prevents hss om aceossg Faunce Web Server va web hu itis server supports oer walie- Ike FTP, SMTP... den oe sts an acest, 0) "Novice: ne real exam, you might be asked to alow ot os (A,B or) to acess the Face Web Servers plese read the requremen cael Some moet: [ear bor bFomaccnts Gancescaer [iecae 00 em pow a Som TES Re mB formas or ers (1 WE nace 10 dey pe 1B 1GR32 172222 1S00 03 emt varie ce peor ay ay [ony alow Hos tow acces te Baril seer econ t 100 pep wt 192,168,333 st 1722220223] [rato anyone ce many way communicate wi de Huns evr sees 100 deny any ost 172.22 242.23 ] [Bowater wai [psp yay ] Tost sul be ab to usa web browser TTP Yo access be lrtmnce Web Serer access 100 pert op ost 192.168.33.3 hast 172.22 242.23 eg 80 ‘Ober pes ofacees Forint te France Web Serer elt he ocked ‘Allacess fom boss nthe Core o cal LAN to the Fence Web sere shoul be backed access 100 deny panytost 172.22 242.28, ocaue the equtement sys we cn ot seme thin 3 saenert 0 we have ous “uy hee forthe nets ith Cor arose cal LAN) [seer 100 parma pay bos Abst fhe Core an cal LAN shod beable w aecess he [Ofte questo aks ths, uy thas to ge youte IP of Publis Web Seri but the exam you sould utc Wed Sener tse acess 100 perp ny an)”anus ‘CCNA Training » CCNA Accoss List Sim 2 tos suk he bie to wea webbrowser in acess the ania eb locces- Bt 100 perm ip host 192,168.33 host 172.22.262.23 99 80 [ter ypes of acces omfos Cf te Bucs wah serer sod Be bcd lescest-s 100 deny hoe 192,168,333 ost 172.22.242.23, [moos br 10 pa pata (he IP of Pus Web Server wisely be given ahs queso) but inthe exam you shoul se tees 100 pera anya” [xthossm the core and onthe lac LAN should be able to acess the Pubic web sener® + There are sme reports shou the command of “A hosts the cre and onthe eal LAN shouldbe able o access the Pale web server” saying th the comet command sould be “sent 100 pert any any’ ot acces 100 pent ary ost (IP of Pable Web Serve". Akg bev he secon command sheer bal maybe ot shoud ete at commana “aces- st 100 peat any any" astcad as soe reports sail they got 100% wh sky his cna (ven equi ges you te Pads of Publ Web Serve. Iisa bugs sim (Now: Don't aply hi access st to the suiable eerie oF you wil ose pois Interface fx in accest-group 100 out And inshe exam they may sgl change te requemens, x eample host A, host Binstead ofhostC.. so make sare you ead he regret carey ani se the acest eoreth) {crstd ths m Packet Taser 5.2.1 40 youcan rai wit. You wilaed new vnon of Packet Trace to open # (5.14), Downline "Nose: Afr ping the conmanis above, you make pity” Eom other hosts (PCO, PCI, PCS) hen PCA (Funes Web Serves can sep because we js her HTTP ‘efi, nt ICMP te. To generate HTTP tat, select "Web Browse inthe "Desktop" ab ofthese PC's. When a web browse opens, pete IP address of France Web Server and youcansce how tas fbws x Stan Mode And noc hat inthe rial conguation of iss tbe Core network can png Face Web Serve. We have crest an atcess-st ht can Ser th tai too Otte sins oni se:anus ‘CCNA Training » CCNA Accoss List Sim2 (CONANATSIM Question? (COA Frame Rei Sim ‘CONA Contguaton SIM Questia (IP? SIM) CONA vi sim (CONS HIGRP LAB (CONA Dagan Don SIM (CONS Inpemenstin SIM commen Commer pages Piss 28267741 1, aware ‘Avast 24h, 2013 spoatste ihe upbaded ael2 kb lak ‘nisin come 799807727 oD Marisy ‘August 260, 2013, Wyn png server connection eset when tying access server fom PC web browse? Please heb, 3. OXYZEN gst 27,2013, Pease lp ms seu day Ihave a exam oul pas tems what an al tech] qoson wil come..@ whch ce? spke 670 o 662 o sear or Stat? 4, ser ‘August 270, 2013, tks pat Sain ‘Avs 2812013, ‘Any techn Japa her? The a in Jpan, Duration 6 ma, tokyo or gow, CCNA, CCDA, CCNP, CCNP wit oe Realy urge! Tank you, ‘binc@sahoo com 6. Arorynous ‘August 2%, 2013, CCaneybody help me bout i? ‘nip com Tcenseusnselscie 2! CCompticonipinertce 80 Corp coat access-soup 100 ot ity th soul apply on elie fi so ow wy is dae? ishoug was 0 adn ‘ris because is ecended coos Ks an shoul be put pares souce (he LAN side) and why tot, rot nbourd, x because that his ACL applet the fice tat fice out (engthe ou ote destin)? ‘Can someone Kady enough time the ue aout where to apply and he Bou? [vere some ares an books and wate some aeos (CBT Naas, Lane) an ted to browse som: expntin bist ery confine Pase please help me Uhave dhe exam very 000} tak you 1 Samer ‘Augst 21,2013, plated ACL sin ‘nipsbag some. nO Secs ascess conn acim and wn Su conv78-cena-access-list-sim-2imore-étanus ‘CCNA Training » CCNA Accoss List Sim2 8. Anonymous ‘August 2915, 2013, doa test dip om Oeut.weebly.com 1. No wackbacs yet |Add Comment (Setmi.conment) abso to comments fed SS seca o Premium Membership Become a member interact witha questions and read a ori, bs! indo mass oF Sen CCNA 640-802 t CoN Bai< * coNa=camlosd + (CCNA Cio 10S Questions 3 + CONA=TCPIP Model & Operation + CCNA Show Command Questions * CONA= Procol & Series + CCNA Access Lit Ones + CONA Access Lit Qussins 2 + CONA=WAN + CCNA=WAN2 + COAT IP Adress Oustins + CCNA IP Roun Questions coal onn faaeroses DCP Gn ato us at fatieeimes ae ee wn Su conv78-cona-access-list-sim-2imore-steons CCONA Tang» CONA Accs Lit Sz ree ey 2 [aoe Searey + Gena Toshi a ‘New CCNA 200-120 + Shue wor (new) CCNA Experes CCNA Self-Study + Paste CONA GNSS Labs Network Resources + Bice Rous Simone + jeyputenm west + CONP. ROUTE Websie + CONP= swiTcH Webete + CONP.TSHOOT Websie + CONA Voice Webste + CONA Warkss Webste + CONA Seay Wes + CODA Webs + CoP wehsie + CCU Ween Webste Suppor tt or ‘You contrat wllbelp keep hs ste update ‘Copyrgt © 2010-2013 CCNA Trine Sig shay Poe, Vall XHIML 1.1 ard CSS 3.0 wn Su conv78-cena-access-list-sim-2imore-ét