Scribd Logo
Upload

Welcome to Scribd!

  • Chapter 5 Case Study

    Uploaded by

    Bart Van Lith
    17 views2 pages
    'Better safe than sorry' appears to be your motto in your enterprise network. You want to make certain that users on VLAN10 do not have access to hosts on VLANs 20 and 30. You will need to Create the necessary access lists on the distribution layer routers.

    Original Description:

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    'Better safe than sorry' appears to be your motto in your enterprise network. You want to make certain that users on VLAN10 do not have access to hosts on VLANs 20 and 30. You will need to Create the necessary access lists on the distribution layer routers.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    17 views2 pages

    Chapter 5 Case Study

    Uploaded by

    Bart Van Lith
    'Better safe than sorry' appears to be your motto in your enterprise network. You want to make certain that users on VLAN10 do not have access to hosts on VLANs 20 and 30. You will need to Create the necessary access lists on the distribution layer routers.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 2

    CCNADiscovery:DesigningandSupportingComputerNetworks Chapter5CaseStudy CreatingtheNetworkDesign IntroductionandScenario Yourenterprisenetworknowappearstobestable,andyouaresatisfiedwiththeVLANsetup.However, althoughtheVLANstructureitselfgivesacertainlevelofsecuritytothenetwork,youfeelthatextra securitywouldprobablybejustified.Bettersafethansorryappearstobeyourmotto!

    ThedefaultlevelsubnetinyourstructureisVLAN10,andyouwishtomakecertainthatusersonthis VLANdonothaveanyaccesstohostsonVLANs20or30.Inaddition,usersinVLAN30haveaccessto certainrestricteddocumentation,andyouwanttomakecertainthatthereisnoleakageofinformation tothepublicInternet.InternetaccessfromVLAN30hostsisnotrequired.However,itisessentialthat VLAN30hostshaveintranetaccess. Youarealsoconcernedaboutoutsideusersgettingaccesstotheinternalservers.Eventhoughyouusea privateaddressrangeinyourinternalnetwork,youwishtoincludefurtherrestrictionsonanyoutside hosttryingtomakeanHTTPconnectiontoyourinternalwebserver.


    2009 Cisco Learning Institute

    CCNADiscovery:DesigningandSupportingComputerNetworks Chapter5CaseStudy Tasks UsetheassociatedpacketTracerfileand: 1. CreatethenecessaryaccesslistsonthedistributionlayerrouterstorestrictIPtrafficbetween VLANs10,20and30.Totesttheaccesslists,youwillneedtomakesomechangestorouter configurations.UseTelnettoVLAN20orVLAN30portsontheinternalroutersfromVLAN10 hoststoensureIPtrafficisblocked.EnsurethatyouCANpingbetweenthehosts. 2. CreatethenecessaryaccessliststodenyVLAN30hostsaccesstotheexternalInternet. 3. CreatethenecessaryaccesslistontheGatewayroutertoensurethatHTTPsessionswith internalserverscanonlybeinitiatedfrominternaladdresses.TotestthenoexternalHTTP sessions,requirement,placeatemporaryPConportFA1/0oftheISProuter.Useanaddress of204.8.183.150forthePCand205.8.183.160fortherouterport.NamethePCExternalTest.

    2009 Cisco Learning Institute

    You might also like