www.howtonetwork.org

CCNA & CCNP Certifcation Training

  • About
  • Contact
  • FAQ
  • Join
  • Home
  • CCNA
    • ICND1
    • ICND2
    • 101 CCNA LABS
  • CCNP
    • ROUTE
    • SWITCH
    • TSHOOT
    • 101 CCNP LABS
  • CompTIA
    • Security+
    • Network+
  • Design
    • CCDA
    • CCDP
You are here: Home / 101 CCNA LABS / Access Control Lists Solutions / Lab 62 Solution: Restricting Outbound Telnet Access using Extended ACLs

Lab 62 Solution: Restricting Outbound Telnet Access using Extended ACLs

Task 1:

Router#config t

Enter configuration commands, one per line.  End with CNTL/Z.

Router(config)#hostname R1

R1(config)#

Router#config t

Enter configuration commands, one per line.  End with CNTL/Z.

Router(config)#hostname R3

R3(config)#

Task 2:

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#int s0/0

R1(config-if)#no shutdown

R1(config-if)#clock rate 2000000

R1(config-if)#ip add 172.16.1.1 255.255.255.192

R1(config-if)#end

R1#

R3#config term

Enter configuration commands, one per line.  End with CNTL/Z.

R3(config)#int s0/0

R3(config-if)#ip address 172.16.1.2 255.255.255.192

R3(config-if)#no shut

R3(config-if)#end

R3#

R1#ping 172.16.1.2

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.2, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms

R1#

R3#ping 172.16.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms

R3#

Task 3:

R1#config t

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#ip route 0.0.0.0 0.0.0.0 serial0/0 172.16.1.2

R1(config)#line vty 0 4

R1(config-line)#password CISCO

R1(config-line)#login

R1(config-line)#end

R1#

R3#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R3(config)#int loo 10

R3(config-if)#ip address 10.10.10.3 255.255.255.128

R3(config-if)#exit

R3(config)#int loo 20

R3(config-if)#ip address 10.20.20.3 255.255.255.240

R3(config-if)#exit

R3(config)#int loo 30

R3(config-if)#ip address 10.30.30.3 255.255.255.248

R3(config-if)#exit

R3(config)#line vty 0 4

R3(config-line)#password CISCO

R3(config-line)#login

R3(config-line)#end

R3#

Task 4:

R1>telnet 10.10.10.3

Trying 10.10.10.3 … Open

User Access Verification

Password:

R3#

R1>telnet 10.20.20.3

Trying 10.20.20.3 … Open

User Access Verification

Password:

R3#

R1>telnet 10.30.30.3

Trying 10.30.30.3 … Open

User Access Verification

Password:

R3#

Task 5:

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#ip access-list extended TELNET-OUT

R1(config-ext-nacl)#remark ‘Deny Traffic To 10.10.10.0/25’

R1(config-ext-nacl)#deny ip any 10.10.10.0 0.0.0.127

R1(config-ext-nacl)#remark ‘Permit Traffic To 10.20.20.0/28’

R1(config-ext-nacl)#permit ip any 10.20.20.0 0.0.0.15

R1(config-ext-nacl)#remark ‘Deny Traffic To 10.30.30.0/29’

R1(config-ext-nacl)#deny ip any 10.30.30.0 0.0.0.7

R1(config-ext-nacl)#exit

R1(config)#line vty 0 4

R1(config-line)#access-class TELNET-OUT out

R1(config-line)#end

R1#

Task 6:

For reference information on completing Task 6, please use the telnet command from R1

Prev

Next

About Us

This is a free bonus site for members of www.howtonetwork.com

Copyright

The content on this copyright Reality Press Ltd.
Copyright Reality Press Ltd.