Lab Objective:
This is a challenge lab designed to test and validate the skills you have acquired throughout this lab guide on subnetting, static routing and ACLs.
Lab Purpose:
The purpose of this lab is to reinforce route summarization, static routing and ACLs.
Certification Level:
This lab is suitable for CCNA certification exam preparation
Lab Difficulty:
This lab has a difficulty rating of 10/10
Readiness Assessment:
When you are ready for your certification exam, you should complete this lab in no more than 20 minutes
Lab Topology:
Please use the following topology to complete this lab.
Task 1:
Configure the hostname on R1 and R3 devices as illustrated in the network topology.
Task 2:
Configure the Loopback interfaces on R3 as illustrated in the network topology.
Task 3:
Configure a SINGLE static route on R1 for the three 10.x.x.x subnets on R3. Do NOT use a default route. This route should be as specific as possible. Do NOT use 10.0.0.0/16 as the static route.
Task 4:
Configure the Loopbacks on R1 as follows:
- For Loopback10, replace x with a subnet mask that can support 59 hosts
- For Loopback20, replace y with a subnet mask that can support 22 hosts
- For Loopback30, replace z with a subnet mask that can support 5 hosts
Task 5:
Configure a SINGLE static route on R3 for the three 192.168.x.x subnets on R1. Do NOT use a default route. This route should be as specific as possible. Do NOT use 192.168.0.0/16 as the static route.
Task 6:
Configure a named ACL on R1 that does the following:
- Permits Telnet traffic from 10.1.1.0/24 to 192.168.1.0/x
- Permits Ping traffic from 10.2.2.0/25 to 192.168.2.0/y
- Permits HTTP traffic from 10.3.3.0/29 to 192.168.3.0/z
- Permits RIPv2 traffic from host 172.16.1.2 to host 172.16.1.1
- Denies Traceroute traffic from the 10.x.x.x subnets to the 192.168.x.x subnets (using a single line!)
- Denies DNS traffic from 10.3.3.0/29 to 172.16.1.0/30
- Permits IP traffic from the any source to any destination – which must be LOGGED!
Apply this ACL inbound on R1 S0/0.
Task 7:
Configure a named ACL on R3 that does the following:
- Denies EIGRP traffic from 172.16.1.0/30 to any destination
- Denies OSPF traffic from 172.16.1.0/30 to any destination
- Permits FTP traffic from 10.1.1.0/24 and 10.3.3.0/29 to host 192.168.2.1/y
- Denies HTTPS traffic from any source to 192.168.3.0/z
- Permit IP traffic from any source to any destination – which must be LOGGED!
Apply this ACL outbound on R3 S0/0.