www.howtonetwork.org

CCNA & CCNP Certifcation Training

  • About
  • Contact
  • FAQ
  • Join
  • Home
  • CCNA
    • ICND1
    • ICND2
    • 101 CCNA LABS
  • CCNP
    • ROUTE
    • SWITCH
    • TSHOOT
    • 101 CCNP LABS
  • CompTIA
    • Security+
    • Network+
  • Design
    • CCDA
    • CCDP
You are here: Home / 101 CCNA LABS / Cisco Router and Security Device Manager Solutions / Lab 87 Solution: Using Cisco SDM to configure and apply extended ACLs

Lab 87 Solution: Using Cisco SDM to configure and apply extended ACLs

Task 1:

For reference information on configuring hostnames, please refer to:

Lab 35 Configuration and Verification Task 1

Task 2:

For reference information on configuring and verifying VLANs, please refer to:

Lab 1 Configuration and Verification Task 3

Lab 2 Configuration and Verification Task 3

Task 3:

For reference information on configuring DCE clocking, please refer to:

Lab 21 Configuration and Verification Task 2

Lab 35 Configuration and Verification Task 2

For reference information on configuring Loopback interfaces, please refer to:

Lab 39 Configuration and Verification Task 4

Lab 43 Configuration and Verification Task 2

Task 4:

For reference information on using SDM to configure & verify interfaces, please refer to:

Lab 83 Configuration and Verification Task 4

Lab 83 Configuration and Verification Task 5

R2#ping 172.16.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms

R2#telnet 172.16.1.1

Trying 172.16.1.1 … Open

User Access Verification

Password:

SDM-1#

Task 5:

To complete this task you need to navigate to the router properties as follows:

1.  On the top menu click on Configure.

2.  Under Tasks, click on Additional Tasks.

3.  Next, click on ACL Editor and highlight Access Rules.

4. Click on the Add in the top right hand corner and enter the ACL name/number and description.

101solutions_fig27

5.  Next, add a meaningful description and click on Add to add a new entry. The first entry we will create will be to permit ICMP ping traffic, so select an action item of Permit from the Action drop-down menu.

101solutions_fig28

6.  Next, specify the source network of the ICMP pings, which will be 172.16.1.0/30. The destination will be any since we want to allow R2 to ping any interface on SDM-1. Don’t forget the wildcard mask.

101solutions_fig29

7.  Next, under the Protocol and Service section, click on the radio box that says ICMP. For ICMP type, click on the box next to any for a pop-up menu of the different ICMP types.

101solutions_fig30

8.  Select echo (8) and click OK. Repeat steps 6 and 7 and add echo-reply (0). Click OK when complete.

9.  Repeat the same steps to create a deny statement in the ACL for Telnet traffic.

101solutions_fig31

10.After you are done, click Associate on the next configuration screen to associate the ACL with an interface.

11.Select Serial0/0 in the Select an Interface screen and ensure that direction is inbound. Click OK.

12.Click OK again and the configuration will be sent to the router.

101solutions_fig32

Now, you can try and ping and Telnet from R2. Ping will work, but Telnet will not work as illustrated below. If Telnet is working or ICMP is not working for you, please check your configuration.

R2#ping 172.16.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms

R2#telnet 172.16.1.1

Trying 172.16.1.1 …

% Destination unreachable; gateway or host down

Lab 88 Configuration and Verification

Task 1:

For reference information on configuring hostnames, please refer to:

Lab 35 Configuration and Verification Task 1

Task 2:

For reference information on configuring and verifying VLANs, please refer to:

Lab 1 Configuration and Verification Task 3

Lab 2 Configuration and Verification Task 3

Task 3:

R1#conf t

Enter configuration commands, one per line.  End with CNTL/Z.

R1(config)#int fa0/0

R1(config-if)#ip address dhcp

R1(config-if)#end

R1#

Task 4:

For reference information on using SDM to configure & verify interfaces, please refer to:

Lab 83 Configuration and Verification Task 4

Lab 83 Configuration and Verification Task 5

Task 5:

To complete this task you need to navigate to the router properties as follows:

1. On the top menu click on Configure.

2. Under Tasks, click on Additional Tasks.

3. Next, click on DHCP  to expand the options and click on DHCP Pools.

4. Click on the Add in the top right hand corner and type in the relevant DHCP options.

101solutions_fig33 (1)

5. Click OK when complete.

6. The configuration is copied to the router. Click OK to confirm and complete the configuration.

Task 6:

R1#

*Mar  1 06:39:20.990: %DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0/0 assigned DHCP address 10.1.1.101, mask 255.255.255.0, hostname R1

R1#show dhcp server

DHCP server: ANY (255.255.255.255)

Leases:   1

Offers:   1      Requests: 1     Acks: 1     Naks: 0

Declines: 0      Releases: 0     Bad:  0

DNS0:   172.29.1.254,   DNS1:  192.168.1.254

NBNS0:  172.30.1.254,   NBNS1: 192.168.2.254

Subnet: 255.255.255.0   DNS Domain: howtonetwork.net

Prev

Next

About Us

This is a free bonus site for members of www.howtonetwork.com

Copyright

The content on this copyright Reality Press Ltd.
Copyright Reality Press Ltd.