Procedural Lab Template, Student Version, Required Components

CCNA ExplorationAccessing the WAN: Skills Based AssessmentStudent Skills based Assessment LabR2(config)#no cdp runTask 7: Configure Access Control ListsStep 1: Allow telnet to R1 and R3 from R2 only.Step 2: Do not allow HTTP, Telnet, and FTP traffic from the Internet to PC1.Step 3: Do not allow PC1 to receive traffic from the 10.0.0.128 /25 network.Step 4: Verify that PC3 cannot ping PC1, but can ping 10.0.0.1.R1:R1#configure terminalR1(config)#access-list 101 permit tcp host 172.16.0.2 any eq 23R1(config)#access-list 101 permit tcp host 172.16.0.5 any eq 23R1(config)#access-list 101 deny tcp any any eq 23R1(config)#access-list 101 permit ip any anyR1(config)#line vty 0 4R1(config-line)#access-class 101 inR1(config-line)#endR1#show ip access-listsR2:R2#configure terminalR2(config)#access-list 102 deny tcp any host 10.0.0.10 eq 80R2(config)#access-list 102 deny tcp any host 10.0.0.10 eq 23R2(config)#access-list 102 deny tcp any host 10.0.0.10 eq 21R2(config)#access-list 102 deny tcp any host 10.0.0.10 eq 20R2(config)#access-list 102 permit ip any anyR2(config)#interface Loopback0R2(config-if)#ip access-group 102 inR2(config-if)#endR2#show ip access-listsR3:R3#configure terminalR3(config)#access-list 101 permit tcp host 172.16.0.2 any eq 23R3(config)#access-list 101 permit tcp host 172.16.0.5 any eq 23R3(config)#access-list 101 deny tcp any any eq 23R3(config)#access-list 101 permit ip any anyR3(config)#line vty 0 4R3(config-line)#access-class 101 inR3(config-line)#endR3(config)#access-list 103 deny ip 10.0.0.128 0.0.0.127 host 10.0.0.10R3(config)#access-list 103 permit ip any anyAll contents are Copyright © 1992–2007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 8 of 9