Cisco DRSEnt OSPF/ACL PT Practice SBA

Ahoj. Hledám někoho kdo se orientuje v počítačových sítích. Potřeboval bych pomoci s ACL.

Tady je schéma:

Ještě IP adresy:

Main
Fa0/0
10.10.10.193
255.255.255.224
n/a
S0/0/0
10.10.10.249
255.255.255.252
n/a
S0/1/0
10.10.10.253
255.255.255.252
n/a
S0/0/1
198.133.219.18
255.255.255.252
n/a
Lo0
192.168.1.3
255.255.255.255
n/a
Admin
Fa0/0
10.10.10.129
255.255.255.192
n/a
Fa0/1
10.10.10.225
255.255.255.240
n/a
S0/0/0
10.10.10.250
255.255.255.252
n/a
Lo0
192.168.1.1
255.255.255.255
n/a
BldgA
Fa0/0
10.10.10.1
255.255.255.128
n/a
Fa0/1

n/a
S0/0/0
10.10.10.253
255.255.255.252
n/a
Lo0
192.168.1.2
255.255.255.255
n/a
Teacher
NIC
10.10.10.4
255.255.255.128
10.10.10.1
Student
NIC
10.10.10.5
255.255.255.128
10.10.10.1
Staff
NIC

XYZ Uni Server
NIC
10.10.10.200
192.31.7.53
255.255.255.224
10.10.10.193

A já potřebuji vyřešit tenhle úkol:

Step 3: Configure Access Control Lists.
a. Filter inbound traffic from the Internet. Configure and apply a single ACL numbered 150 on the correct router that will implement the following policy in order:

· Allow only HTTP access to the XYZ Uni Server at its public address 192.31.7.53.

· Allow all established TCP connections.

· Allow all ICMP replies and unreachable messages.

b. Verify that the policy is successfully implemented.
c. Filter traffic from the BldgA LAN. Configure and apply on the router a single ACL numbered 175 that will limit network traffic and will implement the following policy:

· Hosts from the LAN connected to the Fa0/0 interface of BldgA are blocked from accessing hosts on the Admin Staff LAN.

· All other traffic is allowed anywhere.

d. Verify that the policy is successfully implemented.

Pokud by mi někdo mohl pomoci, byl bych moc vděčný :) Pokud byste mohli zkontrolovat, případně udělat celý test, odměnil bych se třeba 100,- na účet :)