Project 10-3: Configure ACLs in Packet Tracer In this project, you will create a new network in Packet Tracer, configure an ACL on the router, and then test the connections between devices. Complete the following steps: 1. Create Packet Tracer network with one 1941 router, two 2960 switches, and four PCs, and create the needed connections with Copper Straight-Through cables, as shown in Figure 10-33. Connect the switches to the router using GigabitEthernet connections. Figure 10-33 Add these devices to your network Source: Cisco Systems, Inc. 2. The links between PCs and switches should come up automatically. On the router's Config tab, configure each GigabitEthernet interface as follows: a. Turn the port on. b. Assign a Class C IP address with a /24 subnet mask. Make sure these ports are on different subnets. 3. On each PC, configure an IP address, subnet mask, and default gateway within the appropriate subnet for the router interface it's connected to. For example, if you used 192.168.2.1/24 for Gi0/0 on the router, you could use 192.168.2.10/24 with a default gateway of 192.168.2.1 for one of the PCs on that subnet. As you go, place a note on address assignments in your diagram. 4. Make sure each of the PCs can successfully ping each of the other PCs. Place a screen shot of your completed network so far in Packet Tracer Screen here: 5. On the router's CLI tab, if your configuration access has timed out, press Enter , and then enter the commands from Table 10-2. If you're still in interface configuration mode on the CLI tab, enter exit once, then begin with the access-list command in Table 10-2. Place a screen shot of your Command Line input screen in the Packet Tracer Screen here: 6. So far, you've blocked traffic coming to the router's GigabitEthernet0/0 interface from PC0. Let's test your work: a. From PC0, ping PC1. Place a screen shot of your Command Line Ping results here. Does it work? Answer : Why do you think this is? Answer : b. From PC0, ping PC2. Place a screen shot of your Command Line Ping results here. Does it work? Answer : Why do you think this is? Answer : c. From PC2, ping PC0. Place a screen shot of your Command Line Ping results here. Does it work? Answer : Why do you think this is? Answer : d. From PC2, ping PC1. Place a screen shot of your Command Line Ping results here. Does it work? Answer : Why do you think this is? Answer : 7. Let's edit the ACL to permit traffic from PC1. On the router's CLI tab, enter the commands from Table 10-3. Place a screen shot of your Command Line input screen in the Packet Tracer Screen here: c. From PC2, ping PC0. Place a screen shot of your Command Line Ping results here. Does it work? Answer : Why do you think this is? Answer : d. From PC2, ping PC1. Place a screen shot of your Command Line Ping results here. Does it work? Answer : Why do you think this is? Answer : 8. You've now added a new entry to your ACL. Let's test your work: a. From PC0, ping PC1. Place a screen shot of your Command Line Ping results here. Does it work? Answer : Why do you think this is? Answer : b. From PC0, ping PC2. Place a screen shot of your Command Line Ping results here. Does it work? Answer : Why do you think this is? Answer : c. From PC2, ping PC0. Place a screen shot of your Command Line Ping results here. Does it work? Answer : Why do you think this is? Answer : d. From PC2, ping PC1. Place a screen shot of your Command Line Ping results here. Does it work? Answer : Why do you think this is? Answer : 9. Save your project for future reference.

pur-new-sol

Related Questions