Lab7 _Mastering Secure Network Access Control
Scenario:
A medium-sized company, XYZ Corp, has distinct departments - HR, IT, and Guest users. Each department has its own server containing sensitive information. The company wants to ensure that only authorized personnel can access their respective servers. Additionally, they want to provide limited access to Guest users while ensuring that internal systems remain secure.
------------------------------------
An access control list (ACL) is a set of rules defined on a network device, such as a router or a switch, that controls the traffic flow through the device. ACLs are used to filter traffic based on various criteria like source IP address, destination IP address, protocol type, and port number. They are an essential component of network security, allowing administrators to permit or deny traffic according to their security policies.
There are generally two types of ACLs:
Standard ACLs:
Standard ACLs filter traffic based only on the source IP address. They are simple to configure but provide limited control over traffic because they do not consider destination IP addresses or other parameters.
Extended ACLs:
Extended ACLs provide more granular control over traffic by considering multiple parameters such as source and destination IP addresses, protocols, port numbers, etc. They offer greater flexibility but are more complex to configure compared to standard ACLs.
-----------------------------------------------------
Network Infrastructure:
Cisco Router (Model: 4331)
Two Cisco Switches (Model: 2960-24T)
Three Servers:
1. HR Server (192.168.10.100)
2. IT Server (192.168.10.101)
3. Guest Server (192.168.1.10)
----------------------------------------------------------
Connections:
Router is connected to Switch 1 (Port: gi0/0/0)
Router IP: 192.168.10.1/24
Switch 1 Port: fa0/1
Router is connected to Switch 2 (Port: gi0/0/1)
Router IP: 192.168.1.1/24
Switch 2 Port: fa0/1
Switch 1 is connected to HR Server (Port: fa0/2)
HR Server IP: 192.168.10.100
Switch 1 is connected to IT Server (Port: fa0/3)
IT Server IP: 192.168.10.101
Switch 2 is connected to PCs:
HR PC (IP: 192.168.1.2)
IT PC (IP: 192.168.1.3)
Guest PC (IP: 192.168.1.10)
----------------------------------------------------------------------
Access Control Requirements:
1. HR department should have access to HR Server but not IT Server.
2. IT department should have access to IT Server but not HR Server.
3. Guest users should only have access to the Guest Server.
4. Host PCs should not have access to HR or IT Servers, but they can access the Guest Server.
Solution:
------------------------------------------------------------------------------------------
Router Configuration:
configure terminal
int gigabitEthernet0/0/0
ip address 192.168.10.1 255.255.255.0
no shut
exit
int gigabitEthernet0/0/1
ip add 192.168.1.1 255.255.255.0
no shut
exit
access-list 1 permit host 192.168.1.2
access-list 1 permit host 192.168.1.3
access-list 1 deny any
interface gigabitEthernet0/0/1
no ip access-group 1 in
#CyberSecurity, #NetworkSecurity, #AccessControl, #ITSecurity, #securenetwork , #DataProtection, #SNAC, #TechGuide, #SecurityFirst, #NetworkAdmin,#Networking, #CCNA, #CCNP, #linux, #AWS, #InformationTechnology, #ITCertification, #raspberrypi, #ethical hacking