Practical 4.7 - Create a Numbered IP ACL 100 on R3
In this video, I have demonstrated the Creating a Numbered IP ACL 100 on R3 part of Practical 4 - Configure IP ACLs to Mitigate Attacks
#cisco #ciscopackettracer #network #routers #ccna #ccnp #ccie #securityincomputing #cisconetworkingacademy #networking #packettracer #aaa #authentication #authorization #accounting #radius #PacketTracer #Networks #IPvZero
#radiusconfiguration #CCENT #ccnasecurity #cybersecurity #networksecurity
🚀🚀🚀🚀🚀🚀🚀🚀
Part 6: Create a Numbered IP ACL 100 on R3
On R3, block all packets containing the source IP address from the following pool of addresses: any RFC 1918 private addresses, 127.0.0.0/8, and any IP multicast address. Since PC-C is being used for remote administration, permit SSH traffic from the 10.0.0.0/8 network to return to the host PC-C.
Step 1: Configure ACL 100 to block all specified traffic from the outside network.
You should also block traffic sourced from your own internal address space if it is not an RFC 1918 address.
In this activity, your internal address space is part of the private address space specified in RFC 1918. Use the
access-list command to create a numbered IP ACL.
R3(config)#
access-list 100 permit tcp 10.0.0.0 0.0.0.255 eq 22 host 192.168.3.2
access-list 100 deny ip 10.0.0.0 0.0.0.255 any
access-list 100 deny ip 172.16.0.0 0.15.255.255 any
access-list 100 deny ip 192.168.0.0 0.0.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 deny ip 224.0.0.0 15.255.255.255 any
access-list 100 permit ip any any
Step 2: Apply the ACL to interface Serial 0/0/1. Use the ip access-group command to apply the
access list to incoming traffic on interface Serial 0/0/1.
R3(config)# interface s0/1/1
R3(config-if)# ip access-group 100 in
Step 3: Confirm that the specified traffic entering interface Serial 0/1/1 is handled correctly.
a. From the PC-C command prompt, ping the PC-A server. The ICMP echo replies are blocked by the ACL
since they are sourced from the 192.168.0.0/16 address space.
b. Establish an SSH session toXrom PC-C (should be successful).
🚀🚀🚀🚀🚀🚀🚀🚀
🚀🚀🚀🚀🚀🚀🚀🚀
To view the practical manual, click on the link given below:-
https://drive.google.com/file/d/1513K...
🚀🚀🚀🚀🚀🚀🚀🚀
https://linktr.ee/techcareercatalog
😊😊😊😊😊😊😊😊
🚀🚀🚀🚀🚀🚀🚀🚀
TechCareerCatalog aims to guide students in their technology careers. We acquaint students with a list of job profiles, their scope, pre-requisite to take up that job. We also acquaint students with details of free and paid certifications offered by tech giants. We counsel students to remove their uncertainties about career options in the technology field by showing them the right path and guiding them to enroll in appropriate courses. We showcase current trends and technologies booming in the market and provide online training through videos and interactive sessions.
Follow us on Instagram: / techcareercareercatalog
Follow us on Facebook: / techcareercatalog
Visit our Website: https://www.techcareercatalog.com