Compare commits
2 commits
28b26dd8ed
...
279e6a6991
Author | SHA1 | Date | |
---|---|---|---|
279e6a6991 | |||
48c23e61ab |
3 changed files with 78 additions and 2 deletions
BIN
Networks/Main.pkt
(Stored with Git LFS)
BIN
Networks/Main.pkt
(Stored with Git LFS)
Binary file not shown.
22
Tutorials/M7 Lab 6 - Firewall using ACL/README.md
Normal file
22
Tutorials/M7 Lab 6 - Firewall using ACL/README.md
Normal file
|
@ -0,0 +1,22 @@
|
|||
# Lab 06 - Firewall using ACL
|
||||
> ***Objectives:***
|
||||
> - Implement firewall between VLAN10 and VLAN20
|
||||
|
||||
## Configure Routers
|
||||
On Routers `R1` and `R2`
|
||||
|
||||
```sh
|
||||
enable
|
||||
configure terminal
|
||||
ip access-list extended FILTER
|
||||
permit ip 10.20.0.0 0.0.255.255 host 10.10.10.10
|
||||
deny ip 10.20.0.0 0.0.255.255 10.10.0.0 0.0.255.255
|
||||
permit ip any any
|
||||
exit
|
||||
interface fastEthernet 0/0.20
|
||||
ip access-group FILTER in
|
||||
exit
|
||||
exit
|
||||
disable
|
||||
exit
|
||||
```
|
|
@ -0,0 +1,54 @@
|
|||
# Lab 07 - NAT Overload and Port Forwarding
|
||||
## Configure Router
|
||||
On Router `EE` configure:
|
||||
|
||||
```sh
|
||||
enable
|
||||
configure terminal
|
||||
ip access-list extended NAT-ACL
|
||||
permit ip 10.0.0.0 0.255.255.255 any
|
||||
exit
|
||||
|
||||
ip nat pool NAT-POOL 1.0.0.1 1.0.0.1 netmask 255.0.0.0
|
||||
|
||||
interface fastEthernet0/0
|
||||
ip nat inside
|
||||
exit
|
||||
|
||||
interface fastEthernet0/1
|
||||
ip nat outside
|
||||
exit
|
||||
|
||||
ip nat inside source list NAT-ACL pool NAT-POOL overload
|
||||
|
||||
exit
|
||||
exit
|
||||
disable
|
||||
exit
|
||||
```
|
||||
|
||||
On Router `R1` and `R2`:
|
||||
```sh
|
||||
enable
|
||||
configure terminal
|
||||
ip route 0.0.0.0 0.0.0.0 10.123.0.3
|
||||
exit
|
||||
exit
|
||||
disable
|
||||
exit
|
||||
```
|
||||
|
||||
## Implement Port Forwarding
|
||||
On `EE` configure port forwarding:
|
||||
```sh
|
||||
enable
|
||||
configure terminal
|
||||
|
||||
ip nat inside source static tcp 10.10.10.10 80 1.0.0.1 180
|
||||
ip nat inside source static tcp 10.10.10.10 443 1.0.0.1 443
|
||||
|
||||
exit
|
||||
exit
|
||||
disable
|
||||
exit
|
||||
```
|
Loading…
Reference in a new issue