Compare commits

...

2 commits

Author SHA1 Message Date
279e6a6991 Implement Network Address Translation 2023-12-18 20:44:03 +01:00
48c23e61ab Add firewall rules 2023-12-18 20:03:45 +01:00
3 changed files with 78 additions and 2 deletions

BIN
Networks/Main.pkt (Stored with Git LFS)

Binary file not shown.

View file

@ -0,0 +1,22 @@
# Lab 06 - Firewall using ACL
> ***Objectives:***
> - Implement firewall between VLAN10 and VLAN20
## Configure Routers
On Routers `R1` and `R2`
```sh
enable
configure terminal
ip access-list extended FILTER
permit ip 10.20.0.0 0.0.255.255 host 10.10.10.10
deny ip 10.20.0.0 0.0.255.255 10.10.0.0 0.0.255.255
permit ip any any
exit
interface fastEthernet 0/0.20
ip access-group FILTER in
exit
exit
disable
exit
```

View file

@ -0,0 +1,54 @@
# Lab 07 - NAT Overload and Port Forwarding
## Configure Router
On Router `EE` configure:
```sh
enable
configure terminal
ip access-list extended NAT-ACL
permit ip 10.0.0.0 0.255.255.255 any
exit
ip nat pool NAT-POOL 1.0.0.1 1.0.0.1 netmask 255.0.0.0
interface fastEthernet0/0
ip nat inside
exit
interface fastEthernet0/1
ip nat outside
exit
ip nat inside source list NAT-ACL pool NAT-POOL overload
exit
exit
disable
exit
```
On Router `R1` and `R2`:
```sh
enable
configure terminal
ip route 0.0.0.0 0.0.0.0 10.123.0.3
exit
exit
disable
exit
```
## Implement Port Forwarding
On `EE` configure port forwarding:
```sh
enable
configure terminal
ip nat inside source static tcp 10.10.10.10 80 1.0.0.1 180
ip nat inside source static tcp 10.10.10.10 443 1.0.0.1 443
exit
exit
disable
exit
```