Networking 201

Copyright Priscilla Oppenheimer

Lab 10 Access Control Lists

Scenario

Policy: Catbert in HR has declared that only managers should be allowed to surf the Web. Employees will not be given Web access. The following addresses are the only addresses that should be allowed to surf the Web:

• 192.168.40.2
• 192.168.50.2
• 192.168.60.2
• 192.168.70.2
• 192.168.90.2

Success criteria: Those addresses can get to Internet Web sites. No others can. Everyone can ping and use other services.

Hints

1. You will use an extended IP access list to implement the HR policy.
2. To get started, get into config mode with the config t command and then type access-list 120 ?
3. After writing the access list, apply the access list inbound to your “inside” interface with the ip access-group 120 in command.
4. Test from the PCs (not the routers). Make sure your implementation meets the success criteria.

Submission

On your Ciscro router type show run and copy and paste the results into a text document.

Submit your text document electronically

1. Attach your document to the assignment.