Cisco Network Routing

SomeCompany’s CTO has reconsidered the department subnet plan versus building/floor subnet plan and has decided to go with the department plan as outlined in Module 01.  (As a reminder, this plan calls for the deployment of three routers to allow communication between the 3 buildings on their campus.  Each department will deploy its own switch which will be connected to an interface on the related building router.) The CTO wants the routers configured to allow the maximum number of IP addresses in each department, using the Class B address space: 172.18.0.0.

SomeCompany completed a network usage audit as part of their fiscal yearend financial audit. The auditors noted that there was attempted access to the Payroll systems by users in unauthorized departments. In their recommendations, the auditors noted that the Payroll systems need to be isolated and access needs to be restricted to only those authorized users who are in Human Resources.

During a review of the proposed changes to be made, the Human Resources department points out there is a New Employee Benefits portal that is hosted on the HR Department. The portal needs to be accessed by Employees anywhere on the corporate network.

Create the ACLs necessary to limit access to Payroll Subnet using the following requirements:

• Only those computers on the HR subnet should have access to the Payroll subnet
• There should be no limitation on access to the HR Subnet.

Referring to the Logical Network Diagram from Module 3, determine how to configure ACL settings to meet the above requirements.  Include the CLI below to complete the configuration.

 

 

 

 

 

 

 

 

 

 

 

 

 

SomeCompany completed a network usage audit as part of their fiscal yearend financial audit. The auditors noted that there was attempted access to the Payroll systems by users in unauthorized departments. In their recommendations, the auditors noted that the Payroll systems need to be isolated and access needs to be restricted to only those authorized users who are in Human Resources.

During a review of the proposed changes to be made, the Human Resources department points out there is a New Employee Benefits portal that is hosted on the HR Department. The portal needs to be accessed by Employees anywhere on the corporate network.

Create the ACLs necessary to limit access to Payroll Subnet: only those computers on the HR subnet should have access; no limitation on access to the HR Subnet.

Refer to the Course Project Introduction.

• Create the commands to configure the Cisco Routers so that only the computers on the HR Subnet have access to the Payroll Subnet.
• All computers on the network are able to access the HR Subnet.

Identify on which router the Access Control lists should be applied and explain your choice.

Complete the ACL Worksheet. WORKSHEET BELOW

 

 

Router CLI (Provide the configuration lines for the router below.  To help determine where in the configuration we are, include the CLI prompts.  Also, include the previous assignment CLI parts, adjusting as necessary after instructor feedback.  An example is included in the first line.)

Building 2 Router

Task	CLI Commands
Enable administrative mode and enter configuration terminal	Router >enable Router #config t
Assign IP Addresses to the router interfaces	Router (config) #
Assign Routing Protocol to necessary interfaces
Configure and apply Access Control List
Save Router Configuration

 

 

 

Solution: