CCNA Exhibit

An Irish hotel chain - "Celtic Inns" - has three hotels networked using the schema below. Each hotel consists of one LAN and all routers are completely configured and in full working order both locally and across the serial links. However, the Network Manager - Sinead O'Reilly - wants access control list statements created that will block PING traffic from networks 192.168.149.0 and 192.168.55.0 to network 192.168.65.0 while allowing all other traffic to pass.

Please complete the Network Manager's requirements using no more than three lines and apply where needed.

The routers have been configured with the following specifications:

The routers are named CeltA, CeltB and CeltC.
RIP is the routing protocol.
The clocking is provided on the Serial 0 interface.
The secret password on the all routers is "cisco".
The subnet mask on all interfaces is the default mask.

Host F

Tips: Use Host F to connect to the CeltC router. Toggle F11 to access/exit fullscreen mode.

Successful Lab Completion

You will not be told this on the actual exam but you have successfully completed the Lab.
Good job!

? - Lab Help

Ping uses ICMP - think extended access-list (protocol - Internet Control Messaging Protocol)
Block - prevent - etc - think "deny"
Placement -- extended ACL - think as close to the source of the traffic entering the CeltC router. (Serial 1)
Write down:
Three lines
CeltC
Host F (serially connected to CeltC)
PW: cisco
deny
icmp
Traffic from: Networks: 192.168.149.0 and192.168.55.0
Subnet mask: Default Class C 255.255.255.0
Traffic to: Network: 192.168.65.0
Subnet mask: Default Class C 255.255.255.0
Wildcard calc:
255.255.255.255
255.255.255.0 -
0.0.0.255
Write down ACL input statements (3 lines - extended range 100 - 199):
access-list 101 deny icmp 192.168.149.0 0.0.0.255 192.168.65.0 0.0.0.255
access-list 101 deny icmp 192.168.55.0 0.0.0.255 192.168.65.0 0.0.0.255
access-list 101 permit ip any any (remember a permit statement must follow deny statements)
Write down how you will apply the ACL: (traffic entering the router through s1 (in))
int s1
ip access-group 101 in
Now input your statements into the Command Line Interface. No matter what -- if you go over 15 minutes on an actual exam Lab - get to the "Privilege EXEC mode" prompt and input "copy run start".