CCNA Exhibit

An Irish music publisher - "Celtic Traditions" has three stores networked using the schema below. Each store consists of one LAN and all routers are completely configured and in full working order both locally and across the serial links. However, the CIO - Molly Malone wants an Access List created that does not allow Telnet traffic access to CeltC router while allowing all other traffic to pass.

Please complete this task using no more than three lines and apply to the appropriate interfaces.

The routers have been configured with the following specifications:

The routers are named CeltA, CeltB and CeltC.
RIP is the routing protocol.
The clocking is provided on the serial 1 interface.
The enable password on the all routers is "cisco".
The subnet mask on all interfaces is the default mask.

Host F

Tips: Use Host F to connect to the CeltC router. Toggle F11 to access/exit fullscreen mode.

Successful Lab Completion

You will not be told this on the actual exam but you have successfully completed the Lab.
Good job!

? - Lab Help

Telnet - think extended access-list (protocol - TCP well-known port 23)
Block - prevent - etc - think "deny"
Placement -- extended ACL - think as close to the source of the traffic entering the CeltC router.
Write down:
Three lines
Celtc
Host F (serially connected to CeltC)
PW: cisco
deny
telnet - well-known port 23
inbound traffic -- "any host" -- is pretty generic and will do the job in this case
E0: 192.168.65.1
S1: 192.168.101.2

Write down ACL input statements (3 lines - extended range 100 - 199):
access-list 101 deny tcp any host 192.168.65.1 eq telnet (23 can also be used)
access-list 101 deny tcp any host 192.168.101.2 eq telnet (23 can also be used)
access-list 101 permit ip any any (remember a permit statement must follow deny statements)
Write down how you will apply the ACL: (traffic entering the router through e0 and s1 (in))
int e0
ip access-group 101 in
int s1
ip access-group 101 in
Now input your statements into the Command Line Interface. No matter what -- if you go over 15 minutes on an actual exam Lab - get to the "Privilege EXEC mode" prompt and input "copy run start".