11-laboratoriya ishi acl ro`yhatini sozlash (standard, extended) Ishdan maqsad

11-LABORATORIYA ISHI
ACL RO`YHATINI SOZLASH (STANDARD, EXTENDED)
Ishdan maqsad
NAT texnologiyasi tushunchasiga ega bo’lish; Access-List tushunchasiga ega bo’lish; CPT dasturida NAT va Access-Listda n foydalanib Global tarmoq qurish va paketlarni filtratsiyalash.
Laboratoriya ishining bajarilish tartibi
Dastlab Cisco Packet Tracer dasturida Golbal tarmoqni qurib NAT teznologiyasini sozlab olamiz. Buning uchun ishni 2 router, 1 kommutator (switch), 2 server, 4 kompyuter (pc) va router va kommutatorlarini (switch) sozlash uchun 1 laptop0 olamiz va ularni o’zaro aloqa kabeli bilan ulab chiqamiz:

Laptop0 ni «console» kabeli orqali kommutatorimizga (switch) ulab sozlash rejimiga kiramiz:

Tarmoq va serverlar xavfsizligini taminlash uchun har bir tarmoq uchun vlan yaratamiz va har bir tarmoq portlarini vlanlarga ruxsat berib chiqamiz. Buning uchun kommutatorga «console» kabeli bilan ulanib quyidagi komandalarni kiritamiz:
enable ; configure terminal
vlan 2; name admin; exit
vlan 3; name users; exit
vlan 4; name buxgalter; exit
vlan 5; name server; exit
interface FastEthernet 0/2
switchport mode access
switchport access vlan 2; exit
interface range FastEthernet 0/3-4
switchport mode access
switchport access vlan 3; exit
interface FastEthernet 0/5
switchport mode access
switchport access vlan 4; exit
interface FastEthernet 0/6
switchport mode access
switchport access vlan 5; exit
interface FastEthernet 0/1
switchport mode trunk
switchport trunk allowed vlan 2,3,4,5; exit

Router0 ga ulanib vlanlar uchun SubInterfeys yaratamiz. Bu degani 1 fizik portda bir nechta logik port yaratamiz. Buning uchun laptop0 ni «console» kabeli orqali router0 ga ulab quyidagi komandalarni kiritamiz: