Tamirat Atsemegiorgis Building a Secure Local Area Network

 

---

Appendix 1 
25 (27) 
Appendix 6: Testing Listing 
 
Verification of Inside Network Connection
SA# show route 
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - 
BGP 
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP 
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS 
inter area 
* - candidate default, U - per-user static route, o - ODR 
P - periodic downloaded static route 
Gateway of last resort is 10.94.62.254 to network 0.0.0.0 
S 192.168.30.0 255.255.255.0 [1/0] via 192.168.1.2, inside 
S 192.168.60.0 255.255.255.0 [1/0] via 192.168.1.2, inside 
S 192.168.40.0 255.255.255.0 [1/0] via 192.168.1.2, inside 
S 172.16.10.10 255.255.255.255 [1/0] via 10.94.62.118, outside 
C 10.94.62.0 255.255.255.0 is directly connected, outside 
S 192.168.50.0 255.255.255.0 [1/0] via 192.168.1.2, inside 
C 192.168.1.0 255.255.255.0 is directly connected, inside 
C 192.168.2.0 255.255.255.0 is directly connected, dmz 
S 192.168.70.0 255.255.255.0 [1/0] via 192.168.1.2, inside 
S 192.168.100.0 255.255.255.0 [1/0] via 192.168.1.2, inside 
S* 0.0.0.0 0.0.0.0 [1/0] via 10.94.62.254, outside 
CSW#show ip route 
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - 
BGP 
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 
E1 - OSPF external type 1, E2 - OSPF external type 2 
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS 
level-2 
ia - IS-IS inter area, * - candidate default, U - per-user 
static route 
o - ODR, P - periodic downloaded static route, H - NHRP, l - 
LISP 
+ - replicated route, % - next hop override 
Gateway of last resort is 192.168.1.1 to network 0.0.0.0 
S* 0.0.0.0/0 [1/0] via 192.168.1.1 
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks 
C 192.168.1.0/24 is directly connected, FastEthernet0/1 
L 192.168.1.2/32 is directly connected, FastEthernet0/1 
192.168.30.0/24 is variably subnetted, 2 subnets, 2 masks 
C 192.168.30.0/24 is directly connected, Vlan30 
L 192.168.30.1/32 is directly connected, Vlan30 
192.168.40.0/24 is variably subnetted, 2 subnets, 2 masks 
C 192.168.40.0/24 is directly connected, Vlan40 

---

Appendix 1 
26 (27) 
L 192.168.40.1/32 is directly connected, Vlan40 
192.168.50.0/24 is variably subnetted, 2 subnets, 2 masks 
C 192.168.50.0/24 is directly connected, Vlan50 
L 192.168.50.1/32 is directly connected, Vlan50 
192.168.60.0/24 is variably subnetted, 2 subnets, 2 masks 
C 192.168.60.0/24 is directly connected, Vlan60 
L 192.168.60.1/32 is directly connected, Vlan60 
192.168.70.0/24 is variably subnetted, 2 subnets, 2 masks 
C 192.168.70.0/24 is directly connected, Vlan70 
L 192.168.70.1/32 is directly connected, Vlan70 
192.168.100.0/24 is variably subnetted, 2 subnets, 2 masks 
C 192.168.100.0/24 is directly connected, Vlan100 
L 192.168.100.1/32 is directly connected, Vlan100 
ASA# ping 192.168.100.4 
Type escape sequence to abort. 
Sending 5, 100-byte ICMP Echos to 192.168.100.4, timeout is 2 seconds: 
!!!!! 
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms