Chapter 6 Deliverables

1. The ACL’s employed in the Washington School District’s network control traffic flow such that students can not access school data intended only for teachers and administrators as well as protecting these resources and network resources in general from mischievous actions on the part of students or outsiders. The ACL’s increase the latency of traffic through the routers and increase the CPU utilization of the routers.

2. ACL commands for Royal Palm School :

enable

config t

access-list 100 permit tcp? any host 10.3.41.3 ep dhcp? log

access-list 100 permit tcp any host 10.3.41.3 eq domain log

access-list 100 permit udp any host 10.3.41.3 eq domain log

access-list 100 permit tcp any host 10.3.41.4 eq smtp log

access-list 100 permit tcp any any eq www log

access-list 100 permit ip any 10.3.42.0 0.0.0.255 log

int e0 (router interface to the curriculum LAN’s)

access-group 100 in

These commands restrict access into the router from the curriculum LAN segments to only those services and networks that students are allowed to access. This limits traffic through routers and across the backbone to a bare minimum.

Note: I could find no reference to the ports used by DHCP.

3. The ACL’s latency effect will slow down the access to e-mail, it will slow down any internet or intranet browsing since requests to the DNS Server will have to traverse an ACL through the router, and the log on process will be slowed as each workstation requests an IP address from the DHCP server.