Chapter 6 Deliverables
1. The ACL’s employed in the Washington School District’s network control traffic flow such that students can not access school data intended only for teachers and administrators as well as protecting these resources and network resources in general from mischievous actions on the part of students or outsiders. The ACL’s increase the latency of traffic through the routers and increase the CPU utilization of the routers.
2. ACL commands for Royal Palm School :
enable
config t
access-list 100 permit tcp? any host 10.3.41.3 ep dhcp? log
access-list 100 permit tcp any host 10.3.41.3 eq domain log
access-list 100 permit udp any host 10.3.41.3 eq domain log
access-list 100 permit tcp any host 10.3.41.4 eq smtp log
access-list 100 permit tcp any any eq www log
access-list 100 permit ip any 10.3.42.0 0.0.0.255 log
int e0 (router interface to the curriculum LAN’s)
access-group 100 in
These commands restrict access into the router from the curriculum LAN segments to only those services and networks that students are allowed to access. This limits traffic through routers and across the backbone to a bare minimum.
Note: I could find no reference to the ports used by DHCP.
3. The ACL’s latency effect will slow down the access to e-mail, it will slow down any internet or intranet browsing since requests to the DNS Server will have to traverse an ACL through the router, and the log on process will be slowed as each workstation requests an IP address from the DHCP server.