ADTRAN Stub Routing Manual do Utilizador descarregar pdf (Página 7)

Out 5551000 SanJose1 18 44 15 0

-------------------------------------------------------------------------------

Step 6

Now that there is a working ISDN connection, configure a more restrictive dialer-list on the

Capetown remote router to keep ISDN charges to a minimum.

Create an access list to specifically permit web, DNS, FTP, Telnet, and mail traffic. For this to be

done, reconfigure dialer list 1 on Capetown, the remote router. The central site router,

SanJose1, will continue to be allowed to establish DDR connections for any IP traffic.

Use the following to create an access list on Capetown that will permit the mission critical services:

Capetown(config)#access-list 101 permit tcp any any eq www

Capetown(config)#access-list 101 permit udp any any eq domain

Capetown(config)#access-list 101 permit tcp any any eq ftp

Capetown(config)#access-list 101 permit tcp any any eq telnet

Capetown(config)#access-list 101 permit tcp any any eq pop3

Capetown(config)#access-list 101 permit tcp any any eq smtp

Note: Transport layer keywords were specified instead of port numbers. Layer 4 keyword

services are simpler to interpret when configuring extended access-lists. Use the “?” option after

the eq parameter to receive a list of keywords and their associated port numbers.

Now enter a new dialer-list command that references this access list. The following shows a new

dialer-list command automatically replacing the old one:

Capetown(config)#dialer-list 1 protocol ip list 101

Once the new dialer list has been configured, ping Host A from Host B.

5. The ping should fail, why?

__________________________________________________________________________

From Host B initiate a Telnet session to SanJose1.

6. The Telnet request should bring up the ISDN connection, why?

__________________________________________________________________________

With the connection still up, ping Host A from Host B once again.

7. Instead of failing as before, this ping should work. Why?

__________________________________________________________________________

A ping to Host B from Host A should also be possible.

While connected, issue the show dialer command on both SanJose1 and Capetown.

8. According to the output of this command, what was the time until disconnect for SanJose1?

__________________________________________________________________________

7 - 7 CCNP 2: Remote Access v 3.0 - Lab 4.9.1 Copyright  2003, Cisco Systems, Inc.

1 2 3 4 5 6 7

Sem comentários

ADTRAN Stub Routing Manual do Utilizador Página 7