Scribd Logo
Upload

Welcome to Scribd!

  • 5 views

    TP1 16 02 2024 Resolv

    Uploaded by

    isaacnoah Kouakou

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd

    TP1 16 02 2024 Resolv

    Uploaded by

    isaacnoah Kouakou
    5 views6 pages

    Original Title

    TP1-16-02-2024-Resolv

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    5 views6 pages

    TP1 16 02 2024 Resolv

    Uploaded by

    isaacnoah Kouakou

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    of 6

    Packet Tracer - Configure ASA Basic Settings and Firewall Using the CLI

    1) Plan d’adressage
    Device Interface IP Address Subnet Mask Default Gateway
    G0/0.10 192.168.1.126 255.255.255.128
    G0/0.20 192.168.1.158 255.255.255.224
    R-LAN G0/1 10.0.0.1 255.255.255.252 N/A
    R-ASA G1/1(inside) 10.0.0.2 255.255.255.252
    G1/2 (dmz) 10.0.0.6 255.255.255.252
    G1/3 (outside) 10.0.0.10 255.255.255.252 N/A
    R-DMZ G0/0 192.168.2.14 255.255.255.240
    G0/1 10.0.0.5 255.255.255.252 N/A
    R-ISP G0/0 172.16.1.254 255.255.255.0
    G1/0 10.0.0.9 255.255.255.252 NA
    SrvDNS NIC 192.168.2.12 255.255.255.248 192.168.2.14
    SrvRadius NIC 192.168.2.10 255.255.255.248 192.168.2.14
    SrvWEB NIC 172.16.1.100 255.255.255.0 172.16.1.254
    SrvFTP NIC 172.16.1.110 255.255.255.0 172.16.1.254
    VLAN10 NIC DHCP
    VLAN10-1 NIC DHCP
    VLAN20-1 NIC DHCP
    VLAN20-2 NIC DHCP
    2) Gestion des Vlans (VTP)

    a- Switch (S3 ==== désigné Server)


    =Mise en place du VTP

    Enable
    Conf t
    Hostname S3
    Vtp domain ita.lan
    Vtp version 2
    Vtp mode server
    Vtp password Azerty2024

    =Création des VLANS

    Vlan 10
    Name CISCO
    Exit
    Vlan 20
    Name DBA

    =Mise en place du TRUNK

    Interface range f0/22-24


    Switchport mode trunk
    End
    Copy running-config startup-config

    b- Switch (S1 ==== désigné client)


    =Mise en place du VTP

    Enable
    Conf t
    Hostname S1
    Vtp domain ita.lan
    Vtp version 2
    Vtp mode client
    Vtp password Azerty2024

    =Mise en place du TRUNK

    Interface range f0/22


    Switchport mode trunk

    =Attribution des ports aux VLANS

    Interface range f0/1-21


    Switchport mode access
    Switchport access vlan 10
    End
    Copy running-config startup-config

    c- Switch (S2 ==== désigné client)


    =Mise en place du VTP

    Enable
    Conf t
    Hostname S2
    Vtp domain ita.lan
    Vtp version 2
    Vtp mode client
    Vtp password Azerty2024

    =Mise en place du TRUNK

    Interface range f0/23


    Switchport mode trunk

    =Attribution des ports aux VLANS

    Interface range f0/1-21


    Switchport mode access
    Switchport access vlan 20
    End
    Copy running-config startup-config

    3) Configuration des interfaces

    a- Router R-LAN
    Enable
    Conf t
    Hostname R-LAN
    Interface g0/0
    No ip address
    No shutdown
    Exit
    Interface g0/0.10
    Encapsulation dot1q 10
    Ip address 192.168.1.126 255.255.255.128
    Exit
    Interface g0/0.20
    Encapsulation dot1q 20
    Ip address 192.168.1.158 255.255.255.224
    Exit
    Interface g0/1
    No shutdown
    Ip address 10.0.0.1 255.255.255.252
    End
    Copy running-config startup-config

    b- Router R-DMZ

    Enable
    Conf t
    Hostname R-DMZ
    Interface g0/0
    No shutdown
    Ip address 192.168.2.14 255.255.255.240
    Exit
    Interface g0/1
    No shutdown
    Ip address 10.0.0.5 255.255.255.252
    End
    Copy running-config startup-config

    c- Router R-ISP

    Enable
    Conf t
    Hostname R-ISP
    Interface g0/0
    No shutdown
    Ip address 172.16.1.254 255.255.255.0
    Exit
    Interface g0/1
    No shutdown
    Ip address 10.0.0.9 255.255.255.252
    End
    Copy running-config startup-config

    d- R-ASA

    Enable
    Conf t
    Hostname R-ASA
    Interface g1/1
    Nameif inside
    No shutdown
    Ip address 10.0.0.2 255.255.255.252
    Exit
    Interface g1/2
    Nameif dmz
    Security-level 75
    No shutdown
    Ip address 10.0.0.6 255.255.255.252
    Exit
    Interface g1/3
    Nameif outside
    No shutdown
    Ip address 10.0.0.10 255.255.255.252
    End
    Copy running-config startup-config

    e- Mise en place des services DHCP (R-LAN)

    Enable
    Conf t
    Ip dhcp pool VLAN10
    Network 192.168.1.0 255.255.255.128
    Default-router 192.168.1.126
    Dns-server 192.168.2.12
    option 150 ip 192.168.1.126
    exit
    ip dhcp excluded-address 192.168.1.126

    Ip dhcp pool VLAN20


    Network 192.168.1.128 255.255.255.224
    Default-router 192.168.1.158
    Dns-server 192.168.2.12
    option 150 ip 192.168.1.158
    exit
    ip dhcp excluded-address 192.168.1.158
    end
    copy running-config startup-config

    4) Routage statique

    a- Router R-LAN

    Enable
    Conf t
    Ip route 172.16.1.0 255.255.255.0 10.0.0.2
    Ip route 192.168.2.0 255.255.255.240 10.0.0.2
    End
    Copy running-config startup-config

    b- Router R-DMZ

    Enable
    Conf t
    Ip route 172.16.1.0 255.255.255.0 10.0.0.6
    Ip route 192.168.1.0 255.255.255.0 10.0.0.6
    End
    Copy running-config startup-config
    c- Router R-ISP
    Enable
    Conf t
    Ip route 172.16.1.0 255.255.255.0 10.0.0.10
    Ip route 192.16.1.0 255.255.255.0 10.0.0.10
    End
    Copy running-config startup-config

    d- Pare Feu R-ASA

    Enable
    Conf t
    route outside 172.16.1.0 255.255.255.0 10.0.0.9
    route dmz 192.168.2.0 255.255.255.240 10.0.0.5
    route inside 192.16.1.0 255.255.255.0 10.0.0.1
    End
    Copy running-config startup-config

    5) Autorisation du flux (R-ASA)

    == Suppression du 1er flux


    No service-policy global_policy global
    No policy-map global_policy
    No class-map inspection-default-traffic

    == Gestion du nouveau flux


    class-map Demo
    match default-inspection-traffic
    exit
    policy-map Test
    class Demo
    inspect ftp
    inspect http
    inspect icmp
    inspect tftp
    exit
    service-policy Test global
    end
    copy running-config startup-config

    You might also like