R1 banner motd #R1# no ip domain-lookup enable secret class line console 0 password cisco login logging synchronous exec-timeout

5 line vty 0 4 password cisco login logging synchronous exec-timeout 5 R2 banner motd #R2# no ip domain-lookup enable secret class line console 0 password cisco login logging synchronous exec-timeout 5 line vty 0 4 password cisco login logging synchronous exec-timeout 5 R3 banner motd #R3# no ip domain-lookup enable secret class line console 0 password cisco login logging synchronous exec-timeout 5 line vty 0 4 password cisco login logging synchronous exec-timeout 5 task 4: config S int R1 username R2 password cisco int s0/0/0 encap ppp ppp auth chap int s0/0/1 encap frame-relay frame-relay map ip 172.16.0.9 101 broadcast frame-relay map ip 172.16.0.10 101 broadcast frame-relay interface-dlci 101 no keepalive R2

username R1 password cisco int s0/0/0 encap ppp ppp auth chap int s0/0/1 encap hdlc R3 int s0/0/0 encap frame-relay ppp auth chap frame-relay map ip 172.16.0.10 101 broadcast frame-relay map ip 172.16.0.9 101 broadcast frame-relay interface-dlci 101 no keepalive int s0/0/1 encap hdlc task 5: config rip R1 router rip version 2 network 10.0.0.0 network 172.16.0.0 passive-interface fa0/1 no auto-summary R2 router rip version 2 network 172.16.0.0 no auto-summary redistribute static R3 router rip version 2 network 10.0.0.0 network 172.16.0.0 passive-interface fa0/1 no auto-summary task 6: config Router security R2 username cisco password cisco aaa new-model aaa authentication login LOCAL_AUTH local line vty 0 4 login authentication LOCAL_AUTH no service pad no service finger no service udp-small-server no service tcp-small-server no ip bootp server no ip http server no ip finger no ip source-routed no ip gratuitous-arps

no cdp run task 7: config ACL(access control lists) R1 access-list 101 permit tcp host 172.16.0.2 any eq 23 access-list 101 permit tcp host 172.16.0.5 any eq 23 access-list 101 deny tcp any any eq 23 access-list 101 permit ip any any line vty 0 4 access-class 101 in R2 access-list 102 access-list 102 access-list 102 access-list 102 access-list 102 int Lo0 ip access-group deny tcp any host deny tcp any host deny tcp any host deny tcp any host permit ip any any 102 in 10.0.0.10 10.0.0.10 10.0.0.10 10.0.0.10 eq eq eq eq 80 23 21 20

R3 access-list 101 permit tcp host 172.16.0.2 any eq 23 access-list 101 permit tcp host 172.16.0.5 any eq 23 access-list 101 deny tcp any any eq 23 access-list 101 permit ip any any line vty 0 4 access-class 101 in exit access-list 103 deny ip 10.0.0.128 0.0.0.127 host 10.0.0.10 access-list 103 permit ip any any int s0/0/0 ip access-group 103 out int s0/0/1 ip access-group 103 out task 8: config Nat R3 access-list 104 permit ip 10.0.0.128 0.0.0.127 any ip nat inside source list 104 int s0/0/0 overload int fa0/1 ip nat inside int s0/0/0 ip nat outside int s0/0/1 ip nat outside