testout lab 6.7.4 configure a perimeter firewall

TESTOUT LAB 6.7.4 CONFIGURE A PERIMETER FIREWALL PASSWORD
TESTOUT LAB 6.7.4 CONFIGURE A PERIMETER FIREWALL MAC

You work as the IT security administrator for a small corporate network. Select Details to verify that the server has received the correct IP address and DNS server addresses In the Network and Sharing Center console, select Ethernet. Select Obtain DNS server address automatically then click OK. Select Obtain an IP address automatically. Select Internet Protocol Version 4 (TCP/IPv4). Right-click Ethernet and then select Properties. Right-click the Network icon in the navigation area and select Open Network and Sharing Center.į. Select Basement to navigate back to the basement.ĭ. Configure DMZ Server Networking as follows:ī.

TESTOUT LAB 6.7.4 CONFIGURE A PERIMETER FIREWALL MAC

In the MAC Address field, enter 1A:2B:C4:28:3B:9F then click Apply.ģ. In the IP Address field, enter 172.16.2.100. On the DMZ Reserved IPs page, select Add. In the left pane, select DMZ Reserved IPs. In the Secondary DNS Server field, enter 163.128.80.93 then click Apply. In the Primary DNS Server field, enter 163.128.78.93. On the DMZ Configuration page under DHCP mode, select DHCP Server from the drop-down list. Under DMZ Port, select Set Optional Port to DMZ Mode. In the left pane under Getting Started, select Advanced.

TESTOUT LAB 6.7.4 CONFIGURE A PERIMETER FIREWALL PASSWORD

In the Password field, enter Admin$0nly (0 is zero). Maximize Internet Explorer for easier viewing.

In the URL field, enter the NSA Management address of 198.28.56.18 and press Enter.į. On the taskbar, open Internet Explorer.Į. Select Floor 1 to navigate to the IT Administration office.ĭ. Use the slider by Workspace to zoom in and out as needed.ī. In the Selected Component window, click on the other network cable connector and drag it to the Optional port on the NSA.

In the Selected Component window, click on the network cable connector and drag it to the left Ethernet port on the CorpDMZWeb server.Į. Under Workspace, select Back to switch to the back view of the server rack.ĭ. Connect the Server to the NSA as follows:Ī. Verify that the CorpDMZWeb server receives the reserved IP address.Ĭonnect the CorpDMZWeb server to the Optional port on the NSAĬonfigure the DMZ zone for DHCP Hide DetailsĬonfigure a reserved IP address for the CorpDMZWeb server Hide DetailsĬonfigure the DMZ server to obtain an IP and DNS address automaticallyĬonfirm that the CorpDMZWeb server is connected to the internetġ.Configure the CorpDMZWeb server to obtain a DNS address automatically.Configure the CorpDMZWeb server to obtain an IP address automatically.Reserve the first IP address in the DMZ's DHCP address range for CorpDMZWeb.O Secondary DNS server address:163.128.80.93 Configure the DMZ port to act as a DHCP server with the default IP addresses.Configure the Optional port on the NSA for DMZ mode from the IT administrator's workstation.Connect the left port of the CorpDMZWeb server to the Optional port on the NSA.You need to place this server in a DMZ and configure the DMZ settings on the network security appliance (NSA). Recently, you added a web server that runs services that need to be accessible from the internet. You are the IT administrator for a small corporate network. Select Allow Login only from Defined Addresses. In the Network Address/IP Address field, enter the appropriate IP address then click Apply.Į. In the Source Address Type field, make sure IP Address is selected.ĭ. Under Edit User Policies, select By IP to configure IP address restrictions for login.Ĭ. Repeat steps 10a-10b for the other user.Ī. Select Deny Login from WAN Interface then click Apply.Ĭ. Under Edit User Policies, select Login to configure a login policy.ī. Re-enter the password to confirm the new password.Ī. From the User Type drop-down list, select Administrator. In the User Name field, enter the username.Į. Create a new administrative user as follows:ī. Enter the idle timeout then click Apply.ĩ. Re-enter the new password to confirm the new password. Enter the current logged in administrator password. In the User Name field, enter the new username.Į. From the Getting Started (Basic) page, select Change Default Admin Password and Add Users.Ĭ. Rename the default user account as follows:Ī.

In the Password field, enter cisco to log in to the Security Appliance Configuration utility.Ĩ. In the URL field, type 198.28.56.18 and press Enter.Ħ. O Allow access only from the administrator's workstation (192.168.0.21)Ĥ.

Create a new administrative user with the following parameters:.

O Allow access only from CorpServer (192.168.0.10) O Set for LAN access only (no WAN access)

Rename the default user account (cisco) with the following parameters:.

In this lab, your task is to perform the following: Restrict login for mbrown to 192.168.0.21 Restrict login for xAdmin to 192.168.0.10 Deny login from the WAN interface Hide Details

Testout lab 6.7.4 configure a perimeter firewall