Wednesday, March 01, 2006
Restricting telnet access to router. (Question #27)
Assume you have a router which you are responsible for administering. You want to allow telnet access to that box only if the connection is from your PC which has the IP address 172.169.1.1. All other telnet accesses to that router are to be denied. How will you implement the required access restriction?
Connectivity between and bridged segment and a routed segment. (Question #26)
Consider a router that has two hosts connected to a bridged segment on a couple of ethernet interfaces in the subnet 10.10.10.0/24. The same router has a routed segment on an ethernet interface in the subnet 20.20.20.0/24 to which a host is connected. The corresponding configuration on the router is
The hosts on the bridged segment have the IP addresses 10.10.10.1 and 10.10.10.2 while the host on the routed segment has the address 20.20.20.2.
It is now required that all three hosts be able to ping each other. What additional configuration is needed on the router to achieve that level of connectivity between the hosts? Note that the constraint to the solution is that the bridged segment should continue to bridge while the routed segement should continue to route.
interface Ethernet0/0
no ip address
bridge-group 1
!
interface Ethernet1/0
no ip address
bridge-group 1
!
interface Ethernet2/0
ip address 20.20.20.1 255.255.255.0
no keepalive
!
bridge 1 protocol ieee
The hosts on the bridged segment have the IP addresses 10.10.10.1 and 10.10.10.2 while the host on the routed segment has the address 20.20.20.2.
It is now required that all three hosts be able to ping each other. What additional configuration is needed on the router to achieve that level of connectivity between the hosts? Note that the constraint to the solution is that the bridged segment should continue to bridge while the routed segement should continue to route.
