As network administrator for Galaxy One Inc., you are responsible for all routers and switches in the internetwork. The internetwork consists of four sites: Dallas, Tulsa, Las Vegas, and Phoenix. A drawing of the network is shown below. You must install all the network devices, configure them, and maintain them. It is also your responsibility to maintain connectivity across the corporate WAN and properly secure the network. Securing the network is one task that never seems to end. | CertificationZone Page 1 of 3 Date of Issue 07-01-2000 Access Lists Lab Scenario by Dale Holmes Introduction Network Diagram Lab Objectives Solution Introduction As network administrator for Galaxy One Inc. you are responsible for all routers and switches in the internetwork. The internetwork consists of four sites Dallas Tulsa Las Vegas and Phoenix. A drawing of the network is shown below. You must install all the network devices configure them and maintain them. It is also your responsibility to maintain connectivity across the corporate WAN and properly secure the network. Securing the network is one task that never seems to end. Much of the work involved in securing the network stems from the ever-changing threat from entities outside your network as well as the constantly changing political climate within your own organization. Now management is at it again. They have decided that they are no longer satisfied with allowing full access to objects within the corporate network to all subjects within the internal organization. They have decided that certain objects should have controlled access even for subjects that are known to be within the organization. Specifically they have decided that the resources in the accounting department located at the Las Vegas site should be off limits to all other organizations within the company with the exception of the Time and Attendance application that every employee must access. Employees enter their timesheets electronically and this information is transferred across the network to a database server in the accounting department. The client server application that handles this operates over TCP using port 2200. Accounting staff members that are located outside Las Vegas as well as system administrators need full access to all of the resources in the Las Vegas site. These users all reside on the 24 network in Tulsa. You decide to take this opportunity to control access to the router terminal lines as well in order
