The remote lab is accessed via a PIX firewall, RL-PIX-CSPFA, from the Internet. The trainer will initiate an IPsec VPN tunnel terminating on RL-PIX-CSPFA. RLPIX- CSPFA forwards all traffic to a router, RL-RMT-CSPFA, which routes traffic based on the source IP address to one of three routers, RL-RMT1-CSPFA, RLRMT2- CSPFA, or RL-RTS-CSPFA. These routers will perform IP address NATing and route the traffic to the necessary student pod. | CSPFA Remote Lab Instructor Guide Table of Contents NETWORK Remote Lab Local Classroom CLASSROOM Equipment Physical Initial student PC Classroom Router REMOTE LAB Establishing and Testing Connectivity to the Remote Telneting to the Remote Terminal PIXInitial Router Initial Turning Secondary PIXen On and CSPFA LAB SETTINGS AND Peer Chapter 5 Configure the PIX Firewall and Execute General Maintenance Commands .17 Chapter 6 Configuring Access Through the Chapter 7 Configure Inside Multiple Chapter 8 Configure the PIXFirewall s DHCP Server and Client Chapter 9 Configuring Chapter 10 Configure ACLs in the Chapter 11 Configure and Test Advanced Protocol Handling on the Cisco PIX Chapter 12 Configure the PIXFirewall to Use IDS Chapter 13 Configure AAA on the PIXFirewall Using CSACS for Windows Chapter 14 Chapter 15 Configure PIXFirewall Chapter 16 Upgrade the PIXFirewall Chapter 17 Configuring the PIXFirewall with Chapter 18 Configure CBAC on a Cisco Chapter 19 Configure Authentication Proxy on a Cisco Network Topology The following is the network topology diagram for the CSPFA remote lab. WEB F I P .1001 RL-RBB-CSPFA . . P0 PPP CSACS DHCP CSACS DHCP .1 .1001 RL-RTS-CSPFA .102 . .7 .7 . P .0 pĩõõ .7 I pPs 2 RL-RMT1-CSPFA RL-RMT-CSPFA RL-RTS-CSPFA RL-RMT2-CSPFA REMOTE LAB CLASSROOM RL-LCL HUB 2001 Cisco Systems Inc. .