WEBVTT

1
00:00.000 --> 00:01.920
In this lab, here's what I'd love you to do.

2
00:01.920 --> 00:07.130
I'd love you to configure R4 with an infrastructure access control list that

3
00:07.130 --> 00:08.480
includes denying source

4
00:08.480 --> 00:13.520
addresses that begin with 000 or source addresses that begin with 127.

5
00:13.520 --> 00:16.960
Anything or source addresses that begin with 16.

6
00:16.960 --> 00:19.280
Based on the mask being 12 bits in length.

7
00:19.280 --> 00:23.850
In addition, like you did, you deny ICMP, UDP and TCP fragments that are

8
00:23.850 --> 00:25.840
destined to 25.25.25.

9
00:25.840 --> 00:31.200
Anything I'd also like you to permit BGP traffic and SSH traffic from 23.00.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

9
00:25.840 --> 00:31.200
Anything I'd also like you to permit BGP traffic and SSH traffic from 23.00.

10
00:31.200 --> 00:34.960
Anything going to our management address base of 25.25.25.

11
00:34.960 --> 00:36.880
And that'll be the infrastructure ACL portion.

12
00:36.880 --> 00:41.360
And the second portion here is to configure R1 with control plane policing to

13
00:41.360 --> 00:42.320
limit the impact

14
00:42.320 --> 00:44.480
of an ICMP flood to the router.

15
00:44.480 --> 00:46.480
So you can set up any threshold you want.

16
00:46.480 --> 00:50.240
And if you want to mirror what we did in the demonstration, that works as well.

17
00:50.240 --> 00:52.800
So with that in mind, have some fun with the hands on lab.

18
00:52.800 --> 00:56.960
And when you are ready, join me for a walkthrough in the very next video.