Network Security Task 3
Network Security Task 3
Step 2:
I added a PT-router to the network and configured it by adding two additional gigabit
Ethernet ports (CGE ports) to expand its connectivity options for the switches and devices in
the network.
And after I connected the router to the LAN I created by linking one of the newly added CGE
ports to the switch in the first department, ensuring that the devices in the LAN can
communicate through the router.
Next, I assigned the IP address 192.168.0.1 to one PC and set the default gateway to
192.168.0.254, which is the last IP address in this subnet. I then repeated this process for all
computers in the LAN.
Then I configured the router by first identifying the port connected to the corresponding
LAN and then activating it by checking port status. Next, I assigned the IP address
192.168.0.254 to this interface, which serves as the default gateway for the LAN.
Step 3:
I added a new server connected to its own switch, which is then connected to the router like
the picture below.
I assigned an IP address and default gateway to the server, just as I did for the PCs, as
illustrated in the photograph below.
Next, I assigned an IP address to the interface on the router corresponding to the port
connected to the server. This IP address must match the server's gateway.
To check the connection between the PCs and the server, you can enter the server's IP
address in any PC's web browser. If the connection is successful, this webpage should open.
Step 4:
By repeating the steps from the previous LAN, I created two new LANs, resulting in the
screenshot below.
Step 5:
To change the webpage displayed when connecting to the server, we delete all files except
for index.html from the http directory in the server's services section.
Now, I edit the index.html file so that my name and surname are displayed when the page is
opened, and then I click "Save."
If we enter the server's IP address in the browser of any PC to connect to the server again,
the screenshot below will be displayed.
b) Implement using firewall between several PC + Server. You need config it for
deny "ping" command from every PC to Server, but allow open IP of Server in
their browser. Write documentation
Step 1:
I select the firewall section from the server's desktop and configure the
following settings to block ping requests from all IP addresses and click to add.
Now, if we attempt to connect from any computer, the result will be successful.