Router1#show run Building configuration... hostname Router1 enable secret class username R2 password 0 cisco no ip domain-lookup ip name-server 0.0.0.

0 interface FastEthernet0/0 no ip address duplex auto speed auto shutdown ! ! ! interface FastEthernet0/1 description Link to PC1 ip address 10.0.0.1 255.255.255.128 ip access-group DenyPC1 out duplex auto speed auto ! ! ! ! interface Serial0/0/0 description PPP link to Router2 ip address 172.16.0.1 255.255.255.252 encapsulation ppp ppp authentication chap ip access-group 100 in clock rate 64000 ! ! ! interface Serial0/0/1 description FrameR to Router3 no ip address encapsulation frame-relay ip access-group 100 in ! ! ! interface Serial0/0/1.100 point-to-point ip address 172.16.0.9 255.255.255.252 frame-relay interface-dlci 100 ! ! interface Vlan1 no ip address shutdown ! ! ! ! router rip version 2 passive-interface FastEthernet0/1 network 10.0.0.0 network 172.16.0.0 no auto-summary

! ! ! ip classless ! ! ! ! access-list 1 permit host 172.16.0.2 ! ! ! ip access-list extended DenyPC1 deny tcp host 10.0.0.10 host 209.165.200.161 eq www deny tcp host 10.0.0.10 host 209.165.200.161 eq ftp deny tcp host 10.0.0.10 host 209.165.200.161 eq telnet deny ip 10.0.0.128 0.0.0.127 host 10.0.0.10 permit ip any any ! ! ! ! banner motd ^Ctickle me, I'll tickle you^C ! ! ! line con 0 password cisco logging synchronous login ! ! ! ! line vty 0 4 access-class 1 in password cisco logging synchronous login line vty 5 15 login end

Router2#show run Building configuration... version 12.4 service timestamps log datetime service password-encryption ! ! ! hostname Router2 login block-for 300 attempts 2 within 120 ! ! enable secret cisco

enable password cisco aaa new-model aaa authentication login LOCAL_AUTH local aaa authentication login local_auth local ! ! ! username Router2 password cisco username ccna password ciscoccna username telnet password cisco ! ! ! no ip domain-lookup ! ip domain-name cisco.com ! ip name-server 0.0.0.0 ! ! ! interface Loopback0 description Loopback ISP Sim ip address 209.165.200.161 255.255.255.224 ! ! ! ! ! interface FastEthernet0/0 no ip address duplex auto speed auto shutdown ! ! ! ! ! interface FastEthernet0/1 no ip address duplex auto speed auto shutdown ! ! ! ! ! interface Serial0/1/0 description PPP link to R1 ip address 172.16.0.2 255.255.255.252 encapsulation ppp ppp authentication chap ! ! ! ! interface Serial0/1/1 description HDLC link to R3

ip address 172.16.0.5 255.255.255.252 clock rate 64000 ! ! ! ! ! interface Vlan1 no ip address shutdown ! ! ! ! router rip version 2 passive-interface FastEthernet0/0 passive-interface FastEthernet0/1 passive-interface Loopback0 network 172.16.0.0 network 209.165.200.0 ip classless ! ! ! ! ! ip access-list extended sl_def_acl deny tcp any any eq telnet deny tcp any any eq www deny tcp any any eq 22 permit tcp any any eq 22 ! ! ! access-list 100 permit udp any any eq bootpc ! ! ! ! no cdp run ! ! ! ! banner motd ^Cauthorized access only this system is the property of so-&-so-ente rprise. unauthorized access to this device is prohibited. you must have explicit permission to access this device. all activities performed on this device are l ogged. any violations of access policy will result in disciplinary action.^C ! ! ! ! logging trap debugging ! line con 0 transport output telnet exec-timeout 5 0 password cisco

logging synchronous login login authentication local_auth line vty 0 4 exec-timeout 5 0 password cisco logging synchronous login login authentication local_auth transport input telnet line vty 5 15 login end

Router3#show run Building configuration... version 12.4 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! ! ! hostname Router3 ! ! enable secret cisco ! ! ! no ip domain-lookup ! ! ! ip name-server 0.0.0.0 ! ! interface FastEthernet0/0 no ip address duplex auto speed auto shutdown ! ! ! interface FastEthernet0/1 description link to pc3 ip address 10.0.0.129 255.255.255.128 ip nat inside duplex auto

speed auto ! ! ! ! interface Serial0/1/0 description FrameR to R1 no ip address encapsulation frame-relay clock rate 64000 ! ! ! interface Serial0/1/0.101 point-to-point ip address 172.16.0.10 255.255.255.252 frame-relay interface-dlci 101 ! ! ! ! interface Serial0/1/1 description HDLC link to R2 ip address 172.16.0.6 255.255.255.252 ip nat outside ! ! ! ! interface Vlan1 no ip address shutdown ! ! ! ! ! router rip version 2 passive-interface FastEthernet0/1 network 10.0.0.0 network 172.16.0.0 no auto-summary ! ! ! ! ! ip nat inside source list 2 interface Serial0/1/1 overload ! ! ! ! ip classless ! ! ! ! access-list 1 permit host 172.16.0.5 access-list 2 permit 10.0.0.128 0.0.0.127 !

! ! banner motd ^Ctickle me, I'll tickle you^C ! ! ! ! line con 0 password cisco logging synchronous login line vty 0 4 access-class 1 in password cisco logging synchronous login line vty 5 15 login end