Info Networks Lab 6

Joshua Immanuel – Group 6

EXERCISE 1
A1.

Host 1 pings host 3

Host1 pings host 2

Host 1 can ping Host 2 since they are have the same subnet ID. Host 1 however cannot ping
host 3 as they have different subnet IDs
Port and VLAN configuration

VLAN configuration - Host 1,Host 2

VLAN configuration – Host 3
Ports configuration

IP interfaces

Routing table
A2.

Host 1 pings Host 2

Host 1 pings Host 3

The router table entries that show the next hop and next destination address enables Host 1
to ping Host 3.
EXERCISE 2
VLAN configuration for host 1 to ETH0/1 port

‘
VLAN configuration for host 2
VLAN configuration for host 3

IP interface
Ports configuration

Host1 pings Host 2 before setting no firewall/security policy

Host 1 pings Host 3 before setting no firewall/ security policy

Firewall/ security policy before setup

Security policy configuration

No firewall policy setup

Host1 pings Host 2 after no firewall policy setup

Host 1 pings Host 3 after no firewall policy setup

A3. Public security zone is only allotted to main Ethernet port (ETH0/1) that serves as access
points to the network (internet). These hosts port cannot be assigned such policy if they
must send packets to one another within the router.
A4. No-firewall policy is assigned to the hosts ports

NAT policy configuration of host 2

NAT assignment to host 2

Wireshark capture of Host3’s ping of Host1 (Host1’s capture)

Host3 pings host1

Wireshark capture of Host3’s ping of Host 1 (Host 3’s capture)

A5. Source IP address: 172.25.25.2 | destination IP address: 131.204.128.2

For both wireshark captures, the source IP addresses and the destination IP addresses
are the same. This is due to the fact that both security policies are no-firewall policy, and
thus there is no need for table lookup or IP conversion.

Wireshark capture of Host 2’s ping of Host 1 (Host 1’s capture)

Source IP : 131.204.128.1 destination IP: 131.204.128.2

Wireshark capture of Host 2’s ping of Host 1 (Host 2’s capture)

Source IP: 100.100.100.1 destination IP: 100.100.100.2

 Host 2 pings host 1

A6. The two source addresses of host1 and host2 wireshark captures are different due to
the NAT security policy assigned to host 2. The NAT table modifies the IP addresses to their
gateway addresses.

EXERCISE 3
Adding a static routing entry to the routing table
A7.
 Host 2 pings Host 1

Host3 pings Host 1