background image
680 Chapter 9: Scenarios for Final Preparation
The IP access lists can be placed in several places effectively. Stopping packets in one of the
two directions will succeed in stopping users from actually connecting to the servers. For the
first set of criteria, an access list stopping packets from entering the serial interface of R1, thus
stopping packets destined to PC11 and PC12, will suffice. For the second criteria to disallow
traffic between Site 2 and Site 3, the access lists are also placed in R1. The access lists will stop
the packets earlier in their life if they are placed in R2 and R3, but the traffic will be minimal
because no true application traffic will ever successfully be generated between IP hosts at Sites
2 and 3.
So, the design shown here calls for all filtered packets to be filtered via access lists enabled on
subinterfaces on R1's S0 interface. Other options are valid as well.
The SAP filter can be placed in several places, but there is one very obvious location. A SAP
filter is added on R2 to filter Server 3 from the SAP table. The filter could filter incoming SAPs
on R2's E0 or filter outgoing SAP updates out R2's S0 port. In this case, anticipating the day
that a second Ethernet port is used on R2, and anticipating the fact that the objective probably
meant that local clients should have access to Server 3, the plan in this case is to filter outbound
SAPs on R2's S0 interface.
Finally, the broadcast addresses for each subnet are shown in Table 9-15. As a reminder, to
calculate the broadcast address, you should write down the subnet number in binary. Then copy
down the network and subnet portions of the subnet number directly below it, leaving the host
bit positions empty. Then write all binary 1s in the host bit positions. Finally, convert the
number back to decimal, 8 bits at a time. The result is the subnet broadcast address and is the
high end of the range of assignable addresses in that subnet.
Table 9-15 shows the answers, which include the subnet numbers, their corresponding
broadcast addresses, and the range of valid assignable IP addresses.
Table 9-15
Scenario 9-3, Part A--IP Subnet Planning Chart
Subnet Number
Subnet Broadcast Address
Range of Valid Addresses
(Last 2 Bytes)
170.1.2.0
170.1.3.255
2.1 through 3.254
170.1.4.0
170.1.5.255
4.1 through 5.254
170.1.6.0
170.1.7.255
6.1 through 7.254
170.1.8.0
170.1.9.255
8.1 through 9.254
170.1.10.0
170.1.11.255
10.1 through 11.254
170.1.12.0
170.1.13.255
12.1 through 13.254
170.1.14.0
170.1.15.255
14.1 through 15.254
ch09.fm Page 680 Monday, March 20, 2000 5:23 PM