background image
Scenario 11-1 Answers 363
Scenario Answers
The answers provided in this section are not necessarily the only possible correct answers. They
merely represent one possibility for each scenario. The intention is to test your base knowledge
and understanding of the concepts discussed in this chapter. Should your answers be different
(as they likely will be), consider the differences. Are your answers in line with the concepts of
the answers provided and explained here? If not, go back and read the chapter again, focusing
on the sections related to the problem scenario.
Scenario 11-1 Answers
1
Given the fact that only 15 or so people would be using the connection at a given time can
lead you to select a 1600 series router. However, some consideration should be given to
using a 3620, which would provide a higher degree of scalability for the situation.
2
Any IP address scheme would work in this situation, however, strictly adhering to the
private address space number would be recommended. Given the size of the office, you
can choose a Class C address space and use a 24-bit mask to keep it simple.
3
The following NAT configuration could be used, given a selection of 192.168.1.0/24 as
the internal addresses used:
access-list 1 permit 192.168.1.0 0.0.0.255
ip nat pool lawpool 187.202.4.6 187.202.4.6 netmask 255.255.255.0
ip nat inside source list 1 pool lawpool overload
!declare inside interface
interface e0
ip address 192.168.1.1 255.255.255.0
ip nat inside
!declare outside interface
interface s0
!address assigned to the interface by the ISP
ip address 112.18.23.2 255.255.255.250
ip nat outside
4
There are a number of ways to allow only the lawyers and certain others to use this
connection. One way would be to apply an access list on the inbound Ethernet to block
unwanted users from routing through the router. This would be highly CPU-intensive, but
with such light usage, it might not be a problem. After all, the only time that these users
would try to get through the router is when they were trying to do something that they
were not authorized to do anyway.