Transparent Zone Based Firewall Configure R8 as a zone based transparent firewall. Allow users on R7 to go out to the
external networks using the following protocols: Ø Bootps Ø DNS Ø HTTP Ø HTTPS Ø SMTP Ø SSH The return entries should be automatically created on the return. No other protocol traffic should be inspected for this task. The return entries should expire after 4 minutes for TCP based protocols. DNS entries should expire after 2 minute. Only permit necessary traffic for routing or other tasks. Use two zones; INSIDE for Fa0/1.78 and OUTSIDE for Fa0/1.1256 on R8 Make sure Routing is still working Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at www.ipexpert.com/communities and our public website at www.ipexpert.com <http://www.ipexpert.com/> From: [email protected] [mailto:[email protected]] On Behalf Of Debug Radius Sent: Monday, November 15, 2010 11:26 AM To: [email protected] Subject: [OSL | CCIE_Security] Lab2A, task 2.13 Hi all, in the tasks description for lab2A, task 2.13, there are not requirements for dns timeout and tcp idle-time but in configuration there are two lines covering it: dns-timeout 180 tcp idle-time 240 Could someone shad some lights on this issue. Thanks
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
