Question

You are the IT security administrator for a small corporate network. You need to increase the security on the switch in the Networking Closet by creating an access control list. You have been asked to prevent video game consoles from connecting to the switch. In this lab, your task is to create a MAC-based ACL named GameConsoles and configure the GameConsoles MAC-based access control entry (ACE) settings as follows: Priority 1: Deny any destination MAC Address with value 00041F111111 and source MAC Address with mask 000000111111. Priority 2: Deny any destination MAC Address with value 005042111111 and source MAC Address with mask 000000111111. Priority 3: Deny any destination MAC Address with value 000D3A111111 and source MAC Address with mask 000000111111. Priority 4: Deny any destination MAC Address with value 001315111111 and source MAC Address with mask 000000111111. Priority 5: Deny any destination MAC Address with value 0009BF111111 and source MAC Address with mask 000000111111. Priority 6: Deny any destination MAC Address with value 00125A111111 and source MAC Address with mask 000000111111. Bind the GameConsoles ACL to all of the GE1-GE30 interfaces. Use Copy Settings to apply the binding to multiple interfaces. Save the changes to the switch's startup configuration file. Use the default settings.

Answer 1

An IT security administrator needs to create a MAC-based ACL called GameConsoles with specific ACE settings to prevent video game consoles from connecting to a switch. This involves configuring multiple entries to deny certain MAC addresses and binding the ACL to the switch interfaces GE1-GE30, then saving the configuration.

Step-by-step explanation:

As the IT security administrator for a small corporate network, increasing the security on the switch in the Networking Closet by creating an access control list is a critical task. To prevent video game consoles from connecting to the switch, you will need to create a MAC-based ACL named GameConsoles. This ACL will incorporate several MAC-based access control entry (ACE) settings with varying priorities to deny network access based on specific MAC addresses known to belong to game consoles.

To accomplish this, you will configure the GameConsoles ACL with the following priorities:

1. 
   
3. Deny any destination MAC address with value 00041F111111 and source MAC address with mask 000000111111.
4. 
   
6. Deny any destination MAC address with value 005042111111 and source MAC address with mask 000000111111.
7. 
   
9. Deny any destination MAC address with value 000D3A111111 and source MAC address with mask 000000111111.
10. 
    
12. Deny any destination MAC address with value 001315111111 and source MAC address with mask 000000111111.
13. 
    
15. Deny any destination MAC address with value 0009BF111111 and source MAC address with mask 000000111111.
16. 
    
18. Deny any destination MAC address with value 00125A111111 and source MAC address with mask 000000111111.

After configuring the ACL, bind it to all the GE1-GE30 interfaces and use the 'Copy Settings' to apply the binding to multiple interfaces efficiently. Lastly, ensure to save the changes to the switch's startup configuration file, using the default settings.