In this lab, here's what I'd love you to do.
I'd love you to configure R4 with an infrastructure access control list that
includes denying source
addresses that begin with 000 or source addresses that begin with 127.
Anything or source addresses that begin with 16.
Based on the mask being 12 bits in length.
In addition, like you did, you deny ICMP, UDP and TCP fragments that are
destined to 25.25.25.
Anything I'd also like you to permit BGP traffic and SSH traffic from 23.00. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Anything I'd also like you to permit BGP traffic and SSH traffic from 23.00.
Anything going to our management address base of 25.25.25.
And that'll be the infrastructure ACL portion.
And the second portion here is to configure R1 with control plane policing to
limit the impact
of an ICMP flood to the router.
So you can set up any threshold you want.
And if you want to mirror what we did in the demonstration, that works as well.
So with that in mind, have some fun with the hands on lab.
And when you are ready, join me for a walkthrough in the very next video.