Walter Lawrence
Southern New Hampshire University
CYB 310 -- Network Defense
Professor Ostering
September 15, 2022
Project One Steppingstone
I have been tasked with working with 2 different issues. The first issue would be to make sure we
provide the Sales department network segment read/write/execute privileges to the Customer
Service Department network segment. The second task would be to troubleshoot why the
computers in the HR Department can't access the internet.
My first step is making sure that the Sales Department has the correct rights to the Customer
Service Department. The trouble shooting that I took was to make sure that I could ping both a
PC on the Customer Service network and a computer on the Sales network. The first computer I
logged onto was PC3_Subnet2 which is a customer service computer, and the IP address of that
computer is 192.168.2.30. The next computer I logged into was the PC3_Sales computer and that
IP address is 192,168.1.30. I was able to find out that the Customer Service computer is on a
192.168.2.1 Gateway and the Sales PC is on a 192.168.1.1 gateway
After this I then decided to run a tracert command on both gateways to see if it could trace any
traffic on the network. I did this from the Sales PC. When I ran the command for the 192.168.1.1
gateway it only picked up that as an option. I then did tracert for the gateway of 192.168.2.1
which is the PC on customer service network. The tracert made the first hop to 192.168.1.1 then
on the second hop it pinged 203.0.113.1, then the 3rd hop timed out and then 4th hop it pings its
own gateway 192.168.2.1.
PC3_SALES-VMwareWoratation 14 Player(Non-commercialuse only)
cmd-Shorteu
HE
192.168.1.1
192.168.2.1
203.0.113.1
mplete
Now that I have gotten this info, I needed to make some changes to be able to have the network
reach each other which I turn would help me be able to create the rules for the sales department
to communicate with the customer service. My first step was to add two gateways to the pfsense
firewall gateway, and those gateway numbers are 192.168.1.2 and 192.168.1.3 with static IP
address of 192.168.2.0 and 192.168.3.0 which would allow traffic through on the LAN. These
were added to the gateway Sales gateway (192.168.1.1). My last steps of configuration from the
firewall were to create 3 rules. Two of the rules allowed internal TCP/IP and ICMP traffic
through on the 192.168.1.0/24 while the other rule blocked everything. I also noticed that on the
firewall there was no rule to allow the access that was needed for read/write/execute. I was able
to get that configured as well. Below is each screenshot