CIS410_Router_security_Lab

CIS410_Router_security_Lab - 0Eric Walker Mr. Trevethan...

Info iconThis preview shows pages 1–4. Sign up to view the full content.

View Full Document Right Arrow Icon
0Eric Walker Mr. Trevethan CIS410 August 4, 2011 CCNA Security Chapter 2 Lab A: Securing the Router for Administrative Access Instructor Version Topology
Background image of page 1

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
IP Addressing Table Device Interface IP Address Subnet Mask Default Gateway Switch Port Exit FA0/1 192.168.1.1 255.255.255.0 N/A S1 FA0/5 S0/0/0 (DCE) 10.1.1.1 255.255.255.25 2 N/A N/A R2 S0/0/0 10.1.1.2 255.255.255.25 2 N/A N/A S0/0/1 (DCE) 10.2.2.2 255.255.255.25 2 N/A N/A R3 FA0/1 192.168.3.1 255.255.255.0 N/A S3 FA0/5 S0/0/1 10.2.2.1 255.255.255.25 2 N/A N/A PC-A NIC 192.168.1.3 255.255.255.0 192.168.1.1 S1 FA0/6 PC-C NIC 192.168.3.3 255.255.255.0 192.168.3.1 S3 FA0/18 Objective Part 1: Basic Network Device Configuration Cable the network as shown in the topology. Configure basic IP addressing for routers and PCs. Configure static routing, including default routes. Verify connectivity between hosts and routers. 1) Part 2: Control Administrative Access for Routers Configure and encrypt all passwords. Configure a login warning banner. Configure enhanced username password security. Configure enhanced virtual login security. Configure an SSH server on a router. Configure an SSH client and verify connectivity. 2) Part 3: Configure Administrative Roles Create multiple role views and grant varying privileges. Verify and contrast views. 3) Part 4: Configure Cisco IOS Resilience and Management Reporting Secure the Cisco IOS image and configuration files.
Background image of page 2
Configure a router as a synchronized time source for other devices using NTP. Configure Syslog support on a router. Install a Syslog server on a PC and enable it. Configure trap reporting on a router using SNMP. Make changes to the router and monitor syslog results on the PC. 4) Part 5: Configure Automated Security Features Lock down a router using AutoSecure and verify the configuration. Use the SDM Security Audit tool to identify vulnerabilities and lock down services. Contrast the AutoSecure configuration with SDM. Background/Scenario The router is a key component that controls the movement of data into and out of the network and between devices within the network. It is particularly important to protect the network routers because the failure of one of these devices due to malicious activity could make sections of the network or the entire network inaccessible. Controlling access to routers and enabling reporting on routers are critical to network security and should be part of a comprehensive security policy. In this lab, you build a multirouter network and configure the routers and hosts. You use various CLI and SDM tools to secure local and remote access to the routers, analyze potential vulnerabilities, and take steps to mitigate them. You also enable management reporting to monitor router configuration changes. The router commands and output in this lab are from Cisco 1841s using Cisco IOS software,
Background image of page 3

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
Image of page 4
This is the end of the preview. Sign up to access the rest of the document.

Page1 / 72

CIS410_Router_security_Lab - 0Eric Walker Mr. Trevethan...

This preview shows document pages 1 - 4. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online