Network and Security Administrator Asignment

Network and Security
1

Table of Contents
Task 1 - Device Security...................................................................................3
Task 2 - Basic Layer 2 Security........................................................................15
Task 3 - Basic Layer 3 Security........................................................................34
2

Task 1 - Device Security
This task will configure the device security by using SSH configuration. To do SSH
configuration on team3-router and switch, first configure the Linux clients, switch and
Team3-router as demonstrated below (Routing and Switching Essentials Companion Guide).
Team3-router Configuration
The team3-router configuration is demonstrated below.
3

Once client, switch and team3-router basic configurations are completed, proceed with device
security by SSH configuration on Team3-router, which includes the following aspects:
 Set Team3-router hostname as myTeam3-router.
 Set domain name
 Generate the encryption keys for securing the session by using the crypto key
generate rsa command.
 Set the enable password.
 Set username and passwords for local login. The user name as admin and password as
cisco.
 Specify the SSH version to use.
 Then, connect with the VTY lines of the Team3-router and SSH configuration
protocol.
 At last, open the command prompt of the Linux clients and open the SSH session to
the remote team3-router by entering the following command.
 ssh -l admin 172.16.1.31
 Provide the login password to access the privileged executive mode.
Team3-router SSH configuration is presented below.
4

Also conduct device security by SSH configuration on Switch which includes the following
aspects:
 Set Switch hostname as SW1.
 Set the domain name
 Generate the encryption keys for securing the session by using the crypto key
generate rsa command.
 Set enable password.
 Set username and passwords for local login. The user name as admin and password as
cisco.
 Specify the SSH version to use.
 Then, connect to VTY lines of the switch and SSH configuration protocol.
 At last, open the command prompt of the Linux clients and open the SSH session to
the remote team3-router by typing the following command.
 ssh -l admin 172.16.1.31
 Then, provide the login password to access the privileged executive mode.
Switch SSH configuration is presented below.
5

Backup for Device Security is represented below.
First, use the FTP server to back up the devices for security. Afterwards, view the default
user name and password for the TFTP server.
Further, take backup of the current IOS image file by accessing the privilege exec mode of
the team3-router, and run the show version command which is used to note down the name of
6