Packet tracer activity chapter 5 network security

#PACKET TRACER ACTIVITY CHAPTER 5 NETWORK SECURITY UPDATE#
#PACKET TRACER ACTIVITY CHAPTER 5 NETWORK SECURITY VERIFICATION#
#PACKET TRACER ACTIVITY CHAPTER 5 NETWORK SECURITY PASSWORD#
#PACKET TRACER ACTIVITY CHAPTER 5 NETWORK SECURITY PC#

#PACKET TRACER ACTIVITY CHAPTER 5 NETWORK SECURITY PASSWORD#

On the Internal router, if asked to login, then login as CORPSYS with password LetSysIn.

Step 6: Configure an IOS IPS on the Internal Router. вЂ“ Set the native VLAN as VLAN 50 for the trunk links. вЂ“ Disable DTP negotiation on the trunking ports.

Configure the trunk link on Fa0/23 and Fa0/24 on both Switch1 and Switch4.

Allow the MAC address to be learned dynamically and to be retained in the running-config. вЂ“ Set the maximum number of learned MAC addresses to 2 on FastEthernet ports 0/1 to 0/22.

Configure Switch1 port security and disable unused ports.

вЂ“ Enable BPDU guard on FastEthernet ports 0/1 to 0/22. вЂ“ Configure PortFast on FastEthernet ports 0/1 to 0/22.

Configure Switch1 to protect against STP attacks.

Access Switch1 and Switch4 with username CORPADMIN, password Ciscoccnas, and the enable secret password of ciscoclass.

Step 5: Configure Device Hardening for Switch1 and Switch4

#PACKET TRACER ACTIVITY CHAPTER 5 NETWORK SECURITY PC#

вЂ“ Only users logged on to the Net Admin PC are allowed access to the vty lines. Step 4: Configure ACLs on the Internal Router to Implement Secure Management Access.Д¬reate ACL 12 to implement the security policy regarding the access to the vty lines: вЂ“ The local database is used as the backup if the RADIUS server connection cannot be established. вЂ“ AAA authentication uses the RADIUS server as the default for console line and vty lines access. вЂ“ The key to connect to the RADIUS server is corpradius.

Configure the Internal router with server-based AAA authentication and verify its functionality:Note: The AAA server is already configured with RADIUS service, a username CORPSYS, and the password LetSysIn.

вЂ“ All vty lines accept only SSH connections. вЂ“ SSH version 2, timeout of 90 seconds, and 2 authentication retries

вЂ“ RSA encryption key pair using a modulus of 1024 Use the following guidelines:Note: Internal is already configured with the username SSHAccess and the secret password ciscosshaccess. Configure the Internal router to accept SSH connections.вЂ“ Log any failed or successful login to the syslog server. вЂ“ Disable logins for 30 seconds after 3 failed login attempts within 60 seconds. Configure the IOS login enhancement for all vty lines with the following requirements:.вЂ“ to send logging messages to the AAA/NTP/Syslog server

#PACKET TRACER ACTIVITY CHAPTER 5 NETWORK SECURITY UPDATE#

вЂ“ to update the router calendar (hardware clock) from the NTP time source вЂ“ as an NTP client to the AAA/NTP/Syslog server Step 3: Configure Secure Network Management for the Internal Router. Step 2: Configure Secure Network Management for the CORP Router.Д¬onfigure the IOS login enhancement for all vty lines with the following requirements:

Disable the CDP protocol on the CORP router on the link to the Internet router.

вЂ“ Disconnect after being idle for 20 minutes.

Configure the console port and all vty lines with the following requirements: Note: Both the CORP and the Internal routers are already configured with the username CORPADMIN and password Ciscoccnas.

Enable password encryption for all clear text passwords in the configuration file.

Configure an encrypted privileged level password of ciscoclass.

Configure the CORP and the Internal routers to only accept passwords with a minimum length of 10 characters.

Step 1: Configure Basic Device Hardening for the CORP and the Internal Routers.

#PACKET TRACER ACTIVITY CHAPTER 5 NETWORK SECURITY VERIFICATION#

Note: Appropriate verification procedures should be taken after each configuration task to ensure that it has been properly implemented.

configure a Zone-based Policy Firewall (ZPF) to implement security policies.

configure port security and disable unused switch ports.

configure basic device hardening and secure network management.

In this practice Packet Tracer Skills Based Assessment, you will:

Click the Submit AssessmentВ button to submit your work.

Do not close Packet Tracer when you are done.

Do not use the browser BackВ button or close or reload any examВ windows during theВ exam.

CCNA Security Practice Skills Assesement Part 1 CCNA Security 2.0 PT Practice SA вЂ“ Part 1ДЄ few things to keep in mind while completing this activity:

Packet tracer activity chapter 5 network security