Ccna security Chapter 2 Lab A: Securing the Router for Administrative Access Instructor Version Topology ip addressing Table
Download 392.14 Kb.
|
- Navigate this page:
- Part 1: Basic Router Configuration
 
CCNA Security Chapter 2 Lab A: Securing the Router for Administrative Access Instructor Version Topology 
IP Addressing Table
Objectives Part 1: Basic Network Device Configuration
Part 2: Control Administrative Access for Routers
Part 3: Configure Administrative Roles
Part 4: Configure Cisco IOS Resilience and Management Reporting
Part 5: Configure Automated Security Features
Background/Scenario The router is a key component that controls the movement of data into and out of the network and between devices within the network. It is particularly important to protect the network routers because the failure of one of these devices due to malicious activity could make sections of the network or the entire network inaccessible. Controlling access to routers and enabling reporting on routers are critical to network security and should be part of a comprehensive security policy. In this lab, you build a multi-router network and configure the routers and hosts. You use various CLI and SDM tools to secure local and remote access to the routers, analyze potential vulnerabilities, and take steps to mitigate them. You also enable management reporting to monitor router configuration changes. The router commands and output in this lab are from Cisco 1841s using Cisco IOS software, release 12.4(20)T (advanced IP image). Other routers and Cisco IOS versions can be used. See the Router Interface Summary table at the end of the lab to determine which interface identifiers to use based on the equipment in the lab. Depending on the model of the router, the commands available and output produced may vary from what is shown in this lab. Note: Make sure that the routers and the switches have been erased and have no startup configurations. Instructor Note: Instructions for erasing switches and routers are provided in the Lab Manual, located on Academy Connection in the Tools section. Required Resources
Instructor Note: This lab is divided into five parts. Each part can be administered individually or in combination with others as time permits. The main goal is to configure various Cisco IOS and SDM security features on routers R1 and R3. R1 and R3 are on separate networks and communicate through R2, which simulates a connection to an ISP. Students can work in teams of two for router security configuration, one student configuring R1 and the other student configuring R3. Although switches are shown in the topology, students can omit the switches and use crossover cables between the PCs and routers R1 and R3. The basic running configs for all three routers are captured after Parts 1 and 2 of the lab are completed. The running config commands that are added in Parts 3 and 4 are captured and listed separately. The running configs generated by AutoSecure for R3 and SDM Security Audit for R1 in Part 5 of the lab are listed separately. All configs are found at the end of the lab. Part 1: Basic Router ConfigurationIn Part 1 of this lab, you set up the network topology and configure basic settings such as interface IP addresses and static routing. Step 1: Cable the network. Attach the devices shown in the topology diagram and cable as necessary. Step 2: Configure basic settings for each router.
R1(config)#interface S0/0/0 R1(config-if)#clock rate 64000
R1(config)#no ip domain-lookup Step 3: Configure static routing on the routers.
Step 4: Configure PC host IP settings. Configure a static IP address, subnet mask, and default gateway for PC-A and PC-C as shown in the IP Addressing Table. Step 5: Verify connectivity between PC-A and R3.
Were the ping results successful? Yes. If the pings are not successful, troubleshoot the basic device configurations before continuing.
Were the ping results successful? Yes. If the pings are not successful, troubleshoot the basic device configurations before continuing. Note: If you can ping from PC-A to PC-C you have demonstrated that static routing is configured and functioning correctly. If you cannot ping but the device interfaces are up and IP addresses are correct, use the show run and show ip route commands to help identify routing protocol related problems. Step 6: Save the basic running configuration for each router. Use the Transfer > Capture text option in HyperTerminal or some other method to capture the running configs for each router. Save the three files so that they can be used to restore configs later in the lab. |