04确保扩张型网络的安全.pptVIP

组建中型交换型网络 确保扩张型网络的安全 Overview of Switch Security Recommended Practices: New Switch Equipment Consider or establish organizational security policies. Secure switch devices: Secure switch access. Secure switch protocols. Mitigate compromises through switches. Recommended Practices: Switch Security Secure switch access: Set system passwords. Secure physical access to the console. Secure access via Telnet. Use SSH when possible. Disable HTTP. Configure system warning banners. Disable unneeded services. Use syslog if available. Recommended Practices: Switch Security (Cont.) Secure switch protocols: Trim Cisco Discovery Protocol and use only as needed. Secure spanning tree. Mitigate compromises through a switch: Take precautions for trunk links. Minimize physical port access. Establish standard access-port configuration for both unused and used ports. Port Security 802.1X Port-Based Authentication Visual Objective 2-1: Configuring Expanded Switched Networks Summary Follow recommended practices for securing your switched topology by using passwords, deactivating unused ports, configuring authentication, and using port security. To secure a switch device, you must secure access to the switch and the protocols that the switch uses. ? 2007 Cisco Systems, Inc. All rights reserved. ICND2 v1.0—2-* ? 2007 Cisco Systems, Inc. All rights reserved. ICND2 v1.0—2-* Port security restricts port access by MAC address. Network access through the switch requires authentication. Subnet VLAN Devices 1 Core Switches, CoreRouter, SwitchX 2 CoreRouter, RouterA 3 CoreRouter, RouterB 4 CoreRouter, RouterC 5 CoreRouter, RouterD 6 CoreRouter, RouterE 7 CoreRouter, RouterF 8 CoreRouter, RouterG 9 CoreRouter, RouterH * *