计算机网络安全技术与实施（旧） 思科网络学院CCNA Security资源 CCNA安全第2章实验1_Secure-Routers_教师实验手册.docVIP

网络技术专业教学资源库 Page PAGE 3 of NUMPAGES 58 Page PAGE 1 of NUMPAGES 58 国家高等职业教育网络技术专业教学资源库 CCNA安全物理设备实操 教师实验手册 CCNA安全实操实验2 Chapter 2 Lab A: Securing the Router for Administrative Access (Instructor Version) Chapter 2 Lab A: Securing the Router for Administrative Access (Instructor Version) Grey Highlighting – indicates answers provided on instructor lab copies only Topology Note: ISR G2 devices use GigabitEthernet interfaces instead of FastEthernet Interfaces. IP Addressing Table Device Interface IP Address Subnet Mask Default Gateway Switch Port R1 Fa0/1 N/A S1 Fa0/5 S0/0/0 (DCE) 52 N/A N/A R2 S0/0/0 52 N/A N/A S0/0/1 (DCE) 52 N/A N/A R3 Fa0/1 N/A S3 Fa0/5 S0/0/1 52 N/A N/A PC-A NIC S1 Fa0/6 PC-C NIC S3 Fa0/18 Objectives Part 1: Basic Network Device Configuration Cable the network as shown in the topology. Configure basic IP addressing for routers and PCs. Configure static routing, including default routes. Verify connectivity between hosts and routers. Part 2: Control Administrative Access for Routers Configure and encrypt all passwords. Configure a login warning banner. Configure enhanced username password security. Configure enhanced virtual login security. Configure an SSH server on a router. Configure an SSH client and verify connectivity. Part 3: Configure Administrative Roles Create multiple role views and grant varying privileges. Verify and contrast views. Part 4: Configure Cisco IOS Resilience and Management Reporting Secure the Cisco IOS image and configuration files. Configure a router as a synchronized time source for other devices using NTP. Configure Syslog support on a router. Install a Syslog server on a PC and enable it. Configure trap reporting on a router using SNMP. Make changes to the router and monitor syslog results on the PC. Part 5: Configure Automated Security Features Lock down a router using AutoSecure and verify the configuration. Use the CCP Security Audit tool to identify vulnerabilities and to lock down services. Contrast the A