Scribd Logo
Upload

Welcome to Scribd!

  • 340 views

    2.2.3.3 Packet Tracer - Configuring Initial Switch Settings

    Uploaded by

    ClareAustin
    The document describes configuring initial settings on a switch, including: - Verifying the default configuration and answering questions to understand interface numbers and vty lines - Configuring a hostname, securing the console line with a password, and verifying access - Securing privileged mode with an enable password and later upgrading it to an encrypted enable secret - Configuring a banner to warn unauthorized users, encrypting all passwords for security - Saving the configuration to NVRAM to prevent changes from being lost on reboot

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd

    2.2.3.3 Packet Tracer - Configuring Initial Switch Settings

    Uploaded by

    ClareAustin
    340 views7 pages
    The document describes configuring initial settings on a switch, including: - Verifying the default configuration and answering questions to understand interface numbers and vty lines - Configuring a hostname, securing the console line with a password, and verifying access - Securing privileged mode with an enable password and later upgrading it to an encrypted enable secret - Configuring a banner to warn unauthorized users, encrypting all passwords for security - Saving the configuration to NVRAM to prevent changes from being lost on reboot

    Original Description:

    Cisco Labs: 2.2.3.3 Packet Tracer - Configuring Initial Switch Settings

    Copyright

    © © All Rights Reserved

    Available Formats

    DOCX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document describes configuring initial settings on a switch, including: - Verifying the default configuration and answering questions to understand interface numbers and vty lines - Configuring a hostname, securing the console line with a password, and verifying access - Securing privileged mode with an enable password and later upgrading it to an encrypted enable secret - Configuring a banner to warn unauthorized users, encrypting all passwords for security - Saving the configuration to NVRAM to prevent changes from being lost on reboot

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    340 views7 pages

    2.2.3.3 Packet Tracer - Configuring Initial Switch Settings

    Uploaded by

    ClareAustin
    The document describes configuring initial settings on a switch, including: - Verifying the default configuration and answering questions to understand interface numbers and vty lines - Configuring a hostname, securing the console line with a password, and verifying access - Securing privileged mode with an enable password and later upgrading it to an encrypted enable secret - Configuring a banner to warn unauthorized users, encrypting all passwords for security - Saving the configuration to NVRAM to prevent changes from being lost on reboot

    Copyright:

    © All Rights Reserved
    Download as DOCX, PDF, TXT or read online from Scribd
    Download as docx, pdf, or txt
    of 7

    Packet Tracer - Configuring Initial Switch Settings

    Topology

    Objectives
    Part 1: Verify the Default Switch Configuration
    Part 2: Configure a Basic Switch Configuration
    Part 3: Configure a MOTD Banner
    Part 4: Save Configuration Files to NVRAM
    Part 5: Configure S2

    Background
    In this activity, you will perform basic switch configurations. You will secure access to the
    command-line interface (CLI) and console ports using encrypted and plain text passwords.
    You will also learn how to configure messages for users logging into the switch. These
    banners are also used to warn unauthorized users that access is prohibited.

    Verify the Default Switch Configuration

    Enter privileged mode.

    You can access all switch commands from privileged mode. However, because many of the
    privileged commands configure operating parameters, privileged access should be passwordprotected to prevent unauthorized use.
    The privileged EXEC command set includes those commands contained in user EXEC mode,
    as well as the configure command through which access to the remaining command modes
    are gained.

    Click S1 and then the CLI tab. Press <Enter>.

    Enter privileged EXEC mode by entering the enable command:


    Switch> enable
    Switch#

    Notice that the prompt changed in the configuration to reflect privileged EXEC mode.

    Examine the current switch configuration.


    Enter the show running-config command.

    Switch# show running-config

    Answer the following questions:


    How many FastEthernet interfaces does the switch have? ___24____
    How many Gigabit Ethernet interfaces does the switch have? __2_____
    What is the range of values shown for the vty lines? _0 4 5 15_____________
    Which command will display the current contents of non-volatile random-access memory
    (NVRAM)?
    ___show startup-config
    ______________________________________________________
    Why does the switch respond with startup-config is not present?
    _______because we have not created a startup configuraition yet _________

    Create a Basic Switch Configuration

    Assign a name to a switch.

    To configure parameters on a switch, you may be required to move between various


    configuration modes. Notice how the prompt changes as you navigate through the switch.
    Switch# configure terminal
    Switch(config)# hostname S1
    S1(config)# exit
    S1#

    Secure access to the console line.

    To secure access to the console line, access config-line mode and set the console password
    to letmein.
    S1# configure terminal
    Enter configuration commands, one per line. End with CNTL/Z.
    S1(config)# line console 0
    S1(config-line)# password letmein
    S1(config-line)# login
    S1(config-line)# exit
    S1(config)# exit
    %SYS-5-CONFIG_I: Configured from console by console
    S1#
    Why is the login command required?

    ____otherwise all you will have done was define the password_____________________

    Verify that console access is secured.

    Exit privileged mode to verify that the console port password is in effect.
    S1# exit
    Switch con0 is now available
    Press RETURN to get started.
    User Access Verification
    Password:
    S1>
    Note: If the switch did not prompt you for a password, then you did not configure the login
    parameter in Step 2.

    Secure privileged mode access.

    Set the enable password to c1$c0. This password protects access to privileged mode.
    Note: The 0 in c1$c0 is a zero, not a capital O. This password will not grade as correct until
    after you encrypt it in Step 8.
    S1> enable
    S1# configure terminal
    S1(config)# enable password c1$c0
    S1(config)# exit
    %SYS-5-CONFIG_I: Configured from console by console
    S1#

    Verify that privileged mode access is secure.

    Enter the exit command again to log out of the switch.

    Press <Enter> and you will now be asked for a password:


    User Access Verification
    Password:

    The first password is the console password you configured for line con 0. Enter this
    password to return to user EXEC mode.

    Enter the command to access privileged mode.

    Enter the second password you configured to protect privileged EXEC mode.

    Verify your configurations by examining the contents of the running-configuration file:

    S1# show running-confi

    Notice how the console and enable passwords are both in plain text. This could pose a
    security risk if someone is looking over your shoulder.

    Configure an encrypted password to secure access to privileged mode.

    The enable password should be replaced with the newer encrypted secret password using
    the enable secret command. Set the enable secret password to itsasecret.
    S1# config t
    S1(config)# enable secret itsasecret
    S1(config)# exit
    S1#
    Note: The enable secret password overrides the enable password. If both are configured on
    the switch, you must enter the enable secret password to enter privileged EXEC mode.

    Verify that the enable secret password is added to the configuration file.
    Enter the show running-configuration command again to verify the new enable secret
    password is configured.
    Note: You can abbreviate show running-configuration as
    S1# show run

    What is displayed for the enable secret password? 5


    $1$mERr$ILwq/b7kc.7X/ejA4Aosn0

    Why is the enable secret password displayed differently from what we configured?

    so the password isnt displayed and it is more secure ________________________

    Encrypt the enable and console passwords.

    As you noticed in Step 7, the enable secret password was encrypted, but the enable and
    console passwords were still in plain text. We will now encrypt these plain text passwords
    using the service password-encryption command.
    S1# config t
    S1(config)# service password-encryption
    S1(config)# exit
    If you configure any more passwords on the switch, will they be displayed in the configuration
    file as plain text or in encrypted form? Explain why?
    __encrypted; anything on that level will now be encrypted___________________________

    Configure a MOTD Banner

    Configure a message of the day (MOTD) banner.

    The Cisco IOS command set includes a feature that allows you to configure messages that
    anyone logging onto the switch sees. These messages are called message of the day, or
    MOTD banners. Enclose the banner text in quotations or use a delimiter different from any
    character appearing in the MOTD string.
    S1# config t
    S1(config)# banner motd "This is a secure system. Authorized
    Access Only!"
    S1(config)# exit
    %SYS-5-CONFIG_I: Configured from console by console
    S1#
    When will this banner be displayed?
    ___anytime anyone attempts to log in _________________________________________
    Why should every switch have a MOTD banner?
    ___to declare that only authorized personnel should attempt to access a device
    ___________

    Save Configuration Files to NVRAM

    Verify that the configuration is accurate using the show run command.

    Save the configuration file.

    You have completed the basic configuration of the switch. Now back up the running
    configuration file to NVRAM to ensure that the changes made are not lost if the system is
    rebooted or loses power.
    S1# copy running-config startup-config
    Destination filename [startup-config]?[Enter]
    Building configuration...
    [OK]
    What is the shortest, abbreviated version of the copy running-config startup-config
    command? _copy run start________

    Examine the startup configuration file.

    Which command will display the contents of NVRAM? ___show


    run_________________________________________
    Are all the changes that were entered recorded in the file? _yes______

    Configure S2
    You have completed the configuration on S1. You will now configure S2. If you cannot
    remember the commands, refer to Parts 1 to 4 for assistance.
    Configure S2 with the following parameters:

    Name device: S2

    Protect access to the console using the letmein password.

    Configure an enable password of c1$c0 and an enable secret password of


    itsasecret.

    Configure a message to those logging into the switch with the following message:
    Authorized access only. Unauthorized access is prohibited and
    violators will be prosecuted to the full extent of the law.

    Encrypt all plain text passwords.

    Ensure that the configuration is correct.

    Save the configuration file to avoid loss if the switch is powered down.

    Suggested Scoring Rubric


    Activity Section
    Part 1: Verify the Default
    Switch Configuration

    Question
    Location

    Possible
    Points

    Step 2b, q1

    Step 2b, q2

    Step 2b, q3

    Step 2b, q4

    Step 2b, q5

    Part 1 Total
    Part 2: Create a Basic
    Switch Configuration

    Part 3: Configure a MOTD


    Banner

    10

    Step 2

    Step 7b

    Step 7c

    Step 8

    Part 2 Total

    Step 1, q1

    Step 1, q2

    Earned
    Points

    Part 3 Total
    Part 4: Save Configuration
    Files to NVRAM

    Step 2

    Step 3, q1

    Step 3, q2

    Part 4 Total

    Packet Tracer Score

    72

    Total Score

    100

    You might also like