Config Basic Switch Management

Question 1

4 Ways of configuring the switch for security

Answer 1

1. Securing user mode and privileged mode with simple passwords
2. Securing user mode access with local usernames
3. Securing user mode access with external authentication servers
4. securing remote access with SSH

Question 2

Default setting of switch

Answer 2

Allows full access from the console but no access via Telnet or SSH

Using default settings, a console user can move into user mode and then privileged mode with no passwords required

However, default settings prevent remote users from accessing even user mode

Question 3

Configuring telnet and ssh password (Login Local - Multiple)

Answer 3

enable
config t
username russ password montecito
username cindy password belgium
line vty 0 1
login local
no password

Question 4

Protecting enable mode

Answer 4

config t

enable secret

Question 5

Configuring telnet and ssh password (Single)

Answer 5

enable
config t
line vty 0 15
password hope
login

Question 6

Configuring console password

Answer 6

enable
config t
line console 0
password love
login

Question 7

Cleaning up password

Answer 7

no password

Question 8

Better security & faster password changes

Answer 8

Authentication, Authorization & Accounting (AAA) server.

These servers hold the usernames/passwords. Server allow users to do self-service and forced maintenance to their passwords

When using a AAA server for authentication, the switch simply sends a message to the AAA server asking whether the username and password are allowed, the AAA server replies

AAA servers - RADIUS or TACACS+

Question 9

Disadvantage of Telnet

Answer 9

All data in the Telnet session flows as clear text

Question 10

Config SSH (Creating encryption key)

Answer 10

hostname sw1
ip domain-name example.com
crypto key generate rsa

Optionally:

1. can dictate modulus: 1024
2. ip ssh version 2

Question 11

Changing protocol that a switch use

Answer 11

1. transport input ssh - Support ssh
2. transport input none - Support neither
3. transport input telnet - Support telnet
4. transport input all - Support telnet and ssh

Question 12

Securing User Mode Access

Answer 12

enable
config t
hostname sw1
ip domain-name example.com
crypto key generate rsa
ip ssh version 2 (optional)
transport ssh all (optional

username sam password cook
line vty 0 15
login local
exit

Question 13

Default transport config

Answer 13

tranport input none

Question 14

ssh command

Answer 14

1. show ip ssh - Lists status information about the SSH server itself
2. show ssh - Lists information about each ssh client currently connected into the switch

Question 15

Host & Switch IP setting for user access

Answer 15

Switch contain NIC

NIC uses concept of Switch Virtual Interface (SVI), whereby each vlan has its own ip address

Question 16

Considerations when config vlan interfaces

Answer 16

1. Never use a VLAN interface for which there are no physical ports assigned to the same VLAN, (VLAN will not reach an up/up state, switch will not be able to communicate)
2. Hosts only communicate within their subnet in the VLAN and not outside (A vlan can have multiple subnet)
3. Sending of Data Packets
   - To send IP packets to hosts in the same subnet, send them directly
   - To send IP packets to hosts in a different subnet, send them to the local router; that is, the default gateway

4.

Question 17

Configuring IPv4 on a switch command

Answer 17

1. interface vlan 1
2. ip address
3. no shutdown
4. ip default-gateway
5. (optional) ip name-server