Session 5 Flashcards
Connecting cisco network devices
what mode are you in when you see > ?
user exec mode
what commands do you need to add to enable a password for line console 0?
config t
line console 0
password #####
login
what command do you add to change the timeout session for line console 0?
exec-timeout ## $$
# = is in minutes $ = is seconds
0 = do not time out
How do you enable password the moment from user exec to privilege mode?
configt t
password ###
Are we hashing or encrypting when adding a enable secret password?
hashing
how many default vty lines do you have?
5 (0-4)
when you remove the login from line console 0 or vty what does that mean?
you can still connect to the device but you will not be asked to be prompted for a password.
what command do you add an ACL to a VTY?
you use IP acess-class #
How do you set up a ssh connection
- You need a hostname
- You need a domain name (ip-domain-name)
config t
crypto key generate rsa modulus 1024 (higher # is better)
what command you you change in the line vty to change it to use the local account
loginlocal
What is transport input command ?
controls what is allowed to be utilize to connect.
ex: telnet / ssh
by default it is usually all but it can very by device platform.
Login banner what is it?
is a security feature.
ex: is a security sticker we put
what is a AAA server
Radius or tacacs+ used for authentication.
Login banner is used when?
when you need to provide username and password. you can put this up as a way to prevent unauthorized logins.
what is a MOTD
message of the day - just a message when you about something happening. nothing fancy.
what is one way to enable port security?
shutdown the port
switchport port-security mac-address sticky
what is mac address flooding?
malicious user and they broadcast a but of frames a different mac address.
mac off (program)
what are the options for switchport port-security?
protect - continue to allow traffic for the approved MAC address but those not allowed never show up in syslogs
restrict (continue to allow traffic only for frames that have an approved MAC address only)
shutdown (enable by default) puts port in err-disable
what command can you input to verify power security?
show port-security interface ####
Where is the clock set? and what time do you put
user exec mode? Universal time coordinated UTC
how to do you configure timezone and adjust it in a switch?
config t clock timezone (est,ast,pst)
how do you set up daylight savings time?
config t
clock summer-time (###) recurring $$$$ @@@@
\$\$$ - date when it starts (winter time) @@@ - date in summer when it stops # - timezone
what is NTP?
What is the format?
What port does it use?
is a protocol that network devices uses to synchronize their time
NTP uses a client/server model
Port 123
What is stratum level for NTP?
basically a pyramid scheme. The closer you are to the time device, the lower stratum # you will have.
Limit of 15 devices can be daisy chain