Cyber Security Q8
Cyber Security Q8
Write the steps to Install and configure Network Components like switches,
Huband Mode and how do you connect to Dial-Up networking
You need to start with a connection to the console port. That means configuring your
terminal emulator software and connecting your rollover cable between your switch’s
console port and your PC.
Baud rate:9600
Data bits: 8
Stop bits:1
Parity: None
Assuming your PC’s serial port is COM1, if you use Putty and Windows, you can set the
session up like this(under the “Serial” options in the menu):
Once your cable is connected and the session is set up, click open. Then press enter to get are
spon seat the terminal window.
The management IP address is where you can log into the switch for future administrative
tasks. Once your management IP is set up, you can use it to SSH into the switch and
configure it over the network.
First, we access Privileged EXEC mode with the “enable” switch configuration command:
From there, we enter Global Configuration mode with “configt” (or “configure
terminal”):
Next, we access the VLAN interface:
Now, we can assign the management IP and subnet. In this example, I’l lassign
10.10.11.11 with a 255.255.255.0 subnet. Be sure to replace that with the correct
values for your switch!
We can exit interface configuration mode and assign a default gateway for the switch from
global configuration mode.
In addition to setting the IP address of the switch, you should give it alogical host name. To
do that, we enter global configuration mode and use the hostname command:
Similarly, we can also add a domain name with the domain command:
Strong passwords are an important part of hardening a managed switch, so next we’ll add a
password to all virtual terminal (VTY) lines. Our switch has 16 VTY lines which are used for
remote access, so we’ll configure the entire range from 0-15:
Next, we’ll exit the VTY configuration, access console line0, and assign it a separate
password:
In addition to password protecting the VTY and console lines, we can and should protect
Privileged EXEC mode with a password.
We can do that from global configuration mode:
At some point, you’ll find yourself in need of access to your network devices, and you’re not
physically in the same room as them. To access a switch’s CLI over the network, you’ll need
to use Telnet or SSH. From a security perspective, Telnet is usually a non-starter because
data is transmitted in plain text. That leaves us with SSH.
Finally, we’ll tell the switch to check the local user s’database to authenticate users:
Step7: CreateVLANs
One of the most obvious reasons to use a managed switch is the ability to create VLANs to
separate network segments. We can do that by using the vlan command and then assigning
our VLN a name .For example, tocreateVLAN2andname it“cafe”:
You can now exit, and repeat the steps for as many VLANs as you need.
After we create our VLANs, we can add ports to them. For example, to add ports 5, 6, and 7
as access ports inVLAN2, we can use these switch configuration commands:
Step9: Configure trunk ports
If you need one port to transmit traffic from multiple VLANs, you’ll need to design ateita
“trunk port”. To make a port a trunk port, we simply access its configuration and set the
mode to trunk. For example, to make port 2 on our switch a trunk port:
When our configuration is complete, we can save our changes to the startup configuration.
Don’t forget this step, or all your work will be gone come the next switch reboot!