Task02

Published: 11 July 2017
on channel: Kandu Education Ltd
128
1

Try our Free IT Tech Course at http://www.kanduit.co.uk/free-it-tech...
BASIC SWITCH SETUP
We now have a little experience in the USER and ENABLE MODE of IOS DEVICES. In this next exercise, we will briefly use the CONFIG MODE.

Let’s first create the basic Network like we did in Task 01

So, we first select NETWORK DEVICES, SWITCHES then the 2960 SWITCH

This is dragged onto the WORKSPACE

To select the LAPTOP we click on END DEVICES

Then drag the LAPTOP onto the WORKSPACE as well

We choose CONNECTIONS, ROLL-OVER or CONSOLE CABLE

Clicking on the SWITCH we choose the CONSOLE PORT using the RJ45 end

We then click on the LAPTOP and select the RS232 or SERIAL PORT

We enter the TERMINAL on the PC/LAPTOP by double clicking on the LAPTOP
Then on the DESKTOP TAB
Then TERMINAL

Clicking on OK to accept the TERMINAL CONFIGURATION

Now we press ENTER to get started.

We said in the last TASK that if we want to configure a DEVICE then we should be in the CONFIGURATION MODE. To do this we first have to be in the ENABLE MODE

So to start we use the COMMAND enable

Once again, we know we are in the ENABLE MODE because of the PROMPT

To enter the CONFIG MODE now, we use config

A message will be displayed, configuring from the terminal, memory or network [terminal]?, press ENTER to accept the first option, TERMINAL. Once again the PROMPT will change, this time to SWITCH(CONFIG)# fig 02

The reason we see this message is that it is possible to load CONFIGURATION FILES from another location, by selecting TERMINAL we have chosen to enter it manually.

The first thing we shall do is rename the SWITCH
So we enter the COMMAND hostname SW1

Notice now the PROMPT has changed again to SW1(config)#

We can actually continue to enter different CONFIGURATION COMMANDS as one long batch, this is useful as it allows long complicated CONFIGURATIONS to be SCRIPTED and entered in one go, rather than a series of small COMMANDS, however in this example we are only changing the HOSTNAME of this DEVICE.

Notice this message ENTER CONFIGURATION COMMANDS, ONE PER LINE. END WITH CNTL/Z fig 03

If we hold down the CTRL KEY and press the Z KEY once, we should find we have returned to the ENABLE MODE and no longer in the CONFIGURATION MODE.
b) Press CTRL-Z or type exit (ENTER) then ENTER again to go back to ENABLE EXEC MODE,

BASIC ACCESS CONTROL

In the last TASK we looked at the basics of accessing the SWITCH and some of the ways we can navigate using the CLI.

You may have noticed that at no point where we asked for any LOGIN credentials, PASSWORD or met with any kind of SECURITY checks, when accessing the SWITCH. In some cases, a SWITCH may be left this way, as traditionally it is physically separate from the main Network, in a locked room or cabinet. However, we may want to apply some basic SECURITY to the DEVICE in case it is ever exposed and someone has access to a ROLL-OVER CABLE.

Remember that there are also different ways of accessing the SWITCH, including TELNET and SSH. However, since this requires IP ADDRESS to be setup we will deal with these later, and for now apply some SECURITY for those entering via the CONSOLE CABLE.

It must be stressed at this point that the SECURITY used here is only very basic, a determined intruder would still be able to physically steal the SWITCH and run through reset routines to gain access, however at least this SWITCH will have some protection enabled.

When accessing the SWITCH via the CONSOLE CABLE, there are two points where we may wish to protect the DEVICE. First it may be to add SECURITY at the point of entry, so a PASSWORD is needed as soon as someone makes the TERMINAL connection.

And secondly, we may wish to restrict the ENABLE COMMAND by adding a PASSWORD requirement. Of course, this in turn then prevents UNAUTHORIZED ACCESS to the CONFIG MODE also. We can choose either or both of these methods of SECURITY.

First, we can check the current CONFIGURATION of this DEVICE using the COMMAND show running-config


On this page of the site you can watch the video online Task02 with a duration of hours minute second in good quality, which was uploaded by the user Kandu Education Ltd 11 July 2017, share the link with friends and acquaintances, this video has already been watched 128 times on youtube and it was liked by 1 viewers. Enjoy your viewing!