IT Infrastructure
BIS2001 IT Infrastructure and Networking
Lab week 10: Configure Switch Port Security
Learning Objectives
Upon completion of this lab, you will be able to:
· Cable a network according to the Topology Diagram.
· Configure port security
· Verify port security
In this lab activity, you will configure and verify port security on a switch. Port security allows you to restrict a port’s ingress traffic by limiting the MAC addresses that are allowed to send traffic into the port.
Topology Diagram
Addressing Table
|
Device |
Interface |
IP Address |
Subnet Mask |
|
S1 |
VLAN 1 |
10.10.10.2 |
255.255.255.0 |
|
PC1 |
NIC |
10.10.10.10 |
255.255.255.0 |
|
PC2 |
NIC |
10.10.10.11 |
255.255.255.0 |
|
Rogue Laptop |
NIC |
10.10.10.12 |
255.255.255.0 |
Scenario
In this lab activity, you will create a network that is similar to the one shown in the Topology Diagram. Begin by cabling the network as shown in the Topology Diagram. You will then perform the switch port configurations required for security. Use the IP addresses that are provided in the Topology Diagram to apply an addressing scheme to the network devices. When the network configuration is complete, examine the port security to verify that the network is operating properly.
Watch the following video that guide you to configure the port security step by step.
https://www.youtube.com/watch?v=ubX-boUrG6A
Complete the tasks provided by Part-1 and Part-2 and provide screen shot for each task.
Part 1: Configure Port Security
Task 1: Access the command line for S1 and enable port security on Fast Ethernet ports 0/1 and 0/2.
[insert screenshot]
Task 2: Set the maximum so that only device can access the on Fast Ethernet ports 0/1 and 0/2.
[insert screenshot]
Task 3: Secure the ports so that the MAC address of the device is dynamically learned and address to the running configuration.
Task 4: Set the violations so that the Fast Ethernet ports 0/1 and 0/2 are not disabled when a violation occurs, but packets are dropped from am unknows source.
[insert screenshot]
Task 5: Disable all the remaining unused ports, Hint: use the range keyword to apply this configuration to all the ports simultaneously.
[insert screenshot]
Part 2: Verify Port Security
Task 1: From PC1, ping PC2. Verify port security is enabled and the MAC addresses of PC1 and PC2 were added to the running configuration.
[insert screenshot]
Task 3: Attach Rogue Laptop to any unused switchport and notice that the link lights are red.
[insert screenshot]
Task 4: Enable the port and verify that Rogue Laptop can pingPC1and PC2. After verification, shut down the port connected to Rogue Laptop.
[insert screenshot]
Task 5: Disconnect PC2 and connect Rogue Laptop to PC2’s port. Verify that Rogue Laptop is unable to ping PC1.
[insert screenshot]
Task 6: Display the port security violations for the port Rogue Laptop is connected to.
[insert screenshot]
Task 7: Disconnect Rouge Laptop and reconnect PC2. Verify PC2 can pingPC1.
[insert screenshot]
Task 8: Why is PC2 able to ping PC1, but the Rouge Laptop is not?
Answer:
Answer the following questions
1. Illustrate the primary goals in providing security using CIA.
Answer:
2. Discuss the function of Network Address Translation (NAT).
Answer:
3. What are the main two types of encryption techniques?
Answer:
4. Compare between Secure Sockets Layer (SSL) and IP Security Protocol (IPSec). In your opinion which one is more secure.
Answer:
Lab submission
Write your name and student ID in this lab document and submit your report during your workshop session to APIC online learning system. No submission is accepted if you didn’t attend and submit your report during the workshop session.
The lab work will contribute to your final assessment results.
You need to Submit 2 files :
· Word document which include screenshots of your work and questions answers
· Packet tracer file which include the configuration you have made
ALL SCREENSHOTS SHOULD SHOW THE TASKBAR WHICH SHOWS DATE AND TIME.
DO NOT SNIP OR TRIM SCREEN SHOTS.
References:
Cisco Network Academy, 2013
Page 1 of 2