Computer security writing
Project 4.1 Downloading and Installing Router Simulation Program
Project 4.2 Working on IOS command line interface
STEP: 1 – Type? To see command available
Step:2 – Type enable and press enter
Step 3 : - Type Configure terminal and press enter
Name the router as Branch06
Step 4: - Configure interface to Ethernet 0 interface
Return to privileged mode by ctrl+Z
Step:5 – Type show running config to see the information of hostname, service-line and interface
Step 6 :- Return to privilege mode
Return to user mode
Project 4.3 Assigning IP addresses to Interfaces
Step:1 – Ethernet 0 interface up and line protocol is down
Step:2 – Enable ethernet 0 interface configuration mode
Step:3 –Ethernet 0 is up and line protocol is up
Step 4: -
Ethernet 0 is up and protocol is down
Step 5 :-
Step 6:-Ethernet 0 and serial 0 show IP address
Project 4.4 – Configuring static routes
Step : 1 – Networks directly connected to the router.
Step 2: -
Step 3:-
Step:4 –
Project 4.5 Exploring Windows ipv6 implementation with Netsh
Step 1:- IP configuration and network configuration
Step 2: -
Step 3:-
Step 4:-
Step 5:-
Case Project 4.1 Tunneling IPv6
Why Teredo was developed:
It was developed to give full IPv6 connectivity to IPv6 hosts even from behind a NAT device. Even though there are various tunneling methods that have been developed before Teredo; it won’t work for the IPv6 devices sitting behind a NAT.
How it is implemented in Windows OS:
Teredo was created at Microsoft as a temp solution for IPv6 connectivity. It is mainly implemented on Windows OS to act as an interpreter to process the IPv4 to IPv6 and vice-versa. When you run out of IP addresses using IPv4 you can easily use Teredo to act as the communicator.
For which types of networks:
Teredo works by tunneling IPv6 over an IPv4 UDP port for the portion of the network that is IPv4 only.
How long it should be implemented:
Teredo is a short term solution, in the long run you want to use a native IPv6 connection as soon as possible
1. Write an ACL to achieve the following:
a. Allow Telnet connections to the 192.168.1.0 network from host 10.3.4.7.
access-list 101 permit tcp host 10.3.4.7 192.168.1.0 0.0.0.255
b. Allow established connections from network 172.16.0.0 to anywhere.
acces-list 101 permit ip 172.16.0.0 0.0.255.255 any any
c. Permit all other access.
access-list 101 permit ip any any
2. Write an ACL to achieve the following:
a. Prevent Telnet access from network 192.168.1.0 to network 172.16.0.0.
access-list 101 deny tcp 129.168.1.0 0.0.0.255 172.16.0.0 0.0.255.255
b. Prevent reserved addresses from accessing any network.
access-list 101 deny
c. Deny spoofing from the default route and broadcast address.
access-list 101 deny
d. Permit all other access.
access-list 101 permit ip any any