criminal justice

Name: _________________________ Date: _____________

Fill in your name above, put your full response below the question, save the file using the file naming convention: “ISSC457_Lab3_LastName_FirstName.doc” where LastName is your last name and FirstName is your first name, then return this document for grading.

If you do not have the Hardware or Software, then review the lab only…

Hardware/Software Setup Required

Router or

CISCO Packet Tracer 5.0 (available at http://www.cisco.com/web/learning/netacad/index.html)

Note: The lab requires a CISCO router.

Problem Description

When investigating an attack to a router, you need to gather volatile evidence using either direct or indirect access. Direct access is carried out using show commands. Indirect access can be carried out only if the attacker has changed the passwords. This is done by port-scanning every router’s IP information.

In this lab, you will practice acquiring volatile information from a router using various show commands.

Problem Description

When investigating an attack to a router, you need to gather volatile evidence using either direct or indirect access. Direct access is carried out using show commands. Indirect access can be carried out only if the attacker has changed the passwords. It can be carried out by port-scanning every router IP.

In this lab, you will practice acquiring volatile information from a router using various show commands.

Estimated completion time: 60 minutes.

Outcome

Report the steps for performing the task above.

Validation/Evaluation

· How to use various show commands to display the following information:

· Clock details

· Router’s version

· Running configuration

· Startup configuration

· Routing table

· ARP table

· List of users

· List of interfaces

· Routing protocols

Lab Solution

1. Connect to your router using the console interface. Note: the following commands should work for most of Cisco’s router models. If you don’t have access to a router, you can use Cisco’s Packet Tracer to simulate one.

2. Type show clock and press Enter to display the router’s clock.

3. To show the router’s version, type show version and press Enter.

4. Type show running-config and press Enter to list the router’s running configuration.

5. To recover the router’s startup configuration, type show startup-config and press Enter.

6. Type show ip route and press Enter to display the router’s routing table.

7. If you want to display the router’s ARP table, type show ip arp and press Enter.

8. Type show users and press Enter to list all router’s users.

9. The show ip interface command will display the list of router’s interfaces.

10. Type show protocols to list the active network routing protocols.

11. Close all windows.