Computer security writing

Project 4.1 Downloading and Installing Router Simulation Program

Project 4.2 Working on IOS command line interface

STEP: 1 – Type? To see command available

Step:2 – Type enable and press enter

Step 3 : - Type Configure terminal and press enter

Name the router as Branch06

Step 4: - Configure interface to Ethernet 0 interface

Return to privileged mode by ctrl+Z

Step:5 – Type show running config to see the information of hostname, service-line and interface

Step 6 :- Return to privilege mode

Return to user mode

Project 4.3 Assigning IP addresses to Interfaces

Step:1 – Ethernet 0 interface up and line protocol is down

Step:2 – Enable ethernet 0 interface configuration mode

Step:3 –Ethernet 0 is up and line protocol is up

Step 4: -

Ethernet 0 is up and protocol is down

Step 5 :-

Step 6:-Ethernet 0 and serial 0 show IP address

Project 4.4 – Configuring static routes

Step : 1 – Networks directly connected to the router.

Step 2: -

Step 3:-

Step:4 –

Project 4.5 Exploring Windows ipv6 implementation with Netsh

Step 1:- IP configuration and network configuration

Step 2: -

Step 3:-

Step 4:-

Step 5:-

Case Project 4.1 Tunneling IPv6

Why Teredo was developed:

It was developed to give full IPv6 connectivity to IPv6 hosts even from behind a NAT device. Even though there are various tunneling methods that have been developed before Teredo; it won’t work for the IPv6 devices sitting behind a NAT.

How it is implemented in Windows OS:

Teredo was created at Microsoft as a temp solution for IPv6 connectivity. It is mainly implemented on Windows OS to act as an interpreter to process the IPv4 to IPv6 and vice-versa. When you run out of IP addresses using IPv4 you can easily use Teredo to act as the communicator.

For which types of networks:

Teredo works by tunneling IPv6 over an IPv4 UDP port for the portion of the network that is IPv4 only.

How long it should be implemented:

Teredo is a short term solution, in the long run you want to use a native IPv6 connection as soon as possible

Hands-on Project 4-1

1. Write an ACL to achieve the following:

a. Allow Telnet connections to the 192.168.1.0 network from host 10.3.4.7.

access-list 101 permit tcp host 10.3.4.7 192.168.1.0 0.0.0.255

b. Allow established connections from network 172.16.0.0 to anywhere.

acces-list 101 permit ip 172.16.0.0 0.0.255.255 any any

c. Permit all other access.

access-list 101 permit ip any any

2. Write an ACL to achieve the following:

a. Prevent Telnet access from network 192.168.1.0 to network 172.16.0.0.

access-list 101 deny tcp 129.168.1.0 0.0.0.255 172.16.0.0 0.0.255.255

b. Prevent reserved addresses from accessing any network.

access-list 101 deny

c. Deny spoofing from the default route and broadcast address.

access-list 101 deny

d. Permit all other access.

access-list 101 permit ip any any