Packet tracer activity chapter 5 network security

Packet tracer activity chapter 5 network security verification#
Packet tracer activity chapter 5 network security password#
Packet tracer activity chapter 5 network security windows#

Packet tracer activity chapter 5 network security password#

Both Net Admin and DMZ Web Svr can access the website Branch Admin can access the website Branch Admin can also establish an FTP connection to the web server using the username cisco and the password cisco. вЂ“ FTP traffic from the branch administrator workstation is allowed to the DMZ web server. вЂ“ DNS traffic (both TCP and UDP) is allowed to the DMZ DNS server (two separate ACEs).

вЂ“ HTTP traffic is allowed to DMZ Web Svr. The ACL should be created in the order specified in the following guidelines (Please note, the order of ACL statements is significant only because of the scoring need in Packet Tracer.): вЂ“ Create, apply, and verify an extended named ACL (named OUTSIDE-TO-DMZ) to filter incoming traffic to the HQ-ASA. Configure an ACL to allow access to the DMZ servers from the Internet. вЂ“ Attach the policy map globally to all interfaces.Д«. вЂ“ Create a policy-map global_policy and specify the inspect with dns, ftp, http, and icmp. вЂ“ Create a class inspection_default that matches default-inspection-traffic. Modify the default MPF application inspection global service policy to enable hosts in the Internal network to access the web servers on the Internet Step 5: Configure ACL and firewall on the ASA device to implement the Security Policy.ДЄ. Create an object dmz-web-server to statically translate the web server in the DMZ to the public IP address. Create an object dmz-dns-server to statically translate the DNS server in the DMZ to the public IP address.Д¬. Create an object inside-nat with subnet 192.168.10.0/24 and enable the IP addresses of the hosts in the internal network to be dynamically translated to access the external network via the outside interface.Д«. Step 4: Configure NAT Service for the ASA device for both inside and DMZ networks.ДЄ. вЂ“ Configure SSH session timeout to be 20 minutes. вЂ“ Configure HQ-ASA to accept SSH connections only from the Net Admin workstation. вЂ“ Generate a RSA key pair to support with modulus size of 1024 bits.

вЂ“ Configure AAA to use the local database for SSH connections to the console port. Note: the HQ-ASA is preconfigured with a username Car1Admin with password adminpass01 Configure the ASA device with AAA authentication and verify its functionality: вЂ“ The authentication key is key 1 with the password corpkey.Д«. вЂ“ Enable the authentication to the NTP server. вЂ“ as an NTP client to the AAA/NTP/Syslog server Step 3: Configure Secure Network Management for the ASA Device. Verify that the internal users (PC0 and PC1) obtain the dynamic addressing information correctly. DHCP service should provide DNS server (AAA/NTP/syslog server) information.Д¬.

Step 2: Configure DHCP service on the ASA device for the internal network.ДЄ. Configure the inside, outside, and dmz interfaces with the following information: Access HQ-ASA and enter the privileged mode with the enable password of Thecar1Admin.Д«. Note: HQ-ASA is already configured with a password Thecar1Admin.ДЄ. Step 1: Configure Basic Device Hardening for the ASA device.

Packet tracer activity chapter 5 network security verification#

Note: Appropriate verification procedures should be taken after each configuration task to ensure that the task has been properly implemented. Configure the ASA firewall to implement security policies.Configure DHCP and NAT on the ASA device.Configure basic ASA device hardening and secure network management.In this practice Packet Tracer Skills Based Assessment, you will: Click the Submit Assessment button to submit your work.Do not close Packet Tracer when you are done.

Packet tracer activity chapter 5 network security windows#

Do not use the browser Back button or close or reload any Exam windows during the exam.CCNA Security Practice Skills Assesement Part 2 CCNA Security PT Practice SA вЂ“ Part 2ДЄ few things to keep in mind while completing this activity: