3-Laborotoriya ish topshiriq

3-Laborotoriya ish topshiriq

1. 
   AAA server autentifikatsiya rejimini sozlash.(RADIUS,TACACS+). (AAA)(1 ball.)
   
2. 
   DHCP protokoli sozlash. (DHCP)(1 ball.)
   
3. 
   DHCP Snooping-xavfsizlik texnologiyasi. (DHCP snooping) (1 ball)
   
4. 
   ASA xavfsizlik texnologiyasini sozlash.: (ASA)(1 ball) , ASA+NAT +1 ball(2 ball)
   

Jami: 5 ball
!!!Izoh. 3-topshiriq 4 ta laborotoriya ishi mavzusini o’z ichiga oladi. Talaba bu topshiriqda jami 5 ballni qo’lga kiritadi. 4-mavzu yuzasidan ASA texnologiyasidan foydalangan holda NAT ni ham hosil qilinganda +1 ball qo’shiladi. Har bir mavzular bo’yicha 1 balldan beriladi. Ushbu ishlar bo’yicha resurslar bo’limida resurlar kiritilgan. Ushbu fayllardan ham foydalanish mumkin. 4 ta mavzu yuzasidan qilingan ish scrinshot(rasm ) qilinadi va 1 ta faylga joylanadi. Tizimga yuklash paytida .pdf kengaytmali fayl ko’rinishida yuklashni unutmang. Ikkita bir xil bo’lgan ishga avtomatik tarzda 0 ball beriladi. Topshiriqni yuklashdan oldin ishni o’qituvchiga ko’rsatilmagan ishga ham baho berilmaydi. Dedline tugagandan so’ng qo’shimcha vaqt berilmaydi. E’tiborli bo’ling hurmatli talabalar.

ILOVALAR
1.AAA server autentifikatsiya rejimini sozlash.(RADIUS,TACACS+). (AAA)
Router>enable
Router#configure
Router(config)#hostname RW01
RW01(config)#username mac secret mac1
RW01(config)#aaa new-model
RW01(config)#aaa authentication login default group radius local
RW01(config)#aaa authentication enable default group radius local
RW01(config)#radius-server host 192.168.1.2 key 123
RW01(config)#ip domain name million.com
RW01(config)#ip ssh version 2
RW01(config)#crypto key generate rsa
How many bits in the modulus [512]: 1024
RW01(config)#
RW01(config-line)#line vty 0 4
RW01(config-line)#transport input ssh
RW01(config-line)#login authentication default

2. 
   DHCP protokoli sozlash. (DHCP)
   

Router>
Router>enable
Router#config
Router(config)#interface gigabitEthernet 0/0
Router(config-if)#ip address 192.168.1.254 255.255.255.0
Router(config-if)#no shutdown
Router(config)#ip dhcp pool asliddin //Nom berish
Router(dhcp-config)#network 192.168.1.0 255.255.255.0 //Tarmoq ko'rsatiladi
Router(dhcp-config)#default-router 192.168.1.254 //Shlyuz ko'rsatiladi
Router(dhcp-config)#dns-server 192.168.1.253
Router(dhcp-config)#exit
Router(config)#ip dhcp excluded-address 192.168.1.1 192.168.1.10 //Berilmaydigan IP

2. 
   DHCP Snooping-xavfsizlik texnologiyasi. (DHCP snooping)
   

Switch(config)#enable
Switch(config)#conf t
Switch(config)#interface fastEthernet 0/1
Switch(config-if)#ip dhcp snooping trust
Switch(config-if)#exit
Switch(config)#exit
Switch#WR

2. 
   ASA xavfsizlik texnologiyasini sozlash.: (ASA)
   

ciscoasa#enable
ciscoasa#conf t
ciscoasa(config)#enable password cisco
ciscoasa(config)#username admin password cisco
ciscoasa(config)#ssh 192.168.1.0 255.255.255.0 inside
ciscoasa(config)#aaa authentication ssh console LOCAL

PC>ssh -l admin 192.168.1.1

ciscoasa(config)#interface vlan 1
ciscoasa(config-if)#security-level 95
ciscoasa(config)#interface vlan 2
ciscoasa(config-if)#ip address 210.210.0.2 255.255.255.0
ciscoasa(config-if)#no shutdown
ciscoasa(config-if)#exit

//Routerga IP beramiz
//Serverga IP beramiz

ciscoasa(config)#route outside 0.0.0.0 0.0.0.0 210.210.0.1

Router(config)#ip route 192.168.1.0 255.255.255.0 210.210.0.2

ciscoasa(config)#class-map inspection_default
ciscoasa(config-cmap)#match default-inspection-traffic
ciscoasa(config-cmap)#exit
ciscoasa(config)#policy-map global_policy
ciscoasa(config-pmap)#class inspection_default
ciscoasa(config-pmap-c)#inspect icmp
ciscoasa(config-pmap-c)#exit
ciscoasa(config)#service-policy global_policy global
ciscoasa(config)#wr mem
ciscoasa(config)#policy-map global_policy
ciscoasa(config-pmap)#class inspection_default
ciscoasa(config-pmap-c)#inspect http