Mavzu: Tarmoq qurilmalarida dastlabki xavfsizlik sozlamalarini o’rnatish

tatu_sw1(config)#crypto key generate rsa
The name for the keys will be: tatu_sw1.tatu
Choose the size of the key modulus in the range of 360 to 2048 for your
General Purpose Keys. Choosing a key modulus greater than 512 may take
a few minutes.


How many bits in the modulus [512]: 512
% Generating 512 bit RSA keys, keys will be non-exportable...[OK]


tatu_sw1(config)#ip ssh version 2
*мар 1 0:24:59.72: RSA key size needs to be at least 768 bits for ssh version 2
*мар 1 0:24:59.72: %SSH-5-ENABLED: SSH 1.5 has been enabled
Please create RSA keys (of at least 768 bits size) to enable SSH v2.
tatu_sw1(config)#line vty 0
tatu_sw1(config-line)#transport input ssh
tatu_sw1(config-line)#username admin secret 12345
tatu_sw1(config)#line vty 0
tatu_sw1(config-line)#login local
tatu_sw1(config-line)#do wr
Building configuration...
[OK]


Tarmoq bog‘lanishni tekshiring


To‘g‘ridan to‘g‘ri bog‘lanishni exo so‘rov jo‘natish orqali tekshiring.
a. PC-A kompyuterdan kommutatorning SVI interfeysining administrativ manziligi exo so‘rov jo‘nating
C:\Users\User1> ping 192.168.1.100
PC-A kompyuter S1 kommutatorning MAC manzilini ARP protokoli yordamida olishi kerak. Birinchi paket uzatmada kutish vaqti tugashi mumkin. Lekin exo – so‘rov amalga oshmasa, qurilmaning bazaviy sozlanishidagi nosozlikni tekshiring va sozlang.
S1 kommutatorni uzoqdan boshqarishni tekshiring.

1.5 Rasm. CMD buyruqlar oynasida ssh protocol bilan kommutatorga ulanish

Topshiriq

1.Cisco pascet tracer dasturida lokal tarmoq quring. (kompyuter, kommutator, kabel)

• 
  kommutatorning asosiy vlan interfeysi orqali ip manzil bering (bunda har bir talaba jurnaldagi tartib raqamini ip manzil yozadi, masalan 10 tartib raqamdagi talaba ip manzilni 192.168.1.10 deb yozadi)
  
• 
  kompyuter uchun IP- manzilni o‘rnating. Masalan 192.168.1.20
  
• 
  Telnet protokoli yordamida masofadan kirishni sozlang
  
• 
  telnet yordamida uzoqdan boshqarishni testlang
  
• 
  SSH protokoli yordamida masofadan kirishni sozlang
  
• 
  qurilmaning konfiguratsiyasini ko‘rsating
  
• 
  kommutatorning hozirgi konfiguratsiyasini saqlang.
  

2. Bajargan ishingizni hisobotini electron faylini Hemis tizimiga yuklang