BTF2723 Industrial Networks Assignment Task Sem1, 2025

BTF2723 TASK 1

TASK 1 OBJECTIVES: (50 MARKS)

Part 1: Configure Basic Device Settings
Part 2: Configure Basic Security Measures on the Router 
Part 3: Configure Basic Security Measures on the Switch

BTF2723 SECURING NETWORK DEVICES:

BTF2723 BACKGROUND SCENARIO

It is recommended that all network devices be configured with, at least, a minimum set of best practice security commands. This includes end user devices, servers, and network devices, such as routers and switches.
In this lab, you will configure the network devices in the topology to accept SSH sessions for remote management. You will also use the IOS CLI to configure common, basic best practice security measures. You will then test the security measures to verify that they are properly implemented and working correctly.
Note: The routers used with CCNA hands-on labs are Cisco 1941 ISRS with Cisco IOS Release 15.2(4)M3 (universalk9 image). The switches used are Cisco Catalyst 2960s with Cisco IOS Release 15.0(2) (lanbasek9 image). Other routers, switches and Cisco IOS versions can be used. Depending on the model and Cisco IOS version, the commands available and output produced might vary

REQUIRED RESOURCES

1. 1 Router (Cisco 1941 with Cisco IOS software, release 15.2(4)M3 universal image or comparable)
2. 1 Switch (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)
3. 1 PC (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
4. Console cables to configure the Cisco IOS devices via the console ports
   Ethernet cables as shown in the topology

BTF2723 INSTRUCTIONS:

PART 1: CONFIGURE BASIC DEVICE SETTINGS (8 MARKS)

In Part 1, you will set up the network topology and configure basic settings, such as the interface IP addresses, device access, and passwords on the router.
Step 1: Cable the network as shown in the topology. (2 Marks)
Step 2: Cable the network as shown in the topology. (2 Marks)
Step 3: Initialize and reload the router and switch. (2 Marks)
Step 4: Visually inspect network connections. (2 Marks)

PART 2: CONFIGURE BASIC SECURITY MEASURES ON THE ROUTER (24 MARKS)

Step 1: Strengthen passwords. (2 Marks)
Step 2: Enable SSH connections. (2 Marks)
Step 3: Secure the console and VTY lines (2 Marks)
Step 4: Verify that all unused ports are disabled (2 Marks)
Step 5: Verify that your security measures have been implemented correctly.

a. Use Tera Term to telnet to R1. (2 Marks)
b. Use Tera Term to SSH to R1. (2 Marks)
c. Intentionally mistype the user and password information to see if login access is blocked after two attempts. (2 Marks)
d. From your console session on the router, issue the show login command to view the login status. In the example below, the show login command was issued within the 30 second login blocking period and shows that the router is in Quiet-Mode. The router will not accept any login attempts for 14 more seconds. (4 Marks)
e. After the 30 seconds has expired, SSH to R1 again and login using the admin username and Admin15p@55 for the password. (2 Marks)
f. Enter privilege Exec mode and use Enablep@55 for the password. (2 Marks)
g. Issue the show running-config command at the privileged EXEC prompt to view the security settings you have
applied. (2 Marks)

PART 3: CONFIGURE BASIC SECURITY MEASURES ON THE SWITCH (12 MARKS)

Step 1: Strengthen Passwords on the switch. (4 Marks)
Step 2: Enable SSH Connections. (4 Marks)
Step 3: Secure the console and VTY lines. (4 Marks)