CIT 241 Lab_5
docx
keyboard_arrow_up
School
Brigham Young University, Idaho *
*We aren’t endorsed by this school
Course
241
Subject
Information Systems
Date
Nov 24, 2024
Type
docx
Pages
2
Uploaded by UduakSampson
Lab 1
You're the IT security administrator for a small corporate network. You need to increase the security on
the switch in the networking closet by restricting access management and by updating the switch's
firmware.
In this lab, your task is to:
Create an access profile called MgtAccess and configure it with the following settings:
SettingValueAccess Profile NameMgtAccessRule Priority1Management MethodAllActionDenyApplies to
InterfaceAllApplies to Source IP addressAll
Add a profile rule to the MgtAccess profile with the following settings:SettingValueRule
Priority2Management MethodHTTPActionPermitApplies to interfaceAllApplies to Source IP addressUser
definedIP Version: Version 4IP Address: 192.168.0.10Network Mask: 255.255.255.0
Set the MgtAccess profile as the active access profile.
Save the changes to the switch's startup configuration file.
Update the firmware image to the latest version by downloading the firmware files found in
C:\Sx300_Firmware\Sx300_FW-1.2.7.76.ros.
If you need to log back in to the switch, the user name is ITSwitchAdmin and the password is
Admin$0nly2017 (0 is zero).
Answer
Create an access profile.
From the left menu, expand Security.
Expand Mgmt Access Method.
Select Access Profiles.
Under Access Profile Table, select Add.
Enter the access profile name.
Enter the rule priority.
Under Management Method, make sure All is selected.
Enter the action.
Under Applies to Interface, make sure All is selected.
Under Applies to Source IP Address, make sure All is selected.
Select Apply.
Select Close.
Add a profile rule.
From the left menu, select Profile Rules under Mgmt Access Method.
Select the MgtAccess profile.
Select Add.
Enter the rule priority.
Select the management method.
Under Action, make sure Permit is selected.
Under Applies to Interface, make sure All is selected.
Under Applies to Source IP Address, select User Defined.
Under IP Version, make sure Version 4 is selected.
Enter the IP address.
Enter the network mask.
Select Apply.
Select Close.
Set the MgtAccess profile as the active access profile.
From the left menu, select Access Profiles.
From the Active Access Profile drop-down list, select MgtAccess.
Select Apply.
Select OK.
Save the changes to the switch's startup configuration file.
At the top, select Save.
Under Source File Name, make sure Running configuration is selected.
Under Destination File Name, make sure Startup configuration is selected.
Select Apply.
Select OK.
Upgrade the firmware image to the latest version.
From the left menu, select Getting Started.
Select Upgrade Device Software.
Under File Name, select Choose File.
Browse to and select C:\Sx300_Firmware\Sx300_FW-1.2.7.76.ros.
Select Open.
Select Apply.
Select OK.
Under File Management in the left menu, select Active Image.
Under Active Image After Reboot, select Image 2 from the drop-down list.
Select Apply.
From the left menu under Administration, select Reboot.
Select Reboot.
Select OK.
Log back in as user ITSwitchAdmin with the password Admin$0nly2017 (0 is zero).
Select Log In.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help