Cisco Device Management Study Notes

Cisco Device Management

Initial Configuration Settings

  • To secure access to the Cisco device, perform initial configurations following these steps:
    • Log in via console connection.
    • Enter command line interface by hitting enter.
    • Identify the security risk of having no password for the command line interface.

Securing Access to Console Connection

  • Step 1: Enter global configuration mode.

    • Command: config t
    • This allows changes to terminal settings.

  • Step 2: Configure console access.

    • Command: line console 0
    • The command accesses line configuration for the console port (Line Console 0).

  • Step 3: Set console password.

    • Command: password Cisco
    • Assign simple password for demonstration purposes (real scenarios require strong passwords).
    • Command: login
    • Enforces password requirement before entering user exec mode.

Securing Privileged Exec Mode

  • Step 4: Secure privileged exec mode.
    • Command: exit to return to global configuration mode.
    • Command: enable secret class
    • enable secret command encrypts the password in the configuration file.

Verifying Password Settings

  • Command: show running-config
    • Displays the running configuration including the console and privileged exec passwords.
    • Ensure visibility of hashed enable secret and clear text console password.

Configuring VTY Access

  • Step 5: Secure virtual terminal (VTY) access.
    • Command: line vty 0 15
    • This configures the VTY lines (0 through 15 for remote access).
    • Command: password Cisco
    • Command: login
    • Facilitates the setting of passwords for Telnet or SSH access.

Encrypting Passwords

  • Step 6: Encrypt all passwords.
    • Command: service password-encryption
    • This command encrypts all plain-text passwords in the configuration file.

Reviewing Running Configuration

  • Command: show running-config
    • Verify that all passwords, including console and VTY, are showing as encrypted.

Configuring a Banner Message

  • Purpose: Display a legal liability message upon login.
  • Step 7: Setup banner message.
    • Command: banner motd followed by a delimiter:
    • Example: banner motd #Authorized access only! Violators will be prosecuted.#
    • This presents a warning to unauthorized users.

Saving Configuration

  • Important: Always save your configurations to prevent data loss.
    • Command: copy running-config startup-config
    • This saves the current running configuration to non-volatile memory (NVRAM).
    • Command: show version
    • Verify files are stored in NVRAM.

Loading Previous Configuration

  • To revert to earlier configuration:
    • Command: copy startup-config running-config
    • This command loads saved configurations to the running state without deleting configurations made since last save.

Configuring IP Addresses

  • For devices to communicate on a network, configure:
    • IP Address
    • Subnet Mask
    • Default Gateway

DHCP vs. Static IP Assignment

  • Devices may acquire IP configurations via:
    • Dynamic: From a DHCP server (likely on Packet Tracer).
    • Static: Manually entered configurations.

Configuring Interface IP Addresses on Switches

  • Process for Configuring Switch IP (e.g., VLAN):
    • Command: interface vlan 1 or interface f0/23
    • Assign IP Address:
    • Command: ip address 192.168.1.2 255.255.255.0
    • Activate the interface with:
    • Command: no shutdown

Connect and Verify Device Connectivity

  • Verify Interface Status:
    • Command: show ip interface brief
    • Ensure interface shows as up.
  • Validate connectivity to devices via:
    • Ping Command: ping 192.168.1.10
    • This is critical for ensuring network connectivity between devices.

Testing Connectivity Between Devices

  • Example Testing:
    • From terminal on switch S1: ping 192.168.1.3 (to reach switch S2)
    • From terminal on switch S2: ping 192.168.1.2 (to reach switch S1)
  • Always verify connectivity in both directions as unilateral connectivity may signal issues in network configuration or firewall settings.

Conclusion

  • Mastery of initial device configuration, password security, necessary commands, IP assignments, and verification methods is essential when managing Cisco devices within a network.