Difference between revisions of "Netband Project"

From Teknologisk videncenter
Jump to: navigation, search
m (→‎Course description)
m (→‎Course description)
 
(50 intermediate revisions by 3 users not shown)
Line 1: Line 1:
−
<accesscontrol>NetBand</accesscontrol>
+
The main goal of this project is to design, implement and test some of the many security functionalities in Cisco IOS.
−
The main goal of this project is to design and implement some of the newest security functionalities in Cisco IOS and the Asa appliance.
 
  
  
Line 11: Line 10:
 
<br>
 
<br>
  
−
[[Image:Valgfag.png|thumb|none|200px|Network diagram]]
+
[[Image:Valgfag.png|thumb|none|650px|Network diagram]]
  
 
<br>
 
<br>
Line 17: Line 16:
 
The project will touch on the following areas:  
 
The project will touch on the following areas:  
  
−
*DMVPN  
+
*[[DMVPN]]
 
*[[Netband Project - WLC | WLC]]
 
*[[Netband Project - WLC | WLC]]
 
*[[Netband_Project_-_IPSec/Gre|IPSec vpn]]
 
*[[Netband_Project_-_IPSec/Gre|IPSec vpn]]
−
*Asa firewall   
+
*[[Asa firewall]]  
−
*Zone based firewall
+
*[[Netband_Project_-_Zone_based_Firewall(ZFW)|Zone based firewall]]
−
*IOS firewall
+
*[[Netband Project - IOS firewall | IOS firewall]]
−
*IOS ips   
+
*[[Netband Project - IOS ips |IOS ips]]
−
*SNMPv3   
+
*[[Netband Project - DHCP Snooping | DHCP snooping]]
−
*[[Embedded_Event_Manager_%28EEM%29|Embedded event manager  ]]
+
*[[Netband Project - Dynamic Arp Inspection | Dynamic Arp Inspection]]
−
*802.1x
+
*[[Netband Project - IP Source Guard | IP Source Guard]]  
−
*VMPS   
+
*[[Netband Project - SNMPv3 | SNMPv3]]  
 +
*[[Netband_Project_-_Embedded_Event_Manager_%28EEM%29|Embedded event manager  ]]
 +
*[[Netband Project - 802.1x | 802.1x]]
 +
*[[VMPS]]
 +
*[[Netband Project - CoPP | CoPP]]  
 
*[[Netband Project - Private Vlan|Private vlans]]   
 
*[[Netband Project - Private Vlan|Private vlans]]   
−
*Multicast
+
*[[Netband Project - Multicast|Multicast]]
−
*Device hardening
+
*[[Netband_Project_-_Device_hardening|Device hardening]]
−
*Syslog
+
*[[Netband Project - Syslog|Syslog]]
−
*Layer 2 security features  
+
*[[Netband_Project_-_Windows_server#DHCP|DHCP]]
−
*<span>Network <span style="cursor: help;" onmouseout="UnTip()" onmouseover="TagToTip('access')">access</span> control</span>
+
*[[Netband_Project_-_Windows_server#DFS|DFS]]
 +
*[[Netband_Project_-_Windows_server#Active_Domain|AD]]
 +
*[[Netband_Project_-_Goodies|Goodies]]  
 +
*[[Network access control]]
  
 
== Ip addresses  ==
 
== Ip addresses  ==
Line 101: Line 107:
 
|-
 
|-
 
| Gre p2p links
 
| Gre p2p links
−
| 10.1.3.x/30
+
| 10.255.254.x/30
 
|}
 
|}
 
/*see the network diagram for the ip address assignments
 
/*see the network diagram for the ip address assignments
Line 112: Line 118:
 
1 x Catalyst 3560 PoE (default IOS:(C3560-IPSERVICES-M), Version 12.2(25)SEE3, RAM 128MB, Flash: 16MB)<br/>
 
1 x Catalyst 3560 PoE (default IOS:(C3560-IPSERVICES-M), Version 12.2(25)SEE3, RAM 128MB, Flash: 16MB)<br/>
 
1 x 1221 Lap<br/>
 
1 x 1221 Lap<br/>
−
1 x 2801 (default IOS:(C2801-ADVIPSERVICESK9-M), Version 12.4(13b) RAM: 128MB, Flash: 64MB)<br/>
+
1 x 2801 (IOS Software, 2801 Software (C2801-ADVIPSERVICESK9-M), Version 12.4(9)T, RAM: 128MB, Flash: 64MB)<br/>
  
 
'''Branch 1<br/>'''
 
'''Branch 1<br/>'''
 
1 x Asa5505<br/>
 
1 x Asa5505<br/>
−
1 x Catalyst 3560 PoE<br/>
+
1 x Catalyst 3560 PoE (default IOS:(C3560-IPSERVICES-M), Version 12.2(25)SEE3, RAM 128MB, Flash: 16MB)<br/>
 
1 x 1221 Lap<br/>
 
1 x 1221 Lap<br/>
−
1 x 2801<br/>
+
1 x 2801 (IOS Software, 2801 Software (C2801-ADVIPSERVICESK9-M), Version 12.4(9)T, RAM: 128MB, Flash: 64MB)<br/>
  
 
'''Cloud<br/>'''
 
'''Cloud<br/>'''
Line 124: Line 130:
 
1 x 3560 ((C3560-IPSERVICES-M), Version 12.2(25)SEB4, RAM:128MB, Flash: 32MB)<br/>
 
1 x 3560 ((C3560-IPSERVICES-M), Version 12.2(25)SEB4, RAM:128MB, Flash: 32MB)<br/>
  
−
= Access control =
+
==Reference links==
 +
Include this in all documents
 
<pre>
 
<pre>
−
<accesscontrol>NetBand</accesscontrol>
+
This page is part of the [[Netband_Project|Netband Project]]
 
</pre>
 
</pre>
  
−
 
+
==Passwords==
−
===Passwords===
 
 
[[Netband_Project_-_Inet_router|Internet NAT router]](192.168.138.148): cisco<br/>
 
[[Netband_Project_-_Inet_router|Internet NAT router]](192.168.138.148): cisco<br/>
 
[[Netband_Project_-_Inet_Switch|Internet Switch]](192.168.0.5): cisco<br/>
 
[[Netband_Project_-_Inet_Switch|Internet Switch]](192.168.0.5): cisco<br/>
−
[[Netband Project - Ubuntu server|Ubuntu server]] (10.1.1.10): ciscodisco<br/>
+
[[Netband Project - Ubuntu server|Ubuntu server]] (10.1.1.10): administrator or root:ciscodisco<br/>
−
W2k3 Server (10.1.1.11): ciscodisco<br/>
+
[[Netband_Project_-_Windows_server|W2k3 Server HQ]] (10.1.1.11): Administrator:ciscodisco<br/>
 +
AD client users:
 +
user1:user1pw<br/>
 +
AD domain amdin users: adadm:ciscodisco
 +
 
 +
=External Links=
 +
[[Category:network]][[Category:CCNP]][[category:students]]

Latest revision as of 15:21, 22 August 2010

The main goal of this project is to design, implement and test some of the many security functionalities in Cisco IOS.


Course description

A small company setup is used to illustrate and document the various relevant security features on an network infrastructure. The bussiness case evolves around a small to medium sized company with a centralized HQ and a number of remote branch offices. The project will consist mainly of cisco switches, routers and Asa firewall appliances. In order to support and demonstrate selected features, a small number of linux and windows servers are installed. The servers are just used as support so only basic configuration and security are implemented.


Network diagram


The project will touch on the following areas:

Ip addresses

HQ

Vlan name Ip address range Vlan number
ServerHQ 10.1.1.0/24 3
GuestHQ 172.16.0.0/24 4
ClientHQ 10.1.2.0/24 5
PhoneHQ 10.1.3.0/24 6

Branch1

Vlan name Ip address range Vlan number
ServerB1 10.2.1.0/24 3
GuestB1 172.16.1.0/24 4
ClientB1 10.2.2.0/24 5
PhoneB1 10.2.3.0/24 6

Misc.

Purpose Ip address range
Lan p2p links 10.255.255.x/30
Management 10.0.0.x/32
Gre p2p links 10.255.254.x/30

/*see the network diagram for the ip address assignments

Equipment list

HQ
 1 x Asa5505
1 x Wlc2006
1 x Catalyst 3560 PoE (default IOS:(C3560-IPSERVICES-M), Version 12.2(25)SEE3, RAM 128MB, Flash: 16MB)
1 x 1221 Lap
1 x 2801 (IOS Software, 2801 Software (C2801-ADVIPSERVICESK9-M), Version 12.4(9)T, RAM: 128MB, Flash: 64MB)

Branch 1
 1 x Asa5505
1 x Catalyst 3560 PoE (default IOS:(C3560-IPSERVICES-M), Version 12.2(25)SEE3, RAM 128MB, Flash: 16MB)
1 x 1221 Lap
1 x 2801 (IOS Software, 2801 Software (C2801-ADVIPSERVICESK9-M), Version 12.4(9)T, RAM: 128MB, Flash: 64MB)

Cloud
 1 x 2801 ((C2801-ADVIPSERVICESK9-M), Version 12.4(9)T, RAM: 128MB, Flash: 64MB)
1 x 3560 ((C3560-IPSERVICES-M), Version 12.2(25)SEB4, RAM:128MB, Flash: 32MB)

Reference links

Include this in all documents 

This page is part of the [[Netband_Project|Netband Project]]

Passwords

Internet NAT router(192.168.138.148): cisco
Internet Switch(192.168.0.5): cisco
Ubuntu server (10.1.1.10): administrator or root:ciscodisco
W2k3 Server HQ (10.1.1.11): Administrator:ciscodisco
AD client users: user1:user1pw
AD domain amdin users: adadm:ciscodisco

External Links

Retrieved from "http://mars.merhot.dk/w/index.php?title=Netband_Project&oldid=12851"