NDS441 Network Design and Security Report Sample

NDS441 Network Design and Security

Assessment Task

Assessment task 3 is based on the case which was discussed in Assessment task 2. It must be completed as a group.

This assessment task consists of the following two tasks:

1. Write a 1200-word report after configuring the network devices on packet tracer simulation- based software on the solution that the group provided in Assessment task 2. The report produced by the group should include the network security solution and simulation file.

Instructions

This assessment task builds on Assessment task 2.

Your Learning Facilitator will guide you on how to download and install the Cisco packet tracer in class. You will be configuring your network devices based on the solution that you presented in Assessment task 2. You will be in the same group that you formed for Assessment task 2.

1. Report

The report must include the following points:

Configuration of all the routers and end devices with correct IPv4 addressing.

• Configuration of securing the routers with appropriate passwords and enabling and configuring routing.

• Configuration of a cisco firewall with appropriate rules to secure the network.

• Configuration of switch port security and Access control list. 

Solution

Configuration of switch port security and Access control list:

To implement the switch port security and ACL on the router there is need to configure the Switch as well as ASA.

Switch Port Security:

Switch port security for MBA assignment expert is a type of feature that found in the network switch that allows a network user to configure the ports in a way that limits the number of devices that can connect to a specific ports. This features help in prevent unauthorized device from gaining access to the network by restricting the number of MAC address. That can be associated with the particular port or by controlling the type of traffic that is allowed to pass through. When the Switch port is enabled then switch can use to monitor the MAC address that are detected on each port. If the configured settings are violated such as if more device try to connect than this allowed limit. The switch can take action the issues. This could inclue shutting down the port or send an alert to the admin. This will help in maintain the security and integrity of the network (ComputerNetworkingNotes, 2018).

Figure 1: Switch Port Security

Access control list:

An Access Control List (ACL) is a collection of rules that are utilized by network devices such as firewalls and routers to determine which network traffic is allowed as well as what is not. The source and destination IP addresses, as well as the port numbers that are utilized, the kind of protocol, as well as similar information are some of the variables which these rules are dependent on. Network managers may regulate network traffic and make sure that only the amount of visitors they wish to let can pass across by setting these ACL rules.

Network speed optimization, control over network access, as well as enforcement of security regulations are all frequently performed with the use of ACLs (ManageEngine, 2024).

Figure 2: Access control list

Configuration of a cisco firewall with appropriate rules to secure the network.

- Hostname and Interface Configuration:

• The firewall's hostname is configured to be "ASA".

• Configuration is done for interfaces Ethernet0/0 through Ethernet0/7, with Ethernet0/0 assigned to VLAN 2 and the other interfaces to VLAN 1.

• The configurations of VLAN interfaces Vlan1 and Vlan2 are "inside" and "outside," respectively.

• Both outside (Vlan2) and inner (Vlan1) interfaces are given IP addresses.

- Routing Configuration:

• All traffic having a destination outside the network (0.0.0.0/0) is routed by default to 192.168.10.6, which is the next-hop IP address.

- Access Control:

• The "sec_policy" access control list (ACL) is set up to allow any IP traffic from any source to any destination.

• To implement security policies on incoming traffic from the outside network, the ACL "sec_policy" is applied inbound on the outside interface.

- Timeout Configuration:

• SSH and Telnet connection timeouts are set to 5 seconds.

- DHCP Configuration:

• In order to assign IP addresses to inside devices, the DHCP service is activated on the inside interface.

• The external interface has enabled DHCP auto-configuration.

References:

ComputerNetworkingNotes. (2018, January 22). Switchport Port Security Explained With Examples. ComputerNetworkingNotes; ComputerNetworkingNotes. https://www.computernetworkingnotes.com/ccna-study-guide/switchport-port-security-explained-with-examples.html#:~:text=To%20configure%20port%20security%20we,move%20in%20Privilege%20Exec%20mode.

ManageEngine, communications@manageengine.com. (2024). Network Configuration Management by ManageEngine Network Configuration Manager. ManageEngine Network Configuration Manager. https://www.manageengine.com/network-configuration-manager/access-control-list-cisco.html