Cisco Device Security and Remote Management

1. Project overview

Secure-management scope and configuration review across NBCC Cisco exercises.

2. Objective

Use authenticated management and examine VTY restrictions, ACLs and switchport security.

3. Environment and technologies

Cisco IOS; local users; RSA keys; SSHv2; VTY; ACLs; port security; Packet Tracer.

4. Architecture

Management traffic reaches VTY lines through an approved network; ACL restrictions and access-port protections are separate layers.

5. Technical implementation

1. Actual Happy Sunshine command files contain transport input ssh and login local; credential lines are excluded.
2. History specifies SSHv2 and RSA keys; PP-L3-2 requirements include 2048-bit keys.
3. Assignment3-switch security submit.pka was located. Its existence does not prove a passed ACL or port-security test.
4. Review ACL order/direction and VTY access-class independently, then retain permitted and denied connection tests.

6. Configuration examples

Selected recovered VTY lines followed by illustrative checks.

! Actual lines from recovered command exports:
line vty 0 4
 transport input ssh
 login local
! Illustrative verification only:
show ip ssh
show access-lists
show port-security
show port-security interface <access-interface>

7. Security considerations

Exclude passwords, enable secrets, private keys, RADIUS shared secrets and SNMP communities. Password encryption alone does not establish safe credential storage.

8. Troubleshooting

Validate key generation, SSH version, authentication and VTY transport separately. SSH-only transport does not demonstrate an SSHv2 session.

9. Verified result

Actual VTY lines were recovered. No SSHv2 negotiation result, ACL test matrix or port-security violation test was matched.

10. Original evidence

Original router/switch command exports and switch-security .pka located; selected credential-free configuration shown.

Evidence register · Recovered commands are owner-supplied history. Illustrative examples are not claimed execution.