CCNA安全- snp ssh syslog 翻译

《CCNA安全- snp ssh syslog 翻译》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、PTActivity: ConfigureCiscoRoutersforSyslog,NTP,andSSHOperationsAddressingTableDeviceInterfaceIPAddressSubnetMaskDefaultGatewaySwitchPortR1FA0/1192.168.1.1255.255.255.0N/AS1FA0/5 S0/0/0(DCE)10.1.1.1255.255.255.252N/AN/AR2S0/0/010.1.1.2255.255.255.252N/AN/A S0/0/1(

2、DCE)10.2.2.2255.255.255.252N/AN/AR3FA0/1192.168.3.1255.255.255.0N/AS3FA0/5 S0/0/110.2.2.1255.255.255.252N/AN/APC-ANIC192.168.1.5255.255.255.0192.168.1.1S1FA0/6PC-BNIC192.168.1.6255.255.255.0192.168.1.1S2FA0/18PC-CNIC192.168.3.5255.255.255.0192.168.3.1S3FA0/6Learn

3、ingObjectives·         ConfigureroutersasNTPclients.配置路由器作为NTP客户端。·         ConfigurerouterstoupdatethehardwareclockusingNTP.配置路由器使用NTP自动更新硬件时钟。·         Configurerouterstologmessagestothesyslogserver.配置路由器把日志信息存储在系统日志服务器上。·         Configurerouterstotimestamplog

4、messages.配置路由器给日志信息打上时间戳。·         Configurelocalusers.配置本地用户。·         ConfigureVTYlinestoacceptSSHconnectionsonly.配置虚拟接口，仅仅允许ssh连接。·         ConfigureRSAkeypaironSSHserver.在sshserver上面配置RSA密钥对。·         VerifySSHconnectivityfromPCclientandrouterclient.验证从PC端到路由

5、器之间的SSH连接。IntroductionThenetworktopologyshowsthreerouters.YouwillconfigureNTPandSyslogonallrouters.YouwillconfigureSSHonR3.网络拓扑中有三个路由器。你将在所有路由器上配置NTP和Syslog。在R3路由器上配置SSH。NetworkTimeProtocol(NTP)allowsroutersonthenetworktosynchronizetheirtimesettingswithanNTPserve

6、r.AgroupofNTPclientsthatobtaintimeanddateinformationfromasinglesourcehavemoreconsistenttimesettingsandSyslogmessagesgeneratedcanbeanalyzedmoreeasily.Thiscanhelpwhentroubleshootingissueswithnetworkproblemsandattacks.WhenNTPisimplementedinthenetwork,itcanbesetuptos

7、ynchronizetoaprivatemasterclock,ortoapubliclyavailableNTPserverontheInternet.NTP可以使网络上的路由器可以自动同步到NTP服务器的设置。一组NTP客户端从一个来源来获得一致的时间信息，生成的日志信息分析起来更加容易。当NTP在网络中实现后，被设置同步于一个私人的主时钟，或者同步于互联网上的NTP服务器。TheNTPServeristhemasterNTPserverinthislab.Youwillconfiguretherouterstoal

8、lowthesoftwareclocktobesynchronizedbyNTPtothetimeserver.Also,youwillconfiguretherouterstoperiodicallyupdatethehardwareclockwiththetimelearnedfromNTP.Otherwise,