ccna 200-301 network simulator lite volume 1 software

ccna 200-301 network simulator lite volume 1 software. Ensure data confidentiality - Protect sensitive local data from being seen and copied. This requires consideration of vulnerabilities such as data being sniffed in the transmission channel, session hijacking, and exposure to man-in-the-middle attacks.2.1.1.5 Protecting local and remote accessThere are two methods of accessing devices for management purposes: local access and remote access. Local access: all network infrastructure devices are able to be accessed locally. Local access to a router usually requires that the terminal module running28 Chapter 2 Protecting Network Devicescomputer with the emulation software connected directly to the console port of the Cisco router. The administrator must have physical access to the router and use a console cable to connect to the router's console port. Local access is typically used for the initial configuration of the device.Remote access: the administrator can also access the base device remotely. Although there are auxiliary (aux) port options available, the most common remote access includes connecting to the router from a particular computer using Telnet. secure shell (SSH), HTTP, HTTPS, or Simple Network Management Protocol (SNMP). That computer can be on the same subnet as the network device or on a different subnet.Some remote access protocols send data in clear text, including usernames and passwords. If an attacker is able to collect network traffic while an administrator is remotely logging into the router, this attacker will be able to capture passwords or router configuration information. For this reason, allowing only local access to the router is a better option. However, remote access is also necessary. When accessing the network remotely, it is important to guard against the following issues.Encrypting the traffic between the administrator computer and the router. For example, do not use Telnet but use SSH; use HTTPS instead ofTo use the HTTP protocol. Create a dedicated management network. The management network should include only the identified management hosts and connections to the router's dedicated interface. Configure a packet filter to allow only the identified management host and preferred protocol to access the router. For example, allow only IP addresses originating from the management host to access the router via SSH.IP address from the management host initiates a request to connect to the router in the network via the SSH protocol. These precautions are valuable, but they do not completely protect the network, and other defensive measures must be implemented. One of the most basic and important of these is the use of secure passwords.