SNMp security is another important point of network device security.
First of all, you should check whether access to devices has been restricted by access control lists.
As mentioned before, SNP has three versions in version one and two.
Packets are transmitted as clear text, so the traffic between the client and the server is visible
for the third parties who listen to the network traffic and learn the SNP community name.
In addition, there's just no authorization mechanism.
SNP v three was developed due to the weaknesses identified in the first two versions.
It has encryption and authorization features, but it does not have a mechanism to secure the community
name.
Port security is a feature that can help secure access to the physical network.
We've been using the Cisco switch and router throughout the course, so I'm going to explain the port
security on Cisco devices.
Cisco.
iOS is the operating system of Cisco routers and network switches.
And it has the port security feature which can be used to restrict the Mac address of the devices that
connect to each of the physical switch ports.
Cisco port security can help to.
Tricked the Mac address or addresses that can connect through a switch port.
Restrict the number of Mac addresses that can connect through a switch port.
Set aging of the Mac addresses registered.
It can also set the action to take when there is a violation detected.
So there are three action modes in case of a violation.
Protect drops packets with unknown source addresses until you remove a sufficient number of secure Mac
addresses to drop below the maximum value.
Restrict drops packets with unknown source addresses until you remove a sufficient number of secure
Mac addresses to drop below the maximum value and it causes a security violation counter to increment.
Shut down puts the interface into the error disabled state immediately and sends an SNMp trap notification.
This is the default action.
So here I'll put up some port security usage examples.
The first three lines are to be able to start using port security function to begin with.
Enter the configure terminal and the interface you want to configure and then set the port mode as access.
The default port mode is dynamic, desirable, and you cannot configure a port in dynamic desirable.
If you use port security without any parameter, it enables the port security on the switch port with
the defaults and the defaults are.
One Mac address allowed.
First connected Mac address is set statically.
And disable port if there is a violation.
So if you use the function with Mac address parameter, only the server with a specified Mac address
is allowed.
Max parameter is used to set the maximum number of Mac addresses allowed on the secure port.
If you don't set the max value, the default number is 128 and you can identify how long will the port
security roles be active using the aging time parameter?
And the value, as always, is in minutes.
So, listen, I want to thank you for choosing us, and I hope to see you in another course.
You might just learn something.
See you next time.