MUXAMMAD AL-XORAZMIY NOMIDAGI
TOSHKENT AXBOROT TEXNOLOGIYALARI UNIVERSITETI
SAMARQAND FILIALI
5330300 - Axborot xavfsizligi (sohalar bo’yicha) yo’nalishi 308- gurux
“Kampyuter tarmoqlari” fanidan
LABARATORIYA ISHI
Bajardi; Turdiboyev J
Qabul qildi: Xusanov K.
Samarqand 2022
Mavzu: Cisco Packet Tracer dasturida port xavfsizligini ta’minlash
Laboratoriya ishining bajarilishi
Ishchi sohaga Cisco 2960-24-T kommutatori, Catalyst 2960 kommutatori va Server-PT, PC-PT-0/1 qurilmalarini 1-rasmda ko’rsatilgan tartibda joylashtiramiz va ularni o’zaro kabel yordamida bog’lab olamiz.
1-rasm. Tarmoqning tuzilishi
Switchimiz portlariga ulangan qurulmalarning MAC addresslarini ko’rishimiz uchun CLI consoliga 2-rasm dagi kabi show mac address buyrug’ini kiritishimiz lozim.
2-rasm. Mac address larni ko’rish
Endi esa biz switchdagi har yoniq portga biinchi ulangan MAC addressni biriktirib qo’yishni ko’rib chiqamiz. Yani har bir portga bitta MAC ulanishi kerak.
3-rasm. Portlar xavfsizligini ta’minlash
#interface range f0/1-20 – 1 dan 20 gacha bo’lgan interface lar
#switchport port-security mac-address sticky – 1-kelgan MAC addressni o’ziga yozib qo’yadi.
#sw port-security maximum 1 – 1 ta MAC addressni 1 ta portga biriktirib qo’yish
#sw port-security violation shutdown – portdan uzub boshqa MAC address ulansa portni o’chirib qo’yish degani
CLI code ketma-ketligi
Switch>show mac address
Natija:
Mac Address Table
-------------------------------------------
Vlan Mac Address Type Ports
---- ----------- -------- -----
1 0001.970d.509c DYNAMIC Fa0/1
1 0001.c939.4836 DYNAMIC Fa0/2
1 0010.11a5.b670 DYNAMIC Fa0/3
Switch>
Switch>en
Switch#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#interface range f0/1-20
Switch(config-if-range)#switchport mode access
Switch(config-if-range)#sw port-security
Switch(config-if-range)#switchport port-security mac-address sticky
Switch(config-if-range)#sw port-security maximum 1
Switch(config-if-range)#sw port-security violation shutdown
Switch(config-if-range)#spanning-tree portfast
Xulosa
Bu labaratoriya mashg’ulotida tarmoq xavfsizligini Switch sozlanmalari misolida ko’rib chiqdik. Switch qurilmalarini sozlashda, tarmoq muhandisi qiladigan ko’nikmalarga eg bo’ldik.
Foydalanilgan adabiyotlar
https://www.youtube.com/watch?v=XyoNUZv117A
https://www.youtube.com/watch?v=MlPT0AjkHZM
Do'stlaringiz bilan baham: |