Mavzu: Cisco Packet Tracer dasturida port xavfsizligini ta’minlash Laboratoriya ishining bajarilishi

MUXAMMAD AL-XORAZMIY NOMIDAGI
TOSHKENT AXBOROT TEXNOLOGIYALARI UNIVERSITETI
SAMARQAND FILIALI

5330300 - Axborot xavfsizligi (sohalar bo’yicha) yo’nalishi 307- gurux
“Kampyuter tarmoqlari” fanidan

LABARATORIYA ISHI

Bajardi; Mamarajabov U

Qabul qildi: Xusanov K.

Samarqand 2022

Mavzu: Cisco Packet Tracer dasturida port xavfsizligini ta’minlash

Laboratoriya ishining bajarilishi
Ishchi sohaga Cisco 2960-24-T kommutatori, Catalyst 2960 kommutatori va Server-PT, PC-PT-0/1 qurilmalarini 1-rasmda ko’rsatilgan tartibda joylashtiramiz va ularni o’zaro kabel yordamida bog’lab olamiz.


1-rasm. Tarmoqning tuzilishi

Switchimiz portlariga ulangan qurulmalarning MAC addresslarini ko’rishimiz uchun CLI consoliga 2-rasm dagi kabi show mac address buyrug’ini kiritishimiz lozim.

2-rasm. Mac address larni ko’rish
Endi esa biz switchdagi har yoniq portga biinchi ulangan MAC addressni biriktirib qo’yishni ko’rib chiqamiz. Yani har bir portga bitta MAC ulanishi kerak.

3-rasm. Portlar xavfsizligini ta’minlash

#interface range f0/1-20 – 1 dan 20 gacha bo’lgan interface lar
#switchport port-security mac-address sticky – 1-kelgan MAC addressni o’ziga yozib qo’yadi.
#sw port-security maximum 1 – 1 ta MAC addressni 1 ta portga biriktirib qo’yish
#sw port-security violation shutdown – portdan uzub boshqa MAC address ulansa portni o’chirib qo’yish degani

CLI code ketma-ketligi
Switch>show mac address


Natija:
Mac Address Table
-------------------------------------------

Vlan Mac Address Type Ports

---- ----------- -------- -----

1 0001.970d.509c DYNAMIC Fa0/1

1 0001.c939.4836 DYNAMIC Fa0/2
1 0010.11a5.b670 DYNAMIC Fa0/3

Switch>
Switch>en

Switch#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#interface range f0/1-20
Switch(config-if-range)#switchport mode access
Switch(config-if-range)#sw port-security
Switch(config-if-range)#switchport port-security mac-address sticky
Switch(config-if-range)#sw port-security maximum 1
Switch(config-if-range)#sw port-security violation shutdown
Switch(config-if-range)#spanning-tree portfast

Xulosa
Bu labaratoriya mashg’ulotida tarmoq xavfsizligini Switch sozlanmalari misolida ko’rib chiqdik. Switch qurilmalarini sozlashda, tarmoq muhandisi qiladigan ko’nikmalarga eg bo’ldik.

Foydalanilgan adabiyotlar

1. 
   https://www.youtube.com/watch?v=XyoNUZv117A
   
2. 
   https://www.youtube.com/watch?v=MlPT0AjkHZM