Xojiqurbonov Zafarning Tarmoq xavfsizligi

KIS101-19 guruh talabasi Xojiqurbonov Zafarning
Tarmoq xavfsizligi fanidan bajargan
2-LABORATORIYA ISHI

Samarqand-2022
Mavzu: Kommutatorda port xavfsizligini(port security) sozlash
Ishni bajarish tartibi:

• 
  Packet tracer dasturida tarmoq yaratib olamiz
  

• 
  K ommutatorda port xavfsizligini sozlash uchun portlariga kerakli buyruqlarni CLI oynasi orqali yozib chiqamiz undan oldin esa kompyuterlarimizga ip manzillar berib olamiz.
  

Yuqorida Secure -MAC ni dynamic aniqlash korsatilgan.

Endi esa static aniqlashni ko’ramiz.

X avfsizlik buzilishiga javob berish rejimini sozlash

Ishlatilmaydigan portlarni o’chirib qo’ysak ham bo’ladi.

Switch>enable
Switch#configure terminal
Switch(config)#hostname Sw1
Sw1(config)#interface fa0/1
1. Portni access rejimiga o`zgartirish
Sw1(config-if)#switchport mode access
2. Portda port-securityni ishga tushurish
Sw1 (config-if)#switchport port-security
3. Secure-MAC ni dinamik aniqlashni ko`rsatish
Sw1 (config-if)#switchport port-security mac-address sticky
Sw1 (config-if)#exit
4. Secure-MAC ni statik aniqlashni ko`rsatish
Sw1(config)#interface fastEthernet 0/2
Sw1(config-if)#switchport mode access
Sw1(config-if)#switchport port-security
Sw1(config-if)#switchport port-security mac-address 000B.BE9B.EE4A
Sw1(config-if)#end
5. Xavfsizlik buzilishigi javob berish rejimini sozlash
Sw1(config)#interface fastEthernet 0/3
Sw1(config-if)#switchport mode access
Sw1(config-if)#switchport port-security
Sw1(config-if)#switchport port-security mac-address sticky
Sw1(config-if)#switchport port-security violation protect
Sw1(config-if)#end


6. Ishlatilmayotgan portlarni o`chirish
Sw1(config)#interface range fastEthernet 0/5-24
Sw1(config-if-range)#shutdown