CCNA Security Certification Exam Tutorial
A Guided Tour Of The Security Device Manager (SDM)
By Chris Bryant, CCIE #12933
Knowing your way around SDM is a vital part of your CCNA Security exam studies, and you'll definitely see it in today's production networks as well.
In today's tutorial, we'll take a guided tour of SDM and a quick look at the capabilities of each section. Before we can tour SDM, we need to successfully connect to the router, and we do that with the SDM Launcher.
I'm Paying It Forward - To You.
Get CCNA Security Certified Today - For $20.
When you install SDM, there's an option to create a desktop icon for the Launcher. I chose that option during this particular install, so I'll click that icon and we'll get started!
Note the option for HTTPS. I'll check that box and in the dropdown window, I've selected 10.10.10.1, the neighboring interface I've already set up on the router. After clicking Launch, we're launched to the next window!
A browser window opens and contains this message:

Note that you can close this window. That's not the case with the next window....
If you close that window while you're in SDM, you'll suddenly find yourself no longer in SDM!
Next, we're prompted for a username and password. As we saw in another part of my CCNA Security course, the username / password combination used here must have a privilege level of 15. If that's not the case, the login window will simply come back up. The user is not told the reason for the rejected login.
Upon a successful login, you'll see the following:

.. and when the population is complete, you'll see the SDM Home window!
The Home window displays a great deal of helpful information about the router, including....
The router model, memory, Flash, and IOS Version
The policies and VPNs in operation
The routing protocols in use
Note the message "IPS not supported" in the lower right-hand section under Intrusion Prevention. I wanted to show you that you cannot necessarily run every SDM service on every router, so this install was performed on a router that does not quite have enough memory to run IPS. No worries, we'll use a different router in future labs, and run plenty of IPS labs as well.
There are some SDM display and operational defaults you may wish to change before getting started. To see these options, select Edit > Preferences.

There are no "right" or "wrong" settings here, but you should know how to change them. I personally like to see the commands before they're delivered to the router, but that is not a default. In other sections in this course, you'll see the command previews; please note that this is not a default. And now you know how to change that default!
In the next section of my CCNA Security Exam tutorial series, we'll take a look at the Configure and Montior sections of SDM.
I'm Paying It Forward - To You.
Get CCNA Security Certified Today - For $20.
To your success,
Chris Bryant
CCIE #12933
"The Computer Certification Bulldog"
chris@thebryantadvantage.com
|