CCNA Security Certification Exam Tutorial
Performing One-Step Lockdown With Security Device Manager
By Chris Bryant, CCIE #12933
To pass the 640-553 Implementing Cisco IOS Network Security (IINS) exam and become CCNA Security certified, you'll have to master the ins and outs of the Security Device Manager - SDM. (You also must become a CCNA first - that's a prerequisite for all three additional CCNA certifications.)
SDM is a Cisco GUI that can perform tasks from creating VPNs to carrying out a security audit on your router. In today's CCNA Security tutorial, we'll take a look at the process of performing a lockdown on a router.
For A Limited Time, Get A FREE CCNA Security Study Package With My CCNA Study Package Or Any CCNP Package!
I have no first-hand knowledge of this, but when a prison goes into lockdown, everyone and everything is locked up so there will be no trouble. When you perform a lockdown on a router, you'll enabling and disabling certain network services - so there will be no trouble!
Performing a lockdown does not guarantee the router is 100% safe, but it's going to be more secure than it was before. Later in this tutorial, we'll talk about how a lockdown can actually cause trouble - so do read this tutorial to learn how to use SDM for a lockdown, but do not rush to work tomorrow to run one!
The first golden rule of SDM: If you need to carry out a task, always start by clicking the Configure button. After doing so, I'll click on Security Audit.
SDM does give excellent descriptions of the task you're about to carry out, and the Security Audit section is no exception. We'll be shown two options on the Security Audit screen, with the first being the Security Audit option itself.
The option below that is to run a one-step lockdown.
So our options at present are to run a security audit, after which we'll be given the opportunity to implement the audit's suggestions, and a one-step lockdown, which places our router in lockdown with no input or further permission needed from us.
I'll choose the one-step lockdown, and here's the next screen:
As I always say, when a Cisco router or program asks you "Are you sure?", don't just click it - think about it!
And when you see a window like this that not only asks you if you're sure you want to perform this task, but also tells you how to roll the changes back if you don't like them, you better really consider what you're about to do!
Having said that, we'll continue our CCNA Security Exam tutorial on using SDM for One-Step Lockdown by saying "Yes" to the above question and then seeing what happens!
Receive A FREE Immediate Download Of My CCNA Security Study Package (A $67 Value) When You Purchase My CCNA Security Video Boot Camp!
Click this image for full details and samples of the CCNA Security Video Boot Camp!
You'll also find free tutorials on the CCNA Voice exam and CCNA Wireless exam pages as well!
To your success,
Chris Bryant
CCIE #12933
chris@thebryantadvantage.com
|
