The SDM (Security Device Manager) Cisco is a web tool that allows, without any knowledge of the CLI , to configure graphically or through assistance services router.
1. Description of SDM.
MDS is a tool that provides intuitive web management services Cisco routers. Contains wizards, you can recommend optimal security settings, you can help find problems in operation or conduct audits on the router. The SDM helps the novice and expert improves productivity. SDM can only handle one device at a time, does not criminalize the RAM or CPU consumption of the router managed, can coexist with other management tools and CLI.
2. Prepare the SDM and SDM Express.
Cisco SDM is installed as standard on some models of routers. If not installed as standard can come in a CD or you may download it from cisco.com.
If the router does not have SDM installed as standard we have to prepare it for SDM can access from a PC properly:
Router (config) # username privilege 15 secret toni
cisco Router (config) # ip http authentication local
Router (config) # ip http secure-server
Router (config) # line console 0
Router (config-line) # login local
Router (config) # line vty 0 15
Router (config-line) # privilege level 15
Router (config-line) # transport input ssh telnet
Router (config) # hostname
Barcelona Barcelona (config) # ip domain name
seclab.net Barcelona (config) # crypto key generate rsa general-keys
Choose the size of the key modulus in the range of 360 to 2048 for your General Purpose Keys
. Choosing a key modulus Greater Than 512
A Few May take minutes.
How many bits in the modulus [512]: Generating
% 512 bit RSA keys ... [OK] In the case of wanting to run the SDM from the router the necessary files are:
Router # show flash: System flash directory
:
File Length Name / status 1 9283820 c2600-
ipbase-mz.123-6f.bin
2 3 812 544 1,007,616
common.tar es.tar
April 1038 5 113 152 home.shtml
home . tar-sdmconfig
June 1652 7 4049920 sdm.tar
26xx.cfg 2-7 Files necessary for SDM and file 1 and 6 will vary depending on the IOS used and the configuration file for configured router model.
3. Run the SDM Express.
SDM Express is an initial wizard to configure the router.
If you have a router that has SDM installed at the factory and the browser will get to write http://10.10.10.1 SDM Express. If you have a router that is not factory installed you can copy the necessary files in the flash of the router, copy the file sdmconfig-xxxx.cfg in active and access settings in the browser http://10.10.10.1 writing. If SDM detects that some parameters are not configured run the SDM Express.
The SDM Express allows you to configure:
4. Run the SDM.
We have seen that we can run the SDM from the router but can install on a PC. To do this, after installation, we can run it from the desktop shortcut 'Cisco SDM' entering the IP address of the router to be managed.
5. Browse through the SDM GUI.
navigation in the SDM is done from the toolbar. In this bar there are two modes: setup and monitoring. By selecting one of the ways appears to the right panel with the audience that provides the mode. However, most experts also can make all the settings without using the wizards.
The refresh button lets you synchronize the active configuration of the router with SDM. The save button allows you to save the settings active in the NVRAM.
One of the best option is to tell the SDM that we see what commands are executed in the router before they are executed. In this way we can learn the commands in the CLI.
6. Attendees of the SDM.
Attendees mode configuration:
- Interfaces and Connections: The wizard lets you configure LAN interfaces and DHCP LAN and WAN wizard to configure PPP, Frame Relay and HDLC.
- Firewall and ACL: set a simple firewall (inside, outside) or an advanced (inside, dmz, outside).
- VPN: Set up a VPN site-to-site VPN access, a VPN server or a Dynamic Multipoint VPN (DMVPN).
- Security Audit: make a enhance audit or safety.
- Routing: Configure RIP, OSPF or EIGRP.
- NAT: assign the inside-outside interfaces, assign rules to define ranges and times of validity.
- Intrusion Prevention: enable or disable the intrusion detection system on the selected interface. It also detects if there is a network module for intrusion detection.
- Quality of service: set rules and policies.
- Additional tasks: set any parameter in the desired order.
attendants are monitoring mode:
- Overview.
- State of the interfaces.
- State of the firewall.
- State of the VPN.
- State of the QoS.
- State of the NAC.
- Record status
Source: #. / Hacktracking 3. Run the SDM Express.
SDM Express is an initial wizard to configure the router.
If you have a router that has SDM installed at the factory and the browser will get to write http://10.10.10.1 SDM Express. If you have a router that is not factory installed you can copy the necessary files in the flash of the router, copy the file sdmconfig-xxxx.cfg in active and access settings in the browser http://10.10.10.1 writing. If SDM detects that some parameters are not configured run the SDM Express.
The SDM Express allows you to configure:
- computer and domain name.
- A username and password.
- The enable secret password.
- router LAN interfaces.
- The router as a DHCP server.
- IP addresses of the DNS.
- WAN interfaces.
- Some services to be disabled.
- NTP server to synchronize us.
4. Run the SDM.
We have seen that we can run the SDM from the router but can install on a PC. To do this, after installation, we can run it from the desktop shortcut 'Cisco SDM' entering the IP address of the router to be managed.
5. Browse through the SDM GUI.
navigation in the SDM is done from the toolbar. In this bar there are two modes: setup and monitoring. By selecting one of the ways appears to the right panel with the audience that provides the mode. However, most experts also can make all the settings without using the wizards.
The refresh button lets you synchronize the active configuration of the router with SDM. The save button allows you to save the settings active in the NVRAM.
One of the best option is to tell the SDM that we see what commands are executed in the router before they are executed. In this way we can learn the commands in the CLI.
6. Attendees of the SDM.
Attendees mode configuration:
- Interfaces and Connections: The wizard lets you configure LAN interfaces and DHCP LAN and WAN wizard to configure PPP, Frame Relay and HDLC.
- Firewall and ACL: set a simple firewall (inside, outside) or an advanced (inside, dmz, outside).
- VPN: Set up a VPN site-to-site VPN access, a VPN server or a Dynamic Multipoint VPN (DMVPN).
- Security Audit: make a enhance audit or safety.
- Routing: Configure RIP, OSPF or EIGRP.
- NAT: assign the inside-outside interfaces, assign rules to define ranges and times of validity.
- Intrusion Prevention: enable or disable the intrusion detection system on the selected interface. It also detects if there is a network module for intrusion detection.
- Quality of service: set rules and policies.
- Additional tasks: set any parameter in the desired order.
attendants are monitoring mode:
- Overview.
- State of the interfaces.
- State of the firewall.
- State of the VPN.
- State of the QoS.
- State of the NAC.
- Record status
0 comments:
Post a Comment