Cisco equipment maintenance

Description

Monitoring Cisco Equipment Using SNMP

SNMP is a protocol used to monitor the equipment of the corporate network infrastructure. SNMP can be used to monitor the following components:

1. Network equipment – routers, switches, firewalls, Wi-Fi access points.
2. Servers
3. Network printers
4. Uninterruptible power supplies

At the moment, there are several versions of the SNMP protocol, the most reliable from the point of view of security is version 3.

Configuration of a VLAN in a Cisco corporate network.

VLAN technology allows the most flexible logical grouping of devices directly regardless of the physical topology of the network. The VLAN operates at the 2nd (channel) layer of the OSI network model. Examples of Local Area Network Segmentation:

• It is necessary to limit traffic between departments (HR, accounting, etc.) of the organization.
• Business center. It is necessary to limit traffic between segments of networks of tenants of office space.
• A hotel segment is organized for video surveillance system, guest wifi network, etc. and it is necessary to restrict access from these segments to the general corporate network.

In general, the use of VLAN technology has several main advantages:

• Improving corporate network security
• Improving the convenience of network management
• Increased productivity due to a decrease in the total number of broadcast traffic on the network

Configure security features on Cisco switches (DHCP Snooping, Dynamic ARP Inspection, port-security).

To reliably protect the internal infrastructure of the corporate network, a number of technologies have been developed, which are used in Cisco equipment:

• Port Security – limiting the operation of devices with specific MAC addresses on the ports of the network switch.
• DHCP Snooping is a special security technology that is used to protect against attacks on the DHCP protocol.
• Dynamic ARP Inspection is a security technology used to protect against attacks on the ARP protocol.

Aggregation of EtherChannel interfaces.

• Multiple switch interfaces can be combined into a single virtual channel to balance traffic and improve fault tolerance. The following protocols may be used for this purpose: LACP is an open channel aggregation protocol described in the IEEE 802.3ad standard. PAgP is a protocol used by Cisco Systems.