{"id":7926,"date":"2022-06-21T17:29:12","date_gmt":"2022-06-21T12:29:12","guid":{"rendered":"https:\/\/step-up.uz\/?p=7926"},"modified":"2022-11-09T10:55:05","modified_gmt":"2022-11-09T05:55:05","slug":"tarmoq-qurilmalarida-xavfsizlik","status":"publish","type":"post","link":"https:\/\/step-up.uz\/en\/tarmoq-qurilmalarida-xavfsizlik\/","title":{"rendered":"Tarmoq qurilmalarida xavfsizlik."},"content":{"rendered":"
\n
\"\"<\/figure>\n<\/div>\n\n\n

Ciscoda tarmoq qurilmalar xavfsizligi<\/h2>\n\n\n\n

Cisco qurilmalarini ruxsatsiz kirishdan himoya qilish uchun bir nechta parol turlari qo’llaniladi. Bular konsol uchun parollar, telnet va ssh orqali ulanish uchun parollar, shuningdek, qurilmaning pravilage rejimiga kirish uchun parolni belgilashni turlari mavjud. Ushbu parol turlari barcha tarmoq qurilmalariga o\u2019rnatiladi.<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

Konsol rejimga parol o\u2019rnatish<\/h2>\n\n\n\n
Router#configure terminal
Enter configuration commands, one per line. End with CNTL\/Z.
Router(config)#line console 0
Router(config-line)#password MyPassword
Router(config-line)#login
Router(config-line)#exit
Router(config)#exit
Router#<\/pre>\n\n\n\n
Telnet yoki SSH ga parol o\u2019rnatish<\/h2>\n\n\n\n
Router#configure terminal
Enter configuration commands, one per line. End with CNTL\/Z.
Router(config)#line vty 0 4
Router(config-line)#password MyPassword
Router(config-line)#login
Router(config-line)#exit
Router(config)#exit
Router#<\/pre>\n\n\n\n
Pravilege rejimga parol o\u2019rnatish<\/h2>\n\n\n\n
Router#configure terminal
Enter configuration commands, one per line. End with CNTL\/Z.
Router(config)#enable password MyEnablePassword
Router(config)#exit
Router#<\/pre>\n\n\n\n
Router#configure terminal
Enter configuration commands, one per line. End with CNTL\/Z.
Router(config)#enable secret SecretPassword
Router(config)#exit
Router#<\/pre>\n\n\n\n
Parollarni shifrlash xizmati<\/h2>\n\n\n\n
Router(config)#service password-encryption
Router(config)#exit
Router#show running-config
Building configuration\u2026
\u2026
enable secret 5 $1$mERr$KnP4XAeHLfyk\/RPXMCetr0
enable password 7 080C556B0718071B173B0D17393C2B3A37
\u2026
line vty 0 4
password 7 080C557E080A16001D1908
login
\u2026<\/pre>\n\n\n\n
SSH vs TELNET<\/h2>\n\n\n
\n
\"\"<\/figure>\n<\/div>\n\n\n
TELNET<\/h2>\n\n\n\n
ROUTER sozlamasi quyidagicha:<\/p>\n\n\n\n
Router>enable\nRouter#conf t\nRouter(config)#int GigabitEthernet 0\/0\nRouter(config-if)#no shutdown\nRouter(config-if)#ip address 192.168.10.1 255.255.255.0\nRouter(config-if)#exit\nRouter(config)#line vty 0 15\nRouter(config-line)#password 123<\/pre>\n\n\n
\n
\"\"<\/figure>\n<\/div>\n\n\n
SSH<\/h2>\n\n\n
\n
\"\"<\/figure>\n<\/div>\n\n\n
ROUTER sozlamasi quyidagicha:<\/p>\n\n\n\n
Router(config)#int GigabitEthernet 0\/0\nRouter(config-if)#no shutdown\nRouter(config-if)#ip address 192.168.10.1 255.255.255.0\nRouter(config-if)#exit\nRouter(config)#hostname R\nR(config)#ip domain-name R.uz\nR(config)#crypto key generate rsa 1024\nR(config)#enable secret cisco\nR(config)#username cisco secret 123\nR(config)#ip ssh version 2\nR(config)#ip ssh time-out 30\nR(config)#ip ssh authentication-retries 2\nR(config)#line vty 0 15\nR(config-line)#transport input ssh\nR(config-line)#login local<\/pre>\n\n\n
\n
\"\"
ssh -l cisco 192.168.10.1<\/figcaption><\/figure>\n<\/div>\n\n\n
AAA serveri<\/h2>\n\n\n\n
Qurilmaga murojat qilishning ikki xil usuli bor ular local va AAA server orqali amalga oshiriladi. AAA (Autentification, authorization, accounting) autentifikatsiyadan o\u2019tib avtorizatsiyadan o\u2019tgach xizmatlardan foydalanish huquqiga ega bo\u2019lish deganidir. AAA ning asosiy ikkita protokoli keng tarqalgan va ommaviy tarzda ishlatiladi. Ular RADIUS va Tacacs (Tacacs+) protokollaridir.<\/p>\n\n\n
\n
\"\"<\/figure>\n<\/div>\n\n\n
Radius vs Tacacs<\/h2>\n\n\n\n
\"\"<\/figure>\n\n\n
\n
\"\"<\/figure>\n<\/div>\n\n\n
Radius serverni sozlash:<\/p>\n\n\n
\n
\"\"<\/figure>\n<\/div>\n\n\n
Routerni sozlash:<\/p>\n\n\n\n
Router(config)#int fa0\/0
Router(config-if)#no shut
Router(config-if)#ip address 10.1.1.1 255.255.255.0
Router(config)#aaa new-model
Router(config)#radius-server host 10.1.1.10 key cisco
Router(config)#aaa authentication login default group radius local
Router(config)#username local password local<\/pre>\n\n\n\n
<\/p>","protected":false},"excerpt":{"rendered":"
AAA server, Telnet, SSH<\/p>","protected":false},"author":1,"featured_media":7940,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_editorskit_title_hidden":false,"_editorskit_reading_time":2,"_editorskit_is_block_options_detached":false,"_editorskit_block_options_position":"{}","footnotes":""},"categories":[7],"tags":[],"class_list":{"0":"post-7926","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-network"},"_links":{"self":[{"href":"https:\/\/step-up.uz\/en\/wp-json\/wp\/v2\/posts\/7926","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/step-up.uz\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/step-up.uz\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/step-up.uz\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/step-up.uz\/en\/wp-json\/wp\/v2\/comments?post=7926"}],"version-history":[{"count":6,"href":"https:\/\/step-up.uz\/en\/wp-json\/wp\/v2\/posts\/7926\/revisions"}],"predecessor-version":[{"id":8374,"href":"https:\/\/step-up.uz\/en\/wp-json\/wp\/v2\/posts\/7926\/revisions\/8374"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/step-up.uz\/en\/wp-json\/wp\/v2\/media\/7940"}],"wp:attachment":[{"href":"https:\/\/step-up.uz\/en\/wp-json\/wp\/v2\/media?parent=7926"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/step-up.uz\/en\/wp-json\/wp\/v2\/categories?post=7926"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/step-up.uz\/en\/wp-json\/wp\/v2\/tags?post=7926"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}