ccna 200-301 lectures

ccna 200-301 lectures.1.4.1 NFP1.4.1.1 NFP FrameworkThe Cisco Network FoundationProtection (NFP) framework provides comprehensive guidance for protecting network infrastructure.guidance. These guidelines form the foundation upon which services can be delivered consistently. NTP logically divides routers and switches into three functional areas. The control plane: responsible for properly routing data. Traffic in the control plane consists of device-generated packets that arerequired for operation, such as ARP message exchange or OSPF route announcements.Management plane: Responsible for managing network elements. Management plane traffic is generated by network devices or network management workstations that use processes and protocols such as Telnet, SSH, TFTP, FTP, AAA, SNMP, syslog, TACACS+, RADIUS, and NetFlow.Data plane (forwarding plane): responsible for forwarding data. Data plane traffic typically consists of user-generated traffic forwarded between endstation workstations (endstations). Most traffic traverses the router or switch with the help of the data plane. Packets from the data plane are usually processed in the fast switching cache.1.4.L2 Control PlaneControl plane traffic consists of packets generated by devices that are required for network operation. Control plane security can be enforced by subordinate features.Cisco AutoSecure: Cisco AutoSecure provides the feature of one-step device lockdown to protect the control plane as well as the management plane and data plane. It is a script that is launched from the CLI to configure the router's security posture (security posture). o The script can disable unnecessary system processes and services. It first makes recommendations to address security vulnerabilities and then modifies the router configuration.