ccna 200-301 library pdf

ccna 200-301 library pdf.Management plane traffic is generated by network devices or network management workstations that use processes and protocols (e.g. Telnet, SSH, TFTP, FTP, etc.). The management plane is highly attractive to hackers. For this reason, the management module is built from tools used to mitigate the risk of being attacked.The flow of information between the management host and the managed device can be out-of-band (00B), where information flows inside a network where no production traffic resides, or in-band, where information flows across an enterprise's production network and the Internet.Management plane security can be implemented using the following features.Login and password policies: restrict the accessibility of devices. Restrict the ports that can be accessed and limit the "who" and "how" methods of access. Display legal notices: Display legal notices. This is usually done by the company's legal counsel. Ensure data confidentiality: Prevents locally stored sensitive data from being viewed or copied. Using a management protocol with strong authentication can easeDefeat confidentiality attacks designed to expose passwords and device configurations.Role-BasedAccessControl (RBAC): Ensures that access is granted only to authenticated users, groups, and services. RBAC and Authentication, Authorization, and Audit (AAA) services provide mechanisms to effectively manage access control.Authorization of behavior: restricts access behavior and attempts to specific users, groups, and services (view) o Enable management access reporting: logs and audits all accesses. logs who accessed the device, what behavior occurred, and when the behavior occurred. RBAC restricts user access based on the user's role. Roles, in turn, are created based on the job or task function they undertake and will accessAsk for permissions to be assigned to specific assets. The user is then assigned a role and granted the privileges defined by that role. In CiscoIOS, the role-based CLI access feature implements RBAC for router management accesso This feature creates1.5 Summary 23 different "views" that define which commands are acceptable and which configuration information is visible. For scalability reasons, users, permissions, and roles are typically created and maintained on one central repository server. This allows multiple devices to use access control policies. The central repository server can be an AAA server, such as the Cisco Secure Access Control System (ACS), which provides AAA services to the network for management purposes.1.4.1.4 Data Plane