ccna 200-301 mega

ccna 200-301 mega.for servers that must be accessed from the Internet or other external networks. The DMZ can be set up between two routers, where the internal router connects to the protected network and the external router connects to the unprotected network, or the DMZ can be simplified to another interface to a single router. A firewall located between the protected and unprotected networks allows the required connections (such as HTTP) to access the public servers in the DMZ from the external (unprotected) network. The firewall serves as the primary protection for all devices in the DMZ. In the DMZ approach, the router provides some protection by filtering certain traffic, but leaves most of the protection to the firewall.2.1.1.3 Protecting the Router2.1 Protecting Access to Devices 27Securing the border router is an important first step in protecting the network. If there are other internal routers, security must be configured for them as well. 3 security zones on the router must be maintained.Physical security provides physical security for the router. Place the router and the physical devices attached to the router in a secure, locked room that is accessible only to authorized personnel, thatare not subject to electromagnetic interference and have fire suppression devices and temperature and humidity control systems. Installing an uninterruptible power supply (UPS) and keeping spare parts available will reduce the possibility of network outages due to power failures. Operating System SecurityProtect the characteristics and performance of the router operating system.Configure the router with the maximum possible memory space. Memory availability protects the network from DoS attacks while supporting the widest range ofsecurity services. Use the latest, stable version of the operating system to meet the network's feature requirements. The security features in the operating system change over time. Have a secure copy of the router operating system image file and router configuration files.