CCIE Routing and Switching Practice Labs

Section 10: Security (5 Points)

• Configure R3 to be managed by http with password access of cisco for username and cisco for the password.

• It is suspected that your network is being threatened by a W32.Blaster virus. You have been told that the virus is manipulating port 135, 139, and 445 and that it is attempting to enter your network from VLAN1. Configure R2 to block the virus entering the rest of your network and to provide as much detail at Layer 2 and 3 as to which devices might be initiating the attack. The worm will also attempt to send packets to random IP addresses, which do not exist. When this happens, the router will reply with an ICMP message. Configure R2 not to send this ICMP message.