‫SNP security is another important point of network device security.
‫First of all, you should check whether access to devices has been restricted by access control lists.
‫As mentioned before, S&P has three versions in version one and two.
‫Packets are transmitted as clear text, so the traffic between the client and the server is visible
‫for the third parties who listen to the network traffic and learn the as an MP community name.
‫In addition, there's just no authorization mechanism.
‫S&P V3 was developed due to the weaknesses identified in the first two version.
‫It has encryption and authorization features, but it does not have a mechanism to secure the community
‫name.
‫Port Security is a feature that can help secure access to the physical network.
‫We've been using the Cisco Switch and router throughout the course, so I'm going to explain the port
‫security on Cisco devices.
‫Cisco iOS is the operating system of Cisco routers and network switches.
‫And it has the port security feature, which can be used to restrict the Mac address of the devices
‫that connect to each of the physical switch ports.
‫Cisco Port Security can help to.
‫Tricked the Mac address or addresses that can connect through a switchboard.
‫Restrict a number of Mac addresses that can connect through a Switch port.
‫Set aging of the Mac addresses registered.
‫It can also set the action to take when there is a violation detected.
‫So there are three action modes in case of a violation.
‫Protect drops packets with unknown source addresses.
‫Until you remove a sufficient number of secure Mac addresses to drop below the maximum value.
‫Restrict drops packets with unknown source addresses until you remove a sufficient number of secure
‫Mac addresses to drop below the maximum value, and it causes a security violation counter to increment.
‫Shut down puts the interface into the error, disabled state immediately and sends an S&P trap notification.
‫This is a default action.
‫So here I'll put up some port security usage examples.
‫The first three lines are to be able to start using port security function to begin with.
‫Enter the configure terminal and the interface you want to configure and then set the port mode as access.
‫The default port mode is dynamic, desirable and you cannot configure report in dynamic desirable.
‫If you use port security without any parameter, it enables the port security on the Switch port with
‫the defaults and the defaults are.
‫One Mac address allowed.
‫First connected Mac address is set statically.
‫And disabled port, if there is a violation.
‫So if you use the function with Mac address parameter only the server with a specified Mac address is
‫allowed.
‫Max parameter is used to set the maximum number of Mac addresses allowed on the secure report.
‫If you don't set the max value, the default number is 128.
‫And you can identify how long will the port security roles be active using the aging time parameter?
‫And the value, as always, is in minutes.