Securing Router Logins with SSH - Revision history

Nels4388 at 17:14, 4 May 2010

2010-05-04T17:14:19Z

← Older revision		Revision as of 17:14, 4 May 2010
Line 6:		Line 6:
	'''DAN MARTINEAU'''		'''DAN MARTINEAU'''

	'''MIKE ~~"the dip shit"~~ GARIN'''		'''MIKE GARIN'''

	==Checking Router Bin file==		==Checking Router Bin file==
Line 90:		Line 90:
	*Step 8		*Step 8
	'''line console 0'''		'''line console 0'''



Line 103:		Line 102:
	*Step 9		*Step 9
	'''line aux 0'''		'''line aux 0'''



	'''no password'''		'''no password'''



Line 120:		Line 117:
	*Step 10		*Step 10
	'''line vty 0 4'''		'''line vty 0 4'''



	'''login local'''		'''login local'''



Line 146:		Line 141:
	*Step 12		*Step 12
	'''cry key generate rsa'''		'''cry key generate rsa'''



Line 163:		Line 157:
	*Step 13		*Step 13
	'''ip ssh time-out (number)'''		'''ip ssh time-out (number)'''

Nels4388 at 17:13, 4 May 2010

2010-05-04T17:13:33Z

← Older revision		Revision as of 17:13, 4 May 2010
Line 1:		Line 1:
	'''Securing Router Logins with SSH'''This is a walk through to help new students learn how to configure a more secure login with a router and utilize SSH.		'''Securing Router Logins with SSH''' This is a walk through to help new students learn how to configure a more secure login with a router and utilize SSH.


			'''ADAM NELSON'''

			'''DAN MARTINEAU'''

			'''MIKE "the dip shit" GARIN'''

	==Checking Router Bin file==		==Checking Router Bin file==

Nels4388 at 17:12, 4 May 2010

2010-05-04T17:12:06Z

← Older revision		Revision as of 17:12, 4 May 2010
Line 186:		Line 186:

	[[File:ssh.3.jpg\|800px]]		[[File:ssh.3.jpg\|800px]]



			==External links==
			*[http://www.cisco.com/en/US/tech/tk583/tk617/technologies_tech_note09186a00800949e2.shtml Cisco Info]

Nels4388 at 17:07, 4 May 2010

2010-05-04T17:07:33Z

← Older revision		Revision as of 17:07, 4 May 2010
Line 186:		Line 186:

	[[File:ssh.3.jpg\|800px]]		[[File:ssh.3.jpg\|800px]]




	~~==External links==~~
	*[[VMWare Setup]]
	*[http://www.wireshark.org/download.html Wireshark Download]
	*[http://media-2.cacetech.com/video/wireshark/custom-shortcuts/ Creating Shortcuts]

Nels4388 at 17:06, 4 May 2010

2010-05-04T17:06:07Z

← Older revision		Revision as of 17:06, 4 May 2010
Line 9:		Line 9:


	[[File:~~Wireshark~~.29.jpg\|800px]]		[[File:ssh.1.jpg\|800px]]


Line 23:		Line 23:


	[[File:~~Wireshark~~.29.jpg\|800px]]		[[File:ssh.ena.jpg\|800px]]


Line 32:		Line 32:


	[[File:~~Wireshark~~.30.jpg\|800px]]		[[File:ssh.config.jpg\|800px]]


Line 41:		Line 41:


	[[File:~~Wireshark~~.31.jpg\|800px]]		[[File:ssh.hostname.jpg\|800px]]


Line 50:		Line 50:


	[[File:~~Wireshark~~.32.jpg\|800px]]		[[File:ssh.passlength.jpg\|800px]]


Line 59:		Line 59:


	[[File:~~Wireshark~~.33.jpg\|800px]]		[[File:ssh.enablesecret.jpg\|800px]]


Line 68:		Line 68:


	[[File:~~Wireshark~~.32.jpg\|800px]]		[[File:ssh.clearpass.jpg\|800px]]


Line 77:		Line 77:


	[[File:~~Wireshark~~.33.jpg\|800px]]		[[File:ssh.userpass.jpg\|800px]]


Line 90:		Line 90:


	[[File:~~Wireshark~~.32.jpg\|800px]]		[[File:ssh.lineconsole.jpg\|800px]]


Line 107:		Line 107:


	[[File:~~Wireshark~~.33.jpg\|800px]]		[[File:ssh.lineaux.jpg\|800px]]


Line 124:		Line 124:


	[[File:~~Wireshark~~.32.jpg\|800px]]		[[File:ssh.linevty.jpg\|800px]]


Line 133:		Line 133:


	[[File:~~Wireshark~~.33.jpg\|800px]]		[[File:ssh.domainname.jpg\|800px]]


Line 146:		Line 146:


	[[File:~~Wireshark~~.32.jpg\|800px]]		[[File:ssh.keygen.jpg\|800px]]



			[[File:ssh.bits.jpg\|800px]]


Line 159:		Line 163:


	[[File:~~Wireshark~~.33.jpg\|800px]]		[[File:ssh.timeoutretries.jpg\|800px]]


Line 168:		Line 172:


	[[File:~~Wireshark~~.33.jpg\|800px]]		[[File:ssh.2.jpg\|800px]]


Line 177:		Line 181:


	~~[[File:Wireshark.33.jpg\|800px]]~~



	*Step 3
	Go to enable mode and enter your password. You are now using secure SSH.		Go to enable mode and enter your password. You are now using secure SSH.



	[[File:~~Wireshark~~.33.jpg\|800px]]		[[File:ssh.3.jpg\|800px]]

Nels4388 at 17:01, 4 May 2010

2010-05-04T17:01:35Z

@@ Line 163: / Line 163: @@
-==Examining Capture Data==
+==SSH Through Putty==
 *Step 1
-Right click the Wireshark icon and click copy.
+You will login using the IP of the router you are connecting to.
-[[File:Wireshark.copy.JPG|800px]]
+[[File:Wireshark.33.jpg|800px]]
 *Step 2
-Right click on the desktop and click paste.
+Login using the user name and password created previously.
+*Step 3
-*Step 4
+Go to enable mode and enter your password.  You are now using secure SSH.
-[[File:Wireshark.paste.JPG|800px]]
+[[File:Wireshark.33.jpg|800px]]
 ==External links==

Nels4388 at 16:57, 4 May 2010

2010-05-04T16:57:38Z

← Older revision		Revision as of 16:57, 4 May 2010
Line 83:		Line 83:
	*Step 8		*Step 8
	'''line console 0'''		'''line console 0'''



	'''login local'''		'''login local'''

Line 93:		Line 96:
	*Step 9		*Step 9
	'''line aux 0'''		'''line aux 0'''



	'''no password'''		'''no password'''



	'''login local'''		'''login local'''

Line 104:		Line 113:
	*Step 10		*Step 10
	'''line vty 0 4'''		'''line vty 0 4'''



	'''login local'''		'''login local'''



	'''transport input ssh''' this last command is to use ssh and not telnet.		'''transport input ssh''' this last command is to use ssh and not telnet.

Line 124:		Line 139:
	*Step 12		*Step 12
	'''cry key generate rsa'''		'''cry key generate rsa'''



	'''(360-2048)''' you will use this to set the size of the key the larger the more secure.		'''(360-2048)''' you will use this to set the size of the key the larger the more secure.

Line 134:		Line 152:
	*Step 13		*Step 13
	'''ip ssh time-out (number)'''		'''ip ssh time-out (number)'''



	'''ip ssh authentication-retries (number)'''		'''ip ssh authentication-retries (number)'''

Nels4388 at 16:56, 4 May 2010

2010-05-04T16:56:14Z

← Older revision		Revision as of 16:56, 4 May 2010
Line 113:		Line 113:


	*Step 5		*Step 11
	'''~~eable secret~~ (~~password~~)'''		'''ip domain-name (domain name)'''



			[[File:Wireshark.33.jpg\|800px]]



			*Step 12
			'''cry key generate rsa'''
			'''(360-2048)''' you will use this to set the size of the key the larger the more secure.



			[[File:Wireshark.32.jpg\|800px]]



			*Step 13
			'''ip ssh time-out (number)'''
			'''ip ssh authentication-retries (number)'''

Nels4388 at 16:52, 4 May 2010

2010-05-04T16:52:10Z

@@ Line 15: / Line 15: @@
-==Basic Operation of Wireshark==
+==Router Configuration==
-This will cover opening and running Wireshark in a virtual machine to capture packets.
+This will cover the commands needed to setup the router logins and SSH.
 *Step 1
-First open Wireshark by double clicking on the icon.
+'''enaable'''
@@ Line 28: / Line 28: @@
 *Step 2
-Click on the Capture Options on the left side of the window, will give you a screen that looks like this.
+'''config t'''
@@ Line 37: / Line 37: @@
 *Step 3
-Click on the drop arrow button on the top right of the window and select the VMware network adapter.
+'''hostname (name)'''
@@ Line 46: / Line 46: @@
 *Step 4
-Click on the Start button.  You are now capturing packets!!!
+'''security passwords min-length (number)''', we used 10 for a password length of 10 characters.
@@ Line 55: / Line 55: @@
 *Step 5
-To stop a capture click on the red x button on the top left side on the capture window.
+'''eable secret (password)'''

Nels4388 at 16:44, 4 May 2010

2010-05-04T16:44:56Z

← Older revision		Revision as of 16:44, 4 May 2010
Line 9:		Line 9:


	[~~http~~:~~//www~~.~~wireshark~~.~~org/download.html Wireshark Download~~]		[[File:Wireshark.29.jpg\|800px]]