Springfield Site Challenges and Implementations Paper Example

Introduction

The xACME Technology allow students to conduct their daily activities and responsibilities. The primary issue is that the Springfield site is facing network challenges that need to be resolved to enable the xAcme Technology Trade School to perform their daily activities. Although, nnovative technologies have been implemented such as the xACME to increase the efficiency of performing tasks in different remote xACME sites, there are still challenges that require immediate attention. The Cisco Network Proposal aim to address the challenges presented by the administrators at the site and provides viable solutions that would protect the network from potential threat vectors and malicious activity of the network. Therefore, the proposal will increase the network efficiency and usability and promote security and health of the Springfield site's network.

Is your time best spent reading someone else’s essay? Get a 100% original essay FROM A CERTIFIED WRITER!

Save 25%

Site Details and Challenges

The xACME has seen the need of implementing certain technologies in different remote locations. Each location needs a Spanning Tree Protocol (STP), secured passwords, banners, and device hostnames. As provided in table 2 and table 3, of the Springfield location devices, the configurations have the following concerns that the administrators must address immediately: incorrect device configurations and incorrect implementation of the STP on the 4 switches. Therefore, the major problem is that the deployment of Switch 1 as the root device is the problem.

The administrators must ensure that basic configurations are available before making any connection to any network or switch to ensure network integrity. The configuration of the STP will have many advantages, since it has become difficult for the administrators to use switch 1 as the root of the Springfield topology. The issue with the switch and security will be addressed using configurations that would help to protect the network from the bogus Bridge Protocol Data Units. The Virtual Terminal lines, the configuration steps for the passwords and the encryption of the passwords will be addressed.

The following are the relevant Springfield Site specifications and pertinent network devices:

Table 1: Cisco 2800 Series Integrated Services

Table 2: Cisco Catalyst 6500 Series

Springfield Site Solution and Technologies

The issues identified can solved through the modification of the device configuration in each Springfield site to match the required encrypted passwords, MOTD and Log-In banners and xACME educational labels.

Since switch 1 is considered as the root bridge, the issues with STP issues must first be addressed. The STP runs on switches and bridges to enable the root bridge to be the main area where data flow is controlled. Therefore, SpringfieldSw1 as the root bridge will control the network through forwarding and blocking to reduce superfluous paths and control traffic loops on a network. For example, the STP is able to recalculate a path between the bridges and switches whenever a switch r bridge is removed.

The administrators should reconfigure the login banner and a MOTD banner on the root switch (switch 1). Besides, by raising the root switch (switch 2) to a higher value compared to other switches will ensure there are no conflicts. As opposed to other switches, the root switch is the only switch configured in Rapid-PVST mode. Therefore, the Springfield site can capitalize on the STP improvement by ensuring other switches also use the Rapid PVST. In addition, the BPDU Guard will be used to prevent Root Bridge and bridging loops integrity loss. The BPDU Guard will enable the administrators to keep the active topology predictable and put into effect the RSTP domain borders. Such improvements will be important in the overall security and functionality of the xACME.

Springfield Sample Configuration

The following configuration will be important in addressing the challenges and issues in the proposal:

• MOTD Banner Steps
• SpringfieldSw1>enaSpringfieldSw1#conf t
• SpringfieldSw1(config)#banner motd #Unauthorized access to this device is prohibited!#
• SpringfieldSw1(config)#exit
• SpringfieldSw1# copy run start
• Login Banner Steps
• SpringfieldSw1>enaSpringfieldSw1#conf t
• SpringfieldSw1(config)#banner login #Welcome administrative user. Login now#
• SpringfieldSw1(config)#exit
• SpringfieldSw1# copy run start
• Device Encrypted Password
• SpringfieldSw1>enaSpringfieldSw1#conf t
• SpringfieldSw1(config)#line con 0
• SpringfieldSw1(config-line)#password Freeloader
• SpringfieldSw1(config-line)#login
• SpringfieldSw1(config-line)#linevty 1
• SpringfieldSw1(config-line)#password Freeloader
• SpringfieldSw1(config-line)#login
• SpringfieldSw1(config-line)#exit
• SpringfieldSw1(config)#service password-encryption
• SpringfieldSw1(config-line)#login
• SpringfieldSw1(config)#exit
• SpringfieldSw1# copy run start
• Root Guard, BPDU Guard, PortFast and RSPT configurations
• SpringfieldSw1>enaSpringfieldSw1#conf t
• SpringfieldSw1(config)#spanning-tree mode rapid-pvstSpringfieldSw1(config)#no spanning-tree uplinkfastSpringfieldSw1(config)#int range gi0/1 - 2
• SpringfieldSw1(config-if)#spanning-tree portfast [trunk]
• SpringfieldSw1(config-if)#spanning-tree guard root
• SpringfieldSw1(config-if)#spanning-tree bpduguard enable
• SpringfieldSw1(config-if)#exit
• SpringfieldSw1(config)#int gi0/96
• SpringfieldSw1(config-if)#spanning-tree portfast [trunk]
• SpringfieldSw1(config-if)#spanning-tree guard root
• SpringfieldSw1(config-if)#spanning-tree bpduguard enable
• SpringfieldSw1(config-if)#end
• SpringfieldSw1#show spanning-tree summary
• SpringfieldSw1#copy running-config startup-configSpringfield

At this point, it is important for the administrators to focus primarily on the default VLAN1 rather than the multiple VLANs because the later is the active VLAN with all ports in the Springfield Site Topology...