Cisco packet tracer practice file : Wireless Security Techniques

In this post you will gain knowledge on Wireless Security Techniques.
Actually this techniques is provided by cisco.

So lets start the practice.

First download this file from here : Wireless Security Techniques

Now lets start the practice :

Learning Objectives

• Configure WPA2 in the Linksys WRT300N
• Configure MAC Filtering in the Linksys WRT300N
• Configure Single Port Forwarding in the Linksys WRT300N

Introduction

In this activity, you will configure the Linksys WRT300N wireless router to:

·         Use WPA2 Personal as security method

·         Rely on MAC filtering to increase security

·         Support Single Port Forwarding

Task 1: Connecting to the Wireless Router

Step 1. Logging into the Wireless Router

1. From the Desktop tab in PC0, Choose Web Browser.
2. Type in the IP address of the wireless router 192.168.0.1.
3. When asked for username and password, use admin for both. This is the default (factory settings) username/password for all the Linksys products.
4. Once WRS1 web based configuration page loads, continue to Task 2.

Task 2: Adding Security Features to WRS1

Step 1. Configuring WPA2+AES on WRS1

1. Still from WRS1 configuration web page (reached from a web browser in PC0), navigate to Wireless > Wireless Security.
2. Change Security Mode from Disabled to WPA2 Personal.
3. AES is considered a very strong encryption protocol. Leave it selected.
4. The password for this wireless network is configured in the Passphrase field. Type in aCompWiFi as the password. Notice that the password is case sensitive
5. Scroll down the page and click Save Settings to save the changes.
6. WRS1 is now configured to use WPA2.

Note: Laptop0 won’t be able to associate to WSPR1 just yet because it hasn’t been configured. Laptop0 configuration will be done in Step 2.

Step 2. Configuring Laptop0 wireless client

1. Click on Laptop0 to bring up its configuration window.
2. Click on the Desktop tab.
3. Select PC Wireless.
4. You should see the message No association with access point.
5. Click on the Connect tab.
6. Allow a few seconds to the SSID broadcasted by WRS1 to appear. You should see the SSID aCompany listed under the Wireless Network Name column.
7. Select SSID aCompany by clicking on it. Then click Connect.
8. In the Security field, choose WPA2-Personal.
9. Enter the password for the wireless network, aCompWiFi (same password configured in WRS1) and click Connect.
10. Laptop0should now be associated to WRS1.
11. Take note of Laptop0 IP address (acquired via DHCP from WRS1) and MAC address. Close PC Wireless window and, still from the Desktop tab, select Command Prompt.
12. Type ipconfig /all and take note of Laptop0 IP and MAC addresses.

Step 3. Configuring WRS1 to support MAC Filtering

1. Close the Laptop0 configuration page.
2. Click on PC0 and open a web browser by going to PC0 > Desktop > Web Browser.
3. Type in the IP address of WRS1 to open its configuration web page. Enter admin as the username and password when requested.
4. Navigate to Wireless > Wireless MAC Filter.
5. Select Enabled and Permit PCs listed below to access wireless network.
6. Type in Laptop0 MAC address (written down in Task 2, Step 2) in the MAC 01: field. Notice the MAC address format required by WRS1. It must be in the XX:XX:XX:XX:XX:XX format.
7. Scroll down the page and click on Save Settings.
8. Because Laptop0’s MAC address is the only one specified, Laptop0 is the only wireless device currently capable of associating to WRS1.

Step 4. Testing Connectivity

1. Click on PC0 and go to Desktop > Command Prompt.
2. Ping RemotePC by issuing ping 200.100.50.10. The pings should be successful.
3. Close PC0 configuration window and click Laptop0.
4. From Laptop0 configuration window, go to Desktop > Command Prompt.
5. Once again, ping RemotePC by issuing ping 200.100.50.10. The pings should also be successful.
6. Close Laptop0 configuration window.
7. Click on RemotePC to bring up its configuration window.
8. From RemotePC configuration window, go to Desktop > Command Prompt.
9. Ping Server0 from RemotePC by issuing ping 192.168.0.20. The pings should not be successful.
10. Still from RemotePC, open a Web Browser (Desktop > Web Browser) and type the address of the internal web page hosted at Server0, www.acompany.com. The page should not display.

Pings and/or HTTP requests from RemotePC to Server0 (or any other internal device) are not successful because WRS1 doesn’t know which internal device should get it. In order to accomplish that, Port Forwarding must be configured in WRS1.

11. Close any device configuration window that may be open and continue to the next step.

Step 5. Configuring Single Port Forward in WRS1.

1. Click on PC0 to bring up its configuration window.
2. Go to Destop > Web Browser and connect to WRS1.
3. From WRS1 configuration web page, navigate to Application & Gaming > Single Port Forwarding.
4. From the left hand menu, choose HTTP from the first combo box.
5. From the middle portion of the window, locate the first row. In the first row, change the IP address to match Server0 IP address, 192.168.0.20. Also check the Enabled check box at the end of that same row.
6. Scroll down the page and click Save Settings.
7. You should now be able to reach the webpage hosted in Server0. Open a web browser in RemotePC.
8. In the address bar, type in 121.120.119.100. This is the IP address assigned to WRS1 Internet port.
9. You should now see the web page hosted in Server0.

Check your score. You should now have 100%.