Project one

ECU has no logging configured on any of their network devices

ECU is accessing all the devices via TELNET

All network administration accounts are local accounts and are configured with privilege

level 15

IOS files on the routers and switches are constantly being removed accidentally by junior

network administrators practicing for their CCNA exam

ECU is currently finding out about network outages from customers not having access to

the corporate web site

ECU is using OSPF for their IGP. Every router has the following statement configured

for OSPF to be enabled: network 0.0.0.0 0.0.0.0 area 0 and no authentication is in use

ECU uses BGP for their Internet peering with Verizon and only has a single neighbor

statement and a single network statement configured.

The ECU firewall has ‘any any’ rules in both the INBOUND and OUTBOUND direction

There is a need to provide additional security on the DMZ router to inspect packets and to

provide firewall functionality

All access layer switches, with the exception of VLANs and access ports being created,

have all the default settings in both the global configuration and on host ports

ECU has no security policy of any kind because they are too busy dealing with security

breaches and will need a comprehensive security policy provided as part of this proposal

There is no remote access from the RO, but RO users need access to HQ resources in a

secure fashion

All routers and switches at the HQ location are located in the company kitchen area

The company only needs to allow inbound 80 and 443 for access to its web servers.

DHCP is being used for all corporate users, but the only configuration that has been

accomplished has been the DHCP pools on the routers

All Spanning Tree settings are the Cisco defaults

The company currently allows everything outbound and would like some guidance

Remote ECU employees have no way to access corporate resources and need this issue

resolved