Rogue Security Wiki

Practical procedure and troubleshooting notes for Securing Access to a Cisco Switch.

New Management User Account

  1. Login to the Cisco Switch
    secacc2sw_1.png
  2. In the left navigation column, expand Security
    secacc2sw_2.png
  3. Click on Access Profiles
    secacc2sw_3.png
  4. On the Access Profiles page, click Add
    secacc2sw_4.png
  5. In the pop-up window, fill in the required information
    secacc2sw_5.png
  6. Click Apply at the bottom of the page
    secacc2sw_6.png
  7. Click on Profile Rules in the left navigation column
    secacc2sw_7.png
  8. This brings you to the Profile Rules page
    secacc2sw_8.png
  9. Check the profile you just created and click Add
    secacc2sw_9.png
  10. Fill in the information. This allows web portal access from a single IP (192.168.0.10)
    secacc2sw_10.png
  11. Click on Access Profiles in the left navigation column
    secacc2sw_11.png
  12. On the Access Profiles page, select the profile you just configured from the drop-down menu
    secacc2sw_12.png
  13. Click Apply
    secacc2sw_13.png
  14. In the pop-up window, click OK
    secacc2sw_14.png
  15. In the left navigation pane, select Administration to reveal the drop-down
    secacc2sw_15.png
  16. Expand File Management within Administration
    secacc2sw_16.png
  17. Click Copy/Save Configuration
    secacc2sw_17.png
  18. On the Copy/Save Configuration page, save your running configuration to the startup configuration and click Apply
    secacc2sw_19.png
  19. In the pop-up window, select OK
    secacc2sw_20.png
  20. Click Done
    secacc2sw_21.png

MAC-Based Access Control

  1. Login to the Cisco Switch
    secacc2sw_2_1.png
  2. In the left navigation column, expand Access Control
    secacc2sw_2_2.png
  3. Click on MAC-Based ACL
    secacc2sw_2_3.png
  4. This brings you to the MAC-Based ACL page
    secacc2sw_2_4.png
  5. Click Add
    secacc2sw_2_5.png
  6. Enter a name for your access control in the pop-up window
    secacc2sw_2_6.png
  7. Click Apply, then Close
    secacc2sw_2_7.png
  8. In the left navigation column under Access Control, click MAC-Based ACE
    secacc2sw_2_8.png
  9. This brings you to the MAC-Based ACE page
    secacc2sw_2_9.png
  10. Click Add
    secacc2sw_2_10.png
  11. Fill in the desired information in the pop-up window
    secacc2sw_2_11.png
  12. Scroll to the bottom, click Apply, then Close
    secacc2sw_2_12.png
  13. Under Access Control, select ACL Binding (Port)
    secacc2sw_2_13.png
  14. This brings you to the ACL Binding (Port) page
    secacc2sw_2_14.png
  15. Click on the port you want to apply the ACL to
    secacc2sw_2_15.png
  16. Scroll to the bottom and select Edit
    secacc2sw_2_16.png
  17. In the pop-up window, apply the MAC-Based Access Control settings
    secacc2sw_2_17.png
  18. Click Apply and Close
    secacc2sw_2_18.png
  19. With the port selected, click Copy Settings at the bottom of the page
    secacc2sw_2_19.png
  20. In the pop-up window, select the ports you want to copy to (e.g., all ports) and click Apply
    secacc2sw_2_20.png
  21. In the left navigation column, select Administration
    secacc2sw_2_22.png
  22. In the Administration drop-down, select File Management
    secacc2sw_2_23.png
  23. In the File Management drop-down, select Copy/Save Configuration
    secacc2sw_2_24.png
  24. On the Copy/Save Configuration page, save your running configuration to the startup configuration and click Apply
    secacc2sw_2_25.png
  25. In the pop-up window, select OK
    secacc2sw_2_26.png
  26. Click Done
    secacc2sw_2_27.png