20.500.12556/DKUM-38652 IMPLEMENTIRANE FUNKCIJE OSNOVNEGA VAROVANJA STIKAL OPERACIJSKEGA SISTEMA IOS SWITCH BASIC SECURITY FUNCTIONS IMPLEMENTED IN THE IOS OPERATING SYSTEM Diplomska naloga obravnava osnovno varovanje stikal z implementiranimi mehanizmi operacijskega sistema IOS. V začetnih poglavjih smo opisali teorijo varnostnih načel, tveganj in kriptografije, ki jih je potrebno upoštevati pri varnosti stikal. Nato smo opisali kako konfigurirati gesla in verificirati delovanje IOS-a. Sledi opis tipičnih napadov na stikala npr. napad na posredovalno tabelo, napad na protokol vpetega drevesa, ter opis ranljivosti navideznega lokalnega omrežja. Predstavili smo tudi ustrezno zaščito pred temi napadi. Nato smo opisali sezname za kontrolo dostopa in podrobneje predstavili avtentikacijo, odobritev in beleženje. V sedmem poglavju smo opisali praktično izvedbo varovanja stikal. This thesis discusses the basic protection of switches with implementary mechanisms in the IOS operating system. In the early chapters we described the theory of security principles, risks and cryptography that need to be accounted for by security switches. Then we described how to configure passwords and how to verify IOS operation. What follows is a description of typical attacks on switches, e. g. an attack on a forwarding table or an attack on a spanning tree protocol and a description of vulnerability of a virtual local area network. We also introduced a suitable protection method against these attacks. Then we described the access control lists and introduced in detail authentication, authorization and accounting. In the seventh chapter we described a practical implementation of switch security. varnost stikal VLAN protokol STP seznam za kontrolo dostopa avtentikacija Cisco IOS switch security VLAN STP protocol access control list authentication Cisco IOS true true false [A. Arh] Slovenski jezik Angleški jezik Diplomsko delo 2012-10-07 23:01:36 2012-11-14 08:56:32 2022-05-04 13:30:33 2021-04-20 03:22:41 2012 0 Maribor 0 0000-00-00 NiDoloceno NiDoloceno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 621.316.57(043.2) 16424982 URN:SI:UM:DK:OVVRIUWJ UNI_Arh_Andrej_2012.pdf UNI_Arh_Andrej_2012.pdf 1 474E05F21A9D4A50303BC7F1976683F2 288b6dcc8572a39b13a03b83b5a24bf54aba49f5bf9da295a01aaa692fdc10f5 878a8140-7c08-11eb-bb7a-00155d0001ca 20.500.12556/dkum/764cc1ae-440c-4a4f-af76-e2cefa3decbc https://dk.um.si/Dokument.php?lang=slv&id=51805 Fakulteta za elektrotehniko, računalništvo in informatiko 0 0 0