20bce2958 Transport VPN

LAB ASSIGNMENT-5
SUB- Information Security Analysis and Audit

SLOT- L7+L8
Professor name- RajaRajan G
Submitted by
AKEPATI MAHESWAR REDDY
20BCE2958
Configuring VPN Transport Mode
First select Cyber Criminals Sniffer and click the GUI tab and click
clear button if u see any traffic on left side.
Click the Metropolis Bank HQ site and click Phil’s laptop. Click the Desktop tab
and click on Command Prompt. c. Use the ipconfig command to view the
current IP address of Phil’s compute
We could see the ip configurations in above pic.
Connect to the Public_FTP server at Gotham Healthcare Branch by entering ftp

209.165.201.20 and use username and password as cisco and publickey.
Now upload the file PublicInfo.txt file to the Public_FTP server using Put
command.
Now open the cyber criminal gui tab which we have minimized. We could see
the new traffic has been added in the left panel. At down of each traffic we
could see the data. Here Data wont be encrypted and will be available in plain
text. We will see use of VPN in next steps.
Now lets see how to configure VPN
From Phil’s computer, use the ping command and target the IP address of the
Branch_Router and go to desktop and select VPN and enter following data.
password cisco123
After that click on connect and then we could see the new IP for client-to-site
VPN connection.
Now lets send the file data through encrypted traffic
Do the same procedure like selecting the phil laptop and see ip config .if we
see the ip gets added.
If we could see the new ip address tell us that VPN has been connected
successfully.
Now do the same procedure of above by connecting to ftp server upload
PrivateInfo.txt to ftp server.
After that go to the cyber criminal sniffer and under gui tab we could see new
traffic has been added as compare to before. Even if we see the data for each
traffic it is not under clear plain text form as it was before if we could see it is
in encrypted form.
Packet Tracer – Configuring VPN Transport Mode
Addressing Table
Private IP Public IP
Device Subnet Mask Site
Address Address
Private_FTP server 10.44.2.254 N/A 255.255.255.0 Gotham Healthcare Branch

Public_FTP server 10.44.2.253 209.165.201.20 255.255.255.0 Gotham Healthcare Branch
Branch_Router N/A 209.165.201.19 255.255.255.248 Gotham Healthcare Branch
Phil’s computer 10.44.0.2 N/A 255.255.255.0 Metropolis Bank HQ
Objectives
Part 1: Sending Unencrypted FTP Traffic
Part 2: Configuring the VPN Client within Metropolis
Part 3: Sending Encrypted FTP Traffic
Background
In this activity, you will observe the transfer of unencrypted FTP traffic between a client and a remote site.
You will then configure a VPN client to connect to the Gotham Healthcare Branch site and send encrypted
FTP traffic. The IP addressing, network configuration, and service configurations are already complete. You
will use a client device within Metropolis Bank HQ to transfer unencrypted and encrypted FTP data.
Part 1: Sending Unencrypted FTP Traffic
Step 1: Access the Cyber Criminals Sniffer.

a. Click the Cyber Criminals Sniffer and click the GUI tab.
b. Click the Clear button to remove any possible traffic entries viewed by the sniffer.
c. Minimize the Cyber Criminals Sniffer.
Step 2: Connect to the Public_FTP server using an insecure FTP connection.

a. Click the Metropolis Bank HQ site and click Phil’s laptop.
b. Click the Desktop tab and click on Command Prompt.
c. Use the ipconfig command to view the current IP address of Phil’s computer.
d. Connect to the Public_FTP server at Gotham Healthcare Branch by entering ftp 209.165.201.20 in the
command prompt.
e. Enter the username of cisco and password of publickey to login to the Public_FTP server.
f. Use the put command to upload the file PublicInfo.txt file to the Public_FTP server.
Step 3: View the traffic on the Cyber Criminals Sniffer.

a. Maximize the Cyber Criminals Sniffer that was previously minimized.
© 2016 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 1 of 3
b. Click the FTP messages displayed on the sniffer and scroll to the bottom of each one.
What information is displayed in clear text?
20BCE2958-----user :cisco and pass: publickey and the filename of PublicInfo.txt
c. Type quit to exit Public_FTP server.
Part 2: Configuring the VPN Client on Phil’s Computer

a. From Phil’s computer, use the ping command and target the IP address of the Branch_Router. The first
few pings may timeout. Enter the ping to get four successful pings.
b. On the Desktop tab, click on VPN
c. Within the VPN Configuration window, enter the following settings:
GroupName: ............ VPNGROUP
Group Key: ............... 123
Host IP (Server IP):.. 209.165.201.19
Username: ............... phil
Password: ................ cisco123
d. Click Connect and Click OK on the next window.
What is the Client IP for the client-to-site VPN connection?
20BCE2958-----10.44.2.200
Part 3: Sending Encrypted FTP Traffic
Step 1: View the current IP addressing on Phil’s computer.

a. Within the Metropolis Bank HQ site, click Phil’s computer.
b. Click the Desktop tab and click on Command Prompt.
c. Use the ipconfig command to view the current IP address of Phil’s PC.
What extra IP address is now shown that was not shown before in Part 1 Step 2c?
20BCE2958-----Tunnel Interface IP Address: 10.44.2.200
Step 2: Send encrypted FTP traffic from Phil’s computer to the Private_FTP server.
a. Connect to the Private_FTP server at Gotham Healthcare Branch by entering ftp 10.44.2.254 in the
command prompt.
b. Enter the username of cisco and password of secretkey to login to the Private_FTP server.
c. Upload the file PrivateInfo.txt file to the Private_FTP server.
Step 3: View the traffic on the Cyber Criminals Sniffer

a. Maximize the Cyber Criminals Sniffer that was previously minimized.
b. Click the FTP messages displayed on the sniffer.
Are there any FTP messages displaying the password of internal or the file upload of PrivateInfo.txt?
Explain.
20BCE2958----NO, before adding vpn it showed all the data mentioned. But after adding VPN
connection it the client-to-site VPN is using encryption and the Cyber Criminals Sniffer cannot decrypt
the traffic to view it.
Suggested Scoring Rubric
Question Possible Earned

Activity Section Location Points Points
Part 1: Sending Unencrypted FTP Traffic Step 3 20

Part 2: Configure the VPN Client on Phil’s Computer Step 1 10
Step 1 10
Part 3: Send Encrypted FTP Traffic
Step 3 20
Questions 60
Packet Tracer Score 40
Total Score 100

20bce2958 Transport VPN

Uploaded by

Copyright:

Available Formats

20bce2958 Transport VPN

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

20bce2958 Transport VPN

Uploaded by

Copyright:

Available Formats

LAB ASSIGNMENT-5

SUB- Information Security Analysis and Audit

We could see the ip configurations in above pic.

Connect to the Public_FTP server at Gotham Healthcare Branch by entering ftp

Now lets send the file data through encrypted traffic

Private_FTP server 10.44.2.254 N/A 255.255.255.0 Gotham Healthcare Branch

Part 1: Sending Unencrypted FTP Traffic

Step 1: Access the Cyber Criminals Sniffer.

Step 2: Connect to the Public_FTP server using an insecure FTP connection.

Step 3: View the traffic on the Cyber Criminals Sniffer.

c. Type quit to exit Public_FTP server.

Part 2: Configuring the VPN Client on Phil’s Computer

Part 3: Sending Encrypted FTP Traffic

Step 1: View the current IP addressing on Phil’s computer.

Step 3: View the traffic on the Cyber Criminals Sniffer

Suggested Scoring Rubric

Question Possible Earned

Part 1: Sending Unencrypted FTP Traffic Step 3 20

You might also like