Save the running config to the startup config using the copy run start command.

CCNA Security All contents are Copyright © 1992 –2012 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 38 of 57 b. Test connectivity by pinging from host PC-A to R1. If the pings are not successful, troubleshoot the router and PC configurations to verify connectivity before continuing.

c. Save the running config to the startup config using the copy run start command.

Task 4: Use the CCP Security Audit Tool on R1 to Identify Security Risks In this task, you use the CCP graphical user interface to analyze security vulnerabilities on router R1. CCP is faster than typing each command and provides greater control than the AutoSecure feature. Step 1: Verify that CCP is installed on Host PC. Note: CCP can only be run from a host PC. If CCP is not installed on the PC, consult your instructor for directions. Step 2: Create a CCP user and enable the HTTP secure server on R1. a. Create a privilege-level 15 username and password on R1. R1config username admin privilege 15 secret 0 cisco12345 b. Enable the HTTP secure server on R1. R1config ip http secure-server Generating 1024 bit RSA keys, keys will be non-exportable...[OK] R1config Dec 19 17:01:07.763: SSH-5-ENABLED: SSH 1.99 has been enabled Dec 19 17:01:08.731: PKI-4-NOAUTOSAVE: Configuration was modified. Issue write memory to save new certificate c. Enable local HTTP authentication on R1. R1config ip http authentication local R1config end d. Save the running config to the startup config. R1 copy run start Step 3: Start CCP. a. From PC-A, run the CCP application. Note: Make sure that all pop-up blockers are turned off in the browser, and make sure that Java is installed and updated. b. In the Manage Devices window, add R1 IP address 192.168.1.1 in the first IP address field. Enter admin in the username field, and cisco12345 in the password field. Click the Connect Securely check box to use secure-server for your connection. Check the Discover All Devices check box then click on the OK button. c. When the Security Certification Alert is displayed, click Yes. d. If the Discovery fails, use the Discovery Details button to determine the problem and resolve it. CCNA Security All contents are Copyright © 1992 –2012 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Page 39 of 57 Step 4: Back up the current router configuration using CCP. a. Back up the router configuration from within CCP by choosing Utilities Save Configuration to PC. b. Save the configuration on the desktop using the default name of RunningConfig_192.168.1.1.txt. Step 5: Begin the security audit.

a. Choose Configure Security Security Audit.