https://wiki.haidhi.my.id/wiki/index.php?action=history&feed=atom&title=Lab_0.1_-_Basic_Device_Hardening Lab 0.1 - Basic Device Hardening - Revision history 2026-11-02T00:24:09Z Revision history for this page on the wiki MediaWiki 1.43.0 https://wiki.haidhi.my.id/wiki/index.php?title=Lab_0.1_-_Basic_Device_Hardening&diff=711&oldid=prev SanzSkuy: Created page with "'''Tujuan:''' Hostname, secured passwords, banner, dan SSH-only management. == Topologi Jaringan == <pre> [PC-Admin] ---console/network--- [R1] </pre> {| class="wikitable" |- ! Device !! Interface !! IP !! Mask |- | R1 || G0/0/0 || 192.168.1.1 || /24 |- | PC-Admin || NIC || 192.168.1.10 || /24 |} == ๐Ÿ› ๏ธ Step 1: Siapkan Topologi di Packet Tracer == # '''Ambil Router:''' Di pojok kiri bawah, pilih '''Network Devices''' > '''Routers''' > ambil tipe '''ISR4331''' atau..." 2026-06-29T08:16:02Z <p>Created page with &quot;&#039;&#039;&#039;Tujuan:&#039;&#039;&#039; Hostname, secured passwords, banner, dan SSH-only management. == Topologi Jaringan == &lt;pre&gt; [PC-Admin] ---console/network--- [R1] &lt;/pre&gt; {| class=&quot;wikitable&quot; |- ! Device !! Interface !! IP !! Mask |- | R1 || G0/0/0 || 192.168.1.1 || /24 |- | PC-Admin || NIC || 192.168.1.10 || /24 |} == ๐Ÿ› ๏ธ Step 1: Siapkan Topologi di Packet Tracer == # &#039;&#039;&#039;Ambil Router:&#039;&#039;&#039; Di pojok kiri bawah, pilih &#039;&#039;&#039;Network Devices&#039;&#039;&#039; &gt; &#039;&#039;&#039;Routers&#039;&#039;&#039; &gt; ambil tipe &#039;&#039;&#039;ISR4331&#039;&#039;&#039; atau...&quot;</p> <p><b>New page</b></p><div>&#039;&#039;&#039;Tujuan:&#039;&#039;&#039; Hostname, secured passwords, banner, dan SSH-only management.<br /> <br /> == Topologi Jaringan ==<br /> &lt;pre&gt;<br /> [PC-Admin] ---console/network--- [R1]<br /> &lt;/pre&gt;<br /> <br /> {| class=&quot;wikitable&quot;<br /> |-<br /> ! Device !! Interface !! IP !! Mask<br /> |-<br /> | R1 || G0/0/0 || 192.168.1.1 || /24<br /> |-<br /> | PC-Admin || NIC || 192.168.1.10 || /24<br /> |}<br /> <br /> == ๐Ÿ› ๏ธ Step 1: Siapkan Topologi di Packet Tracer ==<br /> # &#039;&#039;&#039;Ambil Router:&#039;&#039;&#039; Di pojok kiri bawah, pilih &#039;&#039;&#039;Network Devices&#039;&#039;&#039; &gt; &#039;&#039;&#039;Routers&#039;&#039;&#039; &gt; ambil tipe &#039;&#039;&#039;ISR4331&#039;&#039;&#039; atau &#039;&#039;&#039;2911&#039;&#039;&#039;, lalu drag ke lembar kerja. Ubah display name-nya jadi &lt;tt&gt;R1&lt;/tt&gt;.<br /> # &#039;&#039;&#039;Ambil PC:&#039;&#039;&#039; Pilih &#039;&#039;&#039;End Devices&#039;&#039;&#039; &gt; &#039;&#039;&#039;PC&#039;&#039;&#039;, drag ke lembar kerja. Ubah namanya jadi &lt;tt&gt;PC-Admin&lt;/tt&gt;.<br /> # &#039;&#039;&#039;Hubungkan Kabel:&#039;&#039;&#039;<br /> #* Pilih &#039;&#039;&#039;Connections&#039;&#039;&#039; (ikon petir).<br /> #* Gunakan kabel &#039;&#039;&#039;Copper Straight-Through&#039;&#039;&#039; (garis hitam lurus).<br /> #* Colok dari &#039;&#039;&#039;PC-Admin (FastEthernet0)&#039;&#039;&#039; ke &#039;&#039;&#039;R1 (GigabitEthernet0/0/0)&#039;&#039;&#039;.<br /> <br /> == ๐Ÿ’ป Step 2: Konfigurasi IP Address di PC-Admin ==<br /> # Klik &#039;&#039;&#039;PC-Admin&#039;&#039;&#039;.<br /> # Buka tab &#039;&#039;&#039;Desktop&#039;&#039;&#039; &gt; pilih &#039;&#039;&#039;IP Configuration&#039;&#039;&#039;.<br /> # Isi datanya sebagai berikut:<br /> #* &#039;&#039;&#039;IPv4 Address:&#039;&#039;&#039; &lt;tt&gt;192.168.1.10&lt;/tt&gt;<br /> #* &#039;&#039;&#039;Subnet Mask:&#039;&#039;&#039; &lt;tt&gt;255.255.255.0&lt;/tt&gt; (terisi otomatis)<br /> <br /> == ๐Ÿ–ฅ๏ธ Step 3: Konfigurasi Dasar &amp; IP Address di R1 ==<br /> Masuk ke tab &#039;&#039;&#039;CLI&#039;&#039;&#039; pada &#039;&#039;&#039;R1&#039;&#039;&#039;. Ketik &#039;&#039;&#039;no&#039;&#039;&#039; jika ada prompt awal.<br /> <br /> &lt;pre&gt;<br /> Router&gt; enable<br /> Router# configure terminal<br /> Router(config)# interface GigabitEthernet0/0/0<br /> Router(config-if)# ip address 192.168.1.1 255.255.255.0<br /> Router(config-if)# no shutdown<br /> Router(config-if)# exit<br /> &lt;/pre&gt;<br /> <br /> == ๐Ÿ” Step 4: Eksekusi Task Hardening ==<br /> Urutan di bawah ini sangat penting untuk memastikan &lt;tt&gt;crypto key&lt;/tt&gt; bisa digenerate dengan sukses.<br /> <br /> === 1. Set Hostname &amp; Domain Name ===<br /> &lt;pre&gt;<br /> Router(config)# hostname R1<br /> R1(config)# ip domain-name lab.local<br /> &lt;/pre&gt;<br /> <br /> === 2. Buat Username &amp; Enable Secret ===<br /> &lt;pre&gt;<br /> R1(config)# enable secret cisco<br /> R1(config)# username admin secret cisco123<br /> &lt;/pre&gt;<br /> <br /> === 3. Generate Crypto Key &amp; Aktifkan SSH v2 ===<br /> &lt;pre&gt;<br /> R1(config)# crypto key generate rsa<br /> ! INFO: Saat ditanya jumlah bit, ketik 1024 atau 2048 lalu Enter<br /> R1(config)# ip ssh version 2<br /> &lt;/pre&gt;<br /> <br /> === 4. Set Banner MOTD &amp; Service Password Encryption ===<br /> &lt;pre&gt;<br /> R1(config)# banner motd #Akses terbatas#<br /> R1(config)# service password-encryption<br /> &lt;/pre&gt;<br /> <br /> === 5. Amankan Line Console &amp; Line VTY (SSH Only) ===<br /> &lt;pre&gt;<br /> R1(config)# line console 0<br /> R1(config-line)# password cisco<br /> R1(config-line)# login<br /> R1(config-line)# exit<br /> <br /> R1(config)# line vty 0 4<br /> R1(config-line)# login local<br /> R1(config-line)# transport input ssh<br /> R1(config-line)# exit<br /> R1(config)# exit<br /> &lt;/pre&gt;<br /> <br /> Simpan konfigurasi:<br /> &lt;pre&gt;<br /> R1# write memory<br /> &lt;/pre&gt;<br /> <br /> == ๐Ÿงช Step 5: Verifikasi Lab ==<br /> === Cek di R1 ===<br /> Jalankan perintah ini di privileged EXEC mode (&lt;tt&gt;R1#&lt;/tt&gt;):<br /> * &lt;tt&gt;show running-config&lt;/tt&gt; &amp;rarr; Pastikan password &lt;tt&gt;enable secret&lt;/tt&gt;, &lt;tt&gt;username&lt;/tt&gt;, dan &lt;tt&gt;line console&lt;/tt&gt; terenkripsi.<br /> * &lt;tt&gt;show ip ssh&lt;/tt&gt; &amp;rarr; Pastikan muncul tulisan SSH Enabled - version 2.0.<br /> <br /> === Uji Coba SSH dari PC-Admin ===<br /> # Klik &#039;&#039;&#039;PC-Admin&#039;&#039;&#039;, buka tab &#039;&#039;&#039;Desktop&#039;&#039;&#039; &gt; pilih &#039;&#039;&#039;Command Prompt&#039;&#039;&#039;.<br /> # Ketik: &lt;tt&gt;ssh -l admin 192.168.1.1&lt;/tt&gt;<br /> # Masukkan password: &lt;tt&gt;cisco123&lt;/tt&gt; (Karakter tidak akan terlihat saat diketik).<br /> # Jika berhasil, Anda akan melihat banner &lt;tt&gt;#Akses terbatas#&lt;/tt&gt; dan masuk ke &lt;tt&gt;R1&gt;&lt;/tt&gt;.</div> SanzSkuy