Device management: NTP, syslog, SNMP and SSH
Point a router at the company's NTP and syslog servers, publish read-only SNMP limited by an ACL, and allow management only over SSH from the management subnet.
Scenario
R1 is about to go into production and the operations team has a checklist. The management server MGMT (10.10.10.50) runs NTP, syslog and the SNMP collector. Configure R1 to take its time from MGMT, send log messages of level informational and more severe to it, answer SNMP read-only queries for community string Ops-RO only from MGMT, and accept remote logins only over SSH (the domain is lab.local, the local user is admin with secret Adm1n!) and only from the 10.10.10.0/24 management subnet.
Your tasks
- R1 uses 10.10.10.50 as its NTP server.
- R1 sends syslog messages up to level informational (6) to 10.10.10.50.
- SNMP community Ops-RO is read-only and limited by an ACL that permits only 10.10.10.50.
- Only SSH is accepted on the VTY lines, with local user admin, and only from 10.10.10.0/24.
The lab checks the result, not the exact commands. For example, a ping task passes only when the ping really succeeds through the network you built.