Defensive › Module 4 › Lesson 4
Device Lab
Combined device hardening readout on YOUR lab router — surface, mgmt, defaults.
Visual · device_lab
Lab: network device readout pack. YOUR lab router only. Original Cyberlium.
Opening
One lab gateway, three checklists, config backup before any toggle.
Module 4 lessons covered surface, management plane, and firmware defaults. This lab ships combined evidence from YOUR lab network device: service list, remote admin setting, defaults checklist, optional one safe change with config backup. No dorm gateway. No café admin. Next: Quiz — Network Device Hardening.
1. Lab contract: backup first
Export config backup from YOUR lab router. Complete three readout sections in one note file.
Optional: disable Telnet or change SNMP community on lab only — with backup file saved.
Command guide
Try these commands — Lab contract: backup first
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Router hardening — https://www.cisa.gov/news-events/news/harden-your-network-home-and-small-business-networks CIS Controls — https://www.cisecurity.org/controls
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install nmap sudo apt install curl
macOS:
Command — copy this
brew install nmap
Windows:
Command — copy this
choco install nmap # or download https://nmap.org/download.html
Built-in (PowerShell: Invoke-WebRequest)
═══ LINUX / macOS ═══
Command — copy this
nmap -Pn -p 1-1024 192.168.1.1 2>/dev/null | head -20 || echo 'Device surface scan — YOUR lab router only'
curl -sS -m 2 http://192.168.1.1/ -o /dev/null -w "router HTTP %{http_code}
" 2>/dev/null || truePrimary tools to practice this lesson: nmap, curl. Reference sites: Router hardening (https://www.cisa.gov/news-events/news/harden-your-network-home-and-small-business-networks); CIS Controls (https://www.cisecurity.org/controls). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Forbidden
WAN scans of neighborhood gateways, default password spray, firmware flash on ISP CPE, mgmt changes on employer edge without ticket.
3. Close
chmod 600. Quiz next — then Logging Fundamentals.
4. What you ship: network device hardening pack
Surface, mgmt, defaults readouts. Config backup path. Optional one lab change. chmod 600.
5. What you record before the next lesson
Date. Device lab pack on YOUR router. File t16-m04-l04-device-lab.txt chmod 600.
6. Wrong vs right: stranger hosts vs YOUR lab hosts
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Include dorm gateway scan results. Skip config backup before change.
Right
Device pack on YOUR lab router. Next: Quiz — Network Device Hardening.
Mission: device hardening evidence pack
1) Export config backup from lab device. 2) Complete surface, mgmt, defaults sections. 3) Optional one safe change with backup. 4) chmod 600. Never target stranger gateways.
Stuck? Ask Cyberlium AI Mentor
If you only have a sim, document the sim — still no stranger gateway scans.
Knowledge Check
APPLY: Device Lab requires:
Multiple choice
Knowledge Check
APPLY: True or False: Config backup before mgmt change is defender habit.
True or False
Knowledge Check
APPLY: ISP rental CPE you do not fully own:
Multiple choice