Disabling Path Integrity Mechanisms
Router(config)#no snmp-server enable Disables router response
to SNMP queries and
con?¬?guration requests
NOTE: If SNMP is
required, use SNMPv3
whenever possible.
SNMPv3 offers secure
communication
previously unavailable
in earlier versions. If
HTTP or HTTPS service
is required, use access
control lists (ACL) to
restrict access.
Router(config)#no ip http server Disables monitoring and
con?¬?guration from a web
browser
Router(config)#no ip http secure-server Disables monitoring and
con?¬?guration from a
secure (HTTPS) web
browser
Router(config)#no ip domain-lookup Disables undirected
broadcast (255.255.255.255)
as the default address to
reach a DNS server
Router(config)#no ip icmp redirect Prevents the router from
sending ICMP redirects
Router(config)#no ip source-route Disables a sender from
controlling the route that a
packet travels through a
network
Terminal Access Security 75
Disabling Features Related to Probes and Scans
Terminal Access Security
Router(config)#no service finger Disables the retrieval
of user information from
port 79
Router(config)#interface gigabitethernet 0/0 Moves to interface
con?¬?guration mode
Router(config-if)#no ip unreachables Disables the noti?¬?cation
of invalid destination IP
subnets or speci?¬?c
addresses
Router(config-if)#no ip mask-reply Disables replies to an
ICMP subnet mask query
Router(config)#no ip identd Do not report the identity
of a TCP connection
initiator.
Pages:
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76