Securing Management plane services??¦
Disabling service finger
Disabling service pad
Disabling udp & tcp small servers
Enabling service password encryption
Enabling service tcp-keepalives-in
Enabling service tcp-keepalives-out
Disabling the cdp protocol
Secures the management
plane services
Disabling the bootp server
Disabling the http server
Disabling the finger service
Disabling source routing
Disabling gratuitous arp
Locking Down Routers with AutoSecure 79
Here is a sample Security Banner to be shown
at every access to device. Modify it to suit
your
enterprise requirements.
Authorized Access only
This system is the property of So-&-So-
Enterprise.
UNAUTHORIZED ACCESS TO THIS DEVICE IS
PROHIBITED.
You must have explicit permission to access
this
device. All activities performed on this
device
are logged. Any violations of access policy
will result
in disciplinary action.
Enter the security banner {Put the banner
between
k and k, where k is any character}:
#This system is the property of Rothson
Educational Consulting.
UNAUTHORIZED ACCESS TO THIS DEVICE IS
PROHIBITED!#
Allows you to create a
security banner
NOTE: Creating a
security banner here is
the same as using the
banner command in
global con?¬?guration
mode
Enable secret is either not configured or
is the same as enable password
Enter the new enable secret: xxxxxxxx
Confirm the enable secret : xxxxxxxx
AutoSecure checks to see
if the enable secret
password is set, or is the
same as the enable
password.
Pages:
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79