NSA/SNAC RSCG Executive Summary Card
Short summary:
security of a Cisco router along with some important general principles for ... are used for remote router configuration. Some services that should ...
Long summary:
NSA/SNAC RSCG Executive Summary CardPage 1NSA/SNAC Router Security Configuration GuideExecutive Summary CardVersion 1.1iExecutive SummaryThis card is a supplement to the NSA/SNAC Router Security Configuration Guide version 1.1. It describes quick but effective ways to tighten thesecurity of a Cisco router along with some important general principles formaintaining good router security. For more information consult thesections of the main guide listed with each recommendation.General Recommendations1.Create and maintain a written router security policy. The policyshould identify who is allowed to log in to the router who is allowedto configure and update it and should outline the logging andmanagement practices for it. Section 3.4]2.Comment and organize offline master editions of your routerconfiguration files! This sounds fluffy despite being a big securitywin. Also keep the offline copies of all router configurations in syncwith the actual configurations running on the routers. This isinvaluable for diagnosing suspected attacks and recovering from them.Section 4.1]3.Implement access lists that allow only those protocols ports and IPaddresses that are required by network users and services and thatdeny everything else.. Section 3.2 4.3]4.Run the latest available General Deployment (GD) IOS version.Sections 4.5.5 8.3]5.Test the security of your routers regularly especially after any majorconfiguration changes. Section 6]Specific Recommendations: Router Access1.Shut down unneeded services on the router. Servers that are notrunning cannot break. Also more memory and processor slots are available. Start by running the show proc command on the routerthen turn off clearly unneeded facilities and services. Some serversthat should almost always be turned off and the corresponding commands to disable them are listed below. Section 4.2 4.5.3]Small services (echo discard chargen etc.) no service tcpsmallservers no service udpsmallserversBOOTP no ip bootp serverFinger no servi ...
Source: nsa2.www.conxion.com
Related
NSA/SNAC RSCG Executive Summary Card, security of a Cisco router along with some
important general principles for ... are
used for remote router configuration. Some
services that should ...,
more
Cisco router configuration tutorial, type port (for Cisco 2500 series) to enter
the interface configuration mode. ... are
being used issue the show process
command. Router(config)#show process ...,
more
Cisco Reset a Cisco Router to Factory Default Settings, Components Used. Conventions. Instructions
to Reset a Cisco Router Back to Factory
Defaults. Method 1. Method 2. Verify.
Networking Professionals Connection ...,
more
