Cisco® Secure Internet Security Solutions

Chapter 2. Basic Cisco Router Security

This chapter contains the following sections:

• Basic Management Security

• Access Lists

• Password Management

• Physical Security

• Out-of-Band Management Security

• Cisco Discovery Protocol (CDP)

• HTTP Configuration Services

• Simple Network Management Protocol (SNMP)

• Network Time Protocol (NTP)

• Banners

• Recommended Minimum IOS Security Settings

• TCP Intercept

• Summary

The first question any administrator should ask about a service is whether it is necessary to run that service in the present environment. If a service is not required, it should be disabled. Running a service that provides no functionality only burns up CPU cycles and exposes the network to potential attacks. If a service is required on the interior of the network, ...