Cisco Security Fundamentals: Key Concepts & Configuration

1. Securing the Edge Router

Three Areas of Router Security:

  • Physical: Lock the device in secure rooms; use UPS or generators.
  • Operating System: Use the latest IOS; increase memory; back up configurations.
  • Router Hardening: Disable unused ports/services, restrict access.

Admin Access Security:

  • Local:
    line console 0
    password [pw]
    login
  • VTY (Remote):
    line vty 0 15
    password [pw]
    login
  • Privileged Mode:
    enable secret [pw]
  • Encrypt Passwords:
    service password-encryption
  • Minimum Password Length:
    security passwords min-
Read More