Set ‘no snmp-server’ to disable SNMP when unused
Details If not in use, disable simple network management protocol (SNMP), read and write access. Solution Disable SNMP read and...
- Home
- Security Hardening
- CIS Cisco IOS 12 L1 V4.0.0
CIS Cisco IOS 12 L1 V4.0.0
Set ‘password’ for ‘enable secret’
Details Use the enable secret command to provide an additional layer of security over the enable password. The enable secret...Set ‘privilege 1’ for local users – ‘No users with privileges 2-15’
Details Sets the privilege level for the user. Solution Set the local user to privilege level 1. hostname(config)#username privilege 1...Set ‘seconds’ for ‘ip ssh timeout’
Details The time interval that the router waits for the SSH client to respond before disconnecting an uncompleted login attempt....Set ‘service tcp-keepalives-in’
Details Generate keepalive packets on idle incoming network connections. Solution Enable TCP keepalives-in service: hostname(config)#service tcp-keepalives-in Supportive Information The following...Set ‘service tcp-keepalives-out’
Details Generate keepalive packets on idle outgoing network connections. Solution Enable TCP keepalives-in service: hostname(config)#service tcp-keepalives-out Supportive Information The following...Set ‘snmp-server enable traps snmp’
Details SNMP notifications can be sent as traps to authorized management systems. Solution Enable SNMP traps. hostname(config)#snmp-server enable traps snmp...Set ‘snmp-server host’ when using SNMP
Details SNMP notifications can be sent as traps to authorized management systems. Solution Configure authorized SNMP trap community string and...Set the ACL for each ‘snmp-server community’
Details SNMP appears to be disabled Solution Configure authorized SNMP community string and restrict access to authorized management systems. hostname(config)#snmp-server...Set the ‘banner-text’ for ‘banner exec’
Details This command specifies a message to be displayed when an EXEC process is created (a line is activated, or...