Home
Security Hardening
CIS Cisco IOS 12 L2 V4.0.0

CIS Cisco IOS 12 L2 V4.0.0

Create a single ‘interface loopback’ – ‘Only one loopback interface IP Address is defined’
Details Configure a single loopback interface. Solution Define and configure one loopback interface. hostname(config)#interface loopback hostname(config-if)#ip address Supportive Information The...
Create a single ‘interface loopback’ – ‘Only one loopback interface is defined’
Details Configure a single loopback interface. Solution Define and configure one loopback interface. hostname(config)#interface loopback hostname(config-if)#ip address Supportive Information The...
Require ‘aes 128’ as minimum for ‘snmp-server user’ when using SNMPv3
Details Specify the use of a minimum of 128-bit AES algorithm for encryption when using SNMPv3. NOTE: If performing an...
Require Binding NTP Service to Loopback Interface – ‘NTP/SNTP is bound to loopback’
Details Use a particular source address in Network Time Protocol (NTP) packets. Solution Bind the NTP service to the loopback...
Set ‘aaa accounting connection’
Details Provides information about all outbound connections made from the network access server. Solution Configure AAA accounting for connections. hostname(config)#aaa...
Set ‘aaa accounting exec’
Details Runs accounting for the EXEC shell session. Solution Configure AAA accounting for EXEC shell session. hostname(config)#aaa accounting exec {default...
Set ‘aaa accounting network’
Details Runs accounting for all network-related service requests. Solution Configure AAA accounting for connections. hostname(config)#aaa accounting network {default | list-name...
Set ‘aaa accounting system’
Details Performs accounting for all system-level events not associated with users, such as reloads. Solution Configure AAA accounting system. hostname(config)#aaa...
Set ‘aaa accounting’ to log all privileged use commands using ‘commands 15’
Details Runs accounting for all commands at the specified privilege level. Solution Configure AAA accounting for commands. hostname(config)#aaa accounting commands...
Set AAA ‘source-interface’
Details Force AAA to use the IP address of a specified interface for all outgoing AAA packets Solution Bind AAA...

CIS Cisco IOS 12 L2 V4.0.0

Create a single ‘interface loopback’ – ‘Only one loopback interface IP Address is defined’

Create a single ‘interface loopback’ – ‘Only one loopback interface is defined’

Require ‘aes 128’ as minimum for ‘snmp-server user’ when using SNMPv3

Require Binding NTP Service to Loopback Interface – ‘NTP/SNTP is bound to loopback’

Set ‘aaa accounting connection’

Set ‘aaa accounting exec’

Set ‘aaa accounting network’

Set ‘aaa accounting system’

Set ‘aaa accounting’ to log all privileged use commands using ‘commands 15’

Set AAA ‘source-interface’