Home
Security Hardening
CIS Cisco IOS 12 L2 V4.0.0

CIS Cisco IOS 12 L2 V4.0.0

Set ‘address-family ipv4 autonomous-system’
Details Configure the EIGRP address family. Solution Configure the EIGRP address family. hostname(config)#router eigrp hostname(config-router)#address-family ipv4 autonomous-system {eigrp_as-number} Supportive Information...
Set ‘af-interface default’
Details Defines user defaults to apply to EIGRP interfaces that belong to an address-family. Solution Configure the EIGRP address family....
Set ‘authentication key-chain’
Details EIGRP does not appear to be enabled Solution Configure the EIGRP address family key chain. hostname(config)#router eigrp hostname(config-router)#address-family ipv4...
Set ‘authentication message-digest’ for OSPF area
Details Enable MD5 authentication for OSPF. Solution Configure the Message Digest option for OSPF. hostname(config)#router ospf hostname(config-router)#area authentication message-digest Supportive...
Set ‘authentication mode md5’
Details Configure authentication to prevent unapproved sources from introducing unauthorized or false service messages. Solution Configure the EIGRP address family...
Set inbound ‘ip access-group’ on the External Interface
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...
Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Default deny configured’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...
Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 0.0.0.0’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...
Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 10.0.0.0’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...
Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 127.0.0.0’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...

Prev Next

CIS Cisco IOS 12 L2 V4.0.0

Set ‘address-family ipv4 autonomous-system’

Set ‘af-interface default’

Set ‘authentication key-chain’

Set ‘authentication message-digest’ for OSPF area

Set ‘authentication mode md5’

Set inbound ‘ip access-group’ on the External Interface

Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Default deny configured’

Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 0.0.0.0’

Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 10.0.0.0’

Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 127.0.0.0’