Create a single ‘interface loopback’ – ‘Only one loopback interface IP Address is defined’
Details Configure a single loopback interface. Rationale: Software-only loopback interface that emulates an interface that is always up. It is...
- Home
- Security Hardening
- CIS Cisco IOS 15 L2 V4.1.0
CIS Cisco IOS 15 L2 V4.1.0
Create a single ‘interface loopback’ – ‘Only one loopback interface is defined’
Details Configure a single loopback interface. Rationale: Software-only loopback interface that emulates an interface that is always up. It is...Require ‘aes 128’ as minimum for ‘snmp-server user’ when using SNMPv3
Details Specify the use of a minimum of 128-bit AES algorithm for encryption when using SNMPv3. Rationale: SNMPv3 provides much...Set ‘aaa accounting connection’
Details Provides information about all outbound connections made from the network access server. Rationale: Authentication, authorization and accounting (AAA) systems...Set ‘aaa accounting exec’
Details Runs accounting for the EXEC shell session. Rationale: Authentication, authorization and accounting (AAA) systems provide an authoritative source for...Set ‘aaa accounting network’
Details Runs accounting for all network-related service requests. Rationale: Authentication, authorization and accounting (AAA) systems provide an authoritative source for...Set ‘aaa accounting system’
Details Performs accounting for all system-level events not associated with users, such as reloads. Rationale: Authentication, authorization and accounting (AAA)...Set ‘aaa accounting’ to log all privileged use commands using ‘commands 15’
Details Runs accounting for all commands at the specified privilege level. Rationale: Authentication, authorization and accounting (AAA) systems provide an...Set AAA ‘source-interface’
Details Force AAA to use the IP address of a specified interface for all outgoing AAA packets Rationale: This is...Set ‘address-family ipv4 autonomous-system’
Details Configure the EIGRP address family. Rationale: Rationale: EIGRP is a true multi-protocol routing protocol and the ‘address-family’ feature enables...