Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 172.16.0.0’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...
- Home
- Security Hardening
- CIS Cisco IOS 15 L2 V4.1.0
CIS Cisco IOS 15 L2 V4.1.0
Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 192.0.2.0’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 192.168.0.0’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 224.0.0.0’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny host 255.255.255.255’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny internal networks’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – External interface has ACL applied
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip authentication key-chain eigrp’
Details Specify the type of authentication used in Enhanced Interior Gateway Routing Protocol (EIGRP) packets per interface. Rationale: Configuring EIGRP...Set ‘ip authentication mode eigrp’
Details Configure authentication to prevent unapproved sources from introducing unauthorized or false routing messages. Rationale: This is part of the...Set ‘ip rip authentication mode’ to ‘md5’
Details Configure the Interface with the RIPv2 key chain. Rationale: This is part of the RIPv2 authentication setup Impact: Organizations...