Create ‘access-list’ for use with ‘line vty’ – ‘ACL deny is configured’
Details Access lists control the transmission of packets on an interface, control Virtual Terminal Line (VTY) access, and restrict the...
- Home
- Security Hardening
- CIS Cisco IOS 16 L1 V1.1.1
CIS Cisco IOS 16 L1 V1.1.1
Create ‘access-list’ for use with ‘line vty’ – ‘ACL permit tcp is configured’
Details Access lists control the transmission of packets on an interface, control Virtual Terminal Line (VTY) access, and restrict the...Create an ‘access-list’ for use with SNMP – ‘SNMP deny secured by ACL’
Details You can use access lists to control the transmission of packets on an interface, control Simple Network Management Protocol...Create an ‘access-list’ for use with SNMP – ‘SNMP permit secured by ACL’
Details You can use access lists to control the transmission of packets on an interface, control Simple Network Management Protocol...Do not set ‘RW’ for any ‘snmp-server community’
Details Specifies read-write access. Authorized management stations can both retrieve and modify MIB objects. Rationale: Enabling SNMP read-write enables remote...Enable ‘aaa authentication enable default’
Details Authenticates users who access privileged EXEC mode when they use the enable command. Rationale: Using AAA authentication for interactive...Enable ‘aaa authentication login’
Details Sets authentication, authorization and accounting (AAA) authentication at login. Rationale: Using AAA authentication for interactive management access to the...Enable ‘aaa new-model’
Details This command enables the AAA access control system. Rationale: Authentication, authorization and accounting (AAA) services provide an authoritative source...Enable ‘service password-encryption’
Details When password encryption is enabled, the encrypted form of the passwords is displayed when a more system:running-config command is...Set ‘access-class’ for ‘line vty’
Details The ‘access-class’ setting restricts incoming and outgoing connections between a particular vty (into a Cisco device) and the networking...