AutoSecure
Details The AutoSecure feature secures a router by using a single CLI command to disable common IP services that can...
- Home
- Security Hardening
- CIS Cisco IOS 16 L2 V1.1.1
CIS Cisco IOS 16 L2 V1.1.1
Configure Login Block – login block-for
Details All login parameters are disabled by default. You must issue the login block-for command, which enables default login functionality,...Configure Login Block – login delay
Details All login parameters are disabled by default. You must issue the login block-for command, which enables default login functionality,...Configure Login Block – login quiet-mode
Details All login parameters are disabled by default. You must issue the login block-for command, which enables default login functionality,...Configure Web interface
Details Web-based authentication is an ingress-only feature. You can configure web-based authentication only on access ports. Web-based authentication is not...Configuring Kerberos
Details Kerberos is a secret-key network authentication protocol, developed at the Massachusetts Institute of Technology (MIT), that uses the Data...Create a single ‘interface loopback’ – ‘Only one loopback interface IP Address is defined’
Details Configure a single loopback interface. Rationale: Software-only loopback interface that emulates an interface that is always up. It is...Create a single ‘interface loopback’ – ‘Only one loopback interface is defined’
Details Configure a single loopback interface. Rationale: Software-only loopback interface that emulates an interface that is always up. It is...Require ‘aes 128’ as minimum for ‘snmp-server user’ when using SNMPv3
Details Specify the use of a minimum of 128-bit AES algorithm for encryption when using SNMPv3. Rationale: SNMPv3 provides much...Set ‘aaa accounting connection’
Details Provides information about all outbound connections made from the network access server. Rationale: Authentication, authorization and accounting (AAA) systems...