Set inbound ‘ip access-group’ on the External Interface
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...
- Home
- Security Hardening
- CIS Cisco IOS 16 L2 V1.1.1
CIS Cisco IOS 16 L2 V1.1.1
Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Default deny configured’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 0.0.0.0’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 10.0.0.0’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 127.0.0.0’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 169.254.0.0’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 172.16.0.0’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny 192.0.2.0’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – ‘Deny internal networks’
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...Set ‘ip access-list extended’ to Forbid Private Source Addresses from External Networks – External interface has ACL applied
Details This command places the router in access-list configuration mode, where you must define the denied or permitted access conditions...