Hardening Cisco Routers (Paperback)

Preface

1. Router Security
Router Security?
Routers: The Foundation of the Internet
What Can Go Wrong
What Routers Are at Risk?
Moving Forward

2. IOS Version Security
The Need for a Current IOS
Determining the IOS Version
IOS Versions and Vulnerabilities
IOS Security Checklist

3. Basic Access Control
Authentication Versus Authorization
Points of Access
Basic Access Control
Remote Administration
Protection with IPSec
Basic Access Control Security Checklist

4. Passwords and Privilege Levels
Password Encryption
Clear-Text Passwords
service password-encryption
Enable Security
Strong Passwords
Keeping Configuration Files Secure
Privilege Levels
Password Checklist

5. AAA Access Control
Enabling AAA
Local Authentication
TACACS+ Authentication
RADIUS Authentication
Kerberos Authentication
Token-Based Access Control
AAA Security Checklist

6. Warning Banners
Legal Issues
Example Banner
Adding Login Banners
Warning Banner Checklist

7. Unnecessary Protocols and Services
ICMP
Source Routing
Small Services
Finger
HTTP
CDP
Proxy ARP
Miscellaneous
SNMP
Unnecessary Protocols and Services Checklist

8. SNMP Security
SNMP Versions
Securing SNMP v1 and v2c
Securing SNMP v3
SNMP Management Servers
SNMP Security Checklist

9. Secure Routing and Antispoofing
Antispoofing
Routing Protocol Security
Routing Protocol and Antispoofing Checklist

10. NTP
NTP Overview
Configuring NTP
NTP Checklist

11. Logging
Logging in General
Router Logging
ACL Violation Logging
AAA Accounting
Logging Checklist

A. Checklist Quick Reference

B. Physical Security

C. Incident Response

D. Configuration Examples

E. Resources

Index