Chapter 2. Securing Network Devices.

Chapter 2. Securing Network Devices.

1. Securing Device Access

   • Securing the edge router
     • Authenticate Access
     • Authorize Actions
     • Legal Notification
     • Restrict Device Accessibility
   • Administrative Access
     • Strong Passwords
     • MD5 Secret Algorithm
   • Virtual Logins
     • Logging Atempts
   • SSH
     • Configuration SSH

2. Assingning Administrative Roles

   • Role-Based CLI
     • CLI Access
       • AAA
       • Firewall
       • NetFlow
     • Views
       • Root View
       • CLI View
       • Superview
     • Superviews
   • Privilege Levels
     • Configuration
       • Level #
       • SSH
       • Algorithm Type

3. Monitoring And Managing Devices

   • Securing Cisco IOS img
     • Image Resilience Feature
     • Secure Copy
   • Management and Reporting
     • Out-of-Band
     • In-Band
   • Syslog
     • Message
       • Levels 0 - 7
     • Operation
     • Configuration
   • SNMP
     • MIB
     • Versions
     • Vulnerabilities
   • NTP
     • Authentication
     • Server/Client

4. Using Automated Security Features

   • Performing A Security Audit
     • CDP and LLDP
     • Protocols and Services
   • Locking Down A Router
     • Cisco AutoSecure

5. Securing The Control Plane

   • RPA: Routing Protocol Authentication
     • OSPF SHA
     • OSPF MD5
     • Routing Protocol Spoofing
   • Control Plane Policing
     • Network Device Operations
       • Data plane packets
       • Management plane packets
       • Control plane packets
     • Control And Mangement Plane Vulnerabilities
       • ACL's
     • COPP Operations
       • manage the flow of traffic that is “punted” to the route processor

Bilder und Dateien der Mindmap