securing network devices

securing network devices

1. Assigning administrative roles

   • as an administrators
     • We provide access to infrastructure devices based on privilege levels
     • limiting administrative networks
     • Implement a rolebased CLI to provide hierarchical administrative access

2. monitoring and managing devices

   • IOS images and configuration administrators files should be protected using the Cisco IOS resilient configuration feature.
   • Network monitoring should be implemented, including configuring Syslog, SNMP, and NTP.

3. securing devices acces

   • When securing a network, device hardening should be the first step
     • Using SSH instead of Telnet or HTTPS instead of HTTP
     • securing the network perimeter, securing administrative access to infrastructure devices, enhancing virtual login security

4. securing the control plane

5. Using Automated Security Features

   • The Cisco Discovery Protocol (CDP) is an example of a service that is enabled by default on Cisco routers
   • The Link Layer Discovery Protocol (LLDP) is an open standard that can be enabled on Cisco devices, as well as other vendor devices that support LLDP