Securing the Network Infrastructure

Securing the Network Infrastructure

1. The network infrastructure includes routers, switches, servers and other devices.

   • Securing Device Access
     • Physical Security
     • Operating System Security
     • Router Hardening
     • Secure Local and Remote Access
       • Local access
       • Remote access
         • Telnet, SSH, HTTP, HTTPS, or SNMP
           • Encrypt all traffic between the administrator computer and the router
         • Strong Passwords
     • Increasing Access Security
       • security passwords min-length length -service password-encryption- exec-timeout minutes [seconds]
       • Secret Password Algorithms
         • MD5, Scrypt, Sha-256

2. Assigning Administrative Roles

   • privilege level
     • User EXEC mode ,Privileged EXEC mode
   • role-based CLI
     • controlling which commands are available to specific roles

3. Monitoring and Managing Devices

   • Cisco IOS Resilient
     • provides a method for securing the IOS image and configuration files locally on the device
   • monitoring tool
     • Syslog, SNMP, NTP

4. Using Automated Security Features

   • Cisco routers are initially deployed with many services that are enabled by default(CDP y LLDP)
     • Cisco CDP Monitor

5. Securing the Control Plane

   • Routing Protocol Spoofing
     • Routing systems can be attacked by disrupting peer network routers, or by falsifying or spoofing the information carried within the routing protocols.
       • Redirecting traffic to create routing loops. Redirecting traffic so it can be monitored on an insecure link .Redirecting traffic to discard it