Netband Project - Device hardening - Revision history

Rael at 18:54, 30 June 2010

2010-06-30T18:54:02Z

2009-10-15T13:20:32Z

2009-05-13T05:36:10Z

2009-05-02T07:25:08Z

‎External links

2009-04-29T07:04:36Z

2009-04-17T06:00:11Z

‎EXEC Timeout

2009-04-17T05:59:36Z

‎EXEC Timeout

2009-04-17T05:55:33Z

‎EXEC Timeout

2009-04-17T05:53:23Z

‎EXEC Timeout

2009-04-17T05:51:34Z

‎Mangement Plane Protection

@@ Line 212: / Line 212: @@
 </pre>
-==Control vty and tty Lines==
+== Control vty and tty Lines ==
 *Disable unwanted access methods to and from the virtual lines
 *Use access-lists to control access to the virtual lines
 <pre>line vty 0 4
   transport input ssh
   transport output ssh
@@ Line 223: / Line 222: @@
 line vty 5
   transport input ssh
-  transport input ssh
+  transport output ssh
   access-class 2 in
+!
 access-list 2 permit 10.0.0.0 0.255.255.255
 </pre>
 ==Mangement Plane Protection==
 *restricts management to one or more logical or physical interfaces

← Older revision		Revision as of 05:36, 13 May 2009
Line 1:		Line 1:
		+	=Device hardening=
	This page is part of the [[Netband_Project\|Netband Project]]<br/>		This page is part of the [[Netband_Project\|Netband Project]]<br/>

← Older revision		Revision as of 07:25, 2 May 2009
Line 245:		Line 245:
	==External links==		==External links==
	[http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080120f48.shtml Cisco Guide to Harden Cisco IOS Devices]		[http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080120f48.shtml Cisco Guide to Harden Cisco IOS Devices]
		+	[[Category:network]][[Category:CCNP]][[category:students]][[Category:CCNP4]]

← Older revision		Revision as of 07:04, 29 April 2009
Line 1:		Line 1:
−	~~<accesscontrol>NetBand</accesscontrol>~~
	This page is part of the [[Netband_Project\|Netband Project]]<br/>		This page is part of the [[Netband_Project\|Netband Project]]<br/>

@@ Line 77: / Line 77: @@
 *on some older IOS versions the default is, no timeout
 *when all lines are occupied, no one can log in until the device is restarted or the sessions are cleared through the console
-<pre>
+<pre>B1rt1#sh users
      Line       User       Host(s)              Idle       Location
 * vty 194      admin      idle                 00:00:00 10.1.2.50

@@ Line 75: / Line 75: @@
   exec-timeout 5
 </pre>
-*on older IOS versions default is no timeout
+*on some older IOS versions the default is, no timeout
 <pre>
 B1rt1#sh users
@@ Line 81: / Line 82: @@
 * vty 194      admin      idle                 00:00:00 10.1.2.50
    vty 195      admin2     idle                 00:00:03 10.1.2.50
 B1rt1#clear line 195

@@ Line 229: / Line 229: @@
               ssh                223981
 </pre>
-For more information see: [http://www.cisco.com/en/US/docs/ios/12_4t/12_4t11/htsecmpp.html#wp1049489 Management PLane Protection]
+For more information see: [http://www.cisco.com/en/US/docs/ios/12_4t/12_4t11/htsecmpp.html#wp1049489 Management Plane Protection]
 ==External links==
 [http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080120f48.shtml Cisco Guide to Harden Cisco IOS Devices]