Configuring Basic Cisco Router Security - Other

Community safety is a scorching subject nowadays, and can handiest build up in significance within the months and years ahead.

Even as many of the consideration is paid to exterior threats, there are a few steps you can take to prevent unwanted Cisco router get entry to from inside your organization.

Whether or not you need to restrict what sure users can do and run in your routers, or prevent unauthorized users on your company from getting to config mode within the first place, listed here are 4 essential yet simple steps you'll take to do so.

Encrypt the passwords for your running configuration.

This is a basic Cisco router security command that is regularly overlooked. It does not do you any good to set passwords for your ISDN connection or Telnet connections if any person who can see your router's running configuration can see the passwords. By default, these passwords are displayed for your running config in clear text.

One simple command looks after that. In international configuration mode, run provider password-encryption. This command will encrypt all transparent text passwords for your working configuration.

Set a console password.

If I walked into your network room at the moment, could I sit down and get started configuring your Cisco routers?

If so, you wish to have to set a console password. This password is a fundamental but important step in proscribing router access in your network. Cross into line configuration mode with the command "line con 0", and set a password with the password command.

Prohibit person capabilities with privilege stage commands.

No longer everyone who has get right of entry to to your routers must be capable to do anything else they want. With careful use of privilege ranges, you can prohibit the instructions given customers can run for your routers.

Privilege ranges could be a little clumsy to start with, but with follow you can be tying your routers down as tight as you like. Talk over with the internet for documentation on configuring privilege levels.

Configure an "allow mystery" password.

It is not unusual for me to peer a router that has an permit mode password set, but it's in clear text.

Through the use of "allow secret", the permit mode password will routinely be encrypted. Take into account that, when you've got an permit password and enable secret password set at the same router, the allow mystery password takes precedence.

These four fundamental steps will assist save you undesirable router get entry to from inside your network. If simplest preventing issues from outdoor your community was as simple!

access point vs router