Configuring Basic Cisco Router Security - Other

Community safety is a scorching subject nowadays, and can handiest build up in importance within the months and years ahead.

Even as many of the consideration is paid to exterior threats, there are a few steps you can take to prevent unwanted Cisco router access from inside your organization.

Whether or not you need to restrict what sure users can do and run in your routers, or prevent unauthorized users on your company from getting to config mode within the first position, here are four important yet easy steps you'll be able to take to do so.

Encrypt the passwords to your operating configuration.

It is an elementary Cisco router security command that is continuously overlooked. It does not do you any just right to set passwords to your ISDN connection or Telnet connections if someone who can see your router's working configuration can see the passwords. By way of default, those passwords are displayed to your working config in transparent text.

One easy command takes care of that. In global configuration mode, run service password-encryption. This command will encrypt all clear text passwords to your operating configuration.

Set a console password.

If I walked into your network room right now, may I take a seat down and start configuring your Cisco routers?

If this is the case, you need to set a console password. This password is a basic yet vital step in restricting router get admission to on your network. Pass into line configuration mode with the command "line con zero", and set a password with the password command.

Restrict consumer features with privilege level commands.

Not everybody who has get entry to in your routers should have the ability to do the rest they want. With cautious use of privilege levels, you'll restrict the commands given customers can run for your routers.

Privilege levels could be a little clumsy to start with, but with observe you can be tying your routers down as tight as you like. Discuss with the internet for documentation on configuring privilege levels.

Configure an "permit secret" password.

It is not unusual for me to see a router that has an enable mode password set, but it's in clear text.

Through using "allow mystery", the permit mode password will routinely be encrypted. Keep in mind that, when you've got an enable password and allow secret password set on the related router, the permit mystery password takes precedence.

These 4 fundamental steps will assist save you undesirable router access from inside your network. If most effective preventing issues from outside your network was once as simple!

access point vs router