See more Amazon Details

Contents Listing

Preface



1. Router Security

Router Security?

Routers: The Foundation of the Internet

What Can Go Wrong

What Routers Are at Risk?

Moving Forward



2. IOS Version Security

The Need for a Current IOS

Determining the IOS Version

IOS Versions and Vulnerabilities

IOS Security Checklist



3. Basic Access Control

Authentication Versus Authorization

Points of Access

Basic Access Control

Remote Administration

Protection with IPSec

Basic Access Control Security Checklist



4. Passwords and Privilege Levels

Password Encryption

Clear-Text Passwords

service password-encryption

Enable Security

Strong Passwords

Keeping Configuration Files Secure

Privilege Levels

Password Checklist



5. AAA Access Control

Enabling AAA

Local Authentication

TACACS+ Authentication

RADIUS Authentication

Kerberos Authentication

Token-Based Access Control

AAA Security Checklist



6. Warning Banners

Legal Issues

Example Banner

Adding Login Banners

Warning Banner Checklist



7. Unnecessary Protocols and Services

ICMP

Source Routing

Small Services

Finger

HTTP

CDP

Proxy ARP

Miscellaneous

SNMP

Unnecessary Protocols and Services Checklist



8. SNMP Security

SNMP Versions

Securing SNMP v1 and v2c

Securing SNMP v3

SNMP Management Servers

SNMP Security Checklist



9. Secure Routing and Antispoofing

Antispoofing

Routing Protocol Security

Routing Protocol and Antispoofing Checklist



10. NTP

NTP Overview

Configuring NTP

NTP Checklist



11. Logging

Logging in General

Router Logging

ACL Violation Logging

AAA Accounting

Logging Checklist



A. Checklist Quick Reference



B. Physical Security



C. Incident Response



D. Configuration Examples



E. Resources



Index