Monday, October 26, 2009

Random Security Measures

security password min-length [0-16] \\sets a minimum password length for all future passwords
no service password-recovers \\very dangerous...you cant recover passwords or ios's after this point
security authentication failure rate [#] log \\locks user out for x seconds if failed login x times
login block-for [seconds] attemps [#] within [seconds] \\blocks a user for x seconds after x attempts within x seconds...
login quiet-mode access-class [name] \\if login is blocked...this sets an acl that still allows groups of users access
login delay [#] \\sets a delay after a failed login
login on-failure log \\logs login failures after # attempts
show login

motd options ( $(line)  $(domain)   $(hostname) )

ENABLING VIEWS
aaa new-model \\enable aaa
enable view (enter secret password at prompt)
parser view [name]
secret [password]
(configure options)

secure boot-image \\locks ios image
secure boot-config \\locks config file
no secure [option] \\requires console access

reload in [minutes]  \\good if entering say access lists on a remote router
reload cancel

ACL TYPES
standard
extended
dynamic
established
time-based
context based

cool command of the day
ip access-list resequence [name/num] [start num] [variance]

time-range [name]
absolute/periodic

No comments:

Post a Comment