Securing Cisco Router Installations and Administrative Access参考.ppt

Securing Cisco Router Installations and Administrative Access参考.ppt

  1. 1、本文档共40页,可阅读全部内容。
  2. 2、有哪些信誉好的足球投注网站(book118)网站文档一经付费(服务费),不意味着购买了该文档的版权,仅供个人/单位学习、研究之用,不得用于商业用途,未经授权,严禁复制、发行、汇编、翻译或者网络传播等,侵权必究。
  3. 3、本站所有内容均由合作方或网友上传,本站不对文档的完整性、权威性及其观点立场正确性做任何保证或承诺!文档内容仅供研究参考,付费前请自行鉴别。如您付费,意味着您自己接受本站规则且自行承担风险,本站不退款、不进行额外附加服务;查看《如何避免下载的几个坑》。如果您已付费下载过本站文档,您可以点击 这里二次下载
  4. 4、如文档侵犯商业秘密、侵犯著作权、侵犯人身权等,请点击“版权申诉”(推荐),也可以打举报电话:400-050-0827(电话支持时间:9:00-18:30)。
查看更多
Securing Cisco Router Installations and Administrative Access参考

Cisco Device Hardening Securing Cisco Router Installations and Administrative Access Configuring Router Passwords A console is a terminal connected to a router console port. Console是作为终端管理设备连接到路由器的管理接口. The terminal can be a dumb terminal or a PC with terminal emulation software. 管理设备通常安装有终端管理软件的PC主机,比如安装有超级终端的PC主机 Password Creation Rules Passwords can be 1 to 25 characters in length. 密码可以为1到25个字符的长度 Passwords can include: 密码可以包含如下字符: Alphanumeric characters 阿拉伯字母 Uppercase and lowercase characters 大小写敏感 Symbols and spaces 符号字符和空格 Password-leading spaces are ignored, but any spaces after the first character are not ignored. 密码的首位的空格不作为密码一部分,但是密码尾部的空格将认定为密码字符. Change passwords. 可以修改密码 Initial Configuration Dialog Configure the Line-Level Password Password Minimum Length Enforcement Encrypting Passwords Using the service password-encryption Command Enhanced Username Password Security Securing ROMMON with the no password-recovery Command Authentication Failure Rate with Login Setting a Login Failure Blocking Period Excluding Addresses from Login Blocking Setting a Login Delay Verifying Login Setting Timeouts for Router Lines Setting Multiple Privilege Levels Configuring Banner Messages Role-Based CLI Overview Traditional approach of limiting CLI access based on privilege levels and enable passwords provided too little control: No access control to specific interfaces Commands placed on a higher privilege level could not be reused for lower-privileged users CLI views provide more granular control. CLI views include accessible commands and interfaces. Access to a view is protected with a secret. Views can be grouped to superviews to create large sets of accessible commands and interfaces. Role-Based CLI Details Root view is the highest administrative view. Creating and modifying a view or superview is possible only from root view. The difference between root view and privilege 15 is that only a rootview user can create or modify views and superviews. CLI views require

文档评论(0)

2017meng + 关注
实名认证
内容提供者

该用户很懒,什么也没介绍

1亿VIP精品文档

相关文档