- 1、本文档共40页,可阅读全部内容。
- 2、有哪些信誉好的足球投注网站(book118)网站文档一经付费(服务费),不意味着购买了该文档的版权,仅供个人/单位学习、研究之用,不得用于商业用途,未经授权,严禁复制、发行、汇编、翻译或者网络传播等,侵权必究。
- 3、本站所有内容均由合作方或网友上传,本站不对文档的完整性、权威性及其观点立场正确性做任何保证或承诺!文档内容仅供研究参考,付费前请自行鉴别。如您付费,意味着您自己接受本站规则且自行承担风险,本站不退款、不进行额外附加服务;查看《如何避免下载的几个坑》。如果您已付费下载过本站文档,您可以点击 这里二次下载。
- 4、如文档侵犯商业秘密、侵犯著作权、侵犯人身权等,请点击“版权申诉”(推荐),也可以打举报电话:400-050-0827(电话支持时间:9:00-18:30)。
查看更多
Securing Cisco Router Installations and Administrative Access参考
Cisco Device Hardening Securing Cisco Router Installations and Administrative Access Configuring Router Passwords A console is a terminal connected to a router console port.Console是作为终端管理设备连接到路由器的管理接口. The terminal can be a dumb terminal or a PC with terminal emulation software.管理设备通常安装有终端管理软件的PC主机,比如安装有超级终端的PC主机 Password Creation Rules Passwords can be 1 to 25 characters in length. 密码可以为1到25个字符的长度 Passwords can include:密码可以包含如下字符: Alphanumeric characters阿拉伯字母 Uppercase and lowercase characters大小写敏感 Symbols and spaces符号字符和空格 Password-leading spaces are ignored, but any spaces after the first character are not ignored.密码的首位的空格不作为密码一部分,但是密码尾部的空格将认定为密码字符. Change passwords. 可以修改密码 Initial Configuration Dialog Configure the Line-Level Password Password Minimum Length Enforcement Encrypting Passwords Using theservice password-encryption Command Enhanced Username Password Security Securing ROMMON with the no password-recovery Command Authentication Failure Rate with Login Setting a Login Failure Blocking Period Excluding Addresses from Login Blocking Setting a Login Delay Verifying Login Setting Timeouts for Router Lines Setting Multiple Privilege Levels Configuring Banner Messages Role-Based CLI Overview Traditional approach of limiting CLI access based on privilege levels and enable passwords provided too little control: No access control to specific interfaces Commands placed on a higher privilege level could not be reused for lower-privileged users CLI views provide more granular control. CLI views include accessible commands and interfaces. Access to a view is protected with a secret. Views can be grouped to superviews to create large sets of accessible commands and interfaces. Role-Based CLI Details Root view is the highest administrative view. Creating and modifying a view or superview is possible only from root view. The difference between root view and privilege 15 is that only a rootview user can create or modify views and superviews. CLI views require
文档评论(0)