Difference between revisions of "Netband Project - Device hardening"

From Teknologisk videncenter
Jump to: navigation, search
(Exclusive Configuration Change Access)
(External links)
Line 14: Line 14:
 
</pre>
 
</pre>
  
 +
==Cisco IOS Software Resilient Configuration==
 +
* stores a copy of the Cisco IOS software image and device configuration that is currently being used by a Cisco IOS device.
 +
<pre>secure boot-image
 +
secure boot-config
 +
</pre>
 
==External links==
 
==External links==
 
[http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080120f48.shtml Cisco Guide to Harden Cisco IOS Devices]
 
[http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080120f48.shtml Cisco Guide to Harden Cisco IOS Devices]

Revision as of 13:05, 16 April 2009

<accesscontrol>NetBand</accesscontrol> This page is part of the Netband Project

  • Management Plane—The management plane manages traffic that is sent to the Cisco IOS device and is made up of applications and protocols such as SSH and SNMP.
  • Control Plane—The control plane of a network device processes the traffic that is paramount to maintaining the functionality of the network infrastructure. The control plane consists of applications and protocols between network devices.
  • Data Plane—The data plane forwards data through a network device. The data plane does not include traffic that is sent to the local Cisco IOS device.

Exclusive Configuration Change Access

  • ensures that only one administrator makes configuration changes to a Cisco IOS device at a given time.
B1rt1(config)#configuration mode exclusive auto
!
B1rt1(config)#interface fa0/0
Configuration mode locked exclusively by user 'admin' process '56' from terminal '195'. Please try later.

Cisco IOS Software Resilient Configuration

  • stores a copy of the Cisco IOS software image and device configuration that is currently being used by a Cisco IOS device.
secure boot-image
secure boot-config

External links

Cisco Guide to Harden Cisco IOS Devices