tailieunhanh - Router Security Configuration Guide

"Secure Router Configuration - IOS " aims at providing network security engineers with the knowledge and skills needed to secure Cisco IOS router based networks. Readers of this book will be able to secure the network environment using existing Cisco IOS Software features, as well as install and configure components of the Cisco IOS Software, such as zone-based policy firewall and Cisco IOS Intrusion Prevention System (IPS). | UNCLASSIFIED Report Number C4-054R-00 Router Security Configuration Guide Principles and guidance for secure configuration ofIP routers with detailed instructions for Cisco Systems routers Router Security Guidance Activity of the System and Network Attack Center SNAC Authors Vanessa Antoine Patricia Bosmajian Daniel Duesterhaus Michael Dransfield Brian Eppinger James Houser Andrew Kim Phyllis Lee David Opitz Michael Wiacek Mark Wilson Neal Ziring Updated November 21 2001 Version National Security Agency 9800 Savage Rd. Suite 6704 Ft. Meade MD 20755-6704 W2KGuides@ UNCLASSIFIED Router Security Configuration Guide UNCLASSIFIED Warnings This document is only a guide to recommended security settings for Internet Protocol IP routers particularly routers running Cisco Systems Internet Operating System IOS versions 11 and 12. It is not meant to replace well-designed policy or sound judgment. This guide does not address site-specific configuration issues. Care must be taken when implementing the security steps specified in this guide. Ensure that all security steps and procedures chosen from this guide are thoroughly tested and reviewed prior to imposing them on an operational network. This document is current as of September 2001. Acknowledgements The authors would like to acknowledge Daniel Duesterhaus author of the original NSA Cisco Router Security Configuration Guide and the management and staff of the Applications and Architectures division for their patience and assistance with the development of this guide. Special thanks also go to Ray Bongiorni for his quality assurance and editorial work. Additional contributors to the development effort include Andrew Dorsett Jennifer Dorrin Charles Hall Scott McKay and Jeffrey Thomas. Trademark Information Cisco IOS and CiscoSecure are registered trademarks of Cisco Systems Inc. in the . and other countries. Windows 2000 is a registered trademark of Microsoft Corporation in the . and other countries. All .