designing network security cisco press phần 6

bộ lọc như vậy mà các thiết bị duy nhất trên mạng này có truy cập danh sách truy cập SNMP 6 giấy phép máy chủ và host key mã hóalà chỉ đọc và chỉ có thể được truy cập bởi các thiết bị! liên quan đến truy cập danh sách 6 snmp-server cộng đồng công cộng RO 6! | Securing the Corporate Network Infrastructure filter such that only devices on this network have SNMP access access-list 6 ip permit configure TACACS server and encryption key tacacs-server host tacacs-server key thisisakey SNMP access is read-only and can only be accessed by devices associated with access-list 6 snmp-server community public RO 6 physical console access accessible via staff login and appropriate local password - the session times out after 2 minutes and 30 seconds of idle time line con 0 exec-timeout 2 30 login authentication staff no login prompt and no input access allowed through auxiliary port line aux 0 no exec transport input none telnet access requires default authentication TACACS and upon successful authentication commands associated with privilege level 15 are accessible. The session times out after 2 minutes and 30 seconds of inactivity line vty 0 4 http cpress cc td cpress internl dns 45 of 47 02 02 2001 Securing the Corporate Network Infrastructure exec-timeout 2 30 login authentication default privilege level 15 turn on syslog and define console information to be logged service timestamps log datetime localtime show-timezone logging on logging logging console information Switch configuration hostname Switch define Telnet and console authentication to be via TACACS set authentication login tacacs enable set authentication enable tacacs enable define TACACS server and encryption key set tacacs key secretkey set tacacs server define syslog logging server and enable system logging messages to the current login session set logging server set logging server enable set logging session enable PIX firewall configuration define enable password and Telnet password enable password BjeuCKspwqCc94Ss encrypted http cpress cc td cpress internl dns 46 of 47 02 02 2001 Securing the Corporate Network Infrastructure .