Scribd
Upload
48 views

Network Lockdown Secure Access

The document outlines steps to lock down network management access and secure passwords on routers and switches running newer IOS versions. It recommends setting a minimum password length of 10 characters, disabling password recovery, logging authentication failures after 5 attempts, blocking login for 100 seconds if 5 attempts fail within 60 seconds, only allowing users in an access list to continue services after failed attempts, adding a 10 second delay for invalid login attempts, and commands to verify the login settings and failed attempts.

Uploaded by

Abhishek Kunal
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as PDF, TXT or read online on Scribd
48 views

Network Lockdown Secure Access

The document outlines steps to lock down network management access and secure passwords on routers and switches running newer IOS versions. It recommends setting a minimum password length of 10 characters, disabling password recovery, logging authentication failures after 5 attempts, blocking login for 100 seconds if 5 attempts fail within 60 seconds, only allowing users in an access list to continue services after failed attempts, adding a 10 second delay for invalid login attempts, and commands to verify the login settings and failed attempts.

Uploaded by

Abhishek Kunal
Copyright
© Attribution Non-Commercial (BY-NC)
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 5

NETWORK LOCKDOWN

SECURING MANAGEMENT ACCESS

COMMANDS
R#security passwords min-length 10 (It sets for all future passwords and the minimum length required for the passwords) R#no service password-recovery (It s hidden and disables the password recovery) R#security authentication failure rate log 5 log (After 5 times of login it will generate syslog messages)

IN NEWER IOS
R#login block-for 100 attempts 5 within 60 (Block for 100 secs if login attempts fail after 5 attempts upto secs) R#login quiet-mode access-class KUNAL (Only the users in ACL KUNAL are allowed to continue their services ) R#login delay 10 (10 secs penalty if user gives wrong log n passd)

VERIFICATION
Show login Show login failure

You might also like