Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
cisco:good-defaults [2011/05/27 12:18]
217.196.226.80
cisco:good-defaults [2014/09/28 22:43] (current)
mrizvic
Line 21: Line 21:
  
 Source: http://mellowd.co.uk/ccie/?p=975 Source: http://mellowd.co.uk/ccie/?p=975
 +
 +recommended on 2900 series for IPv6 traffic:
 +
 +<code>
 +sdm prefer dual-ipv4-and-ipv6 default
 +</code>
 +
 +auto archiving on 'write memory'
 +
 +<code>
 +archive
 +log config
 +  logging enable
 +  logging size 1000
 +  notify syslog contenttype plaintext
 +  hidekeys
 +path tftp://192.168.100.100/$h.cfg
 +write-memory
 +time-period 1440
 +</code>
 +
 +disable local services + add some security stuff
 +
 +<code>
 +no service tcp-small-servers
 +no service udp-small-servers
 +no service pad
 +no ip http server
 +no ip http secure-server
 +no ip domain-lookup
 +no ip finger
 +no ip source-route
 +login on-failure log
 +login on-success log
 +
 +ip ssh authentication-retries 2
 +ip ssh logging events
 +ip ssh version 2
 +
 +logging buffered 512000
 +</code>
 +
 +
 +
 +
cisco/good-defaults.1306491508.txt.gz ยท Last modified: 2011/05/27 12:18 by 217.196.226.80
CC Attribution-Share Alike 4.0 International
Driven by DokuWiki Recent changes RSS feed Valid CSS Valid XHTML 1.0 ipv6 ready