Chapter 1 Cisco SDM Express
Supplementary Help
no cdp run
You can undo this fix using the Cisco SDM Security Audit feature. To learn how, see the Security Audit online help in Cisco SDM. For more information, click Cisco Router and Security Device Manager.
Disable IP Source Route
Cisco SDM Express disables IP source routing whenever possible. The IP protocol supports source routing options that allow the sender of an IP datagram to control the route that the datagram will take toward its ultimate destination, and generally the route that any reply will take. These options are rarely used for legitimate purposes in networks. Some older IP implementations do not process
Disabling IP source routing will cause a Cisco router to never forward an IP packet that carries a source routing option.
The configuration that will be delivered to the router to disable IP source routing is as follows:
no ip
You can undo this fix using the Cisco SDM Security Audit feature. To learn how, see the Security Audit online help in Cisco SDM. For more information, click Cisco Router and Security Device Manager.
Enable Password Encryption Service
Cisco SDM Express enables password encryption whenever possible. Password encryption directs the Cisco IOS software to encrypt the passwords, Challenge Handshake Authentication Protocol (CHAP) secrets, and similar data that are saved in its configuration file. This is useful for preventing casual observers from reading passwords, for example, when they happen to look over an administrator’s shoulder.
The configuration that will be delivered to the router to enable password encryption is as follows:
service
|
| Cisco SDM Express |
|
|
|
|
| ||
|
|
| ||
|
|
|