321 Studios OL-7141-04 guide

Chapter 1 Cisco SDM Express

Security Settings

Disable SNMP Services on Your Router Check Box

Check to disable the SNMP service on your router. For an explanation of why SNMP should be disabled, see the help topic Disable SNMP.

Disable Services that Involve Security Risks Check Box

Check to disable the following services on the router. For an explanation of why these services should be disabled, click the links below:

•Disable Finger Service

•Disable PAD Service

•Disable TCP Small Servers Service

•Disable UDP Small Servers Service

•Disable IP BOOTP Server Service

•Disable IP Identification Service

•Disable CDP

•Disable IP Source Route

•Disable IP Gratuitous ARPs

•Disable IP Redirects

•Disable IP Proxy ARP

•Disable IP Directed Broadcast

•Disable MOP Service

•Disable IP Unreachables

•Disable IP Mask Reply

Enable Services for Enhanced Security on the Router/Network Check Box

Check to enable the following security-enhancing features and services on your router. For an explanation of these services and features, click the links below:

•Enable Netflow Switching

•Enable TCP Keepalives for Inbound Telnet Sessions

•Enable TCP Keepalives for Outbound Telnet Sessions

•Enable Sequence Numbers and Time Stamps on Debugs

		Cisco SDM Express
		Cisco SDM Express
	OL-7141-04			1-23
	OL-7141-04			1-23

Image 29

321 Studios OL-7141-04 manual Disable Snmp Services on Your Router Check Box

Contents

Cisco SDM Express User’s Guide Cisco SDM Express User’s Guide N T E N T S Contents Cisco SDM Express Edit Mode Contents A P T E R Welcome Username and Password Fields Basic ConfigurationHostname Field Domain Name Field SDM Express Enable Secret Password FieldRouter Provisioning USB Token or USB Flash Provision From USB TokenSecure Device Provisioning CNS Server Provision From USB Flash File Selection LAN Interface Configuration Wireless Interface ConfigurationName Size Interface/Bridge-to-Interface List Wireless Parameters FieldsIP Address Field Subnet Mask Field Enable Dhcp server on the LAN interface Check Box Dhcp Server ConfigurationRefresh, Apply Changes, Discard Changes Buttons Starting IP Address Field Secondary Domain Name Server Field Ending IP Address FieldPrimary Domain Name Server Field Internet WAN Ethernet Interface Enable PPPoE Check BoxUse these DNS values for Dhcp clients Check Box Address Type List Password Field Authentication Type Check BoxConfirm Password Field Username Field Internet WAN User Specified Encapsulation Status Icon and Enable or Disable ButtonInternet WAN Autodetect Encapsulation Virtual Circuit Identifier Field Encapsulation ListVirtual Path Identifier Field IP Address for Remote Connection in Central Office Field Add Connection, Edit, Delete Buttons Enable or Disable ButtonWAN Interface Selection Refresh Button Serial ConnectionInterface List IP Address and Subnet Mask Fields Frame Relay Configuration Settings Link Dlci Field Frame Relay Configuration SettingsLMI Type Field Use Ietf Frame Relay Encapsulation Check Box CNS Server Information Internet WAN Advanced Options Secondary DNS Field Firewall ConfigurationPrimary DNS Field Security Settings Disable Services that Involve Security Risks Check Box Disable Snmp Services on Your Router Check Box Summary Enhance Security on Router Access Check BoxEncrypt Passwords Check Box Cisco Router and Security Device Manager Cisco Network ServicesSupplementary Help Disable Snmp Security Settings Disable PAD Service Disable Finger Service Disable TCP Small Servers Service Disable IP Bootp Server Service Disable UDP Small Servers Service Disable CDP Disable IP Identification Service Enable Password Encryption Service Disable IP Source Route Enable TCP Keepalives for Inbound Telnet Sessions Enable Netflow Switching Enable IP CEF Enable TCP Keepalives for Outbound Telnet SessionsEnable Sequence Numbers and Time Stamps on Debugs Set Scheduler Allocate Set Scheduler Interval Set TCP Synwait Time Enable Unicast RPF on Outside Interfaces Enable Logging Disable IP Redirects Disable IP Gratuitous ARPs Disable IP Directed Broadcast Disable IP Proxy ARP Disable IP Unreachables Disable MOP Service Set Minimum Password Length to Less Than 6 Characters Disable IP Mask Reply Set Banner Set Authentication Failure Rate to Less Than 3 Retries Enable SSH for Access to the Router Enable Telnet Settings About Button Cisco SDM Express ButtonsHelp Button Exit Button Reconnecting to the Router After Initial ConfigurationApply Changes Button Discard Changes Button Testing Your WAN Internet Connection Troubleshooting Tips SDP Troubleshooting Tips LAN Fields OverviewIcons Firewall Fields Internet WAN Fields Edit/Delete Buttons Username/Login Password/Password is Encrypted Fields Bridge/Do not bridge LAN interface with wireless Checkbox Encrypt password using MD5 hash algorithm CheckboxEdit a Username Refresh/Apply Changes/Discard Changes Buttons WAN-Unable to Configure WAN Interface WirelessLAN interface configuration Fields No WAN Available Firewall Enable Firewall/Disable Firewall ButtonsDelete Connection Unable to Configure NAT Unable to configure Firewall Window Add or Edit Address Translation Rule Routing Select All Recommended by Cisco Checkbox Disable Services that Involve Security Risks Checkbox Synchronize with my local PC clock Checkbox Encrypt Passwords Checkbox Ping Tools To clear the output of the ping command Update SDM from Cisco.comSource Field Destination Field CCO Login Update SDM from Local PCUpdate SDM from CD Edit Date and Time Fields Date and Time PropertiesSynchronize Checkbox Save Running Config to PC Reset to Factory DefaultsWrite down these steps and then reset the router Apply Button Reconfiguring Your PC with a Static or a Dynamic IP Address Microsoft Windows NT Feature Not Available Cisco SDM Express Edit Mode Feature Not Available D E IN-2