321 Studios OL-7141-04 Security Settings

Chapter1 Cisco SDM Express

Supplementary Help

1-26

Cisco SDM Express

OL-7141-04

server and obtain the configuration. If your service provider has not provided

Cisco Network Services server information, or you want to configure the rout er

using Cisco SDM Express, do not select this option.

You will not be able to use Cisco Network Services if:

•Your router has no installed WAN interfaces, or the router has a WAN

interface that Cisco SDM Express does not support. Cisco SDM Express

must be able to configure a WAN interface in order for the router to obtain

the Cisco Network Services configuration file. If CiscoSDM Express

determines that it cannot configure a WAN interface, it will display an error

message informing you that you cannot use Cisco Network Services. If there

are no WAN interfaces installed on the router, and you still want to use Cisco

Network Services, click Cancel to leave the Startup wizard, and close

Cisco SDM Express. Then, install a WAN interface card supported by

Cisco SDM Express, restart Cisco SDME xpress, and select CNS Server

(Cisco Network Services server) in the Startup wizard.

For a list of supported interface cards, see the CiscoSDM Release Notes on:

http://www.cisco.com/go/sdm

•You did not select this option, and configured a LAN and a WAN interface

using Cisco SDM Express, and then returned to the Router Provisioning

window and selected CNS Server. If you want to use Cisco Network

Services, click Cancel to leave the Startup wizard and close

Cisco SDM Express. Then restart Cisco SDM Express and select CNS

Server in the Router Provisioning window.

Security Settings

The following topics describes security settings that CiscoSDM Exp ress can

make.

Disable SNMP

CiscoSDM Express disables the Simple Network Management Protocol (SNMP)

whenever possible. SNMP is a network protocol that provides a facility for

retrieving and posting data about network performance and processes. It is very

Contents

Main Cisco SDM Express Users Guide Page CONTENTS Page Page Page CHAPTER Cisco SDM Express Welcome Basic Configuration Hostname Field Username and Password Fields Enable Secret Password Field Router Provisioning SDM Express USB Token or USB Flash Secure Device Provisioning CNS Server Provision From USB Token Provision From USB Flash File Selection Name Size Time Modified Wireless Interface Configuration LAN Interface Configuration Interface/Bridge-to-Interface List IP Address Field Subnet Mask Field Subnet Bits Field Wireless Parameters Fields DHCP Server Configuration Enable DHCP server on the LAN interface Check Box Starting IP Address Field Ending IP Address Field Import all DHCP option parameters to the DHCP server database Check Box Primary Domain Name Server Field Secondary Domain Name Server Field Use these DNS values for DHCP clients Check Box Internet (WAN): Ethernet Interface Enable PPPoE Check Box Authentication Type Check Box Username Field Confirm Password Field Internet (WAN): Autodetect Encapsulation Status Icon and Enable or Disable Button Internet (WAN): User Specified Encapsulation Status Icon and Enable or Disable Button Encapsulation List Virtual Path Identifier Field Virtual Circuit Identifier Field IP Address for Remote Connection in Central Office Field Authentication Type Check Box Username Field Confirm Password Field WAN Interface Selection Add Connection, Edit, Delete Buttons Enable or Disable Button Interface List Serial Connection Encapsulation List IP Address and Subnet Mask Fields Frame Relay Configuration Settings Link Frame Relay Configuration Settings DLCI Field LMI Type Field Use IETF Frame Relay Encapsulation Check Box Internet (WAN): Advanced Options Create Default Route Check Box CNS Server Information Enter the CNS Server IP Address /Hostname Field Enter the CNS ID String Field Firewall Configuration Security Settings Disable SNMP Services on Your Router Check Box Disable Services that Involve Security Risks Check Box Enable Services for Enhanced Security on the Router/Network Check Box Enhance Security on Router Access Check Box Encrypt Passwords Check Box Summary Supplementary Help Cisco Router and Security Device Manager Cisco Network Services Security Settings Disable SNMP Disable Finger Service Disable PAD Service Disable TCP Small Servers Service Disable UDP Small Servers Service Disable IP BOOTP Server Service Disable IP Identification Service Disable CDP Disable IP Source Route Enable Password Encryption Service Enable Netflow Switching Enable TCP Keepalives for Inbound Telnet Sessions Enable TCP Keepalives for Outbound Telnet Sessions Enable Sequence Numbers and Time Stamps on Debugs Enable IP CEF Set Scheduler Interval Set Scheduler Allocate Set TCP Synwait Time Enable Logging Enable Unicast RPF on Outside Interfaces Disable IP Gratuitous ARPs Disable IP Redirects Disable IP Proxy ARP Disable IP Directed Broadcast Disable MOP Service Disable IP Unreachables Disable IP Mask Reply Set Minimum Password Length to Less Than 6 Characters Set Authentication Failure Rate to Less Than 3 Retries Set Banner Enable Telnet Settings Enable SSH for Access to the Router Cisco SDM Express Buttons Help Button About Button Exit Button Apply Changes Button Reconnecting to the Router After Initial Configuration Testing Your WAN (Internet) Connection SDP Troubleshooting Tips Troubleshooting Tips CHAPTER Cisco SDM Express Edit Mode Overview Icons LAN Fields Internet (WAN) Fields Firewall Fields Basic Configuration Edit/Delete Buttons Username/Login Password/Password is Encrypted Fields Enable Secret Password Field Hostname Field LAN Bridge/Do not bridge LAN interface with wireless Checkbox LAN interface configuration Fields Wireless WANUnable to Configure WAN Interface No WAN Available Delete Connection Firewall Enable Firewall/Disable Firewall Buttons Unable to configure Firewall Window NAT Unable to Configure NAT Add or Edit Address Translation Rule Original Port Translated Port Protocol Routing Enable Check Box Forwarding (Next Hop) Field Security Settings Select All (Recommended by Cisco) Checkbox Disable Services that Involve Security Risks Checkbox Enable Services for Enhanced Security on the Router/Network Checkbox Encrypt Passwords Checkbox Synchronize with my local PC clock Checkbox Tools Ping Option Telnet Option Cisco SDM Option Software Update Option Update SDM from Cisco.com CCO Login Update SDM from Local PC Update SDM from CD Date and Time Properties Synchronize with my local PC clock Checkbox Synchronize Checkbox Edit Date and Time Fields Apply Button Reset to Factory Defaults Step 1: Save Running Config to PC Step 2: Write down these steps and then reset the router Reconfiguring Your PC with a Static or a Dynamic IP Address Page Feature Not Available Page INDEX B C D L M N P