1-31
Cisco SDM Express
OL-7141-04
Chapter1 Cisco SDM Express
Supplementary Help
no cdp run
You can undo this fix using the CiscoSD M Security Audit feature. To learn how,
see the Securit y Audit online he lp in Cisco SDM. For more information, click
CiscoRouter and Security Device Manager.
Disable IP Source Route
Cisco SDM Express disables IP source routing whenever possible. The IP
protocol supports source routing options that allow the sender of an IP datagram
to control the route that the datagram will take toward its ultimate destination, and
generally the route that any reply will take. These op tions are rarely used for
legitimate purposes in networks. Some older IP implementations do not process
source-routed packets properly, and it may be possible to crash machines running
these implementations by sending them datagrams with source routing options.
Disabling IP source routing will cause a Cisco router to never forward a n IP
packet that carries a source routing option.
The configuration that will be delivered to the router to disable IP source routing
is as follows:
no ip source-route
You can undo this fix using the CiscoSD M Security Audit feature. To learn how,
see the Securi ty Audit online h elp in Cisco SDM. For more information, click
CiscoRouter and Security Device Manager.
Enable Password Encryption Service
Cisco SDM Express enables password encryption whenever possible. Password
encryption directs the Cisco IOS software to encrypt the passwords, Challenge
Handshake Authentication Protocol (CHAP) secrets, and similar data that are
saved in its configuration file. This is useful for preventing casual observers from
reading passwords, for example, when they happen to look over an administrator’s
shoulder.
The configuration that will be delivered to the router to enable password
encryption is as follows:
service password-encryption