321 Studios OL-7141-04

Contents

Cisco SDM Express User’s Guide

Ol-7141-04

Cisco Network Services 25

Security Settings 26

Disable SNMP 26

Disable Finger Service 27

Disable PAD Service 27

Disable TCP Small Servers Service 28

Disable UDP Small Servers Service 29

Disable IP BOOTP Server Service 29

Disable IP Identification Service 30

Disable CDP 30

Disable IP Source Route 31

Enable Password Encryption Service 31

Enable Netflow Switching 32

Enable TCP Keepalives for Inbound Telnet Sessions 32

Enable TCP Keepalives for Outbound Telnet Sessions 33

Enable Sequence Numbers and Time Stamps on Debugs 33

Enable IP CEF 33

Set Scheduler Interval 34

Set Scheduler Allocate 34

Set TCP Synwait Time 35

Enable Logging 36

Enable Unicast RPF on Outside Interfaces 36

Disable IP Gratuitous ARPs 37

Disable IP Redirects 37

Disable IP Proxy ARP 38

Disable IP Directed Broadcast 38

Disable MOP Service 39

Disable IP Unreachables 39

Disable IP Mask Reply 40

Set Minimum Password Length to Less Than 6 Character s 40

Contents

Main Cisco SDM Express Users Guide Page CONTENTS Page Page Page CHAPTER Cisco SDM Express Welcome Basic Configuration Hostname Field Username and Password Fields Enable Secret Password Field Router Provisioning SDM Express USB Token or USB Flash Secure Device Provisioning CNS Server Provision From USB Token Provision From USB Flash File Selection Name Size Time Modified Wireless Interface Configuration LAN Interface Configuration Interface/Bridge-to-Interface List IP Address Field Subnet Mask Field Subnet Bits Field Wireless Parameters Fields DHCP Server Configuration Enable DHCP server on the LAN interface Check Box Starting IP Address Field Ending IP Address Field Import all DHCP option parameters to the DHCP server database Check Box Primary Domain Name Server Field Secondary Domain Name Server Field Use these DNS values for DHCP clients Check Box Internet (WAN): Ethernet Interface Enable PPPoE Check Box Authentication Type Check Box Username Field Confirm Password Field Internet (WAN): Autodetect Encapsulation Status Icon and Enable or Disable Button Internet (WAN): User Specified Encapsulation Status Icon and Enable or Disable Button Encapsulation List Virtual Path Identifier Field Virtual Circuit Identifier Field IP Address for Remote Connection in Central Office Field Authentication Type Check Box Username Field Confirm Password Field WAN Interface Selection Add Connection, Edit, Delete Buttons Enable or Disable Button Interface List Serial Connection Encapsulation List IP Address and Subnet Mask Fields Frame Relay Configuration Settings Link Frame Relay Configuration Settings DLCI Field LMI Type Field Use IETF Frame Relay Encapsulation Check Box Internet (WAN): Advanced Options Create Default Route Check Box CNS Server Information Enter the CNS Server IP Address /Hostname Field Enter the CNS ID String Field Firewall Configuration Security Settings Disable SNMP Services on Your Router Check Box Disable Services that Involve Security Risks Check Box Enable Services for Enhanced Security on the Router/Network Check Box Enhance Security on Router Access Check Box Encrypt Passwords Check Box Summary Supplementary Help Cisco Router and Security Device Manager Cisco Network Services Security Settings Disable SNMP Disable Finger Service Disable PAD Service Disable TCP Small Servers Service Disable UDP Small Servers Service Disable IP BOOTP Server Service Disable IP Identification Service Disable CDP Disable IP Source Route Enable Password Encryption Service Enable Netflow Switching Enable TCP Keepalives for Inbound Telnet Sessions Enable TCP Keepalives for Outbound Telnet Sessions Enable Sequence Numbers and Time Stamps on Debugs Enable IP CEF Set Scheduler Interval Set Scheduler Allocate Set TCP Synwait Time Enable Logging Enable Unicast RPF on Outside Interfaces Disable IP Gratuitous ARPs Disable IP Redirects Disable IP Proxy ARP Disable IP Directed Broadcast Disable MOP Service Disable IP Unreachables Disable IP Mask Reply Set Minimum Password Length to Less Than 6 Characters Set Authentication Failure Rate to Less Than 3 Retries Set Banner Enable Telnet Settings Enable SSH for Access to the Router Cisco SDM Express Buttons Help Button About Button Exit Button Apply Changes Button Reconnecting to the Router After Initial Configuration Testing Your WAN (Internet) Connection SDP Troubleshooting Tips Troubleshooting Tips CHAPTER Cisco SDM Express Edit Mode Overview Icons LAN Fields Internet (WAN) Fields Firewall Fields Basic Configuration Edit/Delete Buttons Username/Login Password/Password is Encrypted Fields Enable Secret Password Field Hostname Field LAN Bridge/Do not bridge LAN interface with wireless Checkbox LAN interface configuration Fields Wireless WANUnable to Configure WAN Interface No WAN Available Delete Connection Firewall Enable Firewall/Disable Firewall Buttons Unable to configure Firewall Window NAT Unable to Configure NAT Add or Edit Address Translation Rule Original Port Translated Port Protocol Routing Enable Check Box Forwarding (Next Hop) Field Security Settings Select All (Recommended by Cisco) Checkbox Disable Services that Involve Security Risks Checkbox Enable Services for Enhanced Security on the Router/Network Checkbox Encrypt Passwords Checkbox Synchronize with my local PC clock Checkbox Tools Ping Option Telnet Option Cisco SDM Option Software Update Option Update SDM from Cisco.com CCO Login Update SDM from Local PC Update SDM from CD Date and Time Properties Synchronize with my local PC clock Checkbox Synchronize Checkbox Edit Date and Time Fields Apply Button Reset to Factory Defaults Step 1: Save Running Config to PC Step 2: Write down these steps and then reset the router Reconfiguring Your PC with a Static or a Dynamic IP Address Page Feature Not Available Page INDEX B C D L M N P