Please enable JavaScript.

Coggle requires JavaScript to display documents.

Secure Device Access - Coggle Diagram

- - - - A rotuer connects to the LAN to the internet
    - - Edge router
        
        The edge router is the first line of defense, performs traffic filtering
      - Firewall
        
        Provides additional access control by tracking the state of connections. Performs user PROXY authentication
      - Router
        
        Used to connect LAN to the internet
      - Other
        
        IPS, Web Security Appliance (proxy server), Email Security Appliance
    - - DMZ is used for routers that are accessed from the exterior. Those are connected to the firewall
  - - - The router is in a locked secured room
      - Install UPS
    - - Equip router with the maximum amount of memory possible
      - Use the latest stable version of the OS
      - Backup router OS and configuration files
    - - Secure administrative control
      - Disable unused ports and interfaces
      - Disable unnecessary services
- - - - configure terminal
      - line console 0
      - password cisco
      - login
      - end
    - - configure terminal
      - enable secret class
      - exit
    - - configure terminal
      - line vty 0 15
      - password cisco
      - login
      - end
  - - - enable algorithm-type scrypt|md5|sha256 secret password
- - - - Router(config)# banner { motd | exec | login } delimiter mesage delimiter
  - - - Router(config)# login block-for seconds attempts tries within seconds
      - Works in two modes
        
        Normal mode
        
        The router keeps count of the number of failed login attempts within an identified amount of time.
        
        Quiet mode
        
        If the number of failed logins exceeds the configured threshold, all login attempts using any service are denied
    - - Router(config)# login quiet-mode access-class {acl-name | acl-number}
    - - Router(config)# login delay seconds
    - - Router(config)# login on-success log [every login]
    - - Router(config)# login on-failure log [every login]
    - - Router# show login
    - - Router# show login failures
- - - - hostname hostname
    - - ip domain name name
    - - crypto key generate rsa general-keys modulus modulus-lenght
    - - username username secret password
    - - login local
    - - transport input ssh