IOS-XE Securing Management Plane
This post provides an overview of securing the management plane on Cisco routers/switches. Secure Passwords Create local passwords using a Type 8 or 9 password, by using secret keyword, which…
IOS-XE time-based ACL
IOS-XE Time based ACL Cisco IOS-XE routers and switches support applying extended Access Control Lists (ACL) based on the time/day of the connection. To have a consistent experience and the…
Securing IOS-XE Routing Protocols
Securing the routing information prevents an attacker from introducing false routing information into the network, which could be used as part of a Denial of Service (DoS) or Man-in-the-Middle (MiTM)…
Securing IOS-XE SSH
Securing IOS-XE SSH SSH (Secure Shell) is a commonly used cryptographic protocol used to securely manage network devices such as switches, routers, firewalls etc over an insecure network. Although more…
Unicast Reverse Path Forwarding (uRPF)
Unicast Reverse Path Forwarding (uRPF) Unicast Reverse Path Forwarding (uRPF) is a security feature on Cisco ISR routers and ASA or Secure Firewall Threat Defence (FTD) firewalls, that enables the…
Prevent BGP transit AS
By default, BGP advertises all prefixes to External BGP neighbours. When a router is dual homed to two or more ISP using BGP, the local router could become as transit…