IT's TIENE

KISA 한국인터넷진흥원 21-03-31 기준 KISA 한국인터넷진흥원 www.kisa.or.kr 1) Bootp Service Disabling Configuration # Bootp Service Disable no ip bootp server # DHCP Service Enable & Bootp Service Disable ip dhcp bootp ignore https://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html Cisco Guide to Harden Cisco IOS Devices This document describes the information to help you secure your Cisco IOS® syst..

KISA 한국인터넷진흥원 21-03-31 기준 KISA 한국인터넷진흥원 www.kisa.or.kr 1) TCP/UDP Small Service Disabling Configuration no service tcp-small-servers no service udp-small-servers https://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html Cisco Guide to Harden Cisco IOS Devices This document describes the information to help you secure your Cisco IOS® system devices, which increases the overall secu..

KISA 한국인터넷진흥원 21-03-31 기준 KISA 한국인터넷진흥원 www.kisa.or.kr 1) HTTP Server Disabling Configuration no ip http server no ip http secure-server ip http active-session-modules exclude_webexec ip http secure-active-session-modules exclude_webexec https://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html Cisco Guide to Harden Cisco IOS Devices This document describes the information to help..

KISA 한국인터넷진흥원 21-03-31 기준 KISA 한국인터넷진흥원 www.kisa.or.kr 1) Finger Service Disabling Configuration no service finger no ip finger - 12.1(5) 와 12.1(5)T 이후 IOS 버전은 기본 값이 Disable 이다. https://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html Cisco Guide to Harden Cisco IOS Devices This document describes the information to help you secure your Cisco IOS® system devices, which increases ..

KISA 한국인터넷진흥원 21-03-31 기준 KISA 한국인터넷진흥원 www.kisa.or.kr [구성도] 1) TCP Keepalive Timeout Configuration service tcp-keepalives-in service tcp-keepalives-out * Debug 로 TCP Keepalive Timeout 확인해보기 Switch#debug ip tcp packet TCP Packet debugging is on Switch#debug ip tcp transactions TCP special event debugging is on - 1분 경과시 TCP Keepalive Timeout Log 발생 - 2분 경과시 TCP Keepalive Timeout Log 발생 - 3분 경과시 T..

KISA 한국인터넷진흥원 21-03-31 기준 KISA 한국인터넷진흥원 www.kisa.or.kr 1) Timestamps Configuration - Uptime 기준 timestamp 출력 service timestamps log uptime - UTC Timezone 기준 시간 출력 service timestamps log datetime - UTC Timezone 기준 시간 초 단위까지 출력 service timestamps log datetime msec - Local Timezone(KST) 기준 시간 출력 service timestamps log datetime localtime - Local Timezone(KST) 기준 시간 / 연도 / 초단위 까지 출력 service timestamps..

KISA 한국인터넷진흥원 21-03-31 기준 KISA 한국인터넷진흥원 www.kisa.or.kr 1) NTP Server Configuration ntp server 106.247.248.106 * 1.kr.pool.ntp.org show ntp status * timezone 한국으로 변경하기 clock timezone KST 9

KISA 한국인터넷진흥원 21-03-31 기준 KISA 한국인터넷진흥원 www.kisa.or.kr 0) Logging Configuration 1) Console Logging logging console ? 2) Buffered Logging logging buffered 3) Monitor Logging logging monitor 4) Syslog Server Logging logging host 192.168.111.1 5) SNMP Traps Logging snmp-server enable traps ? 6) ACL Logging access-list 1 permit 192.168.1.101 access-list 1 deny any log * deny Rule에 대한 Log 발생 결과 *Aug ..

KISA 한국인터넷진흥원 21-03-31 기준 KISA 한국인터넷진흥원 www.kisa.or.kr 1) Logging Buffer Size Configuration logging buffered 18000 logging buffered information

KISA 한국인터넷진흥원 21-03-31 기준 KISA 한국인터넷진흥원 www.kisa.or.kr 1) Login 완료 후, 출력 Banner banner motd # @@@@@@@@@@@@@@@@@@@ @ Only authorized actions are permitted. @ @ All commands typed are recorded. @ @@@@@@@@@@@@@@@@@@@ # * 메모장 기준으로 입력하였습니다. 2) Login 진입 전 출력 Banner banner login # @@@@@@@@@@@@@@@@@@@ @ Only authorized actions are permitted. @ @ All commands typed are recorded. @ @@@@@@@@@@@@@@@@@@@ # *..