<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>CiscoZine &#187; Secure a router</title>
	<atom:link href="http://www.ciscozine.com/tag/secure-a-router/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.ciscozine.com</link>
	<description>Daily reporting on Cisco technology</description>
	<lastBuildDate>Wed, 08 Feb 2012 09:24:44 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Black Hat USA 2009: Router Exploitation</title>
		<link>http://www.ciscozine.com/2009/07/31/black-hat-usa-2009-router-exploitation/</link>
		<comments>http://www.ciscozine.com/2009/07/31/black-hat-usa-2009-router-exploitation/#comments</comments>
		<pubDate>Fri, 31 Jul 2009 07:06:51 +0000</pubDate>
		<dc:creator>Fabio Semperboni</dc:creator>
				<category><![CDATA[Stories]]></category>
		<category><![CDATA[IOS]]></category>
		<category><![CDATA[Secure a router]]></category>

		<guid isPermaLink="false">http://www.ciscozine.com/?p=728</guid>
		<description><![CDATA[During the Black Hat USA 2009, Felix &#8220;FX&#8221; Lindner has presented his researches concerning the exploitation of memory corruption software vulnerabilitiesin Cisco IOS. &#8220;The goal is to map out the problem space in order to allow for the anticipation of developments in the future, as current research suggests that exploitation of such vulnerabilities in the wild is not currently the case. By understanding the challenges that an attacker faces, defensive strategies can be better planned, a required evolution with the current state of Cisco IOS router networks.&#8221; says Felix &#8216;FX&#8217; Lindner in his &#8220;Cisco IOS Router Exploitation&#8221; abstract. &#8220;This paper [...]]]></description>
		<wfw:commentRss>http://www.ciscozine.com/2009/07/31/black-hat-usa-2009-router-exploitation/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>CoPP?! What is that?</title>
		<link>http://www.ciscozine.com/2009/07/22/copp-what-is-that/</link>
		<comments>http://www.ciscozine.com/2009/07/22/copp-what-is-that/#comments</comments>
		<pubDate>Wed, 22 Jul 2009 15:57:40 +0000</pubDate>
		<dc:creator>Fabio Semperboni</dc:creator>
				<category><![CDATA[Tutorial]]></category>
		<category><![CDATA[Advanced configuration]]></category>
		<category><![CDATA[DOS]]></category>
		<category><![CDATA[QOS]]></category>
		<category><![CDATA[Secure a router]]></category>
		<category><![CDATA[Video]]></category>

		<guid isPermaLink="false">http://www.ciscozine.com/?p=722</guid>
		<description><![CDATA[Cisco Network Foundation Protection (NFP) is an umbrella strategy encompassing Cisco IOS Security features that provides the tools, technologies, and services that enable organizations to secure their network foundations. NFP helps to establish a methodical approach to protecting router planes, forming the foundation for continuous service delivery. The router is typically segmented into three planes of operation, each with a clearly identified objective: the data plane allows the ability to forward data packets the control plane allows the ability to route data correctly the management plane allows the ability to manage network elements. The vast majority of packets handled by [...]]]></description>
		<wfw:commentRss>http://www.ciscozine.com/2009/07/22/copp-what-is-that/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Tips for securing Cisco administrative access</title>
		<link>http://www.ciscozine.com/2009/04/16/tips-for-securing-cisco-administrative-access/</link>
		<comments>http://www.ciscozine.com/2009/04/16/tips-for-securing-cisco-administrative-access/#comments</comments>
		<pubDate>Thu, 16 Apr 2009 20:57:03 +0000</pubDate>
		<dc:creator>Fabio Semperboni</dc:creator>
				<category><![CDATA[Tutorial]]></category>
		<category><![CDATA[Advanced configuration]]></category>
		<category><![CDATA[Secure a router]]></category>
		<category><![CDATA[Tips]]></category>

		<guid isPermaLink="false">http://www.ciscozine.com/?p=696</guid>
		<description><![CDATA[In this article I would explain some tips for securing Cisco administrative access. When creating passwords, keep these rules in mind: Make passwords lengthy Passwords should combine letters, numbers, and symbols. Passwords should not use dictionary words Change passwords as often as possible Strong passwords are the primary defense against unauthorized access to your router. The best way to manage passwords is to maintain them on an AAA server, but not all people can have/manage a AAA server. Cisco provides a number of enhanced features that allow you to increase the security of your passwords. For the basic configuration read [...]]]></description>
		<wfw:commentRss>http://www.ciscozine.com/2009/04/16/tips-for-securing-cisco-administrative-access/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>How to protect against BPDU attack</title>
		<link>http://www.ciscozine.com/2009/03/17/how-to-protect-against-bpdu-attack/</link>
		<comments>http://www.ciscozine.com/2009/03/17/how-to-protect-against-bpdu-attack/#comments</comments>
		<pubDate>Tue, 17 Mar 2009 17:04:02 +0000</pubDate>
		<dc:creator>Fabio Semperboni</dc:creator>
				<category><![CDATA[Tutorial]]></category>
		<category><![CDATA[Advanced configuration]]></category>
		<category><![CDATA[DOS]]></category>
		<category><![CDATA[Secure a router]]></category>
		<category><![CDATA[Spanning-Tree]]></category>

		<guid isPermaLink="false">http://www.ciscozine.com/?p=692</guid>
		<description><![CDATA[The spanning-tree protocol is used to cut loops that redundant links create in bridge networks. These packets are not attested by the system, so an attacker could spoof the BPDU and compromise the network stability! See below to understand BPDU attack: In this example the Ciscozine1 switch is elected Root Bridge due to the lower MAC-address (suppose that all the switches have the same priority).   What happen if an attacker (in this instance a laptop) spoof a BPDU with a lower priority?   The attacker (red laptop) will be the new root bridge and the spanning-tree topology change. See the [...]]]></description>
		<wfw:commentRss>http://www.ciscozine.com/2009/03/17/how-to-protect-against-bpdu-attack/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Using AutoSecure to secure a router</title>
		<link>http://www.ciscozine.com/2008/09/13/using-autosecure-to-secure-a-router/</link>
		<comments>http://www.ciscozine.com/2008/09/13/using-autosecure-to-secure-a-router/#comments</comments>
		<pubDate>Sat, 13 Sep 2008 12:15:49 +0000</pubDate>
		<dc:creator>Fabio Semperboni</dc:creator>
				<category><![CDATA[Tutorial]]></category>
		<category><![CDATA[Basic configuration]]></category>
		<category><![CDATA[Secure a router]]></category>

		<guid isPermaLink="false">http://www.ciscozine.com/?p=156</guid>
		<description><![CDATA[Due to the number of CLI commands needed to manually disable services in an attempt to make the router more secure, Cisco introduced the AutoSecure feature from the Major Release 12.3 and subsequent 12.3 T. AutoSecure is a good command for customers without special Security Operations Applications because it allows them to quickly secure their network without thorough knowledge of all the Cisco IOS features. The command is available for the Cisco 800, 1700, 2600, 3600, 3700, 7200, and 7500 Series Routers. There are 2 mode: Interactive mode: prompts the user with options to enable and disable services and other [...]]]></description>
		<wfw:commentRss>http://www.ciscozine.com/2008/09/13/using-autosecure-to-secure-a-router/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

