CNS Router Security and CIA Elements

Vocabulary flashcards covering Cisco router configuration, security protocols, ACLs, and the CIA triad based on the lecture notes.

en

Enter admin mode.

conf t

Configure router.

line console 0

Command to protect the physical console.

password cisco

Command to create the password "cisco".

login

Command to make the system ask for a password.

enable secret class

Command to protect privileged mode with the password "class".

service password-encryption

Command used to hide passwords.

line vty 0 4

Command used for Telnet vs SSH configuration for remote access lines.

switchport mode access

Command to make a switch port an access port.

switchport port-security

Command to turn security ON on a switch port.

switchport port-security maximum 1

Command to allow only one device on a switch port.

switchport port-security violation shutdown

Action to block an attacker by shutting down the port.

hostname SECURE-R1

Configuration command to set the router name to "SECURE-R1".

ip domain-name lab.local

Configuration command to set the domain name to "lab.local" for SSH.

crypto key generate rsa

Command used in SSH configuration to generate keys.

transport input ssh

Command to restrict transport to SSH only.

access-list 100 deny icmp any any

ACL command to block ping packets.

access-list 100 permit ip any any

ACL command to allow other traffic besides blocked ICMP.

ip access-group 100 in

Command to apply access-list 100 to incoming traffic on an interface.

Confidentiality

CIA security element achieved through password protection and SSH encryption.

Integrity

CIA security element achieved through port security and ACL filtering.

Availability

CIA security element related to preventing service unavailability caused by DoS attacks.

DoS attack

An attack where too many ping packets cause a server to be overloaded, making service unavailable.