chapter 3 ccna 2

chapter 3 ccna 2.inspect name autosec_inspect timeout 3600ip access-list extended autosec_firewall_acl permit udp any any eq bootpc deny ip any any interface FastEthernetO/1 ip inspect autosec_inspect out ip access-group autosec_firewall_acl in end Apply this configuration to running-config? [yes] : yes Applying the config generated to running-config The name for the keys will be: Router6.richarddeal.com % The key modulus size is 1024 bits % Generating 1024 bit RSA keys, keys will be non-exportable... [OK] 000018 : *Oct 5 16:09:57.467 UTC: %AUTOSEC-1-MODIFIED: AutoSecure configuration has been Modified on this deviceFor any question, enter ? to display help information, and press Ctrl.C to interrupt the script. The script first asks if the router is connected to Intemeto If the answer is yes, AutoSecure will ask you to indicate which interfaces are connected to the Internet, so that the security policy can be set correctly. In the previous example, the interface FastEthemetO/1 is connected to IntemetoVideo 15.05A multimedia demonstration of running AutoSecure is included in the digital resources that accompany this book.Next, global services at the administrative level are enabled or disabled. In this section, you will be asked to create a login flag, and an example login flag is provided. To create a flag, first enter a separator character that will not appear in the flag, such as or #. When you enter this separator again, the banner will end there (as with the command banner-as discussed in Chapter 10). Authentication, authorization and accounting (AAA), and SSH are then configured. next. AutoSecure disables some services on all interfaces of the router.Next, AutoSecure will enable Cisco Express Forwarding (CEF), enable Context-Based Access Control (CBAC), and create an ACL to block unwanted IP traffic from passing through. At this point, the script is finished running and AutoSecure displays the configurations that it will activate on the router. To accept and activate these configurations, press Enter or enter yes.Cisco recommends running the system configuration dialog first, then running the AutoSecure script, and then performing other advanced configuration tasks in the CLI. If you are not running the system configuration dialog, you can give the router basic configuration, such as configuring and enabling interfaces, and configuring the routing protocol before running AutoSecure.Chapter 15 Initial Router Configuration 373Authentication Target 15.04