D]
>[mailto:[EMAIL PROTECTED] Behalf Of Chuck Swiger
>Sent: Thursday, February 09, 2006 4:41 AM
>To: Mark Jayson Alvarez
>Cc: freebsd-questions@freebsd.org
>Subject: Re: need some advice on our cisco routers..
>
>
>Mark Jayson Alvarez wrote:
>>> We have a couple of cisc
> [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Swiger
> Sent: Thursday, February 09, 2006 4:41 AM
> To: Mark Jayson Alvarez
> Cc: freebsd-questions@freebsd.org
> Subject: Re: need some advice on our cisco routers..
>
>
> Mark Jayson Alvarez wrote:
> >> We have
Mark Jayson Alvarez wrote:
>> We have a couple of cisco routers. There was one time when suddenly we
>> cannot
> login remotely via telnet. I investigate further and was shocked when I found
> out that there where 16 telnet connections coming from outsiders ip
> addresses. I
> immediately called
The best practice I follow for securing routers, is to disable any remote
access unless remote access is really necessary. If remote access is
required, I always limit the access to a small number, usually 1-3 remote IP's.
It is also a good idea to enable remote logging to keep a record of eve
> 3. How do you secure your cisco routers in your office?? Our
> director said that we should look for best practices in securing
> our routers.
The very first step would be to limit where from you can telnet to the
router. There is no good reason why whole internet could telnet to the
router.