Configuring Internal Cisco Router Security

Sponsored by:

Telepresence and Holography / Holograms - November 2008

Editor’s viewpoint on their differences, likenesses and future...

We all just recently viewed an historic CNN holographic interview on an historic Election Night. CNN stated this type of imaging has never been done before on National TV and I believe that. I haven’t seen anything like it. The live interview caught me by surprise and sure had the “wow” factor attached to it didn’t it? Here’s a link to the actual interview.

CNN Hologram Video

The question now has to be asked. Is it Telepresence?

I’m no expert on the subject but I’m going to throw my hat into the ring, go out on a limb and say yes, I believe it is. Although I know many video conferencing purists are rolling their eyes and grabbing their guns right about now with my statement.

While I do know that Telepresence still hasn’t been universally defined (Houston, we have a problem), here’s how I see it…. Broken down to its simplest form - “tele” (through electronic means) and “presence” (present). This is how I’m justifying my opinion by lumping holography and Telepresence together. Just as Telepresence is surely an offshoot of video conferencing, holographic imaging (like we viewed on CNN) surely has to be considered an offshoot of Telepresence. The interviewer was “telepresent” from Chicago and beamed into the CNN Election Headquarters. She was most assuredly - “telepresent”. There was negligible latency, the imaging was fantastic and both interviewers were rehearsed on what they would say. I’ve just recently read that CNN actually “downgraded” the experience to make it “movie” quality and not as good as it could have been. Maybe they thought us mere mortals would be shocked if they showed their complete hand. I have a feeling it was so big to them, they didn’t want it to get upstaged by the historic election. I’m willing to bet we’ll see the “true” power of this technology in the upcoming weeks and months when they can put the pedal to the medal and show it off without having it sidetracked.

What an amazing time for this technology (all differences and opinions aside). Telepresence Doctors, nurses, teachers, schools and healthcare (healthpresence) will benefit from the recent gains in this state-of-the-art industry whether holograms, Telepresence or holography. Airlines also have to see the threat to a portion of their business travel. Hell, who wants go through security and fly to Miami for a two-hour conference when you can look them in the eye via Telepresence?

Beam me up Scotty! Simply amazing…!

Visit the free Telepresence Forum for more information and discussion

Your Editor and Administrator - L II
"Ride on the Next Plane of Existence" TM

Network security is a hot topic today, and will only increase in importance in the months and years ahead.

While most of the attention is paid to exterior threats, there are some steps you can take to prevent unwanted Cisco router access from within your organization.

Whether you want to limit what certain users can do and run on your routers, or prevent unauthorized users in your company from getting to config mode in the first place, here are four important yet simple steps you can take to do so.

Encrypt the passwords in your running configuration.

This is a basic Cisco router security command that is often overlooked. It doesn't do you any good to set passwords for your ISDN connection or Telnet connections if anyone who can see your router's running configuration can see the passwords. By default, these passwords are displayed in your running config in clear text.

One simple command takes care of that. In global configuration mode, run service password-encryption. This command will encrypt all clear text passwords in your running configuration.

Set a console password.

If I walked into your network room right now, could I sit down and start configuring your Cisco routers?

If so, you need to set a console password. This password is a basic yet important step in limiting router access in your network. Go into line configuration mode with the command "line con 0", and set a password with the password command.

Limit user capabilities with privilege level commands.

Not everyone who has access to your routers should be able to do anything they want. With careful use of privilege levels, you can limit the commands given users can run on your routers.

Privilege levels can be a little clumsy at first, but with practice you'll be tying your routers down as tight as you like. Visit www.cisco.com/univercd for documentation on configuring privilege levels.

Configure an "enable secret" password.

It's not uncommon for me to see a router that has an enable mode password set, but it's in clear text.

By using "enable secret", the enable mode password will automatically be encrypted. Remember, if you have an enable password and enable secret password set on the same router, the enable secret password takes precedence.

These four basic steps will help prevent unwanted router access from inside your network. If only preventing problems from outside your network was as simple!

Chris Bryant, CCIE (TM) #12933, has been active in the Cisco certification community for years. He has written several books that have helped CCNA candidates around the world achieve the coveted CCNA certification, including several concentrating on binary math conversions and subnetting questions that the average CCNA candidate will need to answer on their CCNA exams.

He is the owner of The Bryant Advantage (http://www.thebryantadvantage.com) where he teaches affordable world-class CCNA courses via the Internet, and sells his popular Cisco certification books. He's proud to have helped CCNA candidates around the world achieve their career goals. Mr. Bryant's books and courses are sold on his site, on eBay, and on several other major Cisco certification sites.

Custom Search

To learn more about Telepresence, the revolutionary new style of immersive video conferencing; visit these websites:

Telepresence - "Ride on the Next Plane of Existence" - Telepresence
Telepresence Web Portal - Telepresence Internet web portal
Telepresence Report - 24/7 breaking Telepresence related news and information
Via Telepresence - Video conferencing via Telepresence
Telepresence Forum - Free user discussion forum for everything Telepresence related
Telepresence Today - Telepresence information and editor qualified headline news
Telepresence Resource Directory - Telepresence web resource directory
Telepresence Tube - Telepresence videos, pictures and more