UNCLASSIFIED Report Number: I33-010R-2004 Cisco IOS Switch Security Configuration Guide Switch Security Guidance Activity of the Systems and Network Attack Center (SNAC) Authors: Date: 21 June 2004 A. Borza Version: 1.0 D. Duesterhaus C. Grabczynski J. Johnson R. Kelly T. Miller National Security Agency 9800 Savage Road, Suite 6704 Fort Meade, MD 20755-6704
[email protected] UNCLASSIFIED UNCLASSIFIED 2 of 86 Table of Contents 1 Introduction........................................................................3 2 Network Hierarchy ............................................................5 3 Operating System...............................................................7 4 Passwords..........................................................................12 5 Management Port.............................................................13 6 Network Services..............................................................16 7 Port Security.....................................................................24 8 System Availability ..........................................................29 9 Virtual Local Area Networks..........................................31 10 Spanning Tree Protocol...................................................38 11 Access Control Lists.........................................................40 12 Logging and Debugging...................................................44 13 Authentication, Authorization, and Accounting...........48 14 Advanced Topics ..............................................................53