Cours Cisco CBAC (inspect) ICMP example

Cours Cisco CBAC (inspect) ICMP example, tutoriel & guide de travaux pratiques en pdf.

CBAC (inspect) ICMP example

Create block for incoming traffic
ip access-list extended lockout
deny icmp any any
Apply to outer interface, inbound
interface fa0/x
ip access-group lockout in
Create inspection rule to allow ICMP requests from the inside ip inspect name ICMP icmp
Apply to inner interface, inbound or outbound depending on situation interface fa0/x
ip inspect ICMP in
Debug inspected ICMP traffic
debug ip inspect protocol icmp

NTP

ntp server <NTP Server IP>
ntp authentication-key <x> md5 <password>
ntp update-calendar
ntp authenticate
ntp trusted-key

Syslog

logging <Syslog Server IP>
logging trap <trap type>
logging on
logging userinfo
logging console
logging buffered

Passwords

enable password cisco
enable secret cisco (encrypted)
service password-encryption (global)
line con 0 (console)
password cisco
line vty 0 4 (vty connections)
password cisco