disable

alsayed · ‎06-23-2007

Hello Experts!

as a Security best practice do we need to Disable the Following on the Router:

no ip source route

no ip bootp server

at the interface side:

int x0/0

no ip proxy arp

no cdp enable

I Do Appreciate ur valuable comments

ALI

Jon Marshall · ‎06-23-2007

Hi Ali

In general if you don't need it then it is always best to turn it off.

Turning off source-routing is always a good idea if you don't need it.

CDP can be useful and we use it in our network but it is recognised as a potential security risk.

Proxy-arp, again if you aren't in need of it turn it off.

Attached is a Cisco doc for securing your routers

HTH

Jon

alsayed · ‎06-24-2007

Hello Jon!

10xs for ur reply

Ali