no service pad
no service config
no service finger
no ip icmp redirect
no ip bootp server
no ip identd
no ip finger
no ip gratuitous-arps
no ip source-route
service sequence-numbers
service tcp-keepalives-in
service tcp-keepalives-out
no service udp-small-servers
no service tcp-small-servers
service timestamps debug datetime localtime show-timezone
service timestamps log datetime localtime show-timezone
service password-encryption
username UsErNaMe secret PaSsWoRd
enable secret MySuPeRSeCrEtPaSsWoRd
no ip domain-lookup
ip domain-name {your domain name]
clock timezone CST -6
clock summer-time CDT recurring
clock summer-time CST recurring 2 Sun Mar 2:00 1 Sun Nov 2:00
ntp server [server 1]
ntp server [server 2]
logging on
logging source-interface Loopback0
logging buffered 16000
logging buffered debug
no logging monitor
no logging console
logging trap notification
logging [server 1]
no ip http server
no ip http secure-server
aaa new-model
aaa authentication login TACGROUP group tacacs+ local
aaa authorization commands 15 TACGROUP group tacacs+ none
aaa accounting commands 15 TACGROUP stop-only group tacacs+
aaa accounting connection TACGROUP start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
tacacs-server host [server 1] key SeCrEtKeY
ip tacacs source loopback0
access-list 10 remark SSH Access
access-list 10 permit [PC 1]
access-list 10 permit [PC 2]
access-list 50 remark SNMP Access
access-list 50 permit [PC 1]
access-list 50 permit [PC 3]
snmp-server community SeCuReStRiNg RO 50
snmp-server ifindex persist
snmp-server trap-source Loopback0
banner login ^
********************************************************************************
This computer system and all associated network connectivity (including
Internet access) is provided only for authorized business purposes. Authorized
personnel may monitor these systems for management and data security purposes.
Use of these systems (authorized or not) constitutes acceptance of these terms.
The systems data is subject to the privacy act of 1974 (552A amended). Any
individual(s) responsible for unauthorized data disclosure or other misuse may
be subject to civil or criminal penalties.
********************************************************************************
^
crypto key generate rsa
1024
ip ssh time-out 60
ip ssh authentication-retries 2
line con 0
exec-timeout 5 0
login authentication TACGROUP
logging synchronous
line vty 0 4
access-class 10 in
login authentication TACGROUP
privilege level 15
exec-timeout 5 0
logging synchronous
transport input ssh
exit
line aux 0
no password
transport input none
no exec
exec-timeout 0 1
exit
router eigrp 123
no auto-summary
passive-interface default
exit
