internet router configuration

shibindong · ‎07-16-2008

we are going to configure the router running BGP with ISP for Internet connection, what is the best practrise to condifure that router in terms of security?

mvsheik123 · ‎07-17-2008

There are several points you needs to consider based on your scenario, but see the attached general practices for tightening up the edge routers.

hth

Thank you

MS

joseph.derrick · ‎07-18-2008

Hi,

First and foremost, perimeter devices should be configured with out-of-the box security. Confgure your switch/router with the following:

Block/deny traffic originating from external network using these addresses 10.0.0.0/8, 127.0.0.0, 172.16.0.0/and 192.168.0.0 towards your perimeter devices.

With regards to BGP, routes that should not be advertised nor accepted should be filtered. This is done by configuring filter-lists.

Thanks,

k0rg