SECUR Exam Cram™ 2 (Exam 642-501)

Securing Administrative Access to a Cisco Router

Configuring administrative access on the Cisco router is an important step toward network security. You can access all Cisco routers in various ways:

• Console

• VTY

• Aux

• SNMP

• HTTP

Connection Through the Console Port

To protect administrative access to the routers, you must protect the console port via a password policy. You can store passwords locally on the router or use some kind of remote administration using a CiscoSecure Access Control Server authentication, authorization, and accounting (AAA) server. You can store passwords locally on the router or use Remote Authentication Dial-In User Service (RADIUS) or Terminal Access Controller Access Control System + (TACACS+) for remote AAA using CSACS.