Lock down the box! Solution: 1. Turn on encryption 2. Lock down console line 3. Lock down telnet / ssh / ACL for access 4. Configuring local usernames and secret passwords 5. The QUICK N DIRTY Script 1. Turn on encryption To ensure that passwords are not shown in the config files in clear text, turn on password encryption.

This is already done in newer IOS versions. router(config)#service password-encryption 2. Lock down console line Console ports on the router are used to initially setup a router/switch, or for modem access later on. Protect this port from physical attack by adding a login method and exec-timeouts.

Download Lock down telnet / ssh / console access and accounts tutorial