Prev | Current Page 137 | Next

Yusuf Bhaiji

"Network Security Technologies and Solutions"

Configuring ICMP Unreachable
Router(config)# interface
Router(if-config)# no ip unreachables
Caution
In some configurations, such as certain types of tunnel structures, the use of ip unreachables is required. If the device
must use the ICMP Unreachable feature, an alternative that alleviates performance degradation is to rate limit the number
of replies using the ip icmp rate-limit {milliseconds} command in global configuration mode. In Cisco IOS 12.0 and
later, the default rate limit is set to two packets per second.
HTTP
One of the features Cisco IOS offers to manage the device is the HTTP protocol. The integrated web server in Cisco IOS allows basic management using the web browser. If HTTP is not required, it is highly recommended that you disable it.
HTTP server is enabled using the ip http server command from the global configuration mode. The secure HTTP (HTTPS) server
feature was also added from IOS version 12.2(15)T and later. Secure HTTP (HTTPS) can be enabled using the ip http secureserver
command from the global configuration mode. The standard HTTP server and the secure HTTP server can run
concurrently on a device. For increased security, it is recommended that you use the Secure HTTP (HTTPS) server and disable standard HTTP server using the no ip http server command.


Pages:
125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149