Turning Off and Configuring Network Services

By default, the Cisco IOS runs some services that are unnecessary to its normal operation, and if you don’t disable them, they can be easy targets for denial of service (DoS) attacks and break-in attempts.

DoS attacks are the most common attacks because they are the easiest to perform. Using software and/or hardware tools such as Intrusion Detection System (IDS) and Intrusion Prevention System (IPS) can both warn and stop these simple, but harmful, attacks. However, if we can’t implement IDS/IPS, there are some basic commands we can use on our router to make them more safe, but nothing will make you completely safe in today’s networks.

Let’s take a look at the basic services we should disable on our ...

Get CCNA® Cisco Certified Network Associate: Study Guide, Seventh Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.