Router’s security

[charlesbt]

We want to enhanced our Router’s security, in a book, we have it recommends that we disabled following services



ip directed-broadcast

ip mask-reply

ip unreachable

ip proxy-arp

ip redirect

I would like to know why we need to disabled these protocol & services.

Also would like more info the command, in particular and effect of applying above commands.

 

[burtsbees]

Does the book not explain it?
There are man in the middle attacks, rerouting attacks, ip spoofing---to name a few---that proxy arp, route cache, redirects, directed broadcasts, etc. all allow to happen. You also want to disable many other services (no tcp-small-servers, no udp-small-servers, etc.). I would suggest you purchase a CCSP Ciscp Press/Todd Lammle book for more details.
The rest is too much to discuss within the proper scope of this forum.

Burt
Forum Admin...lol...j/k