#Cisco ios xe vrf for management plane software#

Although most of this document is devoted to the secure configuration of a Cisco IOS device, configurations alone do not completely secure a network. Secure OperationsSecure network operations is a substantial topic. Some command line examples in this document are wrapped to enhance readability.

#Cisco ios xe vrf for management plane software#

Prerequisites RequirementsThere are no specific requirements for this document.Р”В¬omponents UsedThis document is not restricted to specific software and hardware versions.Р”В¬onventionsRefer to Cisco Technical Tips Conventions for more information on document conventions. Where possible and appropriate, this document contains recommendations that, if implemented, help secure a network. However, in cases where it does not, the feature is explained in such a way that you can evaluate whether additional attention to the feature is required. The coverage of security features in this document often provides enough detail for you to configure the feature. The data plane does not include traffic that is sent to the local Cisco IOS device.

Data PlaneThe data plane forwards data through a network device. The control plane consists of applications and protocols between network devices, which includes the Border Gateway Protocol (BGP), as well as the Interior Gateway Protocols (IGPs) such as the Enhanced Interior Gateway Routing Protocol (EIGRP) and Open Shortest Path First (OSPF).

Control PlaneThe control plane of a network device processes the traffic that is paramount to maintaining the functionality of the network infrastructure. Management PlaneThe management plane manages traffic that is sent to the Cisco IOS device and is made up of applications and protocols such as SSH and SNMP. The three functional planes of a network, the management plane, control plane, and data plane, each provide different functionality that needs to be protected. Structured around the three planes into which functions of a network device can be categorized, this document provides an overview of each included feature and references to related documentation. Cisco - Cisco Guide to Harden Cisco IOS DevicesР”Вocument ID: 13608 Contents Introduction Prerequisites Requirements Components Used Conventions Secure Operations Monitor Cisco Security Advisories and Responses Leverage Authentication, Authorization, and Accounting Centralize Log Collection and Monitoring Use Secure Protocols When Possible Gain Traffic Visibility with NetFlow Configuration Management Management Plane General Management Plane Hardening Limiting Access to the Network with Infrastructure ACLs Securing Interactive Management Sessions Using Authentication, Authorization, and Accounting Fortifying the Simple Network Management Protocol Logging Best Practices Cisco IOS Software Configuration Management Control Plane General Control Plane Hardening Limiting CPU Impact of Control Plane Traffic Securing BGP Securing Interior Gateway Protocols Securing First Hop Redundancy Protocols Data Plane General Data Plane Hardening Filtering Transit Traffic with Transit ACLs Anti-Spoofing Protections Limiting CPU Impact of Data Plane Traffic Traffic Identification and Traceback Access Control with VLAN Maps and Port Access Control Lists Using Private VLANs Conclusion Acknowledgments Appendix: Cisco IOS Device Hardening Checklist Management Plane Control Plane Data Plane Cisco Support Community - Featured Conversations Related Information IntroductionThis document contains information to help you secure your Cisco IOS system devices, which increases the overall security of your network.