Sunday, April 8, 2007

Verifying authencation mechanism used in routing protocls

Way back in my previous post, i had given a list of audting commands to follow when performing auditing of Cisco routers. Now its time to verify if the protocols themselves are using authentication mechanism to defeat most of the attacks. Most of the time after a penetration test, if you find telnet port open, you would suggest the client to use SSH instead of telnet. This is ok, because it is easy to migrate the protocols. What if SNMP port is open? Do you tell the client to disable it because it is vulnerable to attacks or would you suggest the client to upgrade to the lastest version? What about compatibility and interoperability issues between SNMPv2 and SNMPv3? What if the client needs this protocol for monitoring purposes? Well, I guess there is always solution to everything. I will show you steps where you can perform to ensure that the "vulnerable" protocol is at least safe from 70% of the attacks.

SNMP: Make sure access-list is used to limit machines that is allowed to access to router. For example, see the following commands:

Setting the access-list to permit only IPs that are allowed to access the router.

access−list 12 permit 192.168.1.1
access−list 13 permit 192.168.1.2


The command below sets the community string which is sort like a password to access-list 28 and 29. Of course, you should set a very strong community to avoid brute-force or dictionary attacks.

snmp−server community cisco1 RW 28
snmp−server community cisco2 RO 29


The command below allow the router to send traps to the SNMP Manager machine

snmp−server host 192.168.1.1 cisco1 snmp
snmp−server host 192.168.1.2 cisco2 snmp


So by using the access-list command, only the allowed hosts are able to perform the necessary tasks.

RIP: RIPv1 does not support any authentication, instead it is using plain text for routing purposes. However, RIPv2 support both plain text and md5 authentication. When auditing an IOS config file, check for the following key words:

key chain cisco
key 1
key−string rip

ip rip authentication key−chain cisco
ip rip authentication mode md5


To allow routing protocol authentication, the key chain command will identify a group of authentication keys, the key command will identify an authentication key on a key chain and the key-string command will specify the authentication string for a key. On top of it, make sure that the command ip rip authentication mode md5 is enabled for RIP updates.

EIGRP: The same goes for EIGRP. The commands to check for EIGRP is identical to RIP as shown below:

key chain cisco
key 1
key−string eigrp

ip authentication mode eigrp 10 md5
ip authentication key−chain eigrp 10 cisco


Please note that the command ip authentication mode eigrp 10 md5 is different from RIP's ip authentication mode md5. The "eigrp 10" is intepreted as eigrp , so please take note of that.

OSPF: OSPF supports both plain text and md5 authentication. You can choose either one of the authentication method depending on your preference. Some routers might not support the md5 authentication, so that leaves you with no choice but to use plain text authention. Else, deploy md5 authentication which is 100 times more secure. Check for these commands below to see if the router is using any authentication.

For plain text authentication:
ip ospf authentication−key cisco
area 0 authentication


For md5 authentication:
ip ospf message−digest−key 40 md5 cisco
area 0 authentication message−digest

Please note that the value of the key-id which is 40 allows passwords to be changed without having to disable authentication.

So above is a quick list to check for authentication on routing protocols. If you happen to have a chance to audit a router config file, just a glance will tell you how good is the network administrator is.

To know more about the commands usage and its meaning, refer to http://cco.cisco.com/en/US/products/sw/iosswrel/ps5187/products_command_reference_chapter09186a008017d029.html

19 comments:

Miqdad said...

Oes Tsetnoc one of the ways in which we can learn seo besides Mengembalikan Jati Diri Bangsa. By participating in the Oes Tsetnoc or Mengembalikan Jati Diri Bangsa we can improve our seo skills. To find more information about Oest Tsetnoc please visit my Oes Tsetnoc pages. And to find more information about Mengembalikan Jati Diri Bangsa please visit my Mengembalikan Jati Diri Bangsa page and other update like as Beratnya Mengembalikan Jati Diri Bangsa, Mengembalikan Jati Diri Bangsa di perpanjang and Jangan Berhenti Mengembalikan Jati Diri Bangsa. Thank you So much.

Oes Tsetnoc | Lanjutkan Mengembalikan Jati Diri Bangsa

Anonymous said...

Can anyone recommend the well-priced Software Deployment program for a small IT service company like mine? Does anyone use Kaseya.com or GFI.com? How do they compare to these guys I found recently: N-able N-central remote software access
? What is your best take in cost vs performance among those three? I need a good advice please... Thanks in advance!

Anonymous said...

Nice fill someone in on and this enter helped me alot in my college assignement. Thank you as your information.

javieth said...

In addressing the router enables wireless networking connection, really amazing what Technology has changed these days. I like meeting new things. This is why i have come to this blog, I find it very interesting.This is like
costa rica investment opportunities really interesting too.

gaohui said...

The holidays are a time ed hardy of getting together with friends ed hardy shoes and family, attending elaborate ed hardy clothing parties, and other exciting events ed hardy clothes that involves dressing up in stunning ed hardy store wardrobes. If you ed hardy Bikini are pregnant during ed hardy swimsuits the holidays, it does not ed hardy Caps mean that you are unable buy ed hardy to look fabulous and ed hardy swimwear stylish. Now, an expectant ed hardy sale mother has many styles of chic ed hardy glasses maternity clothing that allows cheap ed hardy her to show off her baby bump Christian audigier while looking spectacular.

chunxue said...

During the World War II, Art Deco jewellery was ugg sale a very popular style among women. The females started ugg boots wearing short dresses and cut their hair short. And uggs such boyish style was accessorized with Art Deco jewellery. They used cheap ugg boots long dangling earrings and necklaces, multiple bracelets and bold ugg boots uk rings.Art Deco jewellery has harshly geometric and symmetrical theme instead disocunt ugg boots of free flowing curves and naturalistic motifs. Art Deco Jewelry buy ugg boots today displays designs that consist of arcs, circles, rectangles, squares, and ugg outlet triangles. Bracelets, earrings, necklaces and rings are added with long ugg boots outlet lines and curves.One example of Art Deco jewelry is the Art Deco ring. Art Deco rings have ugg mall sophisticated sparkle and bold styles. These rings are not intended for a subtle look, they are meant to be noticed. Hence, these are perfect for people with bold styles.

Anonymous said...

A quality thomas sabo bracelet pair of pearl or thomas sabo bracelets diamond stud earrings discount thomas sabo bracelet is a classic and cheap thomas sabo bracelet romantic gift. A thomas sabo bracelet clearance simple pendant on thomas sabo a chain is an essential as is a discount thomas sabo quality wristwatch. However, no woman needs thomas sabo sale uk two of any basic piece; just thomas sabo jewellery knowing what she needs is what makes the gift especially thoughtful thomas sabo silver and sentimental.

sad said...

I have spent most of my life in Kenya,tory burch East Africa I was intrigued to hear MBT shoes,tory burch shoes otherwise known as Masai Barefoot Technology.MBT shoes are most definitely not a fashion statement and can look a bit odd. tory burch outlet Invented in 1997 by Swiss Engineer Karl Mueller, Mbt's are seen as a highly performing aid to fitness. cheap tory burch MBT's are designed to be breathable, flexible and comfortable. tory burch boots The MBT shoes uniquely mbt designed sole, very similar to the 'tyre shoes' often worn by East African Tribal people, are said to mimic walking around barefoot in the sand.tory burch flip flops MBT shoes are slightly weighted and distribute weight evenly across the entire foot and as your body reacts to the weight and instability of the mbt shoe's sole design, muscles,tory burch handbag often those neglected, are made to work to correct this instability.tory burch handbags outlet Could there then be a better way to tone up when the only fitness aid you need is a pair of MBT shoes? tory burch heels MBT shoes can have a beneficial effect on the entire body and MBT shoes are said to enhance both training and massage effects on the body.tory burch flats Here are a few reasons why: All you need to do is start walking. Walking is probably one of the , most popular, tory burch flats cheap simplest, cheapest and enjoyable recreational activities one can find. Walking alone improves circulation, boosts your immunity, strengthens the performance of the lungs and heart, betters your mood, improves muscle tone and gets you out of the house.tory burch wallet Add a pair of Mbt shoes to the equation and many of the benefits are magnified and mbt schuhe muscles, not often used, start to be trained.

sky3433 said...

Holen Sie thomas sabo was Sie brauchen, wenn Sie thomas sabo schmuck sie benötigen und wo immer thomas sabo Kette Sie brauchen it.Once das Budget für diese thomas sabo 2010 Ornamente ist dann der nächste Aspekt, der berücksichtigt thomas sabo Halsschmuck wird der Schnitt des Diamanten Bedürfnisse fixiert. Wenn man thomassabo online shop die Planung ist der Vorschlag zu einer thomas sabo onlineshop das Leben lieben, dann die am meisten bevorzugte sabo schmuck Diamanten sind die Prinzessin Diamanten. Die folgenden thomas sabo shop Zeilen in diesem Artikel frönen ein bisschen tiefer in das Konzept thomas sabo shop online in Bezug auf die verschiedenen Teilstücke von Diamanten. Der Schnitt thomas sabo preisvergleich ist hauptsächlich in vier Typen, die guten Schnitt thomas sabo preise , sehr guter Schnitt, gut geschnitten und ziemlich gut thomas sabo Armband abgeschnitten sind geteilt. Je besser der Schnitt dieser Edelsteine desto Brillanz sie emittieren. Die verschiedenen Arten von Schnitten auf thomas sabo Anhänger dem Markt verfügbar sind Princess Cut, Marquise geschnitten, Oval schneiden, Birne geschnitten, thomas sabo charms , Brilliant-Runde, Radiant schneiden, Smaragd geschnitten und Kissen geschnitten. Je niedriger die Klarheit desto niedriger wird der Preis sein. Es gibt verschiedene Grade der Klarheit, die im Netz zu finden sind.

Anonymous said...

how to unlock iphone 4
unlock iphone 4

unlock iphone 4 how to unlock iphone 4 how to unlock iphone 4 unlock iphone 4
_________________
how to unlock iphone 4 [url=http://unlockiphone421.com]unlock iphone 4[/url] unlock iphone 4 how to unlock iphone 4

Anonymous said...

You don't even have to order diet food from diet catering companies and have it delivered in your home generic lumigan Nuts and Seeds:Even though, nuts and seeds are high in fats, they also contain a lot of fiber, minerals and vitamins
Thermal stability of silica is very high cymbalta price 90% of all people who commit suicide have a diagnosable psychiatric disorder or depression.
Learning how to control emotions might sound harsh and cold in a tragedy such as this; but sometimes, it's the only way you can do your job and report the incident properly viagra for women au This is the disease which generally happens because of the age and exposure of eyes to ultra violet rays
There are a lot of different ab machines available on the market today iressa price If nothing happens after a week, however, it means that your food contains another allergen, and you have to exclude it
Even more important, those who take the time to get this type of cosmetic dentistry performed are much more inclined to smile Didanosine First of all, drying out the skin can lead to eczema or aggravate it

Anonymous said...

Once okay, have the papers evaluated by an attorney or a property expert and then only sign it. web server for windows xp

Anonymous said...

Statins have the tendency to lower cholesterol with extreme effect to the extent that it would result in triggering other diseases instead of making you well buy viagra So taking exercise as our example, in making a goal to do with this, following the above suggestions will help you reach your fitness goals They are also fun to perform, and one will not experience boredom very often cialis uk To give your wrist and hands a bit of a break, get a stress ball and give it a half a dozen squeezes every so often

Anonymous said...

The outcomes revealed in this research entail the use of more vaccines in crowded military areas compared to the civilian population., gratis software. And now that your wedding is going to happen, you are surely on the ninth cloud. As many of you are already aware that most of the modern day software houses provide technology consulting services. anonymous browser free. These loans allow you to apply for funds anywhere in between £100 to £1500 for the short reimbursement period of 2 to 4 weeks. vpn port xserve

Anonymous said...

Please take the same care and common sense precautions that you would in any other part of the world. ssl iis windows xp. So don’t waste your time, and make your time valuable and profitable if possible. 6001 18000 080118 1840 x86fre server lp 2 krmslp2 dvd

Anonymous said...

The ratio of height and weight in the normal range? wow private server how to. Online education offers a lot of interesting and innovative methods in teaching concepts to these school students. windows telnet server

Anonymous said...

Research reveals that governments form counterintelligence agencies to assist them in carrying out these operations. windows 2000 remote desktop install. There are many people in the state who are confused or have some doubt about the way of acquiring this treatment card. private bank investment

Anonymous said...

[url=http://www.magicaudiotools.com/convert-flac-to-mp3]convert flac to mp3[/url]

Anonymous said...

[url=http://www.audio-transcoder.com/how-to-rip-audio-cd-to-mp3-files]cda to mp3 batch converter[/url]