Home page logo

basics logo Security Basics mailing list archives

Re: Locking Cisco Router
From: "Meritt James" <meritt_james () bah com>
Date: Fri, 22 Nov 2002 09:39:24 -0500

Steel cages are cheap, already manufactured, and well ventilated as well
as similarly used...


"Mark (fat)" wrote:

Not that I have heard of. Physical access is root access and all that.

What about a vented steel box with a key? Depending on your reasons
(untrusted employees or if it lives in a customers site that you don't
trust) this would be a cheap and sturdy (pardon the pun) solution.


-----Original Message-----
From: DeGennaro, Gregory [mailto:Gregory_DeGennaro () csaa com]
Sent: 19 November 2002 00:15
To: 'matt'; ziggy () one2net co ug; security-basics () securityfocus com
Subject: RE: Locking Cisco Router


I may be wrong on this because I have not heard nor research it at
From what I know, it is not possible to totally lock a router down
password recovery (ctrl-break)unless you implement physical security.
However, remember that no can password recover over the Internet but
need direct access to the router.  Why would you want to stop it because
if you do and you forget your password or whatever, it may be more
frustrating and costly than implementing physical security.

I did a "quick" search and nothing for routers.


-----Original Message-----
From: matt [mailto:tool8185 () adelphia net]
Sent: Sunday, November 17, 2002 7:34 AM
To: ziggy () one2net co ug; security-basics () securityfocus com
Subject: RE: Locking Cisco Router

Why would you want to do that?  Is it company owned or privately owned?
If company owned, then if you quit or get fired, only you know the
password to the router itself else the next expert will have to
reconfigure the router changing the bits so that the password no longer
exists creating time... Now if privately owned, as long as the password
is never mentioned to anyone, there isn't any problems. And what version
are you with? 250*, higher? Lower? from where I can see, your answer is
no but I could be wrong...

-----Original Message-----
From: David Lubowa [mailto:ziggy () one2net co ug]
Sent: Thursday, November 14, 2002 9:50 AM
To: security-basics () securityfocus com
Subject: Locking Cisco Router

is it possible to lock a cisco router to a point that even a password
recovery cant work to enter the router.

David Ziggy Lubowa
Network Engineer
One2net (U)
web: www.one2net.co.ug
Tel: +256 41 345466

James W. Meritt CISSP, CISA
Booz | Allen | Hamilton
phone: (410) 684-6566

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]