-
Notifications
You must be signed in to change notification settings - Fork 21
Open
Description
Which Syntax?:
I missing alot of security features for switches and routers.
Like interface syntax such as
int Gix/x
switchport nonegotiate
load-interval 30
ip dhcp snooping trust
storm-control broadcast level 50.00
storm-control multicast level 50.00
storm-control action trap
storm-control action shutdown
also in the global errordisable features are not recognized
errdisable recovery cause bpduguard
errdisable recovery cause security-violation
errdisable recovery cause link-flap
errdisable recovery cause psecure-violation
errdisable recovery cause mac-limit
errdisable recovery cause storm-control
errdisable recovery cause loopback
errdisable recovery cause loopdetect
ip dhcp snooping syntax are not working in global.
ip dhcp snooping
ip dhcp snooping vlan 1-4094
some logging syntaxes
logging host <HIDDEN_IP>
! C2960X
logging discriminator MAB facility drops DOT1X|MAB
logging buffered discriminator MAB 20000
! C9300
logging discriminator MAB facility drops DOT1X|SESSION_MGR
logging buffered discriminator MAB 20000
Also archive are not working
archive
log config
logging enable
logging size 200
notify syslog contenttype plaintext
hidekeys
path scp://<CREDS>@<HIDDEN_IP>//HIDDEN/PATH/$h_$t.confg
write-memory
Kron jobs are not recognized
kron occurrence BACKUP_CONFIG at 22:00 recurring
policy-list BACKUP
!
kron policy-list BACKUP
cli archive log config add comment ----RUNNING_BACKUP----
cli wr
!
Under LINE config transport none not working
line aux 0
transport input none
transport output none
!
Banner login are not working
banner login ^C
*********************************************************
LOGIN MESSAGE REMOVED
*********************************************************
^C
tacacs syntax are not recognized
tacacs server HIDDENSERVER
address ipv4 HIDDENIP
key 7 025A1758190F1F35124F051C17035A4C1417396B2D3B732727616C27293C2F7363726970743E
timeout 7
!
tacacs server HIDDENSERVER
address ipv4 HIDDENIP
key 7 025A1758190F1F35124F051C17035A4C1417396B2D3B732727616C27293C2F7363726970743E
timeout 7
!
aaa group server tacacs+ TACACS_GROUP
server name HIDDENSERVER
server name HIDDENSERVER
!
aaa authentication enable default group TACACS_GROUP enable
aaa authorization exec default group TACACS_GROUP local if-authenticated
aaa authorization commands 1 default group TACACS_GROUP local if-authenticated
aaa authorization commands 15 default group TACACS_GROUP local if-authenticated
aaa accounting exec default start-stop group TACACS_GROUP
aaa accounting commands 1 default start-stop group TACACS_GROUP
aaa accounting commands 15 default start-stop group TACACS_GROUP
aaa accounting send stop-record authentication failure
aaa authorization config-commands
Link to command reference
Here is the book for all command referance
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/mcl/allreleasemcl/all-book.html
Also links to specific sections