Cisco Router and Security Device Manager
Cisco Router and Security Device Manager (SDM) is an intuitive, secure, web-based embedded device manager of Cisco IOS-enabled devices. SDM provides intelligent wizards, detects mis-configured devices, steps security managers through firewall and VPN configurations, and has been certified and recommended by some key organizations within Cisco, such as the Cisco Network Supported Accounts (NSA), a group of expert engineers within Cisco whose services are sold to high-end clients.
SDM is the TAC recommended method to install and configure security. Figure 5-17 displays the features supported by SDM on a Cisco IOS-enabled router.
The router in Figure 5-17 connected to the Internet in a typical example of today's complex networks can be configured for IP routing, acts as LAN switch, terminates IPSec VPN, performs stateful firewall and IDS duties, and acts as a WAN backup. To configure such a complex device, SDM provides the key to simplifying the configuration process. The network security manager uses the SSL application protocol to secure the connection.
Cisco Router and Security Device Manager 329
Figure 5-17 SDM All-in-One Web Tool
Figure 5-17 SDM All-in-One Web Tool
Security Cisco 1800, 2800,
Expert and 3800 Routers
Cisco IOS Security Router configured for VPN + Intrusion Prevention + URL Filter + WAN Router + LAN Switch
Security Cisco 1800, 2800,
Expert and 3800 Routers
Cisco IOS Security Router configured for VPN + Intrusion Prevention + URL Filter + WAN Router + LAN Switch
Security Device Manager (SDM)
Cisco SDM is currently shipping in Cisco IOS and on the Cisco 1800, 2800, and 3800 Series Integrated Service Routers (ISR). Cisco SDM is also available with firewall appliances such as the PIX Firewall (PIX version is called the PIX Device Manager [PDM]). The ISR platforms are implemented only on Cisco hardware, and no other vendor in the marketplace today can match the same functionality. SDM is also supported on legacy platforms such as the 1700 and 3600/3700 series routers.
NOTE You can certainly expect that CCIE Security lab candidates will soon be configuring routers such as the ISR 3800 instead of the legacy 2600 and 3700 routers in place today.
Cisco SDM is an enhancing tool for both network and security administrators. Cisco SDM is available at http://www.cisco.com/pcgi-bin/tablebuild.pl/sdm. SDM 2.0 is currently the most recent version; 2.1 is due for release in 2004.
SDM provides embedded services management of routing and switching, security, and QoS. SDM is web-based and ships on all new routers.
By simply typing in the IP address of the Cisco IOS-enabled router, the administrator will be presented with the SDM home page (administrators will use https://ip-address with their web client).
The SDM home page displays a typical router, such as the popular 1721, the DRAM memory size (64 MB), total Flash (16 MB), and SDM version, to name a few of the most critical details of this particular router.
SDM provides a number of excellent features:
■ Intelligent Wizards—Auto-detect misconfigurations with proposed fixes
■ 1-Step Router Lockdown—Securing devices allowing ease of use to ensure devices are not compromised.
■ 1-Step VPN and Firewall—Including tools for expert users such as an ACL editor and VPN tunnel quality monitoring
■ Security Audit—NSA, ICSA, TAC recommended security configuration
The Security Audit option, for example, provides details on configuration problems and suggestions to fix security deficiencies. With a single click, the network security manager can control Telnet and SSH access within the Security Audit.
The following is a description of the major SDM Wizard Mode options:
■ Overview—View IOS version, hardware installed, and configuration summary.
■ LAN Configuration—Configure the LAN interfaces and DHCP.
■ WAN Configuration—Configure PPP, Frame Relay, and HDLC WAN interfaces.
■ Firewall—Two types of firewall wizards are simple inside/outside or more complex inside/ outside/DMZ with multiple interfaces.
■ VPN—Three types of wizards to create a secure site-to-site VPN, Easy VPN, and GRE tunnel with IPSec.
■ Security Audit—Perform a router security audit and get easy instructions on how to lock down the insecure features found.
■ Reset—Restore to factory default settings.
Security Information Monitoring System 331
SDM is a core application loaded in Cisco IOS and needs to be loaded into the system Flash to allow security managers to quickly install routers as well.
You are encouraged to view more details at Cisco.com. At the time of writing this book, Cisco announced SDM version 2.1 for the year ending 2004. More details on SDM can be found as follows:
■ Latest SDM-related product information—http://www.cisco.com/go/sdm
■ SDM primary features and benefits—http://www.cisco.com/en/US/products/sw/secursw/ ps5318/products_data_sheet0900aecd800fd118.html
Continue reading here: Do I Know This Already Quiz Dmo
Was this article helpful?
