Re: Brute force attack mitigation on Ciscos

Not sure if I understand the question totally :-
security authentication failure
and
login block for
see
http://www.ciscozine.com/2009/04/16/tips-for-securing-cisco-administrative-access/




On Thu, Feb 18, 2010 at 18:13, James Smallacombe <[email protected]> wrote:

>
> Hi:
>
> The subject says it all (almost).  Is there a way to do this, vis-a-vis
> bruteblockd, fail2ban, etc?  Perhaps via SNMP?
>
> The Cisco in question is also a radius client for a PPTP VPN and is
> getting hammered on port 1723 by auth requests...so it would be nice if it
> could work on radius as well as local auth.  None of the aaa commands seem
> to do what we want.
>
> aaa local authen attempts
>
> only does local, not radius, and it's not clear what it does after x
> number of attempts...disable that user?  Block that IP?  For how long?
>
> aaa authen attempt
>
> looks like it *might* do radius, but again, what exactly does it do?
>
> TIA,
>
> James Smallacombe                     PlantageNet, Inc. CEO and Janitor
> [email protected]                                                     http://3.am
> =========================================================================
> --
> Eat sushi frequently. - Avi
> [email protected] is the human contact address.
> [email protected] is the list posting address.
> See below URL for subscribe/unsubscribe and list options:
> http://inet-access.net/mailman/listinfo/list
>

-- 
Eat sushi frequently. - Avi
[email protected] is the human contact address.
[email protected] is the list posting address.
See below URL for subscribe/unsubscribe and list options:
http://inet-access.net/mailman/listinfo/list