RE: CISCO Catalyst

["Worrell, Brian" <BWorrell () isdh IN gov>]

Are you doing a full security Audit on the devices, or just an activity
/ change audit?

If you are doing a full audit, I would suggest you check the IOS version
for known issues / bugs, as well to see if it supports the Crypto for
using SSH rather than telnet.  (I see this all the time still, that and
the SNMP strings being the normal Public, Private, Inside, etc.) 

Just my two cents, sorry.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of pepsdiaz () gmail com
Sent: Wednesday, January 23, 2008 4:27 AM
To: security-basics () securityfocus com
Subject: CISCO Catalyst


Dear all,

I need to audit a CISCO Catalyst 6509 and 2950. I would like to know, if
you can set up several users in order log their activities on it and how
to do that.
Besides, I would like to know if you can set up password protection
measures like:
 - Change password periodically.
 - Lenght of password
 - Historical of password

Can you set up more than one user role or just the administrator?

Thanks in advance to everybody.