Cisco ASR 1004 - Page 64

Page 64 of 72
Service or
Protocol
Description
Client
(initiating)
Allowed
Server
(terminating)
Allowed
Allowed use in the certified configuration
NTP
Network Time
Protocol
Yes
Yes
No
n/a
Any configuration. Use of key-based
authentication is recommended.
RADIUS
Remote
Authentication Dial In
User Service
Yes
Yes
No
n/a
If used for authentication of ASA
administrators, secure through IPsec.
SDI (RSA
SecureID)
RSA SecurID
authentication
Yes
Over IPsec
No
n/a
If used for authentication of ASA
administrators, secure through IPsec.
SNMP
Simple Network
Management Protocol
Yes (snmp-trap)
Yes
Yes
No
Outbound (traps) only. Recommended to
tunnel through IPsec.
SSH
Secure Shell
Yes
Yes
Yes
Yes
As described in the section 3.3.1 of this
document.
Telnet
A protocol used for
terminal emulation
Yes
Yes
Yes
Yes
Use of SSH is recommended.
TFTP
Trivial File Transfer
Protocol
Yes
Yes
No
n/a
Recommend using SCP instead, or tunneling
through IPsec.
CDP
Cisco Discovery
Protocol
n/a
n/a
n/a
n/a
Follow best practices for the secure usage as
there are no restrictions on use of these
protocols
DTP
Dynamic Trunking
Protocol
n/a
n/a
n/a
n/a
Follow best practices for the secure usage as
there are no restrictions on use of these
protocols
Frame Relay
Standardized wide
area network
technology that
specifies the physical
and logical link layers
of digital
telecommunications
channels using a
packet switching
methodology
n/a
n/a
n/a
n/a
Follow best practices for the secure usage as
there are no restrictions on use of these
protocols