| 2.1 |  | General Router and Switch Security |
| 2.1.6 |  | Login banner |

| In some jurisdictions, civil and criminal prosecution of hackers who break into network systems is much easier if there is a written warning. This usually takes the form of a banner informing unauthorized users that entrance is forbidden. In other jurisdictions, it may be forbidden to monitor the activities of even unauthorized users unless a banner provides them notice. One way of providing this notification is to configure a banner message with the banner login command, as shown in Figures and .

Legal notification requirements are complex and vary in each jurisdiction and situation. In cooperation with legal counsel, consider which of the following notices belongs on the network banner:

- A notice that the system is to be logged into or accessed only by authorized personnel, and information about who may authorize use.
- A notice that any unauthorized use of the system is unlawful, and may be subject to civil and criminal penalties, or both.
- A notice that any use of the system may be logged or monitored without further notice, and that the resulting logs may be used as evidence in court.
- Specific notices required by specific local laws.

From a security, rather than a legal point of view, a login banner usually should not contain any specific information about the router, its name, its model, what software it is running, or its ownership.

| Lab Activity Lab Exercise: Configure General Router Security In this lab, the student will learn to accomplish the following:

- Use no-cost router features to enhance security
- Set passwords
- Encrypt passwords
- Set privileges
- Define user privileges
- Verify privilege level settings