Cisco securing device

Switching off unnecessary

no ip source-route 
ip options drop 
no ip http server 
no ip http secure-server 
no service tcp-small-servers 
no service udp-small-servers 
service tcp-keepalives-in 
service tcp-keepalives-out 
no ip bootp server 
no ip finger 
no ip identd 
no service config 
no lldp run 
no service pad
! add logging buffer
logging buffered 50000

References

• Best Practices for Inbound Cisco Access Lists 2007
• Best Practices and Securing Cisco IOS 2011
• How do I secure a Cisco router from the Internet? 2009