6500 switch

[adamgibs7]

Dears,

I want to security hardened for 6500, do cisco have any base & advanced template for 6500 core switches hardening,

I am hardening the access and distribution layer by the below link document, is it so that I shld use the same doc for the 6500 core or there is another hardening guide

https://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html.

Question 2

which banner configuration will provide banner and login prompt together I mean to say banner on top and below login prompt

thanks

[Dennis Mink]

Main thing will be to restrict telnet/ssh and snmp access

[Julio E. Moisa]

Hi

Below you will find l inks related to best practices for 6500

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/best/practices/recommendations.html

https://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/24330-185.html

It is for Switches 4500 but it could be useful:

https://www.cisco.com/c/en/us/support/docs/switches/catalyst-4500-series-switches/13414-103.html#bsf

About the banners:

Exec banner will be displayed once the user has submitted its credentials. 

Login banner will be the first banner displayed after it you will submit the credentials, it is useful for warnings or notifications like "Just authorized personal"

Modt banner is displaye before to start a session.

Hope it is useful

:-)