Device software image verification
0 likes•39 views
The document discusses verifying the software installed on network devices. It describes how Cisco IOS offers an image verification feature that validates the MD5 digest of an IOS image to ensure it is valid and has not been tampered with. The verification can be configured to occur automatically during copy or reload operations, or it can be initiated manually from the CLI using verify, copy /verify, or reload /verify commands. Image verification helps address authentication and non-repudiation issues but is only supported for IOS images currently.
Device software image verification
- 1. * Device Software ImageVerification * The software installed and running on a network infrastructure device should be verified to ensure that it is valid. Cisco IOS offers an image verification feature which validates the MD5 digest of an IOS image. If available, digital signing of software should be leveraged to address authentication and non-repudiation issues. IOS Software ImageVerification The Cisco IOS software image verification feature provides a user-friendly mechanism for validating the MD5 digest of an IOS image. This may be configured to occur automatically, upon any ‘copy’ or ‘reload’, or it may be enabled as a manual option when entering the ‘copy’ or ‘reload’ command. A verification may also be initiated from the CLI. Image verification is not currently supported on non-IOS image files. To enable automatic image verification, use the Cisco IOS command: Router(config)# file verify auto Manual image verification may be initiated from the CLI using the verify command: Router# verify location://image Manual image verification may be initiated from the CLI during a copy: Router# copy /verify <source> <dest> Manual image verification may also be initiated from the CLI during a reload: Router# reload /verify ~By, Sagar Gor