Configuring AutoSecure
In Cisco IOS Release 12.3(8)T and later, AutoSecure retains the pre-lockdown
configuration in Flash under the name pre_autosec.cfg. If AutoSecure
configuration fails, you can revert to the pre-lockdown configuration with
the command configure replace flash:pre_autosec.cfg.
AutoSecure is initiated from the command-line interface (CLI) with the auto
secure command. The management, forwarding, ntp, ssh, firewall, and
tcp-intercept arguments activate the features described in the preceding list.
By default, the AutoSecure script interactively prompts the user with questions
about each feature that it configures. To switch to Noninteractive mode,
add the no-interact keyword to the auto secure command.