Cisco NX-OS
TMA-CISCO-NXOS-1.7.2
Disable iPXE (Pre-boot eXecution Environment)
Beschreibung
iPXE allows a NX-OS device to boot from the network, usually using HTTP. This method allows the switch bootup image to be controlled centrally, often using DHCP services. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).
So wird geprüft
Prüfmethode: Konfigurationsmuster
- Muster
(?m)^boot order [^\n]*\bpxe\b
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
! Setting the boot order explicity to "bootflash" will remediate a PXE configured device. boot order bootflash You can also "no" the current boot order line to revert to the default setting. For instance, to remove the configuration line "boot order pxe bootflash" command, use no boot order pxe bootflash
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- cisco-nxosnetworkmanagement-plane
- Referenz
- CIS Cisco NX-OS Benchmark v1.2.0 - 1.7.2 Disable iPXE (Pre-boot eXecution Environment)
Diesen Host prüfen
Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.
tmaegis scan --target cisco-nxos --level 2