Cisco NX-OS
TMA-CISCO-NXOS-3.2.4
Disable IP Directed Broadcasts on all Layer 3 Interfaces
Beschreibung
An IP directed broadcast is an IP packet whose destination address is a valid broadcast address for an IP subnet, but which originates from a node that is not itself a part of that destination subnet. Directed broadcasts can be abused in several ways: - a volumetric DOS attack against the NX-OS switch itself, the sent volume of data can be much larger than the received request - a volumetric DOS attack against a third party (often called a "smurf attack") ... CIS marks this Manual; directed broadcast only appears in the config when enabled. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).
So wird geprüft
Prüfmethode: Konfigurationsmuster
- Muster
(?m)^[ \t]+ip directed-broadcast\b
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
no ip directed-broadcast
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- cisco-nxosnetworkhardening
- Referenz
- CIS Cisco NX-OS Benchmark v1.2.0 - 3.2.4 Disable IP Directed Broadcasts on all Layer 3 Interfaces
Diesen Host prüfen
Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.
tmaegis scan --target cisco-nxos