Arista EOS
TMA-ARISTA-EOS-2.8
Telnet access
HighLevel 1Automatedarista-eos
Description
Telnet transmits credentials and data in cleartext. It is disabled by default and should not be enabled. Telnet is an obsolete protocol vulnerable to eavesdropping. Telnet is shut down by default (block not shown); fails if 'management telnet' has 'no shutdown'. Audited against the output of 'show running-config' (not 'show running-config all').
How it is checked
Audit method: Configuration pattern
- Pattern
(?m)^management telnet[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+no shutdown\b
How it is fixed
Fix method: Guidance or infrastructure patch
! Disable telnet conf management telnet shutdown end
Properties
- Operating systems
- Any
- Tags
- arista-eosnetworkmanagement-plane
- Reference
- CIS Arista EOS Benchmark v1.0.0 - 2.8 Telnet access
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target arista-eos