TMAegisBeta
More rules for aruba-cx

HPE Aruba CX

TMA-ARUBA-CX-1.2.3

SSH Server Port Customization

MediumLevel 1Automatedaruba-cx

Description

This sequence describes configuring which IP port SSH server listens on PASS requires an SSH server port other than 22. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

How it is checked

Audit method: Configuration pattern

Pattern
(?m)^ssh server port (?:\d|[013-9]\d|2[013-9]|\d{3,})[ \t]*$

How it is fixed

Fix method: Guidance or infrastructure patch

ssh server port 44444 # CIS guidance: conf ssh server port 44444 Active SSH sessions will be terminated. Do you want to continue (y/n)? y

Properties

Operating systems
Any
Tags
aruba-cxmanagement
Reference
CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.2.3 SSH Server Port Customization

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell
tmaegis scan --target aruba-cx