Arista EOS
TMA-ARISTA-EOS-2.7.2
Ensure SNMP Community
Descripción
Only allow SNMP read access and ensure that the default or well-known SNMP community strings public and private are not used. An ACL should be used to further restrict which remote hosts can query the switch. Enabling write access to the device via SNMP provides a mechanism that can be exploited by an attacker to set configuration variables that can disrupt network operations. Audited against the output of 'show running-config' (not 'show running-config all').
Cómo se verifica
Método de auditoría: Patrón de configuración
- Patrón
(?m)(?i)^snmp-server community (?:public|private)(?:\s|$)
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
no snmp-server community public no snmp-server community private snmp-server community {community string} ro {snmp security acl}
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- arista-eosnetworksnmp
- Referencia
- CIS Arista EOS Benchmark v1.0.0 - 2.7.2 Ensure SNMP Community
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
tmaegis scan --target arista-eos