Disable TCP and UDP small servers

MediaNivel 1Automatizadacisco-iosxr

Descripción

TCP and UDP small servers are servers (daemons, in Unix parlance) that run in the router which are useful for diagnostics. TCP Small Servers The TCP small servers are: Echo: Echoes back whatever you type through the telnet x.x.x.x echo command. Chargen: Generates a stream of ASCII data. Use the telnet x.x.x.x chargen command. Discard: Throws away whatever you type. CIS marks this Manual; automated as a config-line check. Audited against the hierarchical output of 'show running-config' (run 'terminal length 0' first; not 'show running-config formal').

Cómo se verifica

Método de auditoría: Patrón de configuración

Patrón: (?m)^service ipv[46] (?:tcp|udp)-small-servers\b

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

! Disable TCp and UDP small services no service ipv4 tcp-small-servers max-servers 10 no service ipv4 udp-small-servers max-servers 10 commit

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: cisco-iosxrnetworkhardening
Referencia: CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 1.3.2 Disable TCP and UDP small servers

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target cisco-iosxr