Cisco NX-OS
TMA-CISCO-NXOS-1.7.2
Disable iPXE (Pre-boot eXecution Environment)
Descripción
iPXE allows a NX-OS device to boot from the network, usually using HTTP. This method allows the switch bootup image to be controlled centrally, often using DHCP services. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).
Cómo se verifica
Método de auditoría: Patrón de configuración
- Patrón
(?m)^boot order [^\n]*\bpxe\b
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
! Setting the boot order explicity to "bootflash" will remediate a PXE configured device. boot order bootflash You can also "no" the current boot order line to revert to the default setting. For instance, to remove the configuration line "boot order pxe bootflash" command, use no boot order pxe bootflash
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- cisco-nxosnetworkmanagement-plane
- Referencia
- CIS Cisco NX-OS Benchmark v1.2.0 - 1.7.2 Disable iPXE (Pre-boot eXecution Environment)
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
tmaegis scan --target cisco-nxos --level 2