Ensure SNMP Community

TinggiLevel 1Otomatisarista-eos

Deskripsi

Only allow SNMP read access and ensure that the default or well-known SNMP community strings public and private are not used. An ACL should be used to further restrict which remote hosts can query the switch. Enabling write access to the device via SNMP provides a mechanism that can be exploited by an attacker to set configuration variables that can disrupt network operations. Audited against the output of 'show running-config' (not 'show running-config all').

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)(?i)^snmp-server community (?:public|private)(?:\s|$)

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

no snmp-server community public no snmp-server community private snmp-server community {community string} ro {snmp security acl}

Properti

Sistem operasi: Apa saja
Tag: arista-eosnetworksnmp
Referensi: CIS Arista EOS Benchmark v1.0.0 - 2.7.2 Ensure SNMP Community

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target arista-eos