Disable iPXE (Pre-boot eXecution Environment)

SedangLevel 2Otomatiscisco-nxos

Deskripsi

iPXE allows a NX-OS device to boot from the network, usually using HTTP. This method allows the switch bootup image to be controlled centrally, often using DHCP services. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)^boot order [^\n]*\bpxe\b

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

! Setting the boot order explicity to "bootflash" will remediate a PXE configured device. boot order bootflash You can also "no" the current boot order line to revert to the default setting. For instance, to remove the configuration line "boot order pxe bootflash" command, use no boot order pxe bootflash

Properti

Sistem operasi: Apa saja
Tag: cisco-nxosnetworkmanagement-plane
Referensi: CIS Cisco NX-OS Benchmark v1.2.0 - 1.7.2 Disable iPXE (Pre-boot eXecution Environment)

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target cisco-nxos --level 2