Cisco NX-OS
TMA-CISCO-NXOS-3.2.5
Disable IP Source-Routing
SedangLevel 1Otomatiscisco-nxos
Deskripsi
A malicious actor can influence the path that their traffic should take using source-routing. Disabling this on the NX-OS platform disables this feature for all transit traffic. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).
Cara pemeriksaan
Metode audit: Pola konfigurasi
- Pola
(?m)^no ip source-route\b
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
no ip source-route
Properti
- Sistem operasi
- Apa saja
- Tag
- cisco-nxosnetworkrouting
- Referensi
- CIS Cisco NX-OS Benchmark v1.2.0 - 3.2.5 Disable IP Source-Routing
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target cisco-nxos