Management plane protection

中レベル 2自動cisco-iosxr

説明

The Management Plane Protection (MPP) feature provides the capability to restrict the interfaces on which network management packets are allowed to enter a device. The MPP feature allows a network operator to designate one or more router interfaces as management interfaces. The MPP protection feature, as well as all the management protocols under MPP, are disabled by default. This is part of the MPP setup. Audited against the hierarchical output of 'show running-config' (run 'terminal length 0' first; not 'show running-config formal').

チェック方法

監査方法: 設定パターン

パターン: (?m)^control-plane[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+management-plane\b

修正方法

修正方法: ガイダンスまたは IaC パッチ

! Configure the management plane so that only certain protocols connectced to certain interfaces can access this IOS-XR device. control-plane management-plane inband interface {interface} allow {protocol} peer address ipv4 {IP_address} out-of-band interface {interface} allow {protocol} peer address ipv4 {IP_address}

プロパティ

オペレーティングシステム: すべて
タグ: cisco-iosxrnetworkmanagement-plane
参照: CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 1.9 Management plane protection

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell

tmaegis scan --target cisco-iosxr --level 2