API access using https

높음레벨 2자동arista-eos

설명

The Arista Command eAPI is a simple and complete API that allows you to configure and monitor your Arista switches. Once the API is enabled, the switch accepts HTTPS requests containing a list of industry standard CLI commands, and responds with machine-readable output and errors serialized in JSON (served over HTTP or HTTPS). HTTP can be enabled but should be left disabled. EOS API provides structured output more suitable for programmatic parsing than cli scraping. If the API is enabled, it should only use https, not http. Fails if eAPI has plain 'protocol http' enabled. Audited against the output of 'show running-config' (not 'show running-config all').

점검 방법

감사 방식: 구성 패턴

패턴: (?m)^management api http-commands[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+protocol http(?: |\r?$)

조치 방법

조치 방식: 가이드 또는 인프라 패치

! management api http-commands no shutdown default protocol http vrf MGMT no shutdown

속성

운영 체제: 모두
태그: arista-eosnetworkmanagement-plane
참고 자료: CIS Arista EOS Benchmark v1.0.0 - 2.9 API access using https

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target arista-eos --level 2