Log OSPF Adjacency Changes

보통레벨 1자동cisco-nxos

설명

Logging changes to the BGP peering relationships is recommended. Any logged changes in a routing peer relationship will in the best case indicate a service issue due to standard operational issues (connectivity issues and so on) or in the worst case, could indicate malicious activity attempting to subvert the peering ... CIS marks this Manual; automated: passes when OSPF is not configured. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).

점검 방법

감사 방식: 구성 패턴

패턴: (?m)\A(?:[ \t]*(?:$|[^l \t\n]|l(?:$|[^o\n]|o(?:$|[^g\n]|g(?:$|[^\-\n]|-(?:$|[^a\n]|a(?:$|[^d\n]|d(?:$|[^j\n]|j(?:$|[^a\n]|a(?:$|[^c\n]|c(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^c\n]|c(?:$|[^y\n]|y(?:$|[^\-\n]|-(?:$|[^c\n]|c(?:$|[^h\n]|h(?:$|[^a\n]|a(?:$|[^n\n]|n(?:$|[^g\n]|g(?:$|[^e\n]|e(?:$|[^s\n])))))))))))))))))))))[^\n]*\n)*[ \t]*router ospf [^\n]*(?:\n(?:[ \t]*(?:$|[^l \t\n]|l(?:$|[^o\n]|o(?:$|[^g\n]|g(?:$|[^\-\n]|-(?:$|[^a\n]|a(?:$|[^d\n]|d(?:$|[^j\n]|j(?:$|[^a\n]|a(?:$|[^c\n]|c(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^c\n]|c(?:$|[^y\n]|y(?:$|[^\-\n]|-(?:$|[^c\n]|c(?:$|[^h\n]|h(?:$|[^a\n]|a(?:$|[^n\n]|n(?:$|[^g\n]|g(?:$|[^e\n]|e(?:$|[^s\n])))))))))))))))))))))[^\n]*))*\n?\z

조치 방법

조치 방식: 가이드 또는 인프라 패치

! Enabling the logging of adjacencies is a single line in the OSPF process section. It is globally applied to all OSPF neighbors. router ospf <Process tag> log-adjacency-changes

속성

운영 체제: 모두
태그: cisco-nxosnetworklogging
참고 자료: CIS Cisco NX-OS Benchmark v1.2.0 - 3.1.3.3 Log OSPF Adjacency Changes

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target cisco-nxos