Ensure SNMP Community

VisokaNivo 1Automatskaarista-eos

Opis

Only allow SNMP read access and ensure that the default or well-known SNMP community strings public and private are not used. An ACL should be used to further restrict which remote hosts can query the switch. Enabling write access to the device via SNMP provides a mechanism that can be exploited by an attacker to set configuration variables that can disrupt network operations. Audited against the output of 'show running-config' (not 'show running-config all').

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)(?i)^snmp-server community (?:public|private)(?:\s|$)

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

no snmp-server community public no snmp-server community private snmp-server community {community string} ro {snmp security acl}

Svojstva

Operativni sistemi: Bilo koji
Oznake: arista-eosnetworksnmp
Referenca: CIS Arista EOS Benchmark v1.0.0 - 2.7.2 Ensure SNMP Community

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target arista-eos