Cisco IOS
TMA-CISCO-IOS-1.2.2
Set 'transport input ssh' for 'line vty' connections
Opis
Selects the Secure Shell (SSH) protocol. Configuring VTY access control restricts remote access to only those authorized to manage the device and prevents unauthorized users from accessing the system. Fails if any 'line vty' block lacks 'transport input ssh' or still allows telnet/all. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all' or 'show startup-config').
Kako se proverava
Metod provere: Obrazac konfiguracije
- Obrazac
(?m)(?:^line vty[^\n]*\n(?:[ \t]+(?:$|[^t \t\n]|t(?:$|[^r\n]|r(?:$|[^a\n]|a(?:$|[^n\n]|n(?:$|[^s\n]|s(?:$|[^p\n]|p(?:$|[^o\n]|o(?:$|[^r\n]|r(?:$|[^t\n]|t(?:$|[^ \n]| (?:$|[^i\n]|i(?:$|[^n\n]|n(?:$|[^p\n]|p(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^ \n]| (?:$|[^s\n]|s(?:$|[^s\n]|s(?:$|[^h\n])))))))))))))))))))[^\n]*\n)*(?:[^ \t]|\z))|(?:^line vty[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+transport input [^\n]*\b(?:telnet|all)\b)
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
! Apply SSH to transport input on all VTY management lines line vty <line-number> <ending-line-number> transport input ssh
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- cisco-iosnetworkmanagement-plane
- Referenca
- CIS Cisco IOS XE 17.x Benchmark v2.2.1 - 1.2.2 Set 'transport input ssh' for 'line vty' connections
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target cisco-ios