Set 'seconds' for 'ssh timeout' for 60 seconds or less

VisokaNivo 1Automatskacisco-iosxr

Opis

The time interval that the router waits for the SSH client to respond before disconnecting an uncompleted login attempt. This reduces the risk of an administrator leaving an authenticated session logged in for an extended period of time. CIS Recommends 60 seconds or less. The default is not shown; fails only if 'ssh timeout' is above 60 seconds. Audited against the hierarchical output of 'show running-config' (run 'terminal length 0' first; not 'show running-config formal').

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^ssh timeout (?:6[1-9]|[7-9]\d|\d{3,})\b

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! Configure the SSH timeout ssh timeout {ssh_timeout}

Svojstva

Operativni sistemi: Bilo koji
Oznake: cisco-iosxrnetworkntp
Referenca: CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 1.2.3 Set 'seconds' for 'ssh timeout' for 60 seconds or less

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target cisco-iosxr