DNS Configuration

OrtaDüzey 1Otomatikarista-eos

Açıklama

It is recommended that a DNS server be defined for client resolver. This allows for the use of hostnames when configuring services such as ntp or syslog. The susceptibility of IP addresses to spoofing translates to DNS host name and IP address mapping vulnerabilities. For example, suppose a source host wishes to establish a connection with a destination host and queries a DNS server for the IP address of the ... Audited against the output of 'show running-config' (not 'show running-config all').

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: (?m)^ip name-server (?:vrf \S+ )?\S+

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

! Configure at least one name server and a domain name. DNS services should be provided over the management network. ip name-server {vrf [Management VRF]} {ip address}

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: arista-eosnetworkhardening
Referans: CIS Arista EOS Benchmark v1.0.0 - 1.1.6 DNS Configuration

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target arista-eos