Set 'transport input ssh' for 'line vty' connections

YüksekDüzey 1Otomatikcisco-ios

Açıklama

Selects the Secure Shell (SSH) protocol. Configuring VTY access control restricts remote access to only those authorized to manage the device and prevents unauthorized users from accessing the system. Fails if any 'line vty' block lacks 'transport input ssh' or still allows telnet/all. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all' or 'show startup-config').

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: (?m)(?:^line vty[^\n]*\n(?:[ \t]+(?:$|[^t \t\n]|t(?:$|[^r\n]|r(?:$|[^a\n]|a(?:$|[^n\n]|n(?:$|[^s\n]|s(?:$|[^p\n]|p(?:$|[^o\n]|o(?:$|[^r\n]|r(?:$|[^t\n]|t(?:$|[^ \n]| (?:$|[^i\n]|i(?:$|[^n\n]|n(?:$|[^p\n]|p(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^ \n]| (?:$|[^s\n]|s(?:$|[^s\n]|s(?:$|[^h\n])))))))))))))))))))[^\n]*\n)*(?:[^ \t]|\z))|(?:^line vty[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+transport input [^\n]*\b(?:telnet|all)\b)

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

! Apply SSH to transport input on all VTY management lines line vty <line-number> <ending-line-number> transport input ssh

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: cisco-iosnetworkmanagement-plane
Referans: CIS Cisco IOS XE 17.x Benchmark v2.2.1 - 1.2.2 Set 'transport input ssh' for 'line vty' connections

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target cisco-ios