Create 'access-list' for use with 'line vty'

YüksekDüzey 1Manuel incelemecisco-ios

Açıklama

Access lists control the transmission of packets on an interface, control Virtual Terminal Line (VTY) access, and restrict the contents of routing updates. The Cisco IOS software stops checking the extended access list after a match occurs. VTY ACLs control what addresses may attempt to log in to the router. Configuring VTY lines to use an ACL, restricts the sources where a user can manage the device. CIS assessment: Manual. Reported as SKIP with review instructions.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

CIS assessment: Manual. Perform the following to determine if the ACL is created: Verify the appropriate access-list definitions hostname#sh ip access-list <vty_acl_number>

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

! Configure the VTY ACL that will be used to restrict management access to the device. access-list <vty_acl_number> permit tcp <vty_acl_block_with_mask> any access-list <vty_acl_number> permit tcp host <vty_acl_host> any deny ip any any log

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: cisco-iosnetworkmanagement-plane
Referans: CIS Cisco IOS XE 17.x Benchmark v2.2.1 - 1.2.4 Create 'access-list' for use with 'line vty'