Disable Proxy ARP on all Layer 3 Interfaces

OrtaDüzey 1Otomatikcisco-nxos

Açıklama

Proxy ARP is the technique in which one host, usually a router, answers ARP requests intended for another machine on a different network segment (vlan or subnet). By faking its identity, the router accepts responsibility for routing packets to the real destination. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: (?m)^[ \t]*ip (?:local-)?proxy-arp\b

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

! Proxy ARP is disabled on all interfaces by default, and that configuration does not appear in the running or saved configuration. Proxy ARP only appears in the configuration if it is enabled (which is not desired in most cases). To disable this on an interface if it is enabled: no ip proxy-arp for instance: int vlan 9 no ip proxy-arp

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: cisco-nxosnetworkhardening
Referans: CIS Cisco NX-OS Benchmark v1.2.0 - 3.2.3 Disable Proxy ARP on all Layer 3 Interfaces

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target cisco-nxos