Ensure SNMP Write Access is not set

CaoCấp 2Tự độngjuniper-junos

Mô tả

Do not allow Read-Write SNMP access. SNMP can be used to read and write configuration information from a router using your Network Management Systems; however the inherently insecure design of the older SNMP V1, V2 and V2C standards, which do not use encryption to protect community strings, make ... Audited against the output of 'show configuration | display set | no-more' (set format, not the curly-brace hierarchy).

Cách kiểm tra

Phương pháp kiểm tra: Mẫu cấu hình

Mẫu khớp: (?m)^set snmp [^\n]*\b(?:read-write|write-view)\b

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

! If you have deployed SNMP below Version 3 on your router with Read-Write access, delete the associated community using the following command under the hierarchy; delete snmp community <community> Alternatively you can set the communities authorization level to Read Only with the following command from the hierarchy; set snmp community <community> authorization read-only If you have deployed SNMP Version 3 on your router with Write access, delete the write view using the following command under the hierarchy; delete snmp v3 vacm access group <group name> default-context-prefix security-model <security model> security-level <security level> write-view Complete the sections in <> with the details configured for your group/s. This command will leave any read or notify views for the group in place. If only a write-view is configured, the group can be deleted instead.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: juniper-junosnetworksnmp
Tham chiếu: CIS Juniper OS Benchmark v2.1.0 - 5.5 Ensure SNMP Write Access is not set

Kiểm tra máy này

Chạy lệnh này trên máy bạn được phép kiểm tra. Lần quét chỉ ở chế độ đọc.

shell

tmaegis scan --target juniper-junos --level 2