Detections
Analytics

2.6.1 Limit SSH Access Only To The Network Management Segment

Information

The network element should only allow management connections for administrative access from hosts residing in the management network. It is recommended to review the configuration and verify management access to the device is allowed only from hosts within the management network.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

switch(config)#management ssh
switch(config-mgmt-ssh)#sho active
switch(config-mgmt-ssh)#vrf MGMT
switch(config-mgmt-ssh-vrf-MGMT)#no shutdown
switch(config-mgmt-ssh-vrf-MGMT)#exit
switch(config-mgmt-ssh)#shutdown
switch(config-mgmt-ssh)#end

See Also

https://workbench.cisecurity.org/benchmarks/25683

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-17(2)

Plugin: Arista

Control ID: 645abb18e63afcdab3361ef1ac3297df975abf0af991378a9c552933e78299c7