Detections
Analytics

2.7.1 Limit SNMP Access To Management VRF

Information

SNMP access should be restricted to the management vrf.

Detailed information about the network is sent across the network via SNMP. If this information is discovered by attackers it could be used to trace the network, show the network topology, and possibly gain access to network devices. Only allow SNMP access from addresses belonging to the management network.

Solution

snmp-server vrf {management VRF}
no snmp-server vrf default

See Also

https://workbench.cisecurity.org/benchmarks/25683

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-17(2)

Plugin: Arista

Control ID: 7091b170da8104ccc34d36d00593a592d14bd23b4e51c0f6a9b8a7dd5da5918f