Detections
Analytics

1.1.6 DNS Configuration

Information

It is recommended that a DNS server be defined for client resolver. This allows for the use of hostnames when configuring services such as ntp or syslog.

The susceptibility of IP addresses to spoofing translates to DNS host name and IP address mapping vulnerabilities. For example, suppose a source host wishes to establish a connection with a destination host and queries a DNS server for the IP address of the destination host name. If the response to this query is the IP address of a host operated by an attacker, the source host will establish a connection with the attacker's host, rather than the intended target. The user on the source host might then provide logon, authentication, and other sensitive data.

Solution

Configure at least one name server and a domain name. DNS services should be provided over the management network.

switch(config)# ip name-server {vrf [Management VRF]} {ip address}

See Also

https://workbench.cisecurity.org/benchmarks/25683

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-20

Plugin: Arista

Control ID: baefe99b9a44c1af273bce8f023a635a008cb1bc484bafa99c5b43df75f7d07b