3.1.3 Set 'no interface tunnel'

Information

Verify no tunnel interfaces are defined.

Rationale:

Tunnel interfaces should not exist in general. They can be used for malicious purposes. If they are necessary, the network admin's should be well aware of them and their purpose.

Impact:

Organizations should plan and implement enterprise network security policies that disable insecure and unnecessary features that increase attack surfaces such as 'tunnel interfaces'.

Solution

Remove any tunnel interfaces.

hostname(config)#no interface tunnel {<em>instance</em>}

Default Value:

No tunnel interfaces are defined

See Also

https://workbench.cisecurity.org/benchmarks/9270