ARST-ND-000010 - The Arista network device must limit the number of concurrent sessions to an organization-defined number for each administrator account and/or administrator account type.

Information

Device management includes the ability to control the number of administrators and management sessions that manage a device. Limiting the number of allowed administrators and sessions per administrator based on account type, role, or access type is helpful in limiting risks related to denial-of-service (DoS) attacks.

This requirement addresses concurrent sessions for administrative accounts and does not address concurrent sessions by a single administrator via multiple administrative accounts. The maximum number of concurrent sessions must be defined based upon mission needs and the operational environment for each system. At a minimum, limits must be set for SSH, HTTPS, account of last resort, and root account sessions.

Solution

Configure the switch to limit SSH concurrent connections to the device with the following commands:

switch#configure
switch(config)#management ssh
switch(config-mgmt-ssh)#connection limit 5
switch(config-mgmt-ssh)#exit
switch#wr
!

Item Details

Audit Name: DISA STIG Arista MLS EOS 4.2x NDM v2r1

Category: ACCESS CONTROL

Plugin: Arista

Control ID: 0e00c534f700e826f78b1fd5fd511941a34ba900d248c4deaf6f9ce25c6b70ed

Detections

Analytics

ARST-ND-000010 - The Arista network device must limit the number of concurrent sessions to an organization-defined number for each administrator account and/or administrator account type.

Information

Solution

See Also

Item Details