Detections
Analytics
CISC-RT-000230 - The Cisco router must be configured to disable the auxiliary port unless it is connected to a secured modem providing encryption and authentication.
Information
The use of POTS lines to modems connecting to network devices provides clear text of authentication traffic over commercial circuits that could be captured and used to compromise the network. Additional war dial attacks on the device could degrade the device and the production network.Secured modem devices must be able to authenticate users and must negotiate a key exchange before full encryption takes place. The modem will provide full encryption capability (Triple DES) or stronger. The technician who manages these devices will be authenticated using a key fob and granted access to the appropriate maintenance port; thus, the technician will gain access to the managed device (router, switch, etc.). The token provides a method of strong (two-factor) user authentication. The token works in conjunction with a server to generate one-time user passwords that will change values at second intervals. The user must know a personal identification number (PIN) and possess the token to be allowed access to the device.
Solution
Disable the auxiliary port.R2(config)#line aux 0
R2(config-line)#no exec
R2(config-line)#transport input none
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Cisco_IOS_Router_Y20M07_STIG.zip
Item Details
Audit Name: DISA STIG Cisco IOS Router RTR v1r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7, CAT|III, CCI|CCI-001414, CSCv6|9.1, Rule-ID|SV-105681r1_rule, STIG-ID|CISC-RT-000230, Vuln-ID|V-96543
Plugin: Cisco
Control ID: 20971bcabc19a3bd154c0d60faf836e346fbdb26e89a6ea255a35e42876c163a