Information
The 'access-class' setting restricts incoming and outgoing connections between a particular vty (into a Cisco device) and the networking devices associated with addresses in an access list.Restricting the type of network devices, associated with the addresses on the access-list, further restricts remote access to those devices authorized to manage the device and reduces the risk of unauthorized access.
Solution
Configure remote management access control restrictions for all VTY lines.hostname(config)#line vty <line-number> <ending-line-number>
hostname(config-line)# access-class <vty_acl_number> in
Impact:
Applying 'access'class' to line VTY further restricts remote access to only those devices authorized to manage the device and reduces the risk of unauthorized access. Conversely, using VTY lines with 'access class' restrictions increases the risks of unauthorized access.
See Also
Item Details
Audit Name: CIS Cisco IOS XE 16.x v2.1.0 L1
See Also
Cisco Learning NetworkCategory: ACCESS CONTROL, SYSTEM AND INFORMATION INTEGRITY
References: 800-53|AC-17(3), 800-53|SI-7, CSCv7|11.7
Plugin: Cisco
Control ID: 012f102614cbb6d5bee4765b0f00cd25b732f95891163c33535bf3d42d3adb07
