Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The Arista router must not be configured to have any zero-touch deployment feature enabled when connected to an operational network.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-256029 | ARST-RT-000490 | SV-256029r882429_rule | Medium |
| Description |
|---|
| Network devices that are configured via a zero-touch deployment or auto-loading feature can have their startup configuration or image pushed to the device for installation via TFTP or Remote Copy (rcp). Loading an image or configuration file from the network is taking a security risk because the file could be intercepted by an attacker who could corrupt the file, resulting in a denial of service. |
| STIG | Date |
|---|---|
| Arista MLS EOS 4.2x Router Security Technical Implementation Guide | 2023-01-17 |
Details
| Check Text ( C-59705r882427_chk ) |
|---|
| Review the Arista MLS device configuration to determine if a configuration auto-loading or zero-touch deployment feature is enabled. Execute the command "sh zerotouch". Zerotouch Mode: Disabled If a configuration auto-loading feature or zero-touch deployment feature is enabled, this is a finding. |
| Fix Text (F-59648r882428_fix) |
|---|
| Disable all configuration auto-loading or zero-touch deployment features. LEAF-1A(config)#zerotouch disable |