The network element must only allow SNMP access from addresses belonging to the management network.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-3021	NET0890	SV-3021r2_rule	ECSC-1	Medium

Description
Detailed information about the network is sent across the network via SNMP. If this information is discovered by attackers it could be used to trace the network, show the networks topology, and possibly gain access to network devices.

STIG	Date
Infrastructure Router Security Technical Implementation Guide	2013-10-08

Details

Check Text ( C-3586r6_chk )
Review the device configuration and verify it is configured to only allow SNMP access from addresses belonging to the management network.

Fix Text (F-3046r3_fix)
Configure the network element to only allow SNMP access from only addresses belonging to the management network.