Details

The ‘access-class’ setting restricts incoming and outgoing connections between a particular vty (into a Cisco device) and the networking devices associated with addresses in an access list.

Solution

Configure remote management access control restrictions for all VTY lines.
hostname(config)#line vty
hostname(config-line)# access-class in

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/508

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Cisco.

References

• 800-53|SC-7(11)

Source

• Tenable.com/audits