Configure Password Encryption
Details You can enable strong, reversible 128-bit Advanced Encryption Standard (AES) password encryption, also known as type-6 encryption. To start...
- Home
- Security Hardening
- CIS Cisco NX OS L2 V1.0.0
CIS Cisco NX OS L2 V1.0.0
Configure SNMP Source Interface for Traps – snmp-server host
Details The administrator can configure SNMP to the interfaces source IP address for notifications Rationale: By using a source interface...Configure SNMP Source Interface for Traps – snmp-server traps/informs
Details The administrator can configure SNMP to the interfaces source IP address for notifications Rationale: By using a source interface...Configure SNMP Traps
Details SNMP relies on an architecture which consists of a manager and an agent. SNMP Managers can be any machine...Configure SNMPv3 – engineID
Details The Simple Network Management Protocol (SNMP) is an application-layer protocol that provides a message format for communication between SNMP...Configure SNMPv3 – group v3
Details The Simple Network Management Protocol (SNMP) is an application-layer protocol that provides a message format for communication between SNMP...Create and use a single Loopback Address for Routing Protocol Peering
Details The use of a loopback interface is recommended for use in all routing protocols. This recommendation describes the configuration...Disable iPXE (Pre-boot eXecution Environment)
Details iPXE allows a NX-OS device to boot from the network, usually using HTTP. Rationale: This method allows the switch...Disable Power on Auto Provisioning (POAP)
Details PowerOn Auto Provisioning (POAP) allows the switch to be auto-provisioned at the time of power-on. This can be extremely...Do not Configure a Read Write SNMP Community String
Details SNMP RW (Read-Write) access allows stations with Management access to both read and write SNMP MIB objects. Rationale: SNMP...