Huawei: Enable SSH
Details Enable SSH on the server. Solution To enable ssh, run the following command in system view:nn stelnet server enable...
- Home
- Security Hardening
- TNS Huawei VRP Best Practices
TNS Huawei VRP Best Practices
Huawei: Set System Name
Details Default name of the device is ‘Huawei’, and should be changed to uniquely identify this device on the network....Huawei: Simple Password Authentication is not used.
Details If a simple password is displayed in the configuration, anyone that is able to view the configuration, on system...Huawei: SNMP appropriate trap host
Details If SNMP traps are configured, make sure snmp-server host is configured. Solution Use the following command in system view...Huawei: SNMP Community string != private
Details Make sure ‘private’ community string does not exist Solution To remove the private community string, use the following command...Huawei: SNMP Community string != public
Details Make sure ‘public’ community string does not exist Solution To remove the public community string, use the following command...Huawei: SNMP is Configured
Details SNMP traps are configured for monitoring and alerting. Solution Use the following command in system view to configure SNMP...Huawei: NTP is enabled
Details NTP time service is used for syncronizing the system clock to common time sources to provide the ability to...Huawei: SSH Max Retries <= 3
Details Allow no more than 3 incorrect password attempts. The default value of attempts is 3. Check for commands that...Huawei: Require Group for SNMPv3 Access
Details Do not allow plaintext SNMPv3 access. Solution Run the following command in system view to configure SNMPv3 Access:nn snmp-agent...