[Alcatel] 네트워크 장비 취약점 점검 N-09 [5.3 SNMP ACL 설정]

KISA 한국인터넷진흥원 21-03-31 기준

KISA 한국인터넷진흥원

---

출처 : [주요정보통신기반시설_기술적_취약점_분석_평가_방법_상세가이드.PDF] P.383

---

- 관리자 이외 NMS SERVER 접속 차단 ACL(QoS)

　

policy network group NMS-SERVER [ip address]

policy network group ADMIN [ip address] 

policy condition NMS-PERMIT source network group ADMIN  destination network group NMS-SERVER

policy condition NMS-DENY source ip Any destination network group NMS-SERVER policy action ACCEPT

policy action DENY disposition deny

policy rule R-NMS-PERMIT conditon NMS-PERMIT action ACCEPT

policy rule R-NMS-DENY condition NMS-DENY action DENY

qos apply

 

[Alcatel] ACL 기초 설정  참고

---