[Alcatel] 네트워크 장비 취약점 점검 N-04 [2.1 VTY 접근(ACL)설정]

KISA 한국인터넷진흥원 21-03-31 기준

KISA 한국인터넷진흥원

---

출처 : [주요정보통신기반시설_기술적_취약점_분석_평가_방법_상세가이드.PDF] P.377

---

- 관리자 외 전부 SSH 접속 차단 ACL(QoS)

　

policy network group MGMT [관리자 PC IP address]

policy service SSH destination tcp-port 22

policy condition SSH-PERMIT source network group MGMT destination network group Switch service SSH

policy condition SSH-DENY source ip Any destination network group Switch service SSH policy action ACCEPT

policy action DENY disposition deny

policy rule R-SSH-PERMIT conditon SSH-PERMIT action ACCEPT

policy rule R-SSH-DENY condition SSH-DENY action DENY

qos apply

 

[Alcatel] ACL 기초 설정 참고