V-215855
CAT IIThe Cisco router must be configured to back up the configuration when changes occur.
- Ships Affected
- 1
- Total Findings
- 1
- Open
- 1
- Closed
- 0
Check Text
Review the Cisco router configuration to verify that it is compliant with this requirement. The example configuration below will send the configuration to a SCP server when a configuration change occurs.
event manager applet BACKUP_CONFIG
event syslog pattern "%SYS-5-CONFIG_I"
action 1 info type routername
action 2 cli command "enable"
action 3 cli command "copy run scp" pattern "remote host"
action 4 cli command "x.x.x.x" pattern "filename"
action 5 cli command "$_info_routername-config"
action 6 syslog priority informational msg "Configuration backup was executed"
If the Cisco router is not configured to conduct backups of the configuration when changes occur, this is a finding.
Fix Text
Configure the Cisco router to send the configuration to a SCP server when a configuration change occurs as shown in the example below.
R4(config)#event manager applet BACKUP_CONFIG
R4(config-applet)#event syslog pattern "%SYS-5-CONFIG_I"
R4(config-applet)#action 1 cli command "enable"
R4(config-applet)#action 2 info type routername
R4(config-applet)#action 3 cli command "copy run scp" pattern "remote host"
R4(config-applet)#action 4 cli command "x.x.x.x" pattern "filename"
R4(config-applet)#action 5 cli command "$_info_routername-config"
R4(config-applet)#action 6 syslog priority informational msg "Configuration backup was executed"
R4(config-applet)#end
STIG Reference
- STIG
- Cisco IOS XE Router NDM Security Technical Implementation Guide
- Version
- 3
- Release
- 7
- Rule ID
- SV-215855r1069501_rule
All Occurrences
This vulnerability appears on 1 ship(s)
| Ship | Hull # | Source File | Status | Assigned To | Scan Date | Actions |
|---|---|---|---|---|---|---|
| USNS MONTFORD POINT | T-ESD-1 | _Reviewed/MONTPOINTGTWYRTR/Checklist/MONTPOINTGTWYRTR_CiscoXERtrNDM_V3R5_20251023-150045.ckl | Unassigned | 2026-01-14T12:57:25.013310 | View in Context |