Minimum Security Baseline Show command script?

adamr1 — Fri, 21 Feb 2020 19:10:37 GMT

I have a list of Cisco configurations (see picture of excel sheet) to check whether they're enabled or disabled or set to my companies security standard.

I have been trying to compile a show command "script" to run on any device in the company at any point and see whether it meets the minimum security baseline or not.

Is this the best way to verify this? Essentially it is for audit purposes to quickly see if the running config meets the criteria specified in the list. If anyone has any better methods I'd love to hear of them.

Devices are mixed between nexus and ios & both routers and switches will need to be checked. Many various models of them all as well.

Example:

show run | i aaa auth
!
show run | i service password
!
show run | i secret
!
show run | i username
!
show run | i timeout
!
show run | i ip directed
!
show run | i source-route
!
show run | i snmp-server community
!
show run | i ip http se
!
show run | i ip bootp
!
show run | i ip identd
!

topic Minimum Security Baseline Show command script? in Network Access Control

Minimum Security Baseline Show command script?