cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
766
Views
0
Helpful
0
Replies

Netconf Security

rthakker
Beginner
Beginner

Hi,

 

Apology for the basic question, I am enabling Netconf on XR & XE platform but I am bit worried about security aspect of the Netconf so trying to grant least privilege access to the client.

 

  • When configuring CoPP on Cisco Device, under control-plane section do I have to allow client to SSH and Netconf both or I can only allow Netconf and it will work?

 

  •  My Netconf user is authenticated / authorised by TACACS so is there anyway to restrict what can User do? for example user should be able to do get and get-config but shouldn't be able to run edit-config, reload chassis, etc..?

 

  • Is there any way to monitor from XR and XE device what Netconf activity (get, get-config, edit-config, etc..)  using SNMP polling (Any OIDs) or Trap or Syslog message to assist in Audit trail? 

 

Any advice is greatly appreciated,

Ritesh

0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers