华为 huawei 查看系统中存在的安全风险信息 display security risk

查看系统中存在的安全风险信息。
应用场景
由于协议自身的安全性能不同,用户配置时使用的某些协议可能存在安全风险。通过该命令可查看系统中存在的安全风险,并根据给出的修复建议解除风险。例如,用户配置了SNMPv1功能,该功能存在安全风险,系统会提示并建议使用SNMPv3协议。
查询安全风险信息时,可以基于风险等级进行过滤,也可以基于特性进行过滤,以及同时基于风险等级和特性来过滤风险信息。
注意事项
不同级别的用户查看到的安全风险信息也不相同。管理级用户能够查看到系统中所有风险信息,其他级别用户只能看到低于或等于自己级别的风险信息。
<Quidway> display security risk
Risk level       : HIGH                                                                                                            
Feature name     : SNMP                                                                                                            
Risk information : SNMPv1/SNMPv2c is enabled.                                                                                      
Repair action    : Use SNMPv3.                                                                                                     
                                                                                                                                   
Risk level       : HIGH                                                                                                            
Feature name     : TELNET                                                                                                          
Risk information : None authentication is configured for Telnet users.                                                             
Repair action    : Use AAA authentication.                                                                                         
                                                                                                                                   
Risk level       : MEDIUM                                                                                                          
Feature name     : CONSOLE                                                                                                         
Risk information : No authentication is configured, password authentication is configured but no password is specified, or none auth
entication is configured on the console interface.                                                                                 
Repair action    : Use AAA authentication.                                                                                         
                                                                                                                                   
Risk level       : MEDIUM                                                                                                          
Feature name     : SSH                                                                                                             
Risk information : SSHv1 is supported.                                                                                             
Repair action    : Close SSHv1.                                                                                                    
                                                                                                                                   
Risk level       : MEDIUM                                                                                                          
Feature name     : TELNET                                                                                                          
Risk information : The Telnet server function is used.                                                                             
Repair action    : Use Stelnet.   
原文地址:https://www.cnblogs.com/enderzhou/p/10677151.html