华为 huawei 查看系统中存在的安全风险信息 display security risk

查看系统中存在的安全风险信息。

应用场景

由于协议自身的安全性能不同，用户配置时使用的某些协议可能存在安全风险。通过该命令可查看系统中存在的安全风险，并根据给出的修复建议解除风险。例如，用户配置了SNMPv1功能，该功能存在安全风险，系统会提示并建议使用SNMPv3协议。

查询安全风险信息时，可以基于风险等级进行过滤，也可以基于特性进行过滤，以及同时基于风险等级和特性来过滤风险信息。

注意事项

不同级别的用户查看到的安全风险信息也不相同。管理级用户能够查看到系统中所有风险信息，其他级别用户只能看到低于或等于自己级别的风险信息。

<Quidway> display security risk

Risk level       : HIGH                                                                                                            

Feature name     : SNMP                                                                                                            

Risk information : SNMPv1/SNMPv2c is enabled.                                                                                      

Repair action    : Use SNMPv3.                                                                                                     

                                                                                                                                   

Risk level       : HIGH                                                                                                            

Feature name     : TELNET                                                                                                          

Risk information : None authentication is configured for Telnet users.                                                             

Repair action    : Use AAA authentication.                                                                                         

                                                                                                                                   

Risk level       : MEDIUM                                                                                                          

Feature name     : CONSOLE                                                                                                         

Risk information : No authentication is configured, password authentication is configured but no password is specified, or none auth

entication is configured on the console interface.                                                                                 

Repair action    : Use AAA authentication.                                                                                         

                                                                                                                                   

Risk level       : MEDIUM                                                                                                          

Feature name     : SSH                                                                                                             

Risk information : SSHv1 is supported.                                                                                             

Repair action    : Close SSHv1.                                                                                                    

                                                                                                                                   

Risk level       : MEDIUM                                                                                                          

Feature name     : TELNET                                                                                                          

Risk information : The Telnet server function is used.                                                                             

Repair action    : Use Stelnet.