Sample regex for audit tests for Cisco devices
Extreme Networks tested the following devices:
- Cisco IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(22) EA2
- Cisco IOS Software, C3750 Software (C3750-IPBASE-M), Version 12.2(35) SE5
| # | Audit tests | Regex |
|---|---|---|
| 1 | AuditTest_CISCO_Access Control Lists (ACLs) | ^\s*ip access-list |
| 2 | AuditTest_CISCO_Broadcast Suppression | ^\s*storm-control broadcast |
| 3 | AuditTest_CISCO_Web Based Configuration | ^\s*ip http server |
| 4 | AuditTest_CISCO_Enable password | ^\s*enable password |
| 5 | AuditTest_CISCO_Exec Timeout | ^\s*exec-timeout |
| 6 | AuditTest_CISCO_Login Banner | ^\s*banner login |
| 7 | AuditTest_CISCO_Multicast Suppression | ^\s*storm-control multicast |
| 8 | AuditTest_CISCO_SNMP v1/v2 Disabled | ^\s*snmp-server community\s.* RW |
| 9 | AuditTest_CISCO_SNMPv3_No_Auth_No_Priv | ^\s*snmp-server group\s.*\sv3\sauth |
| 10 | AuditTest_CISCO_Unicast Suppression | ^\s*storm-control unicast |
| 11 | AuditTest_CISCO_Password Encryption | ^\s*service password-encryption |
| 12 | AuditTest_CISCO_Port Security | ^\s*switchport port-security |
| 13 | AuditTest_CISCO_OSPF Router Authentication | ^\s*ip ospf authentication |