Default & Fallback Local Authentication

HochStufe 2Manuelle Prüfungaruba-cx

Beschreibung

Local user names and passwords are configured on a per-switch basis and provide the most basic form of authentication. Enabled by default for all management access connection types - console, SSH, and https-server (REST).Local authentication is also often used as the fallback login method. Local authentication can provide a minimum- security level should the primary method fail, but does not completely disable management access to the switch

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Run 'show aaa authentication' and confirm local authentication is kept as the fallback (last) method for every management channel, so administrators can still log in when remote AAA servers are unreachable, and that a local administrator account exists.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

To configure a local administrator-level user named localadmin with interactive password entry: user localadmin group administrators password Enter password: ********** Confirm password: **********

Eigenschaften

Betriebssysteme: Beliebig
Tags: aruba-cxauthentication
Referenz: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.5.2.1 Default & Fallback Local Authentication