Remote Authentication - RADIUS/RadSec/TACACS+

HochStufe 2Automatisiertaruba-cx

Beschreibung

Remote Authentication involves the use of remote RADIUS , RadSec and TACACS+ servers for authenticating the management users. Remote AAA servers are used as single point of management to configure and store user accounts. They are often coupled with directories and management repositories, simplifying the setup and maintenance of the end-user accounts. PASS requires remote (RADIUS/RadSec/TACACS+) authentication for a management channel. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

So wird geprüft

Prüfmethode: Konfigurationsmuster

Muster: (?m)^aaa authentication login (?:default|console|ssh|telnet|https-server) group \S+

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

aaa authentication login default group tacacs1 local # CIS guidance: Enable remote authentication for desired management interface. Default – Includes all the management interfaces - aaa authentication login <console/default/ssh/telnet/https- <RADIUS/TACACS+ group-list>

Eigenschaften

Betriebssysteme: Beliebig
Tags: aruba-cxauthentication
Referenz: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.5.2.3 Remote Authentication - RADIUS/RadSec/TACACS+

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target aruba-cx --level 2