Authenticate OSPF peers with MD5 authentication keys

HochStufe 2Manuelle Prüfungcisco-nxos

Beschreibung

If OSPF is configured, peers can be authenticated using keys. This is not configured by default. If configured, MD5 hashes are recommended as the authentication mechanism. MD5 is the best option for multi-vendor support, and is also the best cryptographic option available in the OSPF standard. CIS assessment: Manual. Reported as SKIP with review instructions.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

CIS assessment: Manual. The "show running-configuration ospf" lists the entire OSPF configuration. For all interfaces that face peers, ensure that these two commands are in place: interface <interfacename> ip ospf authentication message-digest ip ospf authentication key-chain <OSPF Key-Chain name> Each OSPF routeable interface should either have authentication configured or be configured as an OSPF passive interface.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

! For each OSPF routeable interface, set the message-digest authentication method, and assign the appropriate keychain. Each OSPF routeable interface should either have authentication configured or be configured as an OSPF passive interface. interface Vlan1 ip ospf authentication message-digest ip ospf authentication key-chain <OSPF Key Chain>

Eigenschaften

Betriebssysteme: Beliebig
Tags: cisco-nxosnetworkaaa
Referenz: CIS Cisco NX-OS Benchmark v1.2.0 - 3.1.3.2 Authenticate OSPF peers with MD5 authentication keys