TMAegisBeta
Weitere Regeln für juniper-junos

Juniper Junos

TMA-JUNIPER-JUNOS-4.2.6

Ensure PSNP authentication check is not set to suppressed

HochStufe 1Automatisiertjuniper-junos

Beschreibung

IS-IS Neighbors should be authenticated. Where it is deployed, IS-IS routing is vital for normal operation of an organization's network infrastructure. Correct route information is required for routers to correctly direct traffic through the network. Audited against the output of 'show configuration | display set | no-more' (set format, not the curly-brace hierarchy).

So wird geprüft

Prüfmethode: Konfigurationsmuster

Muster
(?m)^set protocols isis [^\n]*\bno-psnp-authentication\b

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

! If you have deployed IS-IS in your network and have disabled PSNP authentication checking, re-enable it by issuing the following command from the hierarchy for each level at which it was set: delete protocols isis level <level> no-psnp-authentication

Eigenschaften

Betriebssysteme
Beliebig
Tags
juniper-junosnetworkaaa
Referenz
CIS Juniper OS Benchmark v2.1.0 - 4.2.6 Ensure PSNP authentication check is not set to suppressed

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell
tmaegis scan --target juniper-junos