Configure an enable password

HighLevel 1Automatedarista-eos

Description

The enable command controls access to Privileged EXEC and all configuration command modes. The enable password authorizes users to execute the enable command. When the enable password is set, the CLI displays a password prompt when a user attempts to enter Privileged EXEC mode. It is recommended that the enable secret password be used at all times to grant administrative access to the Arista switch. Audited against the output of 'show running-config' (not 'show running-config all').

How it is checked

Audit method: Configuration pattern

Pattern: (?m)^enable (?:password|secret) \S

How it is fixed

Fix method: Guidance or infrastructure patch

! Configure and enable password enable password {password string}

Properties

Operating systems: Any
Tags: arista-eosnetworkaaa
Reference: CIS Arista EOS Benchmark v1.0.0 - 2.1.2 Configure an enable password

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target arista-eos