Arista EOS
TMA-ARISTA-EOS-2.1.3
Create a password complexity policy
HighLevel 1Automatedarista-eos
Description
A password policy can be used to mandate password requirements. The policy enforces recommendations when creating local users. Requires a password policy with 'minimum length' of at least 8 under 'management security'. Audited against the output of 'show running-config' (not 'show running-config all').
How it is checked
Audit method: Configuration pattern
- Pattern
(?m)^management security[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+minimum length (?:[89]|\d{2,})\b
How it is fixed
Fix method: Guidance or infrastructure patch
! management security password policy PasswordPolicy minimum length 8 minimum special 1 minimum upper 1 minimum lower 1 minimum digits 1 exit management accounts password policy PasswordPolicy
Properties
- Operating systems
- Any
- Tags
- arista-eosnetworkaaa
- Reference
- CIS Arista EOS Benchmark v1.0.0 - 2.1.3 Create a password complexity policy
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target arista-eos