Arista EOS
TMA-ARISTA-EOS-2.5.1
Configure TACACS+/RADIUS server
HighLevel 1Automatedarista-eos
Description
The switch defines a TACACS+ server connection by its address and port. It is recommended to use two or more authentication servers for the purpose of granting administrative access. At least one TACACS+ server must be configured. Audited against the output of 'show running-config' (not 'show running-config all').
How it is checked
Audit method: Configuration pattern
- Pattern
(?m)^(?:tacacs-server|radius-server) host \S+
How it is fixed
Fix method: Guidance or infrastructure patch
! This command configures the switch to communicate with the TACACS+ server assigned the host name TAC_1 using the encryption key rp31E2v. tacacs-server host TAC-1 key rp31E2v
Properties
- Operating systems
- Any
- Tags
- arista-eosnetworkaaa
- Reference
- CIS Arista EOS Benchmark v1.0.0 - 2.5.1 Configure TACACS+/RADIUS server
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target arista-eos