HPE Aruba CX
TMA-ARUBA-CX-1.3.1
NTP Authentication
HighLevel 1Automatedaruba-cx
Description
This sequence describes configuring NTP authentication. PASS requires ntp authentication and at least one ntp authentication-key. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.
How it is checked
Audit method: Configuration pattern
- Pattern
(?m)(?:^ntp authentication[ \t]*$(?s:.*?)^ntp authentication-key \d+ \S+|^ntp authentication-key \d+ \S+(?s:.*?)^ntp authentication[ \t]*$)
How it is fixed
Fix method: Guidance or infrastructure patch
ntp authentication ntp authentication-key 1 md5 <ntpauthkey> ntp server 10.10.10.10 key-id 1 prefer ntp vrf mgmt # CIS guidance: ntp authentication ntp authentication-key 1 md5 <ntpauthkey> ntp server 10.10.10.10 prefer ntp vrf mgmt
Properties
- Operating systems
- Any
- Tags
- aruba-cxauthentication
- Reference
- CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.3.1 NTP Authentication
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target aruba-cx