Cisco IOS
TMA-CISCO-IOS-1.1.2
Enable 'aaa authentication login'
Description
Sets authentication, authorization and accounting (AAA) authentication at login. Using AAA authentication for interactive management access to the device provides consistent, centralized control of your network. The default under AAA (local or network) is to require users to log in using a valid user name and password. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all' or 'show startup-config').
How it is checked
Audit method: Configuration pattern
- Pattern
(?m)^aaa authentication login \S+ \S
How it is fixed
Fix method: Guidance or infrastructure patch
! Configure AAA authentication method(s) for login authentication. aaa authentication login {default | aaa_list_name} [passwd-expiry] [method1] [method2]
Properties
- Operating systems
- Any
- Tags
- cisco-iosnetworklogging
- Reference
- CIS Cisco IOS XE 17.x Benchmark v2.2.1 - 1.1.2 Enable 'aaa authentication login'
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
tmaegis scan --target cisco-ios