Juniper Junos
TMA-JUNIPER-JUNOS-4.2.4
Ensure loose authentication check is not configured
Description
IS-IS Neighbors should be authenticated. Where it is deployed, IS-IS routing is vital for normal operation of an organization's network infrastructure. Correct route information is required for routers to correctly direct traffic through the network. Audited against the output of 'show configuration | display set | no-more' (set format, not the curly-brace hierarchy).
How it is checked
Audit method: Configuration pattern
- Pattern
(?m)^set protocols isis [^\n]*\bloose-authentication-check\b
How it is fixed
Fix method: Guidance or infrastructure patch
! If you have deployed IS-IS in your network and have enabled loose authentication checking, re-enable it by issuing the following command from the hierarchy: delete protocols isis loose-authentication-check
Properties
- Operating systems
- Any
- Tags
- juniper-junosnetworkaaa
- Reference
- CIS Juniper OS Benchmark v2.1.0 - 4.2.4 Ensure loose authentication check is not configured
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
tmaegis scan --target juniper-junos