Arista EOS
TMA-ARISTA-EOS-1.1.5
NTP authentication
Descripción
NTP authentication verifies that time updates come from a trusted server, preventing bad actors from spoofing time or altering your clock. The NTP authentication model is the opposite of the typical client-server authentication model. NTP authentication enables an NTP client or peer to authenticate time received from their servers and peers. Authentication support allows the NTP client to verify that servers are in fact known and trusted and not intruders intending accidentally or intentionally to masquerade as a legitimate server. Requires 'ntp authentication-key' and 'ntp trusted-key'. Audited against the output of 'show running-config' (not 'show running-config all').
Cómo se verifica
Método de auditoría: Patrón de configuración
- Patrón
(?m)(?s:^ntp authentication-key \d+ \S+ \S.*^ntp trusted-key \d+)|(?s:^ntp trusted-key \d+.*^ntp authentication-key \d+ \S+ \S)
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
ntp authentication-key 1 sha1 timesync ntp trusted-key 1
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- arista-eosnetworkntp
- Referencia
- CIS Arista EOS Benchmark v1.0.0 - 1.1.5 NTP authentication
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
tmaegis scan --target arista-eos --level 2