Set an Export Password

AltaNivel 1Revisión manualaruba-cx

Descripción

All AOS-CX switches ship with a default password that's used to export any customer secrets contained with the switch configuration. Display of secrets through 'show' commands or exporting the entire switch configuration will have its secrets encrypted with this password prior to being displayed. AOS-CX allows customers to set their own password to ensure that their switch secrets cannot be loaded onto another AOS-CX switch.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Run 'show service export-password'. It must report 'Export password: custom' (not 'default').

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Set a custom export password using the following command: service export-password Enter password: ******** Confirm password: ********

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: aruba-cxauthentication
Referencia: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.1.4 Set an Export Password