Default & Fallback Local Authentication

AltaNivel 2Revisión manualaruba-cx

Descripción

Local user names and passwords are configured on a per-switch basis and provide the most basic form of authentication. Enabled by default for all management access connection types - console, SSH, and https-server (REST).Local authentication is also often used as the fallback login method. Local authentication can provide a minimum- security level should the primary method fail, but does not completely disable management access to the switch

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Run 'show aaa authentication' and confirm local authentication is kept as the fallback (last) method for every management channel, so administrators can still log in when remote AAA servers are unreachable, and that a local administrator account exists.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

To configure a local administrator-level user named localadmin with interactive password entry: user localadmin group administrators password Enter password: ********** Confirm password: **********

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: aruba-cxauthentication
Referencia: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.5.2.1 Default & Fallback Local Authentication