Remote Authentication - RADIUS/RadSec/TACACS+

AltaNivel 2Automatizadaaruba-cx

Descripción

Remote Authentication involves the use of remote RADIUS , RadSec and TACACS+ servers for authenticating the management users. Remote AAA servers are used as single point of management to configure and store user accounts. They are often coupled with directories and management repositories, simplifying the setup and maintenance of the end-user accounts. PASS requires remote (RADIUS/RadSec/TACACS+) authentication for a management channel. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

Cómo se verifica

Método de auditoría: Patrón de configuración

Patrón: (?m)^aaa authentication login (?:default|console|ssh|telnet|https-server) group \S+

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

aaa authentication login default group tacacs1 local # CIS guidance: Enable remote authentication for desired management interface. Default – Includes all the management interfaces - aaa authentication login <console/default/ssh/telnet/https- <RADIUS/TACACS+ group-list>

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: aruba-cxauthentication
Referencia: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.5.2.3 Remote Authentication - RADIUS/RadSec/TACACS+

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target aruba-cx --level 2