Ensure Radius or TACACS+ server is configured

Cómo se verifica

Método de auditoría: Patrón de configuración

Patrón

(?m)^(?:add aaa radius-servers priority \d+ host \S+|add aaa tacacs-servers priority \d+ server \S+)

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

set aaa tacacs-servers state on add aaa tacacs-servers priority 1 server <IP> key <key> timeout 5 (or) add aaa radius-servers priority 1 host <IP> secret <key> port 1812 timeout 3 save config # CIS guidance: run the following command to enable and add TACACS+ servers. CLI: set aaa tacacs-servers state on add aaa tacacs-servers priority <priority_value> server <IP_Address> key <Key> timeout <timeout_value> GUI: Navigate to User Management > Authentication Servers > TACACS+ configuration > Ensuere Enable TACACS+ authentication is checked Navigate to User Management > Authentication Servers > TACACS+ configuration > Enable TACACS+ Servers > Add Provide <Server_IP_Address>, <Priority> and <Timeout>. Run the following command to enable and add Radius servers. CLI: add aaa radius-servers priority <priority_value> host <IP_Address> secret <Key> port <Port_number> timeout <timeout_value> GUI: Navigate to User Management > Authentication Servers > Radius Servers > Add Provide <Server_IP_Address>, <Priority>, <UDP_Port> and <Timeout>.

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

tmaegis scan --target checkpoint