Authenticate OSPF peers with MD5 authentication keys

AltaNivel 2Revisión manualcisco-nxos

Descripción

If OSPF is configured, peers can be authenticated using keys. This is not configured by default. If configured, MD5 hashes are recommended as the authentication mechanism. MD5 is the best option for multi-vendor support, and is also the best cryptographic option available in the OSPF standard. CIS assessment: Manual. Reported as SKIP with review instructions.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

CIS assessment: Manual. The "show running-configuration ospf" lists the entire OSPF configuration. For all interfaces that face peers, ensure that these two commands are in place: interface <interfacename> ip ospf authentication message-digest ip ospf authentication key-chain <OSPF Key-Chain name> Each OSPF routeable interface should either have authentication configured or be configured as an OSPF passive interface.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

! For each OSPF routeable interface, set the message-digest authentication method, and assign the appropriate keychain. Each OSPF routeable interface should either have authentication configured or be configured as an OSPF passive interface. interface Vlan1 ip ospf authentication message-digest ip ospf authentication key-chain <OSPF Key Chain>

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: cisco-nxosnetworkaaa
Referencia: CIS Cisco NX-OS Benchmark v1.2.0 - 3.1.3.2 Authenticate OSPF peers with MD5 authentication keys