TMA-JUNIPER-JUNOS-4.2.3
Ensure authentication check is not suppressed
Descripción
IS-IS Neighbors should be authenticated. Where it is deployed, IS-IS routing is vital for normal operation of an organization's network infrastructure. Correct route information is required for routers to correctly direct traffic through the network. Audited against the output of 'show configuration | display set | no-more' (set format, not the curly-brace hierarchy).
Cómo se verifica
Método de auditoría: Patrón de configuración
- Patrón
(?m)^set protocols isis [^\n]*\bno-authentication-check\b
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
! If you have deployed IS-IS in your network and have disabled authentication checking, re-enable it by issuing the following command from the hierarchy for each level at which it had been set: delete protocols isis level <level> no-authentication-check
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- juniper-junosnetworkaaa
- Referencia
- CIS Juniper OS Benchmark v2.1.0 - 4.2.3 Ensure authentication check is not suppressed
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
tmaegis scan --target juniper-junos