Ensure loose authentication check is not configured

AltaNivel 1Automatizadajuniper-junos

Descripción

IS-IS Neighbors should be authenticated. Where it is deployed, IS-IS routing is vital for normal operation of an organization's network infrastructure. Correct route information is required for routers to correctly direct traffic through the network. Audited against the output of 'show configuration | display set | no-more' (set format, not the curly-brace hierarchy).

Cómo se verifica

Método de auditoría: Patrón de configuración

Patrón: (?m)^set protocols isis [^\n]*\bloose-authentication-check\b

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

! If you have deployed IS-IS in your network and have enabled loose authentication checking, re-enable it by issuing the following command from the hierarchy: delete protocols isis loose-authentication-check

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: juniper-junosnetworkaaa
Referencia: CIS Juniper OS Benchmark v2.1.0 - 4.2.4 Ensure loose authentication check is not configured

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target juniper-junos