TACACS Server Configuration

ÉlevéeNiveau 2Automatiséearuba-cx

Description

TACACS+ is a centralized authentication, authorization, and accounting protocol that provides granular control over user access and command-level authorization for AOS- CX switches. It separates authentication, authorization, and accounting processes for enhanced flexibility. PASS requires a TACACS+ server host and an aaa tacacs server group. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

Méthode de vérification

Méthode d'audit: Motif de configuration

Motif: (?m)(?:^tacacs-server host \S+(?s:.*?)^aaa group server tacacs \S+|^aaa group server tacacs \S+(?s:.*?)^tacacs-server host \S+)

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

tacacs-server host 10.0.0.31 key plaintext <key> vrf mgmt aaa group server tacacs tacacs1 server 10.0.0.31 vrf mgmt # CIS guidance: To Configure TACACS+ Server - tacacs-server host {<FQDN> | <IPV4> | <IPV6>} [key [plaintext <PASSKEY> | ciphertext <PASSKEY>]] [vrf <VRF-NAME>] To Associate TACACS+ Server to the group - aaa group server tacacs <group-name> server <FQDN | IPv4 | IPv6> vrf <vrf> exit

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: aruba-cxauthentication
Référence: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.5.1.2 TACACS Server Configuration

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

shell

tmaegis scan --target aruba-cx --level 2