Authentication (VRRP)

ÉlevéeNiveau 2Automatiséecisco-iosxr

Description

You can ensure that VRRP messages received from VRRP routers that comprise a virtual router are authenticated by configuring a simple text password. This is part of the VRRP authentication setup. Passes when VRRP is not configured. Audited against the hierarchical output of 'show running-config' (run 'terminal length 0' first; not 'show running-config formal').

Méthode de vérification

Méthode d'audit: Motif de configuration

Motif: (?m)\A(?:[ \t]*(?:$|[^at \t\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))|t(?:$|[^e\n]|e(?:$|[^x\n]|x(?:$|[^t\n]|t(?:$|[^\-\n]|-(?:$|[^a\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))))))))[^\n]*\n)*[ \t]*router vrrp[^\n]*(?:\n(?:[ \t]*(?:$|[^at \t\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))|t(?:$|[^e\n]|e(?:$|[^x\n]|x(?:$|[^t\n]|t(?:$|[^\-\n]|-(?:$|[^a\n]|a(?:$|[^u\n]|u(?:$|[^t\n]|t(?:$|[^h\n]|h(?:$|[^e\n]|e(?:$|[^n\n]|n(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^c\n]|c(?:$|[^a\n]|a(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^ \n]))))))))))))))))))))[^\n]*))*\n?\z

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

! Configure VRRP with the appropriate password. router vrrp interface {interface} address-family ipv4 vrrp {virtual_router_id} text-authentication {password}

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: cisco-iosxrnetworkaaa
Référence: CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 2.3.1 Authentication

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

shell

tmaegis scan --target cisco-iosxr --level 2