Arista EOS
TMA-ARISTA-EOS-1.1.5
NTP authentication
Deskripsi
NTP authentication verifies that time updates come from a trusted server, preventing bad actors from spoofing time or altering your clock. The NTP authentication model is the opposite of the typical client-server authentication model. NTP authentication enables an NTP client or peer to authenticate time received from their servers and peers. Authentication support allows the NTP client to verify that servers are in fact known and trusted and not intruders intending accidentally or intentionally to masquerade as a legitimate server. Requires 'ntp authentication-key' and 'ntp trusted-key'. Audited against the output of 'show running-config' (not 'show running-config all').
Cara pemeriksaan
Metode audit: Pola konfigurasi
- Pola
(?m)(?s:^ntp authentication-key \d+ \S+ \S.*^ntp trusted-key \d+)|(?s:^ntp trusted-key \d+.*^ntp authentication-key \d+ \S+ \S)
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
ntp authentication-key 1 sha1 timesync ntp trusted-key 1
Properti
- Sistem operasi
- Apa saja
- Tag
- arista-eosnetworkntp
- Referensi
- CIS Arista EOS Benchmark v1.0.0 - 1.1.5 NTP authentication
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
tmaegis scan --target arista-eos --level 2