Do not allow remote login without a password

TinggiLevel 1Otomatisarista-eos

Deskripsi

The default switch configuration allows usernames that are not password-protected to log in only from the console. It is possible to configure the switch to allow unprotected usernames to log in from any port. Allowing remote access to accounts without passwords is a severe security risk. Audited against the output of 'show running-config' (not 'show running-config all').

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)^aaa authentication policy local allow-nopassword-remote-login\b

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Reset the feature to the default value #default aaa authentication policy local allow-nopassword-remote-login

Properti

Sistem operasi: Apa saja
Tag: arista-eosnetworklogging
Referensi: CIS Arista EOS Benchmark v1.0.0 - 2.1.1 Do not allow remote login without a password

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target arista-eos