OSPF Neighbor Authentication

TinggiLevel 1Tinjauan manualaruba-cx

Deskripsi

Enable OSPF Neighbor Authentication

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Where OSPF runs, run 'show ip ospf interface <id>' on every OSPF interface and confirm cryptographic authentication (keychain, preferably HMAC-SHA-512) is configured.

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

AOS-CX keychain feature can be used to specify a system-level cryptographic authentication key which can be used by multiple OSPF interfaces - To configure the keychain with HMAC-SHA-512 cryptographic algorithm and keystring (Keystring can be entered as plaintext or as a hashed ciphertext string)- keychain <keychain-name> key <ID> cryptographic-algorithm hmac-sha-512 key-string plaintext <plaintext-key-string> To associate the keychain in the OSPF enabled interface - interface <interface-ID> ip ospf authentication keychain ip ospf keychain <keychain-name>

Properti

Sistem operasi: Apa saja
Tag: aruba-cxauthentication
Referensi: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 3.1.1.2 OSPF Neighbor Authentication